$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89c9aa17-84f3-37d8-8fd1-545625e958d8.roa File: 89c9aa17-84f3-37d8-8fd1-545625e958d8.roa (raw, json) Hash identifier: bkAhMuqoqESfQCNX5NiYsU0OjKRCJc7is+pz+Jj99mk= Subject key identifier: BD:AA:A0:C2:3F:17:9F:1E:D6:FA:01:F4:0C:57:F1:20:F4:96:4D:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847D999FB2EF78BA2B489FE9740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89c9aa17-84f3-37d8-8fd1-545625e958d8.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.204.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:99:fb:2e:f7:8b:a2:b4:89:fe:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=d738e4f2-1e5d-4740-9933-b7b9993ce997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:28:cd:79:ce:8e:dc:33:b6:af:68:60:4f:a8: 0b:a8:2d:2a:5a:7e:b3:4a:6f:f5:66:c3:ee:54:10: bc:79:61:8c:8a:e3:dc:e6:25:3c:25:44:cd:a0:5e: ad:87:ec:7f:bc:81:82:d8:a2:fd:c9:53:a2:ec:c6: ee:07:ac:8c:fb:1f:b7:03:09:6a:0b:50:f6:4e:92: 05:87:4f:f5:b3:bd:96:67:62:fe:72:55:ad:de:37: fc:ea:d3:9d:77:3f:54:bf:78:f8:9f:80:21:3d:c3: e3:6e:4b:8e:f7:0d:08:a3:4a:66:14:5d:97:24:26: 89:09:9c:9a:7f:a6:87:d7:8f:5f:a2:b3:75:97:f7: a5:b3:25:0e:62:68:cc:52:2a:86:d0:82:d6:41:20: cc:85:4c:c6:f2:20:fa:9c:43:99:ce:cb:d5:4b:7c: 79:dc:bc:2b:b7:00:2f:68:c7:42:66:e0:e5:8b:4f: e9:80:76:67:71:e1:53:64:f8:3c:48:8f:d5:af:e3: 90:d0:b9:24:c5:37:41:96:1d:64:09:0b:15:c4:e9: 3b:dd:9b:f3:7e:92:f2:b2:c9:2b:d0:bd:20:da:0d: 25:97:d6:72:49:71:d5:f2:89:c8:d7:33:ce:bd:f8: 62:d4:30:5a:55:38:51:ca:08:75:67:c1:d6:9a:70: 66:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AA:A0:C2:3F:17:9F:1E:D6:FA:01:F4:0C:57:F1:20:F4:96:4D:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89c9aa17-84f3-37d8-8fd1-545625e958d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:3b:83:cc:04:42:4f:3d:b7:ff:66:6d:08:6f:61:0d:92:2a: ab:cd:22:08:4e:0f:30:05:df:27:ee:ff:dd:e0:5a:74:37:a7: 81:c9:ca:79:84:8d:07:d1:5c:84:77:3e:48:b2:c1:11:81:39: 0c:6b:46:e2:0f:6b:41:8c:3a:52:08:0d:87:9b:8b:b4:c2:f0: 7d:26:98:b9:6f:95:dc:ba:d2:ce:68:77:7d:bf:7a:41:31:33: c6:66:8f:03:6b:5c:0e:e2:5b:ca:be:a0:47:5a:2f:5b:43:d6: 0a:a9:25:07:91:04:a0:d0:54:7b:26:bf:32:9e:e2:49:9a:5e: f8:b8:b1:da:06:20:24:7e:ca:f3:b1:1d:cd:52:89:ff:9d:2a: 1b:76:60:7b:d7:ba:5f:1d:f4:2a:7c:10:26:e2:69:76:3c:d4: df:98:35:3d:9d:48:8b:8d:01:e1:2b:e5:93:03:1e:6a:c0:0f: 77:c5:f0:bc:c6:01:51:03:b9:ca:22:a1:ca:cf:b4:51:6b:0c: e7:80:12:6d:d9:ab:54:75:d3:bb:4a:31:e4:49:a0:bd:41:f3: e7:1a:d1:27:fb:1a:b2:b6:ef:d4:a1:65:6e:55:65:52:40:d5: d4:46:d0:09:ca:a6:ee:6d:5c:c6:64:4a:5d:ed:85:96:a7:3a: 8b:bc:8c:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmfsu94uitIn+l0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk ZDczOGU0ZjItMWU1ZC00NzQwLTk5MzMtYjdiOTk5M2NlOTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyjNec6O3DO2r2hgT6gLqC0qWn6zSm/1ZsPu VBC8eWGMiuPc5iU8JUTNoF6th+x/vIGC2KL9yVOi7MbuB6yM+x+3AwlqC1D2TpIF h0/1s72WZ2L+clWt3jf86tOddz9Uv3j4n4AhPcPjbkuO9w0Io0pmFF2XJCaJCZya f6aH149forN1l/elsyUOYmjMUiqG0ILWQSDMhUzG8iD6nEOZzsvVS3x53LwrtwAv aMdCZuDli0/pgHZnceFTZPg8SI/Vr+OQ0LkkxTdBlh1kCQsVxOk73ZvzfpLysskr 0L0g2g0ll9ZySXHV8onI1zPOvfhi1DBaVThRygh1Z8HWmnBmYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2qoMI/F58e1voB9AxX8SD0lk0RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODljOWFhMTctODRmMy0z N2Q4LThmZDEtNTQ1NjI1ZTk1OGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8x6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFk7g8wEQk89t/9mbQhvYQ2SKqvNIghODzAF3yfu/93gWnQ3p4HJynmE jQfRXIR3PkiywRGBOQxrRuIPa0GMOlIIDYebi7TC8H0mmLlvldy60s5od32/ekEx M8ZmjwNrXA7iW8q+oEdaL1tD1gqpJQeRBKDQVHsmvzKe4kmaXvi4sdoGICR+yvOx Hc1Sif+dKht2YHvXul8d9Cp8ECbiaXY81N+YNT2dSIuNAeEr5ZMDHmrAD3fF8LzG AVEDucoiocrPtFFrDOeAEm3Zq1R107tKMeRJoL1B8+ca0Sf7GrK279ShZW5VZVJA 1dRG0AnKpu5tXMZkSl3thZanOou8jPE= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:11 2024 by rpki-client on console-fra.rpki-client.org