$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c85f9f5-008b-3388-8f48-afe10fc2af53.roa File: 5c85f9f5-008b-3388-8f48-afe10fc2af53.roa (raw, json) Hash identifier: zXHfXUKGuvjjAvreVS3yemjihPHRSJLe428plIFaaKw= Subject key identifier: 6A:AE:5A:C2:6B:18:EF:60:9C:FA:CD:50:23:91:C9:06:A9:90:C1:12 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847DF2F63CEC586E1DBA3576A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c85f9f5-008b-3388-8f48-afe10fc2af53.roa Signing time: Thu 14 Nov 2024 02:00:27 +0000 ROA not before: Thu 14 Nov 2024 02:00:27 +0000 ROA not after: Wed 12 Feb 2025 02:00:27 +0000 asID: 16625 IP address blocks: 23.215.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:df:2f:63:ce:c5:86:e1:db:a3:57:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 14 02:00:27 2024 GMT Not After : Feb 12 02:00:27 2025 GMT Subject: CN=a008fb05-cc7f-4d7a-8ccb-03e6f00978a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:8d:b0:64:56:29:67:29:10:c3:69:f1:4c:0a: 78:7b:ac:4c:dd:03:ea:7f:58:5e:aa:89:5b:66:7e: 78:e6:66:f4:d8:e8:35:c8:5c:0e:47:ea:61:ff:74: d7:65:25:4a:fb:fb:53:55:cb:f6:2a:bd:c1:04:bb: b5:8b:cc:b6:df:39:a7:ff:8f:91:8f:20:bb:2e:de: 25:6c:fe:09:ef:b3:36:9b:c7:48:36:2c:49:b2:9e: 75:44:c8:ab:e4:62:21:9f:69:6b:78:15:4d:28:9e: fb:b3:28:4a:ab:90:3f:8c:3c:97:b8:05:81:28:69: 6c:70:a4:e4:74:88:b6:3e:70:4d:62:09:19:ad:ec: 5a:74:48:04:b1:eb:6c:45:19:a6:81:0e:94:35:47: 23:38:fe:fd:3c:2d:51:b9:e4:58:fd:61:61:5a:83: 30:27:bc:d7:2a:09:38:3f:fc:6e:ad:11:3b:ba:11: e8:af:aa:44:71:a8:8f:8a:75:70:c3:f9:6d:33:ed: 46:1b:ce:f6:fd:9b:f2:9f:2a:0a:e4:9a:03:82:01: 88:6e:22:13:2e:0c:cd:c5:a6:28:cb:2c:3a:ef:24: 34:10:38:c2:e7:b8:cb:ed:32:67:70:39:6d:fa:67: cc:3b:3a:4a:91:c8:b8:e3:95:ed:42:35:d7:5a:58: 78:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:AE:5A:C2:6B:18:EF:60:9C:FA:CD:50:23:91:C9:06:A9:90:C1:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c85f9f5-008b-3388-8f48-afe10fc2af53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:5f:f6:6d:88:ed:7a:cf:47:ee:52:76:df:23:b2:27:69:c7: 07:a2:83:c7:85:64:e9:27:6b:3a:f5:ba:38:0b:41:9e:6f:50: 6b:21:0f:bb:70:e3:4b:b4:d0:9b:17:5a:b1:e4:a5:e0:8b:37: 15:69:1a:69:31:58:b6:3b:5d:46:9e:4c:8c:04:0c:d0:55:a7: 36:3d:10:64:44:75:aa:04:a7:a3:bb:2b:6f:a8:b7:0d:aa:a0: 52:e7:f4:e7:1f:18:11:c7:83:f8:78:50:8c:8e:20:a4:f5:31: c7:c0:8a:c1:6a:df:92:03:27:33:71:9a:40:d1:62:86:1f:ef: 05:4a:60:fd:95:9e:f2:ce:24:d1:65:0f:1f:00:b0:fb:c4:78: 45:c6:c4:25:70:70:cc:02:45:6b:75:b6:6e:85:03:94:57:be: 6c:00:2f:d9:21:a5:47:4b:e2:0f:5b:2c:f2:e8:68:df:eb:9f: 0b:58:79:39:a7:11:01:a5:a2:9d:62:c2:aa:77:a6:d4:14:8b: 6f:85:2e:b2:1f:15:94:77:b7:1a:ca:15:ee:47:2e:24:87:93: 2f:94:1e:d2:15:b2:8c:47:6a:b5:f4:b7:e5:1b:75:4c:6f:0a: 3d:6a:1e:6f:fa:97:64:07:30:f8:67:90:4f:75:ea:07:1a:c5: 0c:a1:99:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEffL2POxYbh26NXagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk YTAwOGZiMDUtY2M3Zi00ZDdhLThjY2ItMDNlNmYwMDk3OGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+I2wZFYpZykQw2nxTAp4e6xM3QPqf1heqolb Zn545mb02Og1yFwOR+ph/3TXZSVK+/tTVcv2Kr3BBLu1i8y23zmn/4+RjyC7Lt4l bP4J77M2m8dINixJsp51RMir5GIhn2lreBVNKJ77syhKq5A/jDyXuAWBKGlscKTk dIi2PnBNYgkZrexadEgEsetsRRmmgQ6UNUcjOP79PC1RueRY/WFhWoMwJ7zXKgk4 P/xurRE7uhHor6pEcaiPinVww/ltM+1GG872/ZvynyoK5JoDggGIbiITLgzNxaYo yyw67yQ0EDjC57jL7TJncDlt+mfMOzpKkci445XtQjXXWlh4vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGquWsJrGO9gnPrNUCORyQapkMESMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWM4NWY5ZjUtMDA4Yi0z Mzg4LThmNDgtYWZlMTBmYzJhZjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9fIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5f9m2I7XrPR+5Sdt8jsidpxweig8eFZOknazr1ujgLQZ5vUGshD7tw 40u00JsXWrHkpeCLNxVpGmkxWLY7XUaeTIwEDNBVpzY9EGREdaoEp6O7K2+otw2q oFLn9OcfGBHHg/h4UIyOIKT1McfAisFq35IDJzNxmkDRYoYf7wVKYP2VnvLOJNFl Dx8AsPvEeEXGxCVwcMwCRWt1tm6FA5RXvmwAL9khpUdL4g9bLPLoaN/rnwtYeTmn EQGlop1iwqp3ptQUi2+FLrIfFZR3txrKFe5HLiSHky+UHtIVsoxHarX0t+UbdUxv Cj1qHm/6l2QHMPhnkE916gcaxQyhmfc= -----END CERTIFICATE-----Generated at Fri Nov 22 04:29:46 2024 by rpki-client on console-fra.rpki-client.org