$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d13cbf27-b7f4-3cd7-8fa3-94a435c064d6.roa File: d13cbf27-b7f4-3cd7-8fa3-94a435c064d6.roa (raw, json) Hash identifier: Z/U3buav9g0JtgjBK7U1fVW2Osm9tF0m0AFkJRwobUw= Subject key identifier: 26:72:B4:32:7A:BE:62:FA:C0:E7:19:B1:A3:FC:94:2B:B3:5F:C6:01 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847B3CC208EA7EF7EA07B714080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d13cbf27-b7f4-3cd7-8fa3-94a435c064d6.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 7713 IP address blocks: 23.212.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:20:8e:a7:ef:7e:a0:7b:71:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=e68eecc7-63c6-4c68-afb0-e942c5ba3ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:34:e1:a0:fc:62:6d:bd:9f:3c:db:d1:5a:4e: c1:f1:fb:3e:73:f8:d4:94:32:ce:00:11:47:0a:13: dd:a3:fa:fb:28:20:e9:69:aa:10:ee:40:14:ac:57: 05:6b:71:92:e7:83:ca:cc:84:cf:b1:0f:02:56:ce: 4f:79:f2:c2:bd:28:c9:7f:f7:04:04:30:51:b5:27: 6f:2a:fb:a1:01:62:7d:38:dc:7e:ae:a2:ff:67:aa: f9:07:ae:f4:d7:7d:75:db:e7:49:5c:61:27:38:11: 30:8b:04:9d:03:87:57:e5:04:d8:a4:f9:b8:63:2b: 37:17:23:6c:5c:7b:7e:b9:46:bd:92:36:13:d5:fd: 45:56:30:49:e8:db:87:82:e0:2f:a0:c1:9e:18:c9: 48:20:2f:d0:b8:89:ba:6f:a2:fc:1c:85:51:06:80: 53:7b:e2:96:1c:60:cb:60:f9:ed:b3:85:fd:86:41: 0f:82:85:47:bc:d0:31:92:cb:45:2d:cc:eb:10:a9: 00:c0:24:e1:66:94:33:64:28:1b:a6:2f:ef:3c:48: d5:d4:ab:18:99:04:d3:32:f2:ee:75:ec:c7:76:3e: 75:6c:a2:d4:23:e6:b6:7f:ae:f8:7d:e2:de:04:85: 33:12:d1:82:f9:05:d7:0b:70:45:1f:21:7d:84:44: d5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:72:B4:32:7A:BE:62:FA:C0:E7:19:B1:A3:FC:94:2B:B3:5F:C6:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d13cbf27-b7f4-3cd7-8fa3-94a435c064d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:0f:18:8b:1f:74:a7:70:07:ed:42:47:8f:75:ea:51:64:11: be:e7:e9:fb:dd:0d:6a:5c:ed:3d:c6:f9:8d:5b:03:4d:c9:b8: 6e:fa:8c:4c:ca:47:2f:d0:01:1a:85:e2:17:62:26:aa:6e:97: 8a:f3:d4:f1:0a:0b:0d:75:20:ad:9c:3c:d1:b0:01:10:c8:32: cd:2b:d3:7b:f6:86:97:3b:4a:8e:dc:14:35:b6:17:c6:cd:3f: 2b:6f:cc:42:d3:0c:51:a8:5e:79:32:9d:4b:51:3c:77:ea:6d: 9e:77:c4:71:30:22:11:8a:89:22:3c:49:8d:f8:36:36:3f:9a: 4f:18:a3:71:a5:d4:d0:b2:0c:95:39:dd:3a:0c:ba:75:61:22: 99:ff:af:9d:25:5b:af:6d:7a:20:e0:98:78:69:e6:6d:12:32: 80:67:0d:7f:87:6a:2b:23:c2:9e:18:57:a2:b0:15:ed:e9:b6: 41:d6:28:bf:53:30:5e:26:d4:b2:44:b7:d2:5f:eb:8b:a6:61: 4e:bc:90:5d:34:26:5c:76:d1:12:a6:c9:9b:0d:16:be:db:04: cd:14:1a:b8:91:e7:12:d3:cd:79:f4:a4:0c:57:0c:df:fa:91: d0:9a:7d:01:ec:81:a2:39:be:bd:10:4e:6d:f7:b7:a4:45:10: 09:ee:89:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEezzCCOp+9+oHtxQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk ZTY4ZWVjYzctNjNjNi00YzY4LWFmYjAtZTk0MmM1YmEzY2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTThoPxibb2fPNvRWk7B8fs+c/jUlDLOABFH ChPdo/r7KCDpaaoQ7kAUrFcFa3GS54PKzITPsQ8CVs5PefLCvSjJf/cEBDBRtSdv KvuhAWJ9ONx+rqL/Z6r5B67013112+dJXGEnOBEwiwSdA4dX5QTYpPm4Yys3FyNs XHt+uUa9kjYT1f1FVjBJ6NuHguAvoMGeGMlIIC/QuIm6b6L8HIVRBoBTe+KWHGDL YPnts4X9hkEPgoVHvNAxkstFLczrEKkAwCThZpQzZCgbpi/vPEjV1KsYmQTTMvLu dezHdj51bKLUI+a2f674feLeBIUzEtGC+QXXC3BFHyF9hETV9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZytDJ6vmL6wOcZsaP8lCuzX8YBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDEzY2JmMjctYjdmNC0z Y2Q3LThmYTMtOTRhNDM1YzA2NGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9SAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsPGIsfdKdwB+1CR4916lFkEb7n6fvdDWpc7T3G+Y1bA03JuG76jEzK Ry/QARqF4hdiJqpul4rz1PEKCw11IK2cPNGwARDIMs0r03v2hpc7So7cFDW2F8bN PytvzELTDFGoXnkynUtRPHfqbZ53xHEwIhGKiSI8SY34NjY/mk8Yo3Gl1NCyDJU5 3ToMunVhIpn/r50lW69teiDgmHhp5m0SMoBnDX+Haisjwp4YV6KwFe3ptkHWKL9T MF4m1LJEt9Jf64umYU68kF00Jlx20RKmyZsNFr7bBM0UGriR5xLTzXn0pAxXDN/6 kdCafQHsgaI5vr0QTm33t6RFEAnuiek= -----END CERTIFICATE-----Generated at Sat Nov 23 04:36:54 2024 by rpki-client on console-ams.rpki-client.org