$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8349c839-e015-3042-8aa6-6f7fc2a81442.roa File: 8349c839-e015-3042-8aa6-6f7fc2a81442.roa (raw, json) Hash identifier: XjbErK4ivGJqtjzWu6C8xmmTPi8SIsb8jaWaMP0aoww= Subject key identifier: 34:67:DB:9F:67:43:C2:34:23:7C:44:47:DB:AD:8B:53:BE:A9:7A:7F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847D99A016C88677C7BD825BE28 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8349c839-e015-3042-8aa6-6f7fc2a81442.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 35994 IP address blocks: 23.207.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:9a:01:6c:88:67:7c:7b:d8:25:be:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=0298bc28-a2a3-4c2e-85f2-098294b24484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:21:98:ed:f9:2d:e5:14:c5:ea:05:f1:88:68: b0:1e:91:a7:14:50:eb:de:c9:37:10:d0:5a:f5:8a: 46:8d:b5:d4:87:3a:4f:93:fc:97:31:10:39:7c:57: 26:34:22:25:e8:67:b6:af:5b:06:23:15:34:26:ad: e8:c7:87:d9:e8:38:4a:fe:97:e9:c3:e9:15:c0:87: a2:51:3d:94:89:e8:82:56:aa:6f:2d:58:70:8b:60: 56:c5:08:be:69:ed:80:06:35:36:a5:ae:67:55:75: f3:ed:92:37:f9:2e:7f:35:59:a2:02:f4:2e:52:2f: 5b:d6:b9:3e:54:58:57:e5:0a:d5:fa:b0:4c:1f:7e: d3:6f:0e:c2:1c:3a:bb:cd:df:cf:f9:e5:23:0b:a6: ce:26:6b:5e:3f:6d:b1:46:6a:c4:30:16:d5:8c:9b: d9:26:81:78:3c:23:30:fb:c2:7f:0e:8a:d7:44:db: 52:93:4c:38:8f:cf:28:ab:d4:7a:a1:25:2b:82:13: 3d:71:fe:66:59:d8:96:8e:12:17:6d:1e:02:4f:8b: 6a:cd:7d:60:a6:07:13:51:7e:14:6b:be:16:b6:27: ac:90:7e:50:3a:f2:e2:65:e5:58:ca:74:00:07:0b: ee:d4:e0:37:fb:53:f6:68:91:93:0d:f8:a1:2f:cc: 0e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:67:DB:9F:67:43:C2:34:23:7C:44:47:DB:AD:8B:53:BE:A9:7A:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8349c839-e015-3042-8aa6-6f7fc2a81442.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:2d:f9:ac:f8:51:69:38:1c:40:01:dd:c8:22:28:7d:5d:0d: 4a:79:c5:68:83:3d:5b:d9:5c:b7:f6:9f:3d:a0:03:2c:62:19: cd:01:15:83:db:33:03:c7:42:b9:de:59:6a:7a:90:75:1c:26: 6b:5d:3c:b9:77:90:84:4d:59:44:9d:84:9b:5d:d9:c9:09:65: 74:b6:e0:d4:ae:41:d0:a7:06:94:9e:d2:77:54:22:d0:88:e3: c2:39:83:1c:60:e6:60:5e:57:19:37:bc:90:fe:e2:c0:1a:f1: 7e:0c:99:3d:80:f6:86:8b:cb:6d:f4:43:dd:82:84:ed:9f:7c: 65:fa:41:8a:08:ec:fd:2d:70:a2:93:1b:55:df:7a:15:44:6b: 3c:0a:c2:a5:12:d8:c4:3e:32:83:9d:7f:73:16:2b:0c:9f:e0: c2:cb:99:ee:b7:29:85:7a:5f:5d:3b:f8:7a:d1:c6:0a:db:59: 8c:fe:99:b3:bc:6c:6f:94:c7:d6:16:79:1c:37:56:aa:1e:98: 06:f5:d0:e5:1b:c4:07:b3:fb:2d:02:f2:c1:49:fd:ec:1b:5e: ca:34:73:32:19:e4:56:51:65:f9:24:6e:99:40:6c:63:49:69: 7b:f9:0b:36:60:ed:0d:41:9a:42:5f:73:ce:46:ee:4f:27:48: 70:1d:8f:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmgFsiGd8e9glvigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk MDI5OGJjMjgtYTJhMy00YzJlLTg1ZjItMDk4Mjk0YjI0NDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyGY7fkt5RTF6gXxiGiwHpGnFFDr3sk3ENBa 9YpGjbXUhzpPk/yXMRA5fFcmNCIl6Ge2r1sGIxU0Jq3ox4fZ6DhK/pfpw+kVwIei UT2UieiCVqpvLVhwi2BWxQi+ae2ABjU2pa5nVXXz7ZI3+S5/NVmiAvQuUi9b1rk+ VFhX5QrV+rBMH37Tbw7CHDq7zd/P+eUjC6bOJmteP22xRmrEMBbVjJvZJoF4PCMw +8J/DorXRNtSk0w4j88oq9R6oSUrghM9cf5mWdiWjhIXbR4CT4tqzX1gpgcTUX4U a74WtieskH5QOvLiZeVYynQABwvu1OA3+1P2aJGTDfihL8wOfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRn259nQ8I0I3xER9uti1O+qXp/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODM0OWM4MzktZTAxNS0z MDQyLThhYTYtNmY3ZmMyYTgxNDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8+pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEot+az4UWk4HEAB3cgiKH1dDUp5xWiDPVvZXLf2nz2gAyxiGc0BFYPb MwPHQrneWWp6kHUcJmtdPLl3kIRNWUSdhJtd2ckJZXS24NSuQdCnBpSe0ndUItCI 48I5gxxg5mBeVxk3vJD+4sAa8X4MmT2A9oaLy230Q92ChO2ffGX6QYoI7P0tcKKT G1XfehVEazwKwqUS2MQ+MoOdf3MWKwyf4MLLme63KYV6X107+HrRxgrbWYz+mbO8 bG+Ux9YWeRw3VqoemAb10OUbxAez+y0C8sFJ/ewbXso0czIZ5FZRZfkkbplAbGNJ aXv5CzZg7Q1BmkJfc85G7k8nSHAdj/Y= -----END CERTIFICATE-----Generated at Fri Nov 22 04:30:01 2024 by rpki-client on console-fra.rpki-client.org