$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f0c2673-439c-3ba2-b017-6d4d6527db1e.roa File: 8f0c2673-439c-3ba2-b017-6d4d6527db1e.roa (raw, json) Hash identifier: EeFvfyWzWvmWhkFjMt9KD4XRnH+UZvpkSrSMKrIl4aI= Subject key identifier: 9C:14:5A:27:36:83:6C:D1:CE:9A:51:E2:C0:CD:39:9E:E0:2F:C0:04 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847ED24CC2135405EE6185D8180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f0c2673-439c-3ba2-b017-6d4d6527db1e.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 16625 IP address blocks: 23.220.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:cc:21:35:40:5e:e6:18:5d:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=c084e5c9-c5db-4b75-a61a-4ae0e86f3a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7e:04:c3:f1:ba:21:2f:da:86:3c:f5:46:29: 5d:a9:f6:3d:95:47:30:8e:12:43:04:be:9b:fc:70: aa:3a:20:de:42:57:3c:52:66:aa:35:60:06:00:51: 0a:46:02:2d:d9:93:02:03:b0:db:5f:bc:71:77:af: 96:91:49:97:26:88:c0:70:4f:ed:76:41:c0:d1:e8: 8e:70:1a:ac:92:d6:0f:e1:36:b3:a1:12:8a:db:cf: da:2c:7e:7b:69:2e:16:4b:91:79:2c:c5:b9:20:36: 2e:86:84:ab:27:b5:77:76:70:f4:65:9b:cf:02:45: af:9d:d0:43:2d:bf:71:d9:c3:76:89:7b:ff:2d:62: d6:5f:0b:95:4f:03:b5:8f:f0:58:73:2f:7a:72:a3: 2c:c8:46:ef:88:52:c9:b0:59:81:0b:6a:3c:99:3c: cd:78:59:58:33:8d:56:a2:7e:bf:40:b2:34:79:a8: 08:06:04:b9:72:3f:30:d6:00:e1:ef:35:92:4a:57: 99:32:c7:76:64:ef:44:7d:e1:73:6a:43:76:1d:31: f7:6b:01:bb:b6:10:97:c6:fe:99:b5:d3:c0:f6:24: ad:64:af:97:f1:90:27:4b:ac:a1:6a:8b:b2:82:d5: b5:b5:8e:41:c1:ba:9c:51:ed:ef:27:9c:af:ef:f9: f0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:14:5A:27:36:83:6C:D1:CE:9A:51:E2:C0:CD:39:9E:E0:2F:C0:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f0c2673-439c-3ba2-b017-6d4d6527db1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:6c:60:52:66:d4:f3:7c:3f:2d:05:e6:e7:90:b0:68:4a:36: 1b:c7:5d:c3:00:7e:be:e2:86:05:3a:1b:5d:4c:8f:06:cf:b0: ab:e8:3d:a2:fd:e1:4b:ce:96:3a:90:8c:56:d9:d2:4f:2d:0e: f2:e0:64:2d:df:f4:bb:19:8a:4e:67:2e:93:ff:7a:9a:3e:88: 44:1a:6b:24:56:77:51:96:66:24:3c:25:d4:38:6f:e5:50:66: 92:ec:29:b5:3d:24:f4:d3:4d:18:ac:da:8c:01:69:ff:4f:a9: 3e:6a:f6:c8:d8:e7:2d:d8:e0:e3:f9:63:79:ce:99:70:cc:2e: 98:b0:1d:a8:72:81:54:6d:bd:9b:bd:00:9c:4c:5a:d9:17:5d: 5a:09:18:30:9f:f7:23:9a:f9:30:76:41:83:26:e1:75:71:61: 61:cb:e2:0f:1a:6f:21:b4:62:45:53:e5:ee:02:92:c3:fc:9e: cb:2b:06:e5:f7:56:b7:34:4e:9f:2d:3a:3a:2b:47:2c:9f:73: f7:43:02:3d:99:c9:c5:31:b0:0f:dc:f1:a5:53:7d:15:eb:45: 89:93:b8:13:42:45:6b:37:36:9c:33:4d:bc:1a:79:ad:40:5a: 40:2e:25:6c:5b:c8:36:e7:c1:c2:2a:50:33:b4:5f:e9:b7:ae: a9:03:30:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJMwhNUBe5hhdgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk YzA4NGU1YzktYzVkYi00Yjc1LWE2MWEtNGFlMGU4NmYzYThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX4Ew/G6IS/ahjz1RildqfY9lUcwjhJDBL6b /HCqOiDeQlc8UmaqNWAGAFEKRgIt2ZMCA7DbX7xxd6+WkUmXJojAcE/tdkHA0eiO cBqsktYP4TazoRKK28/aLH57aS4WS5F5LMW5IDYuhoSrJ7V3dnD0ZZvPAkWvndBD Lb9x2cN2iXv/LWLWXwuVTwO1j/BYcy96cqMsyEbviFLJsFmBC2o8mTzNeFlYM41W on6/QLI0eagIBgS5cj8w1gDh7zWSSleZMsd2ZO9EfeFzakN2HTH3awG7thCXxv6Z tdPA9iStZK+X8ZAnS6yhaouygtW1tY5BwbqcUe3vJ5yv7/nwzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwUWic2g2zRzppR4sDNOZ7gL8AEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGYwYzI2NzMtNDM5Yy0z YmEyLWIwMTctNmQ0ZDY1MjdkYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9zcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVsYFJm1PN8Py0F5ueQsGhKNhvHXcMAfr7ihgU6G11MjwbPsKvoPaL9 4UvOljqQjFbZ0k8tDvLgZC3f9LsZik5nLpP/epo+iEQaayRWd1GWZiQ8JdQ4b+VQ ZpLsKbU9JPTTTRis2owBaf9PqT5q9sjY5y3Y4OP5Y3nOmXDMLpiwHahygVRtvZu9 AJxMWtkXXVoJGDCf9yOa+TB2QYMm4XVxYWHL4g8abyG0YkVT5e4CksP8nssrBuX3 Vrc0Tp8tOjorRyyfc/dDAj2ZycUxsA/c8aVTfRXrRYmTuBNCRWs3NpwzTbwaea1A WkAuJWxbyDbnwcIqUDO0X+m3rqkDMI0= -----END CERTIFICATE-----Generated at Fri Nov 22 04:30:07 2024 by rpki-client on console-fra.rpki-client.org