$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1a1399a-b500-3dbe-a0c9-9ac79fe864e6.roa File: c1a1399a-b500-3dbe-a0c9-9ac79fe864e6.roa (raw, json) Hash identifier: O1m9YT2jo2sgrj6fgbjqap2ocRIr3y/6ZemeWzXbOpM= Subject key identifier: 07:DF:3E:D1:72:CA:D8:E6:6C:99:E0:4C:D0:AB:D1:73:B1:9B:4D:68 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479496ACA31F73C3CC210C7A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1a1399a-b500-3dbe-a0c9-9ac79fe864e6.roa Signing time: Fri 18 Oct 2024 08:43:11 +0000 ROA not before: Fri 18 Oct 2024 08:43:11 +0000 ROA not after: Thu 16 Jan 2025 09:43:11 +0000 asID: 20940 IP address blocks: 23.209.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:94:96:ac:a3:1f:73:c3:cc:21:0c:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 18 08:43:11 2024 GMT Not After : Jan 16 09:43:11 2025 GMT Subject: CN=5521b797-1a91-4d16-a72f-90da1a939dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:06:59:a2:26:6f:10:bf:55:5c:4e:79:26:99: f2:3e:71:73:08:70:dc:e3:b5:d8:1c:1d:7c:72:85: 45:a7:5d:20:7d:6e:d0:06:f1:e6:1c:9f:bd:b3:52: e9:a9:26:1a:71:49:1c:fb:3c:e2:ac:78:7c:5c:f9: cf:71:52:1f:8f:b9:e3:9b:0c:af:44:f0:cf:ad:9f: a1:f8:01:8d:69:32:56:30:3a:b2:cc:96:6d:5e:aa: dc:4b:cc:e2:39:a3:c2:95:1a:63:69:e2:b2:8e:5f: 09:b5:39:7c:76:5e:a2:0b:25:70:7d:5e:e9:a9:5c: b4:1c:2a:66:ae:70:cb:ce:d8:dd:dd:a0:da:cc:89: e4:1e:bc:23:56:6c:b9:eb:5d:72:96:9b:84:3d:f3: 3c:a0:04:be:32:81:c7:49:15:70:f0:43:ba:16:c9: 12:c9:60:7d:5c:66:85:9d:9b:50:cd:38:e6:03:0d: 41:9f:a0:2c:f5:c4:c2:d2:8d:26:28:76:c3:5d:16: 0b:5b:53:fc:f4:77:9b:0c:8b:d3:23:8c:05:b6:55: cf:16:92:58:39:38:6d:d3:9b:ef:cd:31:f6:1a:34: b9:36:c8:43:4b:12:23:4a:80:10:74:38:60:ed:b4: e0:43:d9:33:9b:14:3b:7c:65:2f:57:36:49:2c:c9: 31:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DF:3E:D1:72:CA:D8:E6:6C:99:E0:4C:D0:AB:D1:73:B1:9B:4D:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1a1399a-b500-3dbe-a0c9-9ac79fe864e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.182.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:e3:8d:65:cb:cd:09:f6:de:97:37:3a:c5:19:33:df:ae:94: b6:21:31:f5:76:eb:d8:a6:23:aa:d5:c9:6e:6b:a3:cb:40:8f: cb:75:ac:2d:60:18:37:d9:4e:f8:6a:cc:4d:12:08:4d:37:3e: fe:51:2d:a6:fb:7e:03:a3:54:e9:61:f4:49:82:35:f6:b7:c2: 72:5b:b2:8e:14:2c:b1:24:8e:c8:d7:9a:1c:6d:db:c6:57:c0: 14:96:98:d0:41:28:da:8f:c4:0a:5c:d3:2f:01:48:b2:ca:9f: 7e:1f:0b:ca:f1:1c:be:b4:d0:8d:ac:06:da:fd:68:10:2c:35: 14:ce:6d:92:86:62:ae:8f:0e:43:00:c0:a9:d9:9f:87:9e:46: 74:21:02:3e:42:ae:af:ad:91:7b:91:66:82:65:e0:27:a3:b2: 26:3f:cc:a8:f1:39:22:70:21:9f:1e:10:56:5f:39:43:34:59: ad:29:c7:5f:9c:57:97:03:a9:67:d8:3b:c8:86:ff:2a:47:4d: 16:f8:9e:4e:f6:0c:b0:64:c3:3f:6d:fb:f9:99:2c:e2:9e:0e: e1:aa:9c:80:f8:91:b8:f2:3d:23:d5:4e:fd:5f:9a:35:d5:a4: 52:d5:3f:8c:c8:49:ca:0c:5d:cf:43:a0:a3:e7:e7:44:60:aa: d9:a8:41:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeUlqyjH3PDzCEMegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAxODA4NDMxMVoXDTI1MDExNjA5NDMxMVowLzEtMCsGA1UEAxMk NTUyMWI3OTctMWE5MS00ZDE2LWE3MmYtOTBkYTFhOTM5ZGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwZZoiZvEL9VXE55JpnyPnFzCHDc47XYHB18 coVFp10gfW7QBvHmHJ+9s1LpqSYacUkc+zzirHh8XPnPcVIfj7njmwyvRPDPrZ+h +AGNaTJWMDqyzJZtXqrcS8ziOaPClRpjaeKyjl8JtTl8dl6iCyVwfV7pqVy0HCpm rnDLztjd3aDazInkHrwjVmy5611ylpuEPfM8oAS+MoHHSRVw8EO6FskSyWB9XGaF nZtQzTjmAw1Bn6As9cTC0o0mKHbDXRYLW1P89HebDIvTI4wFtlXPFpJYOTht05vv zTH2GjS5NshDSxIjSoAQdDhg7bTgQ9kzmxQ7fGUvVzZJLMkxIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAffPtFyytjmbJngTNCr0XOxm01oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzFhMTM5OWEtYjUwMC0z ZGJlLWEwYzktOWFjNzlmZTg2NGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9G2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbjjWXLzQn23pc3OsUZM9+ulLYhMfV269imI6rVyW5ro8tAj8t1rC1g GDfZTvhqzE0SCE03Pv5RLab7fgOjVOlh9EmCNfa3wnJbso4ULLEkjsjXmhxt28ZX wBSWmNBBKNqPxApc0y8BSLLKn34fC8rxHL600I2sBtr9aBAsNRTObZKGYq6PDkMA wKnZn4eeRnQhAj5Crq+tkXuRZoJl4CejsiY/zKjxOSJwIZ8eEFZfOUM0Wa0px1+c V5cDqWfYO8iG/ypHTRb4nk72DLBkwz9t+/mZLOKeDuGqnID4kbjyPSPVTv1fmjXV pFLVP4zIScoMXc9DoKPn50RgqtmoQcE= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:33 2024 by rpki-client on console-fra.rpki-client.org