$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/571e1e21-5bb7-32bb-9449-889782fa7daf.roa File: 571e1e21-5bb7-32bb-9449-889782fa7daf.roa (raw, json) Hash identifier: AoOCQMHbt0wqCzzlrtdX9yn3XtDcK4VeO7M2jiXHNQM= Subject key identifier: 8A:91:FA:DC:A7:0E:41:9A:DD:3B:65:D0:31:3C:20:54:76:88:92:08 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847DC64B8F3127A518ACA56D700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/571e1e21-5bb7-32bb-9449-889782fa7daf.roa Signing time: Wed 13 Nov 2024 02:00:28 +0000 ROA not before: Wed 13 Nov 2024 02:00:28 +0000 ROA not after: Tue 11 Feb 2025 02:00:28 +0000 asID: 16625 IP address blocks: 23.212.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dc:64:b8:f3:12:7a:51:8a:ca:56:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 13 02:00:28 2024 GMT Not After : Feb 11 02:00:28 2025 GMT Subject: CN=146b139e-4cd2-43e3-a76d-95ee03b29521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:66:dd:14:d4:04:c0:f3:fe:2e:bb:88:31:f4: 34:bb:28:af:62:05:fd:d6:69:d5:41:65:d6:ef:c7: 6e:15:d6:8f:c0:0f:72:0b:5c:c8:f3:c9:b0:39:3c: c1:ba:40:24:58:8c:50:93:2d:43:f7:8b:91:6d:51: d7:e9:f6:e5:c4:09:93:49:1a:c4:9b:3a:7e:0f:fd: 9b:58:b5:9a:27:32:49:4f:bc:75:3e:7d:a9:a4:b1: cb:58:b5:8d:58:45:82:5c:26:d3:4f:d1:46:e0:29: 52:35:be:76:09:16:e3:cc:47:ec:3b:38:9b:01:6b: fd:24:c3:f3:9f:ec:f7:fc:22:9a:32:75:6b:5a:98: a5:32:9a:1d:fd:ce:b4:c5:1c:ec:25:30:fb:2c:4d: 30:7f:6c:ac:40:9d:1e:d7:58:ca:35:61:0c:28:6f: 1b:a5:a8:9f:27:ff:81:51:d4:32:f7:8b:68:3d:35: 52:67:44:7f:05:8c:a7:bd:3e:f6:ca:ba:46:1f:bd: aa:09:5a:e4:cd:f1:54:1d:6b:fe:a7:53:28:94:c3: ea:2d:ee:47:97:b5:62:db:44:67:ca:bf:72:c1:a3: fe:90:f9:6d:83:43:6a:74:a8:29:b6:7a:19:c9:72: 60:4c:aa:c2:a4:ee:6f:21:ef:ae:e9:f1:d8:0d:17: 3b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:91:FA:DC:A7:0E:41:9A:DD:3B:65:D0:31:3C:20:54:76:88:92:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/571e1e21-5bb7-32bb-9449-889782fa7daf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:b6:b0:59:42:d8:a9:1c:b4:0d:dd:33:be:48:c9:ab:32:1a: b9:c4:d1:fc:f1:c3:d8:ff:0f:db:0c:4f:20:c4:05:b4:f1:92: cc:38:e1:23:79:04:e7:3a:d6:14:06:20:9b:e2:d3:ce:e2:73: 0a:09:98:64:b7:de:1b:10:fd:98:56:11:4d:a8:d8:9c:4f:3f: 62:33:bc:f0:dc:b9:d8:c6:42:93:47:b7:05:66:69:8c:55:7f: e9:11:c6:9d:70:7d:ec:44:e5:e3:83:c6:80:92:63:b5:2c:9d: df:fd:1f:3d:71:44:c5:9d:21:21:88:ac:24:50:a9:03:05:2e: 5c:88:5f:e4:1c:a5:3d:b0:2c:6c:f3:f8:1e:a4:ab:bf:cc:63: 5c:83:fa:1d:2a:75:16:24:1a:7d:f0:8f:8f:78:ef:25:0e:a7: 7a:ba:df:d7:b9:71:21:e2:c5:31:69:23:62:d1:79:76:e3:f2: ff:41:ab:6c:e0:ca:2d:0d:48:3c:dc:f4:d3:1c:d8:a8:8a:45: 61:f7:f7:20:74:cf:10:57:87:bd:ed:e3:5d:a8:4c:97:7b:8d: 54:88:b2:47:5d:d1:9c:d9:6b:ba:bc:95:0d:6f:e8:9e:58:95: f4:4a:10:f7:8e:e8:16:3f:58:3e:e6:da:7e:68:a0:13:16:36: 56:34:f6:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcZLjzEnpRispW1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk MTQ2YjEzOWUtNGNkMi00M2UzLWE3NmQtOTVlZTAzYjI5NTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGbdFNQEwPP+LruIMfQ0uyivYgX91mnVQWXW 78duFdaPwA9yC1zI88mwOTzBukAkWIxQky1D94uRbVHX6fblxAmTSRrEmzp+D/2b WLWaJzJJT7x1Pn2ppLHLWLWNWEWCXCbTT9FG4ClSNb52CRbjzEfsOzibAWv9JMPz n+z3/CKaMnVrWpilMpod/c60xRzsJTD7LE0wf2ysQJ0e11jKNWEMKG8bpaifJ/+B UdQy94toPTVSZ0R/BYynvT72yrpGH72qCVrkzfFUHWv+p1MolMPqLe5Hl7Vi20Rn yr9ywaP+kPltg0NqdKgptnoZyXJgTKrCpO5vIe+u6fHYDRc7VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqR+tynDkGa3Ttl0DE8IFR2iJIIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTcxZTFlMjEtNWJiNy0z MmJiLTk0NDktODg5NzgyZmE3ZGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9TQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABq2sFlC2KkctA3dM75IyasyGrnE0fzxw9j/D9sMTyDEBbTxksw44SN5 BOc61hQGIJvi087icwoJmGS33hsQ/ZhWEU2o2JxPP2IzvPDcudjGQpNHtwVmaYxV f+kRxp1wfexE5eODxoCSY7Usnd/9Hz1xRMWdISGIrCRQqQMFLlyIX+QcpT2wLGzz +B6kq7/MY1yD+h0qdRYkGn3wj4947yUOp3q639e5cSHixTFpI2LReXbj8v9Bq2zg yi0NSDzc9NMc2KiKRWH39yB0zxBXh73t412oTJd7jVSIskdd0ZzZa7q8lQ1v6J5Y lfRKEPeO6BY/WD7m2n5ooBMWNlY09pI= -----END CERTIFICATE-----Generated at Mon Nov 25 20:20:37 2024 by rpki-client on console-fra.rpki-client.org