$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3fa5330-a958-3724-ac47-a1ace2ea3ef6.roa File: a3fa5330-a958-3724-ac47-a1ace2ea3ef6.roa (raw, json) Hash identifier: ccbBsLu2D/Fx3cpa3yNw47CyswlizRjM2vw5wLwEzno= Subject key identifier: 43:DD:62:66:C0:A7:E4:F8:CA:FA:78:B0:2C:09:7D:FA:C1:73:E8:7D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847B3CC20EACBE76AF1C801DE40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3fa5330-a958-3724-ac47-a1ace2ea3ef6.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.213.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:20:ea:cb:e7:6a:f1:c8:01:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=2216ae3a-c50d-4728-9577-c903c6b034e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:67:e9:bd:92:c9:46:ab:8b:45:40:c0:fa:40: 43:da:74:75:23:b9:2a:a3:ba:75:56:b7:84:04:26: df:0b:4b:de:f5:62:b6:3b:c0:85:62:5e:7c:fe:82: 39:83:e8:6a:9b:17:61:7c:4f:ab:ff:f4:d1:e9:30: 40:49:00:f8:d4:3b:54:dc:b4:df:83:1b:db:03:9a: c5:b6:5d:13:eb:25:b1:72:b4:7b:93:1d:8d:fc:03: ed:f0:83:17:d9:95:73:b5:77:1f:2f:14:40:55:07: ac:1d:71:0e:1a:de:bf:85:63:f0:06:ba:37:2b:9f: 02:a6:73:e8:73:70:4f:9a:35:4e:14:63:ca:0e:de: a7:28:0c:b4:ac:3c:7f:60:0a:2d:ee:54:0b:ab:89: 5c:71:01:89:11:27:36:c2:ac:ad:ee:b4:b2:69:66: b9:df:1d:8b:59:d2:79:c5:ab:ae:0b:4c:e2:0b:89: 51:29:c8:91:5a:2f:9f:cb:17:67:4f:b3:34:45:df: c3:e9:8f:e1:ec:57:aa:5c:06:f9:8b:78:ba:f4:2a: 5e:55:32:12:43:40:8b:6b:b0:0c:2b:65:0a:63:f0: 4a:f9:4b:7a:d9:ac:08:59:0b:fd:68:45:0f:ed:c0: 19:30:df:2b:b9:08:5f:3e:d9:5b:0a:07:0b:02:11: 1b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DD:62:66:C0:A7:E4:F8:CA:FA:78:B0:2C:09:7D:FA:C1:73:E8:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3fa5330-a958-3724-ac47-a1ace2ea3ef6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:7c:e6:74:f9:6f:7a:fa:d7:93:7f:c1:38:8e:ca:a0:ef:e2: 18:1c:8e:2e:1a:d3:7f:98:f5:04:e3:43:da:5c:dc:82:36:22: 17:3b:ee:57:a0:93:01:a6:56:99:af:59:3f:6d:f0:56:5e:4a: f4:d8:ae:ea:78:e1:02:a6:03:6d:24:1f:3a:5a:d4:3b:f3:16: 07:b1:a1:10:73:03:2f:c2:ed:1c:1d:62:1f:7a:be:cb:8a:d6: 59:3a:ff:f3:7f:5b:44:3a:ba:52:7e:c9:00:bd:b1:b5:b1:7b: fc:be:7d:d0:6e:48:1a:ac:61:c5:df:90:09:63:37:7c:33:c4: 68:a5:c6:99:76:2b:1b:67:2f:d1:e4:55:b7:c3:d0:fe:09:6a: 2f:11:ee:1a:a7:ea:c5:0b:69:7c:88:e0:77:0b:71:ae:c8:1c: ab:bb:cd:e3:ad:ca:5f:ca:95:20:46:69:34:f3:17:90:cd:56: d0:27:1a:3f:6c:96:70:5c:ab:e5:82:a7:19:07:7a:18:2e:5b: 57:b1:e3:2e:0a:35:d1:30:cb:24:ea:e0:98:62:3e:df:15:6f: 42:b3:06:99:55:b9:07:50:53:91:26:f3:14:a1:f2:1f:5e:d7: fa:95:47:a6:55:37:7e:10:03:b2:c9:a2:e7:a8:0f:9c:93:c8: 91:d4:e4:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEezzCDqy+dq8cgB3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk MjIxNmFlM2EtYzUwZC00NzI4LTk1NzctYzkwM2M2YjAzNGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2fpvZLJRquLRUDA+kBD2nR1I7kqo7p1VreE BCbfC0ve9WK2O8CFYl58/oI5g+hqmxdhfE+r//TR6TBASQD41DtU3LTfgxvbA5rF tl0T6yWxcrR7kx2N/APt8IMX2ZVztXcfLxRAVQesHXEOGt6/hWPwBro3K58CpnPo c3BPmjVOFGPKDt6nKAy0rDx/YAot7lQLq4lccQGJESc2wqyt7rSyaWa53x2LWdJ5 xauuC0ziC4lRKciRWi+fyxdnT7M0Rd/D6Y/h7FeqXAb5i3i69CpeVTISQ0CLa7AM K2UKY/BK+Ut62awIWQv9aEUP7cAZMN8ruQhfPtlbCgcLAhEbpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPdYmbAp+T4yvp4sCwJffrBc+h9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTNmYTUzMzAtYTk1OC0z NzI0LWFjNDctYTFhY2UyZWEzZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9WzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEh85nT5b3r615N/wTiOyqDv4hgcji4a03+Y9QTjQ9pc3II2Ihc77leg kwGmVpmvWT9t8FZeSvTYrup44QKmA20kHzpa1DvzFgexoRBzAy/C7RwdYh96vsuK 1lk6//N/W0Q6ulJ+yQC9sbWxe/y+fdBuSBqsYcXfkAljN3wzxGilxpl2KxtnL9Hk VbfD0P4Jai8R7hqn6sULaXyI4HcLca7IHKu7zeOtyl/KlSBGaTTzF5DNVtAnGj9s lnBcq+WCpxkHehguW1ex4y4KNdEwyyTq4JhiPt8Vb0KzBplVuQdQU5Em8xSh8h9e 1/qVR6ZVN34QA7LJoueoD5yTyJHU5As= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:22 2024 by rpki-client on console-fra.rpki-client.org