$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a2798f7-5b92-3031-904c-2b8522db1ea7.roa File: 7a2798f7-5b92-3031-904c-2b8522db1ea7.roa (raw, json) Hash identifier: iM+V5QTkMQ172kOhb0SDnxxy1kE3+pjdG3V/TbpjlLg= Subject key identifier: 72:54:9C:82:F9:B9:DE:2E:08:5E:B7:B8:0D:64:67:35:DE:9D:07:C5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847B3CC1F461D2F88CAD91B65C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a2798f7-5b92-3031-904c-2b8522db1ea7.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 45430 IP address blocks: 23.209.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:1f:46:1d:2f:88:ca:d9:1b:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=5e5e77dc-6daa-454e-a740-151c5b9feb0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ab:01:41:d8:0f:2b:3e:e7:77:93:8a:d0:06: 8b:bb:26:a6:df:c1:3e:0e:03:c5:8b:07:31:3d:84: 22:7b:55:ec:eb:3f:d4:0b:ad:be:19:98:fe:0a:b3: 0c:a5:d0:49:bc:0d:f3:1a:63:3c:0e:9c:c4:9b:1a: d5:95:57:58:6f:a4:31:02:a0:b3:42:da:e9:21:0e: a3:13:c8:58:a9:1d:a4:fc:e2:d4:1a:92:fc:86:db: ed:35:9f:eb:1f:ff:e1:6d:40:fd:99:3d:42:85:e5: 3d:41:1a:ee:6f:83:86:21:67:42:55:31:90:77:e5: 99:f9:85:64:41:cd:33:8f:60:de:ac:1c:38:86:cc: 17:51:33:ac:f8:c8:28:2d:6d:de:a3:1a:19:90:1e: bd:59:c8:6e:99:cd:a6:ff:d6:91:09:79:16:70:77: 07:d2:3a:51:cc:5a:59:36:a6:19:c7:b8:51:1a:70: 0a:95:5e:80:06:26:30:7e:60:4f:8b:8f:25:d5:50: dc:95:d0:bb:47:8a:73:4d:8c:2c:d4:71:d3:c3:ab: ab:30:7f:29:3e:41:07:d8:b0:50:49:51:c6:16:a4: 53:2c:88:a9:34:e4:11:1b:e7:2d:64:3b:c0:a8:94: 6e:2d:dc:a8:92:5c:40:ac:0a:b2:b1:da:f2:48:f8: bd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:54:9C:82:F9:B9:DE:2E:08:5E:B7:B8:0D:64:67:35:DE:9D:07:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a2798f7-5b92-3031-904c-2b8522db1ea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ec:84:25:e3:7e:4c:b4:8f:f6:60:56:28:25:51:c1:a7:08: 85:6f:92:dd:56:b4:6e:3a:27:9e:0a:9f:04:ad:d4:23:8e:c0: 6a:39:70:db:cf:65:59:a8:89:84:18:e6:8a:fb:90:b1:d7:7c: d3:0b:f8:ce:65:6c:5f:14:fe:71:c5:b8:6b:f4:4d:04:f2:61: d3:5c:e3:0d:6f:53:98:11:c6:df:98:03:df:ca:a3:5a:f2:d5: e3:24:36:38:0b:18:16:fa:43:54:93:e2:01:4b:95:57:5a:bd: fe:2a:97:36:72:4d:f6:55:e5:c6:b7:25:bf:8f:82:f4:6f:8a: 84:60:83:cf:65:f9:4b:c7:be:e5:15:48:bd:61:7c:ff:d6:85: 83:21:cb:7c:51:18:f6:a1:f2:74:ee:bd:20:a0:4e:36:e2:92: 5a:22:d7:bc:51:a0:f2:4c:b4:71:b2:dd:b7:f5:67:6b:81:7a: 70:72:63:6d:59:a2:36:0d:16:47:b0:a6:dd:a8:0e:36:99:4a: 50:86:a2:4c:92:c6:6f:03:ad:77:ca:24:63:7a:e0:0e:d5:53: ef:5d:39:e7:a8:9a:fc:7d:f2:e7:a5:6a:75:80:66:d9:d0:c6: 6c:b9:d1:14:0a:1c:98:5c:78:ad:11:ce:3b:23:e5:5a:c2:fe: a8:bb:f5:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEezzB9GHS+IytkbZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk NWU1ZTc3ZGMtNmRhYS00NTRlLWE3NDAtMTUxYzViOWZlYjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKsBQdgPKz7nd5OK0AaLuyam38E+DgPFiwcx PYQie1Xs6z/UC62+GZj+CrMMpdBJvA3zGmM8DpzEmxrVlVdYb6QxAqCzQtrpIQ6j E8hYqR2k/OLUGpL8htvtNZ/rH//hbUD9mT1CheU9QRrub4OGIWdCVTGQd+WZ+YVk Qc0zj2DerBw4hswXUTOs+MgoLW3eoxoZkB69Wchumc2m/9aRCXkWcHcH0jpRzFpZ NqYZx7hRGnAKlV6ABiYwfmBPi48l1VDcldC7R4pzTYws1HHTw6urMH8pPkEH2LBQ SVHGFqRTLIipNOQRG+ctZDvAqJRuLdyoklxArAqysdrySPi9awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJUnIL5ud4uCF63uA1kZzXenQfFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2EyNzk4ZjctNWI5Mi0z MDMxLTkwNGMtMmI4NTIyZGIxZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9HwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELshCXjfky0j/ZgViglUcGnCIVvkt1WtG46J54KnwSt1COOwGo5cNvP ZVmoiYQY5or7kLHXfNML+M5lbF8U/nHFuGv0TQTyYdNc4w1vU5gRxt+YA9/Ko1ry 1eMkNjgLGBb6Q1ST4gFLlVdavf4qlzZyTfZV5ca3Jb+PgvRvioRgg89l+UvHvuUV SL1hfP/WhYMhy3xRGPah8nTuvSCgTjbikloi17xRoPJMtHGy3bf1Z2uBenByY21Z ojYNFkewpt2oDjaZSlCGokySxm8DrXfKJGN64A7VU+9dOeeomvx98uelanWAZtnQ xmy50RQKHJhceK0Rzjsj5VrC/qi79Uo= -----END CERTIFICATE-----Generated at Tue Nov 26 05:12:57 2024 by rpki-client on console-fra.rpki-client.org