$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cb3cb02-3bb0-322a-bda4-41fa77c4545e.roa File: 6cb3cb02-3bb0-322a-bda4-41fa77c4545e.roa (raw, json) Hash identifier: 3RbKBsjYLUfGdGmmZwpk8i8/64xfqA0gcisGflZk+vA= Subject key identifier: CC:BE:42:58:FD:C6:30:E3:EB:DC:11:71:E2:F8:FD:B9:CA:45:AD:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584754C07B2BD631E76AC1A661E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cb3cb02-3bb0-322a-bda4-41fa77c4545e.roa Signing time: Wed 25 Sep 2024 11:55:41 +0000 ROA not before: Wed 25 Sep 2024 11:55:41 +0000 ROA not after: Tue 24 Dec 2024 12:55:41 +0000 asID: 16625 IP address blocks: 23.204.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:54:c0:7b:2b:d6:31:e7:6a:c1:a6:61:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 11:55:41 2024 GMT Not After : Dec 24 12:55:41 2024 GMT Subject: CN=5cb74dc0-8510-4eb7-a9e6-9370f0b79d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8c:8a:89:5f:1f:c2:a3:12:27:25:db:22:98: be:34:df:7b:bc:70:dd:2b:d3:83:91:e4:2d:9a:fb: 7f:b2:f3:e9:4b:02:2b:56:99:f2:f5:a1:fa:aa:07: a1:47:32:37:a9:e6:4f:8b:4a:e0:1e:50:a3:23:98: ff:c3:ae:a0:dc:92:8f:c0:14:86:8c:80:c8:49:e1: 39:22:4e:a3:40:90:9c:98:1b:42:10:38:62:00:f4: 07:d1:6c:1b:6a:3a:0a:85:e1:e2:84:72:76:9b:f4: 53:7d:25:d7:34:33:7f:50:92:66:e4:44:4c:50:93: f9:8d:a3:02:1a:ed:9e:ee:1b:3b:96:84:7b:54:b4: 70:89:ee:ef:02:41:94:e7:92:e0:5a:6d:ed:18:ca: 8f:45:be:0a:8e:5c:9d:86:7c:bc:ae:75:4e:75:97: 58:52:17:4e:2a:d5:05:0f:f1:ac:1f:a7:8c:c2:6f: 45:c6:1b:18:70:c6:a4:d4:df:d9:6a:96:40:43:2c: 9b:b9:fb:c4:bd:e5:c9:24:01:f9:00:77:fc:15:c0: 59:dc:7f:f8:96:ea:7d:f5:56:aa:70:f5:a3:40:b7: e0:31:9d:c6:d8:9a:6d:99:82:d6:cb:0f:47:6f:5f: 38:de:6c:c7:78:0c:d0:38:95:a7:f7:ce:64:e9:79: 43:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BE:42:58:FD:C6:30:E3:EB:DC:11:71:E2:F8:FD:B9:CA:45:AD:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cb3cb02-3bb0-322a-bda4-41fa77c4545e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:8e:d4:f0:60:2d:45:84:2d:0a:75:f4:cb:28:5c:39:5a:7e: 8c:5d:30:64:1b:e9:14:75:6d:f7:5b:ed:4c:bb:02:4e:24:78: 3c:3d:85:94:95:e3:85:c0:f4:4a:08:1e:66:35:47:40:bd:02: 7b:55:e6:4f:7d:42:6b:ff:bf:24:84:d7:93:ca:4b:7d:c4:82: cb:75:0a:ce:f4:aa:62:72:17:5c:bf:4e:e4:11:c1:b4:02:a2: a9:03:03:41:92:6b:86:14:e5:95:5b:fc:a5:85:ee:b1:6a:34: 07:8b:5a:46:b3:86:19:c3:df:29:14:33:c3:18:31:cc:12:1d: 40:13:e7:92:0a:84:c3:77:d0:32:8c:4e:d4:d8:71:c8:db:d2: ce:42:17:36:b3:25:4d:3c:af:fb:39:1d:78:d0:9e:fa:2b:3f: 45:c3:84:e6:3a:05:20:58:1b:09:2b:fc:2f:82:27:ee:37:14: 2a:1a:f8:30:40:e1:bc:85:70:bf:ab:85:63:6d:e1:6c:0a:99: 61:9f:5f:ad:8f:68:bf:12:22:58:93:08:31:09:97:92:c0:37: 19:6e:09:2d:ca:10:c9:09:72:73:1c:6c:e2:26:04:9f:25:56: aa:8f:56:df:af:72:a9:0d:b5:df:e6:a8:7b:77:ea:23:36:9e: 2e:b2:48:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdUwHsr1jHnasGmYeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyNTExNTU0MVoXDTI0MTIyNDEyNTU0MVowLzEtMCsGA1UEAxMk NWNiNzRkYzAtODUxMC00ZWI3LWE5ZTYtOTM3MGYwYjc5ZDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYyKiV8fwqMSJyXbIpi+NN97vHDdK9ODkeQt mvt/svPpSwIrVpny9aH6qgehRzI3qeZPi0rgHlCjI5j/w66g3JKPwBSGjIDISeE5 Ik6jQJCcmBtCEDhiAPQH0WwbajoKheHihHJ2m/RTfSXXNDN/UJJm5ERMUJP5jaMC Gu2e7hs7loR7VLRwie7vAkGU55LgWm3tGMqPRb4Kjlydhny8rnVOdZdYUhdOKtUF D/GsH6eMwm9FxhsYcMak1N/ZapZAQyybufvEveXJJAH5AHf8FcBZ3H/4lup99Vaq cPWjQLfgMZ3G2JptmYLWyw9Hb1843mzHeAzQOJWn985k6XlD1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMy+Qlj9xjDj69wRceL4/bnKRa0RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmNiM2NiMDItM2JiMC0z MjJhLWJkYTQtNDFmYTc3YzQ1NDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8z8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiO1PBgLUWELQp19MsoXDlafoxdMGQb6RR1bfdb7Uy7Ak4keDw9hZSV 44XA9EoIHmY1R0C9AntV5k99Qmv/vySE15PKS33Egst1Cs70qmJyF1y/TuQRwbQC oqkDA0GSa4YU5ZVb/KWF7rFqNAeLWkazhhnD3ykUM8MYMcwSHUAT55IKhMN30DKM TtTYccjb0s5CFzazJU08r/s5HXjQnvorP0XDhOY6BSBYGwkr/C+CJ+43FCoa+DBA 4byFcL+rhWNt4WwKmWGfX62PaL8SIliTCDEJl5LANxluCS3KEMkJcnMcbOImBJ8l VqqPVt+vcqkNtd/mqHt36iM2ni6ySFg= -----END CERTIFICATE-----Generated at Fri Nov 22 04:47:15 2024 by rpki-client on console-ams.rpki-client.org