$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1e49696-13fe-3d50-9952-c1ba52197ef0.roa File: b1e49696-13fe-3d50-9952-c1ba52197ef0.roa (raw, json) Hash identifier: NboKjaiPdhtAEMwo2q5jgmdeoHwAPunDr1+m7fjElOk= Subject key identifier: 50:0D:24:63:0A:AE:26:85:D7:51:51:40:12:11:C5:DC:92:B0:7B:42 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847DC64BD8AE35E216AE964FB30 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1e49696-13fe-3d50-9952-c1ba52197ef0.roa Signing time: Wed 13 Nov 2024 02:00:28 +0000 ROA not before: Wed 13 Nov 2024 02:00:28 +0000 ROA not after: Tue 11 Feb 2025 02:00:28 +0000 asID: 16625 IP address blocks: 23.209.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dc:64:bd:8a:e3:5e:21:6a:e9:64:fb:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 13 02:00:28 2024 GMT Not After : Feb 11 02:00:28 2025 GMT Subject: CN=ec721073-2add-4a59-8382-43a7b0da6cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:aa:8d:fc:a2:14:ca:ab:e8:56:81:b2:9f:1a: e8:ad:47:f3:15:fd:cb:26:e6:66:b6:04:f9:64:d7: 8e:37:ae:17:fd:74:e7:79:c3:9a:27:cb:9d:c0:db: 45:d3:1b:35:f0:67:25:b4:33:26:5b:a9:24:41:93: 9d:a7:c5:33:ab:97:70:6c:c4:d6:65:0c:38:d1:51: e9:82:28:a7:7d:c6:b1:aa:2b:e2:06:c1:2c:39:cb: e6:5f:97:4b:d4:18:90:4c:4c:bb:cc:61:da:00:75: eb:52:18:70:50:b5:33:c2:16:64:1e:49:9d:9a:c2: 88:c9:69:72:e3:37:f0:62:63:a4:8d:bc:b8:1c:e0: 1b:8e:a3:6e:ca:2e:3b:3b:1c:42:c7:f3:b5:11:bb: f6:ce:0c:39:de:c0:f4:f2:96:08:1a:03:0f:01:0b: d2:45:d1:a8:cd:de:16:2f:02:9d:0d:c1:22:49:e7: 39:7f:0d:0a:97:9f:64:1f:90:20:dc:37:ad:4b:5b: 8b:f2:fa:35:d7:5e:eb:a0:57:7d:4e:19:bf:d5:80: 81:9a:54:0a:74:e4:24:8b:94:86:82:38:b0:a7:d8: 9c:00:16:eb:3a:82:fc:55:f7:38:e8:1e:74:94:68: 07:72:14:8b:e8:a1:2b:81:15:35:9b:f3:54:8e:0e: 11:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0D:24:63:0A:AE:26:85:D7:51:51:40:12:11:C5:DC:92:B0:7B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1e49696-13fe-3d50-9952-c1ba52197ef0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:81:30:23:6e:39:93:36:e3:40:10:54:08:d0:13:94:b8:5f: 48:2d:10:fd:d4:5c:a3:c8:1a:f0:49:30:b4:fb:fb:74:44:a1: e8:82:7d:98:50:12:35:a0:05:20:27:56:48:3a:86:33:d3:aa: e3:0c:cf:7d:16:a2:a2:db:8c:29:f8:e3:a5:e3:5e:b7:e2:16: 26:49:ac:fb:73:3c:92:37:ab:19:db:da:75:b9:39:66:b1:1b: 23:97:91:b9:35:b2:34:27:18:81:66:5e:4b:aa:66:45:3e:5c: 32:f6:80:45:e7:e1:78:d8:be:0c:87:9a:63:fb:44:38:c4:b8: ca:6d:80:7f:c5:fe:17:77:0b:bd:19:e3:89:d3:97:c5:9a:9e: d0:15:1b:7a:0a:1e:22:79:1b:e0:66:5b:be:6f:3a:f4:2d:76: 48:78:bc:ea:b5:d9:d5:67:89:49:72:94:2d:a4:d6:ba:61:92: 10:9d:ac:29:29:95:dd:1a:a0:6a:69:9f:e6:df:28:ac:73:31: 14:43:f7:e2:57:49:fb:3c:e0:2d:1f:9e:42:ad:00:33:94:14: 80:97:e0:97:35:8e:d8:d5:38:e7:ea:c4:65:48:3a:5f:8a:3b: d5:af:f6:51:eb:9a:1c:a7:66:bf:e1:f2:67:56:5f:94:47:de: ef:43:9e:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcZL2K414haulk+zAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk ZWM3MjEwNzMtMmFkZC00YTU5LTgzODItNDNhN2IwZGE2Y2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKqN/KIUyqvoVoGynxrorUfzFf3LJuZmtgT5 ZNeON64X/XTnecOaJ8udwNtF0xs18GcltDMmW6kkQZOdp8Uzq5dwbMTWZQw40VHp giinfcaxqiviBsEsOcvmX5dL1BiQTEy7zGHaAHXrUhhwULUzwhZkHkmdmsKIyWly 4zfwYmOkjby4HOAbjqNuyi47OxxCx/O1Ebv2zgw53sD08pYIGgMPAQvSRdGozd4W LwKdDcEiSec5fw0Kl59kH5Ag3DetS1uL8vo1117roFd9Thm/1YCBmlQKdOQki5SG gjiwp9icABbrOoL8Vfc46B50lGgHchSL6KErgRU1m/NUjg4R9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFANJGMKriaF11FRQBIRxdySsHtCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjFlNDk2OTYtMTNmZS0z ZDUwLTk5NTItYzFiYTUyMTk3ZWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9FsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2BMCNuOZM240AQVAjQE5S4X0gtEP3UXKPIGvBJMLT7+3REoeiCfZhQ EjWgBSAnVkg6hjPTquMMz30WoqLbjCn446XjXrfiFiZJrPtzPJI3qxnb2nW5OWax GyOXkbk1sjQnGIFmXkuqZkU+XDL2gEXn4XjYvgyHmmP7RDjEuMptgH/F/hd3C70Z 44nTl8WantAVG3oKHiJ5G+BmW75vOvQtdkh4vOq12dVniUlylC2k1rphkhCdrCkp ld0aoGppn+bfKKxzMRRD9+JXSfs84C0fnkKtADOUFICX4Jc1jtjVOOfqxGVIOl+K O9Wv9lHrmhynZr/h8mdWX5RH3u9DnrM= -----END CERTIFICATE-----Generated at Mon Nov 25 20:21:34 2024 by rpki-client on console-fra.rpki-client.org