$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/985736c9-57e2-380b-b5de-a9aa1cf37e64.roa File: 985736c9-57e2-380b-b5de-a9aa1cf37e64.roa (raw, json) Hash identifier: GyCTFvXW0frpb7vFZ9XqgLtv1HB/pJGSB21Hvx/otCA= Subject key identifier: 58:84:A2:81:B8:CB:AD:95:C0:2E:49:93:95:D9:5C:9B:30:18:25:99 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847B3CC1CC4D8EEA9A35388E900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/985736c9-57e2-380b-b5de-a9aa1cf37e64.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.211.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:1c:c4:d8:ee:a9:a3:53:88:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=d7a4415e-e98d-4e62-bd5c-46bf7ddb70a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:95:e9:10:50:3a:79:a5:92:82:1f:f6:de:c6: 37:b3:d8:c0:b1:39:e4:6f:fb:fd:c4:e1:7b:a3:a9: f8:44:63:44:10:ba:c3:50:c4:23:fc:17:df:c6:99: e7:6a:42:31:ec:1b:af:cd:f9:1a:95:1c:ca:91:f1: f2:2f:f8:f2:25:c0:c7:53:02:16:97:b6:d4:02:73: 97:1c:74:df:74:f1:87:d9:29:71:0a:e4:60:45:f2: 26:90:b1:37:55:90:2c:7f:15:c9:b7:88:95:dd:47: 2b:21:7e:00:88:89:d2:65:92:0c:ef:be:77:4e:ef: 6b:65:bd:43:51:4d:b1:f6:f0:c5:f4:cb:cb:c0:0b: c5:15:06:49:fa:04:b1:85:fb:a1:ac:e2:b2:62:3e: 89:0d:c4:96:a5:81:bb:a8:bd:e6:ea:81:4a:05:f7: b1:c0:79:a3:53:22:78:f8:97:24:85:4c:4d:a3:a1: ac:f3:e2:b9:86:b5:91:2e:31:87:ab:b4:fe:18:ed: 6d:79:61:e3:48:bb:1c:8d:1f:0e:69:71:0a:79:28: f6:9d:4b:c3:d1:6b:84:a4:36:e4:71:69:9b:b6:0d: 03:57:6a:c2:52:35:42:a0:ab:3d:94:f5:06:02:92: 7e:53:a3:33:1e:8e:c9:2e:bf:80:59:a2:82:8d:c5: b3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:84:A2:81:B8:CB:AD:95:C0:2E:49:93:95:D9:5C:9B:30:18:25:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/985736c9-57e2-380b-b5de-a9aa1cf37e64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:39:5d:f4:1c:bc:6a:80:ab:7f:78:33:92:79:db:a6:b2:52: 96:07:5f:94:4d:c2:3d:88:27:ae:88:2e:36:d7:5a:cd:68:a5: df:46:7b:4f:9d:34:1c:c0:70:ef:69:3d:fc:5c:7e:32:89:4c: 37:12:14:86:eb:e4:c7:d7:65:97:a1:4e:dc:80:24:4a:e1:ce: 91:16:6e:fe:7b:58:4d:03:c6:43:01:28:75:13:1f:29:40:99: 60:2d:e8:ca:b3:e8:2e:cb:47:54:c6:41:8e:49:c2:c4:ba:6e: 3c:c5:4f:46:4d:b7:3a:a5:b5:57:de:fa:3d:69:b4:6c:28:40: 30:59:34:47:d3:67:5b:d8:08:d2:72:3f:60:c9:fc:aa:9a:e7: d1:0b:0c:be:62:13:ec:6e:92:46:f7:2e:76:21:5e:0e:fc:b1: fb:af:54:44:42:a4:1e:36:fc:d2:fc:30:fc:18:fc:02:38:9b: 48:98:1f:f7:48:ca:ec:b5:40:d7:a1:67:81:73:f6:34:ef:e1: 8d:86:f5:48:04:1f:29:e6:f7:a4:ff:a0:6c:58:cc:9e:b5:4b: 15:a4:b5:bb:18:ec:b7:2d:c4:95:3c:61:1b:1d:c1:c1:a3:d4: 02:d3:31:fe:62:fe:ae:8d:90:2c:7f:b2:1a:db:53:1c:6e:c2: e0:4e:19:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEezzBzE2O6po1OI6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk ZDdhNDQxNWUtZTk4ZC00ZTYyLWJkNWMtNDZiZjdkZGI3MGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpXpEFA6eaWSgh/23sY3s9jAsTnkb/v9xOF7 o6n4RGNEELrDUMQj/BffxpnnakIx7BuvzfkalRzKkfHyL/jyJcDHUwIWl7bUAnOX HHTfdPGH2SlxCuRgRfImkLE3VZAsfxXJt4iV3UcrIX4AiInSZZIM7753Tu9rZb1D UU2x9vDF9MvLwAvFFQZJ+gSxhfuhrOKyYj6JDcSWpYG7qL3m6oFKBfexwHmjUyJ4 +JckhUxNo6Gs8+K5hrWRLjGHq7T+GO1teWHjSLscjR8OaXEKeSj2nUvD0WuEpDbk cWmbtg0DV2rCUjVCoKs9lPUGApJ+U6MzHo7JLr+AWaKCjcWzTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiEooG4y62VwC5Jk5XZXJswGCWZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTg1NzM2YzktNTdlMi0z ODBiLWI1ZGUtYTlhYTFjZjM3ZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9N+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJM5XfQcvGqAq394M5J526ayUpYHX5RNwj2IJ66ILjbXWs1opd9Ge0+d NBzAcO9pPfxcfjKJTDcSFIbr5MfXZZehTtyAJErhzpEWbv57WE0DxkMBKHUTHylA mWAt6Mqz6C7LR1TGQY5JwsS6bjzFT0ZNtzqltVfe+j1ptGwoQDBZNEfTZ1vYCNJy P2DJ/Kqa59ELDL5iE+xukkb3LnYhXg78sfuvVERCpB42/NL8MPwY/AI4m0iYH/dI yuy1QNehZ4Fz9jTv4Y2G9UgEHynm96T/oGxYzJ61SxWktbsY7LctxJU8YRsdwcGj 1ALTMf5i/q6NkCx/shrbUxxuwuBOGSQ= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:18 2024 by rpki-client on console-fra.rpki-client.org