$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1d7c29d-47a5-3399-98a7-f8d95f41be4f.roa File: d1d7c29d-47a5-3399-98a7-f8d95f41be4f.roa (raw, json) Hash identifier: Lt9SMNZ2ROgcFjaKiTr/uKP0Xqp8LnvKNPL/l96Fxvs= Subject key identifier: F1:43:E1:8B:47:A7:9D:F8:71:60:45:78:C5:73:4B:39:F0:03:DE:F0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847B3CC1C5CBAC3F4C99E5D2FA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1d7c29d-47a5-3399-98a7-f8d95f41be4f.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 6762 IP address blocks: 23.209.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:1c:5c:ba:c3:f4:c9:9e:5d:2f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=f69c57ed-4df3-4784-b6bb-8d472a407b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e1:7f:e8:75:d1:04:f3:54:a3:3b:4b:2e:90: 2d:94:32:cb:95:4f:ed:79:4d:cc:75:a3:85:4a:46: 7f:11:4d:91:0b:10:e4:67:e4:b3:57:56:bb:a2:85: 6a:4a:cb:3b:6a:08:45:7c:8e:a0:95:3a:4c:4b:d9: c0:3a:65:3e:eb:e6:7b:14:ea:e9:76:4f:8c:51:2a: 74:17:69:a1:93:8e:80:47:5f:a4:23:1e:98:41:79: 61:b4:4b:3c:ee:a5:e1:59:3b:d8:63:5f:e3:fb:fc: af:ea:cf:c5:dd:aa:a9:d1:d5:74:8f:09:b2:09:7f: 7a:9b:2c:02:39:a6:e4:cc:82:0b:16:1e:25:9c:ea: 35:15:24:52:0e:a6:f6:0e:e1:f7:de:02:8a:eb:53: 18:59:e6:f5:2f:36:80:e7:f1:5f:6a:c1:e8:01:33: b1:63:a1:ff:50:02:3f:ab:c0:08:4f:6f:2b:00:03: 48:e6:17:c6:ba:07:a9:bb:fb:f1:71:aa:e4:be:61: 40:dd:16:d2:f0:6a:83:a8:30:40:0b:40:d9:f9:3c: ba:4a:eb:be:9b:aa:c8:44:e2:bf:01:da:06:7b:8b: c4:3a:32:e6:48:05:d5:06:3c:57:ad:c4:04:45:ad: 19:ed:32:e8:15:b0:36:4c:79:f0:f1:03:11:b3:59: ed:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:43:E1:8B:47:A7:9D:F8:71:60:45:78:C5:73:4B:39:F0:03:DE:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1d7c29d-47a5-3399-98a7-f8d95f41be4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:d1:9e:49:06:2b:e1:b1:cb:06:7c:de:9c:0b:7f:da:03:c7: d9:a8:dd:8c:1e:50:f6:c6:c6:d2:6e:94:32:e3:cf:fd:52:d5: ba:49:a6:83:07:50:d5:31:bd:29:b6:12:5f:10:f4:8b:ed:aa: 22:4e:46:7f:76:68:30:c9:9b:de:c8:55:73:b3:1e:69:32:d1: d1:d9:60:27:88:12:68:81:66:b4:79:60:c8:7b:28:1a:f6:a2: 59:75:c4:4e:fc:bf:fc:30:77:ff:0b:39:f1:31:43:65:97:6f: c5:b4:f9:dd:89:fb:b2:ac:dc:99:78:e8:e8:4a:48:ce:f7:98: e2:c9:44:25:28:d0:2c:d0:58:6c:40:a6:d8:17:25:d3:ac:1d: 30:20:ea:82:70:12:cd:e0:b1:ab:53:01:e9:7b:09:12:ec:09: 64:4e:13:fd:71:1b:29:9d:9b:c2:73:68:2a:e5:2c:d9:cf:52: 1e:25:55:3a:a4:3f:be:0c:18:62:f3:dc:1e:f5:67:ce:bc:4e: 20:4a:41:85:a2:d4:38:f4:60:e7:37:93:b5:99:e6:77:9c:b7: 76:17:2d:29:39:7a:3f:c3:0e:2b:e4:0b:c6:ef:da:41:54:19: fc:21:65:81:2b:f7:13:ad:a8:96:3b:1d:a1:f7:f1:5b:46:dc: a3:9f:da:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEezzBxcusP0yZ5dL6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk ZjY5YzU3ZWQtNGRmMy00Nzg0LWI2YmItOGQ0NzJhNDA3YjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+F/6HXRBPNUoztLLpAtlDLLlU/teU3MdaOF SkZ/EU2RCxDkZ+SzV1a7ooVqSss7aghFfI6glTpMS9nAOmU+6+Z7FOrpdk+MUSp0 F2mhk46AR1+kIx6YQXlhtEs87qXhWTvYY1/j+/yv6s/F3aqp0dV0jwmyCX96mywC OabkzIILFh4lnOo1FSRSDqb2DuH33gKK61MYWeb1LzaA5/FfasHoATOxY6H/UAI/ q8AIT28rAANI5hfGugepu/vxcarkvmFA3RbS8GqDqDBAC0DZ+Ty6Suu+m6rIROK/ AdoGe4vEOjLmSAXVBjxXrcQERa0Z7TLoFbA2THnw8QMRs1ntiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFD4YtHp534cWBFeMVzSznwA97wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDFkN2MyOWQtNDdhNS0z Mzk5LTk4YTctZjhkOTVmNDFiZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9FYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHRnkkGK+GxywZ83pwLf9oDx9mo3YweUPbGxtJulDLjz/1S1bpJpoMH UNUxvSm2El8Q9IvtqiJORn92aDDJm97IVXOzHmky0dHZYCeIEmiBZrR5YMh7KBr2 oll1xE78v/wwd/8LOfExQ2WXb8W0+d2J+7Ks3Jl46OhKSM73mOLJRCUo0CzQWGxA ptgXJdOsHTAg6oJwEs3gsatTAel7CRLsCWROE/1xGymdm8JzaCrlLNnPUh4lVTqk P74MGGLz3B71Z868TiBKQYWi1Dj0YOc3k7WZ5nect3YXLSk5ej/DDivkC8bv2kFU GfwhZYEr9xOtqJY7HaH38VtG3KOf2vg= -----END CERTIFICATE-----Generated at Sun Nov 24 22:14:22 2024 by rpki-client on console-fra.rpki-client.org