$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/691f2cb1-cf05-319f-9360-f1774d10c6ff.roa File: 691f2cb1-cf05-319f-9360-f1774d10c6ff.roa (raw, json) Hash identifier: BJZ3g3WhlwxRico+hVpWXBgQBr5cqdmd5JTJHp/qPLo= Subject key identifier: 43:06:BC:EB:C5:0D:A8:4D:09:B8:2A:B4:6F:25:84:43:A7:93:73:F5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847EA5A0FF9161093C1DA68C640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/691f2cb1-cf05-319f-9360-f1774d10c6ff.roa Signing time: Mon 18 Nov 2024 02:00:27 +0000 ROA not before: Mon 18 Nov 2024 02:00:27 +0000 ROA not after: Sun 16 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.219.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ea:5a:0f:f9:16:10:93:c1:da:68:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 18 02:00:27 2024 GMT Not After : Feb 16 02:00:27 2025 GMT Subject: CN=d75f228f-e79a-43f2-aeb9-5e59e9de6972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4c:bf:f4:59:2b:35:e3:fd:93:38:c8:25:f3: 60:d3:cc:42:97:c9:9b:0d:7f:79:3d:ba:8e:62:9c: a9:8a:e6:af:3d:b4:6a:69:fc:ac:d8:ed:5e:a4:07: aa:67:3f:09:76:d0:d1:fe:75:7f:19:9c:de:2e:18: 49:04:5e:52:35:e6:cc:2b:c3:3e:42:68:7e:05:f4: 8a:07:49:51:00:ba:fb:80:c8:c6:64:93:c5:80:10: 74:ee:c0:62:f1:64:70:9b:3d:d3:e8:86:da:76:cf: ce:a6:4f:6b:69:86:93:82:a0:45:de:6e:f9:70:5a: 23:77:4c:68:b1:45:56:45:03:48:29:61:6b:ea:84: 68:1c:8a:ae:35:76:50:1d:ed:66:17:90:b2:6a:26: fa:25:de:71:bd:6f:80:05:5b:21:43:6b:e3:80:18: 30:06:5b:c1:a0:8d:7e:a1:2c:a8:85:1f:66:71:7e: fc:ee:86:4e:d6:d5:4b:99:de:55:ce:dc:c0:59:3e: 4d:53:4b:32:79:19:16:92:17:b1:b5:63:91:70:06: 9d:8b:17:24:ba:5b:ed:9f:7e:31:a7:f8:72:99:dd: 72:81:43:0b:72:c4:0c:55:e0:1e:6a:ea:90:cd:9f: 53:ae:72:ab:fd:57:e6:23:47:ac:52:d4:9e:43:d1: 28:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:06:BC:EB:C5:0D:A8:4D:09:B8:2A:B4:6F:25:84:43:A7:93:73:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/691f2cb1-cf05-319f-9360-f1774d10c6ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:0a:f8:ac:cd:77:cc:db:a1:b6:46:31:fe:d2:d8:92:a9:80: ed:12:98:82:8e:a6:ed:a9:de:5a:db:fc:a8:a2:ee:c3:09:7f: c1:11:44:3a:8a:7c:1e:db:8b:af:8d:c5:27:b8:e6:c6:3b:3b: 40:fa:eb:af:94:d7:50:62:5a:63:16:ac:3c:6f:4b:11:da:97: 43:5a:ba:b1:77:73:f9:b4:92:0a:b2:b2:b0:c8:20:a5:c9:2d: a0:76:9b:de:a8:ad:10:5e:50:97:a8:60:dd:10:4e:5a:62:79: c5:cc:22:93:83:11:ed:41:8b:ce:b9:2a:c7:74:78:e1:88:ab: 57:67:26:e5:00:87:6e:b7:c2:68:8f:71:33:27:9a:8c:79:7d: 63:5c:8f:8a:23:0b:03:78:61:01:69:21:34:91:d4:6b:47:26: b1:81:a1:b4:00:fc:c3:a9:b8:5a:a9:73:ec:5c:d0:69:73:17: 25:a7:b6:72:ca:76:26:c5:56:6d:f9:03:82:24:fa:01:11:38: 09:f1:2d:e5:a9:68:24:ea:3f:e4:a3:55:de:2f:fa:69:10:2f: 21:9c:c7:4f:eb:f9:18:04:b8:f0:8e:c2:bf:76:fa:67:57:61: 36:3c:a3:6e:ce:e2:8d:f1:cf:7b:ef:c3:c2:96:ed:30:80:c1: 74:99:1f:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfqWg/5FhCTwdpoxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExODAyMDAyN1oXDTI1MDIxNjAyMDAyN1owLzEtMCsGA1UEAxMk ZDc1ZjIyOGYtZTc5YS00M2YyLWFlYjktNWU1OWU5ZGU2OTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70y/9FkrNeP9kzjIJfNg08xCl8mbDX95PbqO YpypiuavPbRqafys2O1epAeqZz8JdtDR/nV/GZzeLhhJBF5SNebMK8M+Qmh+BfSK B0lRALr7gMjGZJPFgBB07sBi8WRwmz3T6Ibads/Opk9raYaTgqBF3m75cFojd0xo sUVWRQNIKWFr6oRoHIquNXZQHe1mF5Cyaib6Jd5xvW+ABVshQ2vjgBgwBlvBoI1+ oSyohR9mcX787oZO1tVLmd5VztzAWT5NU0syeRkWkhextWORcAadixckulvtn34x p/hymd1ygUMLcsQMVeAeauqQzZ9TrnKr/VfmI0esUtSeQ9EoUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMGvOvFDahNCbgqtG8lhEOnk3P1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjkxZjJjYjEtY2YwNS0z MTlmLTkzNjAtZjE3NzRkMTBjNmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9vcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMK+KzNd8zbobZGMf7S2JKpgO0SmIKOpu2p3lrb/Kii7sMJf8ERRDqK fB7bi6+NxSe45sY7O0D666+U11BiWmMWrDxvSxHal0NaurF3c/m0kgqysrDIIKXJ LaB2m96orRBeUJeoYN0QTlpiecXMIpODEe1Bi865Ksd0eOGIq1dnJuUAh263wmiP cTMnmox5fWNcj4ojCwN4YQFpITSR1GtHJrGBobQA/MOpuFqpc+xc0GlzFyWntnLK dibFVm35A4Ik+gEROAnxLeWpaCTqP+SjVd4v+mkQLyGcx0/r+RgEuPCOwr92+mdX YTY8o27O4o3xz3vvw8KW7TCAwXSZHxs= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:57 2024 by rpki-client on console-fra.rpki-client.org