$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b639cd18-4b23-39da-852d-dede9b67f7e7.roa File: b639cd18-4b23-39da-852d-dede9b67f7e7.roa (raw, json) Hash identifier: qAfMf5Z8v00aJ2rIyqJKU/DNMZG9NqxemPmgSXk0BKI= Subject key identifier: FA:FC:12:57:83:95:38:8D:12:C1:BC:A9:A5:CC:8E:38:C4:DB:BB:4C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847ED24D2D1B557FD1BF4CFEF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b639cd18-4b23-39da-852d-dede9b67f7e7.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 16625 IP address blocks: 23.220.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:d2:d1:b5:57:fd:1b:f4:cf:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=6e74c191-4654-4825-b3f1-bf27b48c3c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d9:2b:5f:2a:00:2d:d3:51:b2:ea:32:a1:c0: 4a:3c:76:25:f6:8a:a2:aa:13:fb:04:d7:89:0b:47: a7:48:f3:bb:f2:0b:30:1b:1a:59:ca:f1:ec:8c:5c: 74:49:f4:bd:d7:68:ea:27:ef:91:2b:78:cc:2d:a4: 63:e3:bb:a2:8f:c9:b7:59:ad:4d:bb:6c:c7:8d:c9: 1f:fb:5e:03:77:ec:e3:75:81:4c:c6:2f:89:19:22: f6:b5:fd:d8:dd:f5:49:87:9a:c7:a5:3f:01:f8:cd: 9a:d1:a2:08:7e:59:38:c3:0a:dd:d7:0e:3e:4b:67: f4:d0:e4:c3:8e:0a:ee:92:32:ae:0d:c5:07:a0:8d: 36:c6:d6:62:56:bf:2f:60:6e:4d:cc:52:07:14:0d: 84:a8:21:21:9a:78:27:65:3c:18:c5:72:12:a1:fb: a8:67:2d:f7:eb:ce:b9:51:98:7c:df:a2:08:0b:5e: c0:79:47:47:38:3d:08:6b:14:99:6d:50:2b:65:59: 93:0c:89:fc:8a:92:d2:df:7b:dc:f1:44:f8:19:66: 64:52:de:aa:25:55:37:16:32:9f:5e:4e:ba:5d:ed: 1a:1d:f4:9a:45:da:69:e4:d9:04:bd:05:48:cd:70: 4c:c8:d0:10:1e:bb:4f:db:60:13:63:c9:57:73:0d: 55:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FC:12:57:83:95:38:8D:12:C1:BC:A9:A5:CC:8E:38:C4:DB:BB:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b639cd18-4b23-39da-852d-dede9b67f7e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:f4:9b:e2:4c:bf:f5:8e:8c:b8:7b:f9:ef:56:41:c2:c5:39: d9:ea:7e:ea:c1:93:8f:82:31:d3:0f:b8:42:f2:6d:cf:7f:0b: 75:93:c2:42:ed:23:e1:af:9a:bc:44:ab:39:d9:5b:0e:f5:56: 04:a7:99:5e:ea:4a:a5:3a:42:8c:1f:b8:cb:d2:31:84:d7:38: 7d:bd:bf:49:7c:89:43:b8:d7:6a:44:22:73:ee:22:ae:de:5a: 4e:41:be:a6:28:6b:a1:5b:95:b5:dd:9d:c5:de:9c:7c:f5:68: ec:de:1a:92:52:9e:a8:65:de:6e:cd:68:32:41:9e:3d:43:2d: af:ae:c8:96:91:0d:98:50:7d:38:67:97:9c:c3:69:18:d2:0f: 32:0a:51:63:b7:e5:99:37:af:1f:8d:cd:27:3f:de:d2:68:0a: f6:17:81:97:87:0d:05:3b:e8:09:f7:41:48:30:63:52:05:c9: 77:b9:99:22:ac:68:af:f8:ce:71:fd:44:62:be:ac:b8:c5:25: 62:ba:c0:2d:06:29:37:03:e1:61:ed:28:b8:55:0c:ac:5f:d9: b4:20:bb:6e:da:d9:64:5d:37:18:ca:e2:85:e4:86:b5:08:12: f1:ed:ca:60:26:46:1d:14:b3:0b:c8:69:01:9e:8a:6b:78:3a: f1:fd:c5:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJNLRtVf9G/TP74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk NmU3NGMxOTEtNDY1NC00ODI1LWIzZjEtYmYyN2I0OGMzYzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNkrXyoALdNRsuoyocBKPHYl9oqiqhP7BNeJ C0enSPO78gswGxpZyvHsjFx0SfS912jqJ++RK3jMLaRj47uij8m3Wa1Nu2zHjckf +14Dd+zjdYFMxi+JGSL2tf3Y3fVJh5rHpT8B+M2a0aIIflk4wwrd1w4+S2f00OTD jgrukjKuDcUHoI02xtZiVr8vYG5NzFIHFA2EqCEhmngnZTwYxXISofuoZy336865 UZh836IIC17AeUdHOD0IaxSZbVArZVmTDIn8ipLS33vc8UT4GWZkUt6qJVU3FjKf Xk66Xe0aHfSaRdpp5NkEvQVIzXBMyNAQHrtP22ATY8lXcw1VXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPr8EleDlTiNEsG8qaXMjjjE27tMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjYzOWNkMTgtNGIyMy0z OWRhLTg1MmQtZGVkZTliNjdmN2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9x0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE30m+JMv/WOjLh7+e9WQcLFOdnqfurBk4+CMdMPuELybc9/C3WTwkLt I+GvmrxEqznZWw71VgSnmV7qSqU6QowfuMvSMYTXOH29v0l8iUO412pEInPuIq7e Wk5BvqYoa6FblbXdncXenHz1aOzeGpJSnqhl3m7NaDJBnj1DLa+uyJaRDZhQfThn l5zDaRjSDzIKUWO35Zk3rx+NzSc/3tJoCvYXgZeHDQU76An3QUgwY1IFyXe5mSKs aK/4znH9RGK+rLjFJWK6wC0GKTcD4WHtKLhVDKxf2bQgu27a2WRdNxjK4oXkhrUI EvHtymAmRh0UswvIaQGeimt4OvH9xas= -----END CERTIFICATE-----Generated at Mon Nov 25 16:06:54 2024 by rpki-client on console-fra.rpki-client.org