$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52c52d61-e04b-37b0-8b68-338e5a74d299.roa File: 52c52d61-e04b-37b0-8b68-338e5a74d299.roa (raw, json) Hash identifier: PxkCY+9MPImfEyXJuef1/dctfL9gu7InrcP6GqD5w54= Subject key identifier: 2E:2B:CA:BD:0D:E0:C5:8C:55:8C:9F:12:AF:86:B0:D7:36:32:80:10 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847DAFF64622ABCC75971EC9F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52c52d61-e04b-37b0-8b68-338e5a74d299.roa Signing time: Tue 12 Nov 2024 14:00:40 +0000 ROA not before: Tue 12 Nov 2024 14:00:40 +0000 ROA not after: Mon 10 Feb 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.208.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:da:ff:64:62:2a:bc:c7:59:71:ec:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 12 14:00:40 2024 GMT Not After : Feb 10 14:00:40 2025 GMT Subject: CN=6cc54370-95cb-4885-b4a3-cf5e75cc859d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:12:25:53:dd:bc:75:35:80:ce:0e:89:6f:ae: 48:8b:24:49:e2:99:0f:a2:94:8e:35:51:a7:00:2b: c4:25:23:5b:ac:b4:8a:9b:b1:39:34:99:27:a1:48: 9c:43:ff:70:f6:a5:ee:87:ef:29:70:7e:32:12:b4: 8a:86:83:14:e7:07:6a:f5:cb:1f:60:96:76:d8:bf: ba:3e:52:f8:0d:65:06:75:08:99:3b:b8:c2:40:cb: 2d:04:65:89:16:dd:f0:da:e8:33:40:f4:e8:8b:cc: 27:63:18:84:79:1a:54:77:31:b9:69:39:98:ba:25: 83:1c:fe:1d:6f:b8:91:b5:f5:96:2e:3e:83:6d:01: 2f:3b:b0:a0:fe:38:14:58:7d:9b:46:df:ef:c1:74: 07:93:3f:43:e6:ba:63:90:bf:6f:e4:65:3b:3f:25: 2e:93:68:00:06:5d:10:ef:11:76:14:2f:fd:ae:b0: 30:dd:2c:71:23:42:7e:d1:da:db:e9:ec:d4:1b:7f: 4d:a6:42:54:4e:4a:e3:54:1a:b0:b3:01:b2:b9:2c: 57:d4:c4:60:90:28:89:c7:e5:e2:07:f2:d3:73:ac: bd:44:e9:48:9e:c8:80:ea:f4:bb:c0:7d:37:ca:b8: 70:34:72:9d:e6:fc:7d:aa:32:8b:1b:49:92:38:d8: 8c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:2B:CA:BD:0D:E0:C5:8C:55:8C:9F:12:AF:86:B0:D7:36:32:80:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52c52d61-e04b-37b0-8b68-338e5a74d299.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:8c:0d:e3:99:16:61:27:79:fa:fa:58:4b:7c:c4:cf:84:2a: 17:8e:9e:01:0e:eb:af:40:44:d8:91:9c:3d:88:55:02:76:7c: 72:1f:83:40:42:78:68:db:3a:b0:d0:a9:77:ab:b1:4f:c1:ec: 24:8d:54:b4:22:41:0c:c6:15:a2:1c:a9:74:de:0b:73:a2:b3: 95:29:56:87:0a:0b:96:f1:d1:d1:90:7b:6b:1d:54:61:2b:98: bc:b7:27:d4:38:ae:a2:48:56:44:4d:2c:c6:39:af:b5:4f:9f: 95:60:bf:15:84:75:30:83:fa:94:e2:67:71:20:64:26:df:61: ea:e1:bb:6b:36:11:42:27:63:19:65:26:ee:57:a0:63:f5:54: 30:00:b9:42:f2:b8:80:61:15:1d:11:7d:a4:6f:5c:69:70:5b: 59:9d:d5:28:69:3e:15:b5:18:87:5b:7a:ca:8f:31:c1:c3:74: cd:b6:8f:95:c2:54:c8:8b:b3:c2:18:ca:a5:ef:34:94:3e:a6: be:e2:73:80:0e:73:4d:75:dd:fe:35:81:c3:6e:c8:35:87:51: 1e:49:91:fc:a5:6f:ce:cc:ce:85:0d:f8:66:95:24:c1:7c:e7: a7:79:0e:16:44:45:c3:e0:3e:96:50:4c:f8:07:27:9f:fe:d9: 8b:4a:a6:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfa/2RiKrzHWXHsnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExMjE0MDA0MFoXDTI1MDIxMDE0MDA0MFowLzEtMCsGA1UEAxMk NmNjNTQzNzAtOTVjYi00ODg1LWI0YTMtY2Y1ZTc1Y2M4NTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohIlU928dTWAzg6Jb65IiyRJ4pkPopSONVGn ACvEJSNbrLSKm7E5NJknoUicQ/9w9qXuh+8pcH4yErSKhoMU5wdq9csfYJZ22L+6 PlL4DWUGdQiZO7jCQMstBGWJFt3w2ugzQPToi8wnYxiEeRpUdzG5aTmYuiWDHP4d b7iRtfWWLj6DbQEvO7Cg/jgUWH2bRt/vwXQHkz9D5rpjkL9v5GU7PyUuk2gABl0Q 7xF2FC/9rrAw3SxxI0J+0drb6ezUG39NpkJUTkrjVBqwswGyuSxX1MRgkCiJx+Xi B/LTc6y9ROlInsiA6vS7wH03yrhwNHKd5vx9qjKLG0mSONiMLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4ryr0N4MWMVYyfEq+GsNc2MoAQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTJjNTJkNjEtZTA0Yi0z N2IwLThiNjgtMzM4ZTVhNzRkMjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9BiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWMDeOZFmEnefr6WEt8xM+EKheOngEO669ARNiRnD2IVQJ2fHIfg0BC eGjbOrDQqXersU/B7CSNVLQiQQzGFaIcqXTeC3Ois5UpVocKC5bx0dGQe2sdVGEr mLy3J9Q4rqJIVkRNLMY5r7VPn5VgvxWEdTCD+pTiZ3EgZCbfYerhu2s2EUInYxll Ju5XoGP1VDAAuULyuIBhFR0RfaRvXGlwW1md1ShpPhW1GIdbesqPMcHDdM22j5XC VMiLs8IYyqXvNJQ+pr7ic4AOc0113f41gcNuyDWHUR5Jkfylb87MzoUN+GaVJMF8 56d5DhZERcPgPpZQTPgHJ5/+2YtKpl0= -----END CERTIFICATE-----Generated at Fri Nov 22 04:47:01 2024 by rpki-client on console-ams.rpki-client.org