$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5e28a06-9e4f-30d4-9837-b0b9835d8828.roa File: c5e28a06-9e4f-30d4-9837-b0b9835d8828.roa (raw, json) Hash identifier: okwikTEqcq2ZxzGUEj1RGZYSsWK4tceQuwGZT6oV6Qs= Subject key identifier: E1:5B:93:7F:CC:89:3E:9F:65:77:BD:F0:16:3C:8D:E8:2E:3B:9B:CF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584714CA84E8FDD0A23DB7E45D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5e28a06-9e4f-30d4-9837-b0b9835d8828.roa Signing time: Mon 02 Sep 2024 14:04:10 +0000 ROA not before: Mon 02 Sep 2024 14:04:10 +0000 ROA not after: Sun 01 Dec 2024 15:04:10 +0000 asID: 20940 IP address blocks: 23.221.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:14:ca:84:e8:fd:d0:a2:3d:b7:e4:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 14:04:10 2024 GMT Not After : Dec 1 15:04:10 2024 GMT Subject: CN=4c848f28-92e5-450a-801d-c7354d06c367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8b:06:e5:9d:99:20:af:5f:ac:97:4e:bc:1c: f4:0b:c4:c6:3e:61:1c:7c:7d:fa:75:04:75:af:de: 7d:06:b3:a5:81:3a:d9:99:69:51:98:87:20:ec:a3: 8d:ad:45:6b:31:fb:4e:04:cc:ce:b4:9d:8d:03:5d: e5:a4:f7:71:3c:85:b6:35:54:43:21:cd:82:a1:81: b9:9d:bb:09:6c:8a:34:7b:24:9b:21:77:ad:f9:00: 58:42:bc:6c:e5:84:2f:5d:c5:ce:84:eb:0c:5a:c8: 60:bf:e7:c3:44:f5:7f:d3:1a:99:5a:6a:1e:e0:3c: 2b:5b:2f:a8:95:20:57:6f:80:ce:29:fa:32:14:cf: 42:89:e2:48:01:e3:f5:ec:3e:a3:ae:73:00:36:e4: dc:df:6c:b9:32:6d:11:4a:07:b2:9f:c8:12:6a:57: f8:83:e6:af:90:a9:0d:74:53:8d:9a:94:5d:e0:58: 37:9e:74:7e:35:fe:21:f7:92:0e:d6:cb:c5:58:f4: d5:31:e6:3b:78:c4:ff:2b:fa:c1:0c:4e:bc:5b:f4: bb:84:22:82:8b:88:f4:d0:36:52:b5:51:c8:b3:58: 60:5d:1b:34:74:db:d6:00:84:12:79:1a:32:20:33: 0c:48:e8:86:8e:7f:c1:2b:0d:c0:8e:d4:f4:dc:e2: 98:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:5B:93:7F:CC:89:3E:9F:65:77:BD:F0:16:3C:8D:E8:2E:3B:9B:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5e28a06-9e4f-30d4-9837-b0b9835d8828.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:9a:c6:a5:dc:41:b0:35:92:af:95:db:8d:9d:9e:8b:3d:1a: c2:df:77:24:64:c7:d2:c4:ba:7c:75:c8:35:af:2f:c5:19:d9: 9c:68:19:fa:3d:b7:4c:b7:e4:8d:04:ba:bc:45:24:a9:ae:22: fe:22:c3:6b:ea:ab:65:94:87:c2:81:12:41:54:77:81:5c:f1: 51:4f:96:f6:51:c8:ca:8c:14:14:80:b6:4f:bf:df:52:5a:94: eb:50:b1:52:23:0b:ad:98:82:ff:53:4a:cd:45:b2:8e:a1:a9: 86:e1:d6:2f:fa:cf:62:9d:d4:2e:18:58:8d:34:d6:14:4a:54: 49:3f:fc:50:37:25:9b:5a:3e:a2:1b:b9:c2:b8:fe:fb:17:30: a3:64:16:2b:d8:b8:b6:df:5b:cf:31:19:d0:07:76:22:5c:32: 6d:b5:0a:73:f2:01:7b:af:96:b4:ab:8b:b9:da:1a:77:28:c3: f5:5d:bf:9a:d7:58:bb:5e:1b:e2:2c:53:c0:2f:ca:5d:de:cc: 23:7d:ce:fe:7a:09:3b:99:41:79:83:fe:9d:28:ac:e3:52:1e: cc:bf:7c:a4:bb:55:90:65:75:54:41:15:92:0f:fe:24:63:05: 13:f0:5d:51:6a:a0:4d:ab:b4:26:97:48:51:3f:be:ba:2c:b5: 06:23:67:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcUyoTo/dCiPbfkXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkwMjE0MDQxMFoXDTI0MTIwMTE1MDQxMFowLzEtMCsGA1UEAxMk NGM4NDhmMjgtOTJlNS00NTBhLTgwMWQtYzczNTRkMDZjMzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqosG5Z2ZIK9frJdOvBz0C8TGPmEcfH36dQR1 r959BrOlgTrZmWlRmIcg7KONrUVrMftOBMzOtJ2NA13lpPdxPIW2NVRDIc2CoYG5 nbsJbIo0eySbIXet+QBYQrxs5YQvXcXOhOsMWshgv+fDRPV/0xqZWmoe4DwrWy+o lSBXb4DOKfoyFM9CieJIAeP17D6jrnMANuTc32y5Mm0RSgeyn8gSalf4g+avkKkN dFONmpRd4Fg3nnR+Nf4h95IO1svFWPTVMeY7eMT/K/rBDE68W/S7hCKCi4j00DZS tVHIs1hgXRs0dNvWAIQSeRoyIDMMSOiGjn/BKw3AjtT03OKYpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFbk3/MiT6fZXe98BY8jeguO5vPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzVlMjhhMDYtOWU0Zi0z MGQ0LTk4MzctYjBiOTgzNWQ4ODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF93QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASaxqXcQbA1kq+V242dnos9GsLfdyRkx9LEunx1yDWvL8UZ2ZxoGfo9 t0y35I0EurxFJKmuIv4iw2vqq2WUh8KBEkFUd4Fc8VFPlvZRyMqMFBSAtk+/31Ja lOtQsVIjC62Ygv9TSs1Fso6hqYbh1i/6z2Kd1C4YWI001hRKVEk//FA3JZtaPqIb ucK4/vsXMKNkFivYuLbfW88xGdAHdiJcMm21CnPyAXuvlrSri7naGncow/Vdv5rX WLteG+IsU8Avyl3ezCN9zv56CTuZQXmD/p0orONSHsy/fKS7VZBldVRBFZIP/iRj BRPwXVFqoE2rtCaXSFE/vrostQYjZ7g= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:36 2024 by rpki-client on console-fra.rpki-client.org