$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf1f79b3-8b6d-3e89-88e9-d0be1f20666c.roa File: bf1f79b3-8b6d-3e89-88e9-d0be1f20666c.roa (raw, json) Hash identifier: QL4Oq2f58qa17e3/lSNw15qHWAqn93uBZHTMxbNLkUs= Subject key identifier: 4A:B6:BB:ED:16:67:97:C0:D5:AE:B7:17:A9:4A:24:96:46:89:21:F8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858475D40E093CF72099CDDB39480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf1f79b3-8b6d-3e89-88e9-d0be1f20666c.roa Signing time: Sat 28 Sep 2024 13:00:41 +0000 ROA not before: Sat 28 Sep 2024 13:00:41 +0000 ROA not after: Fri 27 Dec 2024 14:00:41 +0000 asID: 16625 IP address blocks: 23.206.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5d:40:e0:93:cf:72:09:9c:dd:b3:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2024 GMT Not After : Dec 27 14:00:41 2024 GMT Subject: CN=8b0bae3f-1d8b-4e8d-8bbf-e61c20a77fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:24:47:ff:c6:06:32:cf:d0:e4:43:96:be:95: 72:89:e9:76:65:07:22:ab:40:e3:87:dd:35:1e:a0: f5:3b:ad:74:6d:32:cb:2a:3b:b2:28:3c:ba:67:e7: 54:0d:1d:5c:6c:5e:eb:5d:aa:81:f0:9a:69:25:89: 82:9a:67:61:c9:d8:07:3a:9a:76:95:51:16:88:95: 50:62:28:0f:04:2c:ff:44:2b:0e:b0:14:5f:39:18: d6:3e:84:f2:d6:3d:a6:1f:28:5e:f5:66:87:17:0c: 71:a8:d4:37:4b:e3:23:d0:79:59:5b:fb:68:db:0f: 6b:1a:40:e6:2f:cc:25:3f:8d:b1:23:e9:54:dd:72: b5:71:45:dc:97:15:79:66:d3:44:03:f1:ca:d2:62: 62:c6:3c:41:6c:8b:10:60:18:93:98:a3:8f:c8:de: be:84:fd:86:6b:13:79:76:9c:bc:ef:70:7c:92:f3: f3:6d:72:d9:df:5a:27:c3:d7:e1:92:56:3d:91:aa: 60:72:0c:2f:df:8c:a1:ef:ad:0e:52:7b:e2:a5:06: 53:56:37:ca:44:ec:07:bb:12:a0:7b:57:73:6f:d0: 4e:fd:62:97:84:04:32:61:c4:30:59:a5:da:24:d7: 28:05:93:71:7b:36:cb:cf:1e:2a:0d:9d:c5:0c:e2: 37:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B6:BB:ED:16:67:97:C0:D5:AE:B7:17:A9:4A:24:96:46:89:21:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf1f79b3-8b6d-3e89-88e9-d0be1f20666c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:68:e9:fd:7b:e1:f6:0c:8b:cb:95:52:96:a7:48:05:d7:b6: ba:e9:9e:2d:9a:10:a7:7a:45:f9:11:b5:10:e4:ff:d5:c3:1b: e4:52:99:0c:60:a0:c5:66:f7:1d:bf:51:4a:9b:ed:59:73:7a: c2:6c:7d:01:f6:8f:ad:d0:7a:ea:72:38:8a:b6:9d:db:90:5e: 11:b2:30:f5:36:bc:99:46:3e:57:e1:16:62:10:34:2e:22:67: 67:f8:1f:b6:fa:cd:72:3a:3a:8f:40:eb:7b:23:9f:ce:68:33: 56:9d:2d:a5:05:51:ee:08:5f:9a:c1:43:c2:b3:cf:8e:23:46: 6a:e0:5f:e4:33:ac:db:3a:d4:bc:b1:1b:a3:b1:a4:41:ca:fa: b6:c3:eb:1d:e5:a9:fd:77:62:6e:f3:2c:20:d2:2c:fa:2c:47: 4f:7d:fc:a4:f2:a9:71:80:94:7f:5a:42:4b:f3:d6:84:47:91: 58:0f:48:c3:af:75:11:cc:1c:39:3a:a4:e0:e0:5c:d5:55:3d: c6:d9:61:11:a4:67:01:6d:51:06:42:a4:50:64:24:dc:79:5c: 0d:b2:f8:98:8c:8e:4c:df:41:0d:13:5b:49:7f:9c:d1:50:e7: 50:c8:e6:da:37:e0:ec:2e:bc:98:71:20:14:18:f1:33:ea:fe: 5c:00:5b:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEddQOCTz3IJnN2zlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyODEzMDA0MVoXDTI0MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk OGIwYmFlM2YtMWQ4Yi00ZThkLThiYmYtZTYxYzIwYTc3ZmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yRH/8YGMs/Q5EOWvpVyiel2ZQciq0Djh901 HqD1O610bTLLKjuyKDy6Z+dUDR1cbF7rXaqB8JppJYmCmmdhydgHOpp2lVEWiJVQ YigPBCz/RCsOsBRfORjWPoTy1j2mHyhe9WaHFwxxqNQ3S+Mj0HlZW/to2w9rGkDm L8wlP42xI+lU3XK1cUXclxV5ZtNEA/HK0mJixjxBbIsQYBiTmKOPyN6+hP2GaxN5 dpy873B8kvPzbXLZ31onw9fhklY9kapgcgwv34yh760OUnvipQZTVjfKROwHuxKg e1dzb9BO/WKXhAQyYcQwWaXaJNcoBZNxezbLzx4qDZ3FDOI30QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEq2u+0WZ5fA1a63F6lKJJZGiSH4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmYxZjc5YjMtOGI2ZC0z ZTg5LTg4ZTktZDBiZTFmMjA2NjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF85YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVo6f174fYMi8uVUpanSAXXtrrpni2aEKd6RfkRtRDk/9XDG+RSmQxg oMVm9x2/UUqb7VlzesJsfQH2j63QeupyOIq2nduQXhGyMPU2vJlGPlfhFmIQNC4i Z2f4H7b6zXI6Oo9A63sjn85oM1adLaUFUe4IX5rBQ8Kzz44jRmrgX+QzrNs61Lyx G6OxpEHK+rbD6x3lqf13Ym7zLCDSLPosR099/KTyqXGAlH9aQkvz1oRHkVgPSMOv dRHMHDk6pODgXNVVPcbZYRGkZwFtUQZCpFBkJNx5XA2y+JiMjkzfQQ0TW0l/nNFQ 51DI5to34OwuvJhxIBQY8TPq/lwAW6c= -----END CERTIFICATE-----Generated at Mon Nov 25 16:06:56 2024 by rpki-client on console-fra.rpki-client.org