$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6dfa8894-be54-3ce0-b365-6848f9c2c262.roa File: 6dfa8894-be54-3ce0-b365-6848f9c2c262.roa (raw, json) Hash identifier: BvJQFzd1SwF6LTLpHsCsU+CKOYZLExGmeFHipwyyjG0= Subject key identifier: 9B:53:F2:4D:05:38:EC:95:CA:B6:63:BB:86:77:1B:A4:D7:1D:36:91 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847D999FB9BF31FD87A55202040 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6dfa8894-be54-3ce0-b365-6848f9c2c262.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 16625 IP address blocks: 23.204.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:99:fb:9b:f3:1f:d8:7a:55:20:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=abdd5424-a54a-410b-b5c8-238ae53c5c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0f:89:82:05:f8:20:fc:4b:b0:3f:21:8a:33: 83:9a:ca:ae:a1:04:39:b8:62:06:29:98:c6:a5:d1: 0e:d6:03:1a:e9:fd:00:ec:7c:74:ac:7a:26:b8:b4: f7:6e:78:60:76:88:fa:c5:ef:3c:59:44:7d:09:80: 98:30:a3:61:eb:c9:44:d0:85:5d:9e:00:71:05:70: f1:83:e0:09:60:ed:e3:f8:6f:8e:ac:8b:48:f3:f3: 45:23:7a:aa:cb:8b:43:94:42:c1:7b:c8:39:64:6b: 6e:4a:e2:7e:97:ae:ad:96:f4:22:75:23:86:93:49: c0:35:c8:55:15:41:c2:8a:b9:06:49:0f:1b:7c:8c: c7:28:80:fb:5b:df:66:2f:09:86:27:1e:4d:05:98: 84:de:82:97:c9:dd:9b:78:b4:3c:41:24:cf:93:23: eb:c2:08:19:02:6a:c1:7c:21:00:e3:67:49:d2:37: 5a:bb:ab:4b:58:eb:7c:d1:0a:a6:ef:5e:39:d8:2c: 7d:40:b9:b2:77:39:3b:2b:34:59:e4:1c:26:3b:0f: 9f:fa:ce:7a:8a:ff:ab:a5:2a:1b:9b:5c:02:58:bc: be:7f:c4:70:e9:06:73:08:ab:79:27:2d:ac:c7:04: fd:de:7b:c3:5c:d2:75:f5:c3:1b:1b:80:73:ad:ce: 05:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:53:F2:4D:05:38:EC:95:CA:B6:63:BB:86:77:1B:A4:D7:1D:36:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6dfa8894-be54-3ce0-b365-6848f9c2c262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:72:c1:99:58:0a:a1:60:56:a7:d0:3d:df:75:12:07:40:16: a1:fe:b5:8b:9d:f0:10:c3:e4:e5:17:5f:bb:3f:ef:c3:aa:14: cd:39:34:be:ce:69:9d:c3:b9:08:d5:39:d3:b2:00:0f:45:e5: b6:4d:9d:15:b5:1d:51:5a:39:27:97:07:8c:ee:cd:3e:22:2d: 90:c3:4d:21:f5:c3:ba:2a:a0:d9:cb:e7:9c:01:f5:96:99:cf: 3c:e8:66:ab:b1:45:1e:69:69:2b:ac:84:48:ae:ce:39:ca:90: 24:4a:04:ca:0e:a2:f8:53:1a:13:53:f6:ff:3e:ac:82:90:ed: 88:69:77:18:ee:74:85:c2:02:c1:d0:45:b7:3e:55:c1:62:7f: da:40:be:50:51:12:73:a3:47:74:d1:ba:b7:c7:6c:30:c4:f3: 5e:3e:54:91:d5:31:7b:33:7d:43:d5:97:39:72:aa:8a:de:91: 0a:8a:0d:e1:8a:f0:6f:36:96:ee:95:2c:04:17:94:6d:07:96: a0:20:97:59:29:86:d4:35:e3:32:21:32:a3:50:a9:9c:fb:ee: df:7b:0d:cd:2b:e2:7d:47:11:fa:36:6a:b6:97:0d:37:3a:04: 53:55:63:f1:4b:83:a7:47:db:dd:16:3c:72:6d:7b:1b:fe:1e: 95:44:be:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmfub8x/YelUgIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk YWJkZDU0MjQtYTU0YS00MTBiLWI1YzgtMjM4YWU1M2M1YzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw+JggX4IPxLsD8hijODmsquoQQ5uGIGKZjG pdEO1gMa6f0A7Hx0rHomuLT3bnhgdoj6xe88WUR9CYCYMKNh68lE0IVdngBxBXDx g+AJYO3j+G+OrItI8/NFI3qqy4tDlELBe8g5ZGtuSuJ+l66tlvQidSOGk0nANchV FUHCirkGSQ8bfIzHKID7W99mLwmGJx5NBZiE3oKXyd2beLQ8QSTPkyPrwggZAmrB fCEA42dJ0jdau6tLWOt80Qqm71452Cx9QLmydzk7KzRZ5BwmOw+f+s56iv+rpSob m1wCWLy+f8Rw6QZzCKt5Jy2sxwT93nvDXNJ19cMbG4Bzrc4FuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtT8k0FOOyVyrZju4Z3G6TXHTaRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmRmYTg4OTQtYmU1NC0z Y2UwLWIzNjUtNjg0OGY5YzJjMjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8yUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdywZlYCqFgVqfQPd91EgdAFqH+tYud8BDD5OUXX7s/78OqFM05NL7O aZ3DuQjVOdOyAA9F5bZNnRW1HVFaOSeXB4zuzT4iLZDDTSH1w7oqoNnL55wB9ZaZ zzzoZquxRR5paSushEiuzjnKkCRKBMoOovhTGhNT9v8+rIKQ7YhpdxjudIXCAsHQ Rbc+VcFif9pAvlBREnOjR3TRurfHbDDE814+VJHVMXszfUPVlzlyqorekQqKDeGK 8G82lu6VLAQXlG0HlqAgl1kphtQ14zIhMqNQqZz77t97Dc0r4n1HEfo2araXDTc6 BFNVY/FLg6dH290WPHJtexv+HpVEvqo= -----END CERTIFICATE-----Generated at Mon Nov 25 16:32:14 2024 by rpki-client on console-ams.rpki-client.org