$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd87531d-67f7-3a65-917e-95c49a75abd1.roa File: cd87531d-67f7-3a65-917e-95c49a75abd1.roa (raw, json) Hash identifier: n9kE9pMdEW/9eGbIDzFYGvqStoVgE2li+3Huj6w1JJY= Subject key identifier: F7:90:32:4B:02:74:94:CD:0D:BE:3B:C0:33:13:A0:BA:AD:52:4F:D5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847B3CC1F1213E5F7809EBAD240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd87531d-67f7-3a65-917e-95c49a75abd1.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.208.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:1f:12:13:e5:f7:80:9e:ba:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=d752c06b-1b11-4ddc-a045-68fdfe371a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fb:c6:90:41:a2:ba:57:ed:3c:73:23:a4:64: 75:db:99:e5:e8:ce:5a:47:27:10:74:34:6c:e5:ae: 00:74:c7:4a:27:30:1b:21:87:f7:36:94:eb:f7:c9: 06:20:47:c6:61:b4:6e:ca:cf:17:a1:be:88:f6:b8: e9:da:a2:ae:89:b3:61:ee:a3:a5:a9:37:5e:eb:69: 02:04:46:92:1c:b4:79:4c:f5:a7:40:bc:42:e7:f1: 82:f7:b9:eb:a4:ac:b9:26:7d:01:97:b6:27:fb:da: 84:38:31:27:26:83:d9:8d:8d:9a:e0:fa:42:92:31: 42:25:45:a3:57:d0:44:3d:c6:6e:3b:35:e5:48:7c: 86:17:09:c0:c8:bd:12:18:24:20:78:c1:06:33:43: 21:5e:13:e7:86:5d:17:51:85:c7:d5:6e:12:86:fb: d2:7f:55:da:0c:bf:95:49:1b:ca:ab:ce:3a:57:1c: 9a:bd:51:bc:9b:63:61:be:3f:b4:f1:34:7a:7d:39: 3a:70:b0:d1:40:05:19:42:2f:2e:a5:b7:45:2d:51: 98:86:fc:33:dd:93:2a:bc:68:00:d7:26:f4:03:c5: 86:20:b9:b2:2a:cf:6f:a9:4f:e6:0d:59:c5:ca:0e: f1:49:2f:ac:1c:c2:1e:24:f7:d6:e8:48:5a:ac:f0: 01:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:90:32:4B:02:74:94:CD:0D:BE:3B:C0:33:13:A0:BA:AD:52:4F:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd87531d-67f7-3a65-917e-95c49a75abd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:fb:04:ba:84:04:21:3c:85:40:04:b2:5c:92:34:93:cb:92: 56:8f:85:cc:9d:9c:19:37:a8:70:9b:a0:c3:cd:db:b1:a7:c5: 76:27:f7:20:2c:a7:2a:bb:31:ae:51:29:b9:8b:54:80:59:36: c0:87:a0:e9:3d:e2:52:5b:e2:95:61:4c:a1:4d:fd:38:0f:ea: d0:af:5f:28:07:88:df:ad:b3:8c:11:9b:3c:c9:c1:85:fc:ab: 3e:d7:8c:5e:ec:d1:40:cd:03:80:e9:ff:9a:e6:54:71:77:f6: 30:78:15:42:ae:e6:90:79:48:4d:f4:1c:64:fb:28:40:f8:b5: 1a:7d:42:74:8e:0c:ce:8b:98:c4:71:82:d4:6d:34:ca:aa:e4: 21:90:c0:82:54:74:e6:18:d0:aa:5a:eb:3a:38:5c:7c:66:3a: 96:8a:ab:37:df:7a:bc:43:cc:17:f2:a5:4e:eb:66:30:55:de: c4:9b:9a:6f:b1:da:39:00:5b:f9:69:f6:27:c8:08:51:9c:a2: e9:b1:66:15:a0:e1:be:56:a4:78:3d:03:ed:ee:ad:c1:5e:d9: 99:9d:97:d0:99:72:e2:f5:60:14:91:66:92:9d:26:73:b7:34: dc:dc:79:ef:81:a0:cb:ca:74:98:a8:a6:48:f6:39:10:98:13: f4:4b:4b:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEezzB8SE+X3gJ660kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk ZDc1MmMwNmItMWIxMS00ZGRjLWEwNDUtNjhmZGZlMzcxYTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/vGkEGiulftPHMjpGR125nl6M5aRycQdDRs 5a4AdMdKJzAbIYf3NpTr98kGIEfGYbRuys8Xob6I9rjp2qKuibNh7qOlqTde62kC BEaSHLR5TPWnQLxC5/GC97nrpKy5Jn0Bl7Yn+9qEODEnJoPZjY2a4PpCkjFCJUWj V9BEPcZuOzXlSHyGFwnAyL0SGCQgeMEGM0MhXhPnhl0XUYXH1W4ShvvSf1XaDL+V SRvKq846VxyavVG8m2Nhvj+08TR6fTk6cLDRQAUZQi8upbdFLVGYhvwz3ZMqvGgA 1yb0A8WGILmyKs9vqU/mDVnFyg7xSS+sHMIeJPfW6EharPABYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeQMksCdJTNDb47wDMToLqtUk/VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2Q4NzUzMWQtNjdmNy0z YTY1LTkxN2UtOTVjNDlhNzVhYmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9BhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIj7BLqEBCE8hUAEslySNJPLklaPhcydnBk3qHCboMPN27GnxXYn9yAs pyq7Ma5RKbmLVIBZNsCHoOk94lJb4pVhTKFN/TgP6tCvXygHiN+ts4wRmzzJwYX8 qz7XjF7s0UDNA4Dp/5rmVHF39jB4FUKu5pB5SE30HGT7KED4tRp9QnSODM6LmMRx gtRtNMqq5CGQwIJUdOYY0Kpa6zo4XHxmOpaKqzfferxDzBfypU7rZjBV3sSbmm+x 2jkAW/lp9ifICFGcoumxZhWg4b5WpHg9A+3urcFe2Zmdl9CZcuL1YBSRZpKdJnO3 NNzcee+BoMvKdJiopkj2ORCYE/RLS2Q= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:39 2024 by rpki-client on console-fra.rpki-client.org