$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfac125a-9920-36a4-9fb1-cba77fa1ead6.roa File: cfac125a-9920-36a4-9fb1-cba77fa1ead6.roa (raw, json) Hash identifier: zH7U9brXRw2hUkKpYkpSzcxTnLOUaW6S4ySq9FwzF4o= Subject key identifier: A2:64:AC:36:92:06:9E:C1:71:B5:B0:4D:84:E9:A5:37:70:6C:9F:FB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858477BF670A6D64FCAA2029C9E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfac125a-9920-36a4-9fb1-cba77fa1ead6.roa Signing time: Wed 09 Oct 2024 13:00:42 +0000 ROA not before: Wed 09 Oct 2024 13:00:42 +0000 ROA not after: Tue 07 Jan 2025 14:00:42 +0000 asID: 7713 IP address blocks: 23.32.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7b:f6:70:a6:d6:4f:ca:a2:02:9c:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 9 13:00:42 2024 GMT Not After : Jan 7 14:00:42 2025 GMT Subject: CN=beb53d7c-00ab-4a3a-8ddb-772855abfac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d2:86:ce:96:9b:42:54:8a:6c:bd:cf:9d:76: 25:93:ea:b0:b4:71:98:ac:5f:5d:95:cd:52:c3:72: d3:6b:33:44:ac:9f:aa:64:57:d8:98:c8:f5:1f:1a: e3:9a:b3:01:1a:dd:9b:71:a8:3f:cc:26:30:5a:70: eb:4b:02:25:1b:73:3c:f4:23:da:2c:30:0b:5a:fe: 72:f8:e2:0c:4d:9c:4d:5b:96:b5:0d:3d:2f:ff:20: 1f:8a:11:b8:94:99:93:3a:5f:dd:9a:54:f3:03:e1: 5b:87:3a:47:a6:20:48:6a:68:52:52:db:9c:bb:e0: bc:68:fd:31:01:db:8c:39:9f:a0:c4:06:f9:2f:27: 05:a7:a5:6e:ee:3f:93:e8:34:4b:ef:8c:28:bb:e9: 6d:47:9a:cf:b7:be:c7:3c:68:cb:3d:12:55:86:16: 76:b4:13:a4:63:51:40:60:da:73:70:31:32:b6:62: d0:86:e5:86:7e:e5:3a:33:0a:52:97:7a:0b:6f:4f: fb:9f:eb:fb:54:7f:88:1f:aa:2d:3d:f5:a2:4b:dc: 1d:0e:1b:4b:91:3c:3f:84:07:c8:56:03:f2:07:d8: d9:e1:18:5e:4c:f3:3c:eb:66:5f:dd:16:8c:54:be: 88:fc:f8:b4:b5:a5:09:a2:0e:7c:db:8e:07:93:ea: 37:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:64:AC:36:92:06:9E:C1:71:B5:B0:4D:84:E9:A5:37:70:6C:9F:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfac125a-9920-36a4-9fb1-cba77fa1ead6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:b8:c4:43:05:c9:5e:3f:5a:e4:4e:4b:4e:32:24:f9:ee:10: f9:30:25:b7:22:bf:82:df:1a:25:1b:ff:d4:6c:53:a6:45:4d: 19:91:74:8e:41:4e:36:fc:54:70:20:28:96:ef:72:85:67:68: 3e:19:4a:19:d2:8f:54:e2:ee:2b:bf:ed:11:a3:82:1c:ae:1f: 6d:9c:7b:4b:ed:aa:b5:45:0c:5c:9f:30:6d:9d:15:1e:10:37: e4:62:16:ca:37:86:a3:0c:14:40:3a:bb:73:b2:7a:16:84:fd: 51:6c:62:12:76:78:65:70:54:a3:8a:bb:ef:3c:e5:40:fc:2e: 0b:b1:af:e4:29:10:e5:8d:a8:e2:dc:a5:82:36:b5:32:b1:fa: 0d:ee:81:b6:c5:0d:bb:1c:5a:e0:19:e6:88:47:24:07:72:a5: fc:a7:84:b8:d8:71:4a:f4:7d:f0:13:73:2a:8d:b8:72:07:8e: 5d:03:a4:c4:12:c2:9a:2c:2d:15:f3:cf:55:76:d8:a8:69:25: e3:a9:e9:9c:d6:ca:1e:83:94:72:f2:88:ec:26:d2:ac:0b:68: 03:f2:c2:56:0e:d3:f3:37:f0:14:3d:2b:39:e9:0d:92:63:20: 8c:2f:10:23:90:e0:9b:2b:7e:b9:cc:f0:97:ca:2b:a4:65:d0: c3:c4:4d:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd79nCm1k/KogKcngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk YmViNTNkN2MtMDBhYi00YTNhLThkZGItNzcyODU1YWJmYWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktKGzpabQlSKbL3PnXYlk+qwtHGYrF9dlc1S w3LTazNErJ+qZFfYmMj1HxrjmrMBGt2bcag/zCYwWnDrSwIlG3M89CPaLDALWv5y +OIMTZxNW5a1DT0v/yAfihG4lJmTOl/dmlTzA+FbhzpHpiBIamhSUtucu+C8aP0x AduMOZ+gxAb5LycFp6Vu7j+T6DRL74wou+ltR5rPt77HPGjLPRJVhhZ2tBOkY1FA YNpzcDEytmLQhuWGfuU6MwpSl3oLb0/7n+v7VH+IH6otPfWiS9wdDhtLkTw/hAfI VgPyB9jZ4RheTPM862Zf3RaMVL6I/Pi0taUJog58244Hk+o3mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJkrDaSBp7BcbWwTYTppTdwbJ/7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2ZhYzEyNWEtOTkyMC0z NmE0LTlmYjEtY2JhNzdmYTFlYWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyD0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADe4xEMFyV4/WuROS04yJPnuEPkwJbciv4LfGiUb/9RsU6ZFTRmRdI5B Tjb8VHAgKJbvcoVnaD4ZShnSj1Ti7iu/7RGjghyuH22ce0vtqrVFDFyfMG2dFR4Q N+RiFso3hqMMFEA6u3OyehaE/VFsYhJ2eGVwVKOKu+885UD8Lguxr+QpEOWNqOLc pYI2tTKx+g3ugbbFDbscWuAZ5ohHJAdypfynhLjYcUr0ffATcyqNuHIHjl0DpMQS wposLRXzz1V22KhpJeOp6ZzWyh6DlHLyiOwm0qwLaAPywlYO0/M38BQ9KznpDZJj IIwvECOQ4JsrfrnM8JfKK6Rl0MPETS8= -----END CERTIFICATE-----Generated at Sat Nov 23 05:09:28 2024 by rpki-client on console-fra.rpki-client.org