$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b0c1977-2816-3d26-8641-1dd2ed1f9bca.roa File: 8b0c1977-2816-3d26-8641-1dd2ed1f9bca.roa (raw, json) Hash identifier: 3mEVzEOCFm3KrDJxiNfcZHtX9iDMQBDB6eLEd4sQEko= Subject key identifier: 4F:85:E1:D3:B2:A9:F3:B6:9D:90:1A:00:E3:34:8D:12:BF:38:33:97 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847ED24D53760DD1647F9EA0C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b0c1977-2816-3d26-8641-1dd2ed1f9bca.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 16625 IP address blocks: 23.221.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:d5:37:60:dd:16:47:f9:ea:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=a8cd4338-19ec-4634-b519-ef9e6d246c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d9:eb:fb:ce:7d:a8:c8:55:e0:c5:8a:b8:83: f4:32:53:44:57:ab:33:af:d5:e0:3b:70:cd:95:b1: 26:e8:08:aa:62:a1:8c:a4:22:a8:8f:56:b3:f1:6f: e1:43:71:5e:c1:c9:fb:99:a1:41:db:91:11:ea:b7: 82:d0:e6:ad:0e:33:da:88:3e:1b:b4:b3:0b:b8:66: 2a:e7:e3:fb:ce:08:33:8e:1f:b0:e7:b3:db:4e:79: 9f:5f:cb:9d:bc:2b:ff:c1:9c:a7:aa:44:6a:a2:65: 89:69:12:f1:38:e6:35:d2:55:d4:29:5c:83:43:0c: 87:ae:93:27:09:00:ac:88:86:e0:87:c2:61:42:17: 2d:bd:67:46:b1:d7:d7:68:8e:39:16:d8:aa:87:78: 99:e8:34:8a:db:89:e9:b8:c7:4a:57:5b:bb:4a:54: 03:55:41:6e:89:99:8c:ee:f7:b5:47:2e:fe:d3:b5: 3d:e7:6d:bb:4a:c0:10:24:bf:4d:bc:1a:88:d0:89: c5:d4:5f:2e:2f:95:0d:da:58:cb:fc:8e:33:ac:01: 03:1d:36:9a:e9:1c:68:50:91:d0:c2:e7:83:b1:93: d0:e6:88:58:f7:30:37:c2:b5:cc:2f:86:8c:fd:9a: af:a8:8d:c0:a1:2c:e3:bb:e4:f9:ec:08:3a:0f:e6: eb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:85:E1:D3:B2:A9:F3:B6:9D:90:1A:00:E3:34:8D:12:BF:38:33:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b0c1977-2816-3d26-8641-1dd2ed1f9bca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:95:9f:4f:f7:3c:09:20:5f:8c:5b:47:53:8d:f0:39:15:8f: 47:68:b4:ba:25:6d:59:b4:e2:34:d1:7c:1d:a1:b0:db:a6:ab: dc:10:75:95:d1:8e:fb:3d:f8:53:d1:41:e4:ec:b0:db:13:a7: ac:43:72:ec:37:aa:9b:c0:54:c8:7f:a9:32:8d:bd:07:6a:7e: ca:79:56:11:02:39:4d:38:9d:61:b0:0c:54:b0:66:fd:a1:b9: 6f:c2:fe:5d:66:a9:03:5c:53:fa:f6:5c:53:76:68:20:c9:59: 16:8e:02:ef:66:1d:33:98:05:ae:3f:71:10:ed:21:49:9d:64: 80:3a:43:c3:51:d2:84:e5:eb:0f:f7:e9:d2:51:41:d5:0c:a1: 61:42:f2:00:d1:99:0e:7c:2d:43:ff:a5:77:27:05:40:b9:81: 27:90:33:81:39:c2:08:6b:3f:35:65:41:dd:c8:a0:53:d7:08: c9:ba:23:e7:e7:28:c1:47:a1:db:94:00:f7:db:59:02:aa:70: 0b:69:25:8c:0f:19:2f:61:e4:00:17:6e:75:40:33:49:5c:b1: 96:19:17:bc:43:1f:9e:29:aa:1e:64:97:ad:de:38:af:04:83: a4:be:c4:49:57:2c:64:e8:8c:6f:6f:54:29:39:1e:a1:94:c5: ea:74:39:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJNU3YN0WR/nqDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk YThjZDQzMzgtMTllYy00NjM0LWI1MTktZWY5ZTZkMjQ2YzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudnr+859qMhV4MWKuIP0MlNEV6szr9XgO3DN lbEm6AiqYqGMpCKoj1az8W/hQ3Fewcn7maFB25ER6reC0OatDjPaiD4btLMLuGYq 5+P7zggzjh+w57PbTnmfX8udvCv/wZynqkRqomWJaRLxOOY10lXUKVyDQwyHrpMn CQCsiIbgh8JhQhctvWdGsdfXaI45Ftiqh3iZ6DSK24npuMdKV1u7SlQDVUFuiZmM 7ve1Ry7+07U95227SsAQJL9NvBqI0InF1F8uL5UN2ljL/I4zrAEDHTaa6RxoUJHQ wueDsZPQ5ohY9zA3wrXML4aM/ZqvqI3AoSzju+T57Ag6D+br9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+F4dOyqfO2nZAaAOM0jRK/ODOXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGIwYzE5NzctMjgxNi0z ZDI2LTg2NDEtMWRkMmVkMWY5YmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF93IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSVn0/3PAkgX4xbR1ON8DkVj0dotLolbVm04jTRfB2hsNumq9wQdZXR jvs9+FPRQeTssNsTp6xDcuw3qpvAVMh/qTKNvQdqfsp5VhECOU04nWGwDFSwZv2h uW/C/l1mqQNcU/r2XFN2aCDJWRaOAu9mHTOYBa4/cRDtIUmdZIA6Q8NR0oTl6w/3 6dJRQdUMoWFC8gDRmQ58LUP/pXcnBUC5gSeQM4E5wghrPzVlQd3IoFPXCMm6I+fn KMFHoduUAPfbWQKqcAtpJYwPGS9h5AAXbnVAM0lcsZYZF7xDH54pqh5kl63eOK8E g6S+xElXLGTojG9vVCk5HqGUxep0OXk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:47:32 2024 by rpki-client on console-ams.rpki-client.org