$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6e2020d-a25a-3986-b649-c0bfd42da457.roa File: d6e2020d-a25a-3986-b649-c0bfd42da457.roa (raw, json) Hash identifier: 6NQ8NSh2uS7HylfhyKqzbmyZmR/DMjHuU0tXbg7vfuc= Subject key identifier: 24:48:01:96:D1:C6:E4:3D:59:1B:C4:01:CA:9E:3A:37:20:C4:97:08 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847B696C674C0780F53FC286D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6e2020d-a25a-3986-b649-c0bfd42da457.roa Signing time: Wed 30 Oct 2024 13:00:40 +0000 ROA not before: Wed 30 Oct 2024 13:00:40 +0000 ROA not after: Tue 28 Jan 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.221.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b6:96:c6:74:c0:78:0f:53:fc:28:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 30 13:00:40 2024 GMT Not After : Jan 28 14:00:40 2025 GMT Subject: CN=1ab30874-706f-4434-be84-d166532643a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7d:bf:6d:4e:60:fe:c7:be:ae:5e:1c:1d:79: a3:3d:13:4e:bf:6d:93:aa:72:5b:e2:eb:be:d1:f1: 59:9b:ab:12:e6:4a:f0:6e:15:d1:2b:a4:02:c5:81: 6f:f0:ab:5f:fe:57:a9:80:1f:38:aa:1d:47:bd:29: 15:8e:f2:9a:70:38:4f:5e:e7:a5:56:1b:91:d7:9e: 16:d3:12:f1:68:08:45:6a:9b:2f:3a:86:8c:46:11: f0:e3:1d:0c:8d:77:92:66:91:90:5b:aa:5d:5f:81: 18:43:c8:35:70:6b:e6:9a:a5:b4:d8:7c:b0:31:e2: cc:6c:f1:44:29:77:04:46:1a:f0:09:55:0b:fe:17: c6:ca:0e:c7:aa:23:66:5d:87:00:75:f3:7a:cd:3c: 44:a0:f9:e6:5d:52:f3:3e:73:87:5b:ad:ab:cc:03: 80:ff:0c:58:0c:3f:5b:52:21:87:05:bf:ee:a5:e8: 7c:7f:90:97:b1:6f:86:87:98:3c:c0:65:fc:b4:09: ba:72:6c:a8:3c:93:cd:9c:a6:8b:07:ab:b8:e2:e1: ff:ee:34:94:66:fe:15:fc:8b:0b:3e:a3:d5:b9:31: 10:63:9d:1d:ab:d3:62:fc:26:55:0c:e1:39:ce:c6: 84:fa:c4:4d:e9:fe:a2:54:dc:80:d5:2d:da:ce:d5: 0f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:48:01:96:D1:C6:E4:3D:59:1B:C4:01:CA:9E:3A:37:20:C4:97:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6e2020d-a25a-3986-b649-c0bfd42da457.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f8:b4:2f:0b:2d:7c:ee:a1:a4:b0:7a:5c:6c:00:90:57:5c: ae:91:4e:50:21:f7:c1:ca:f2:77:80:a9:9f:90:f4:06:a8:ef: d0:38:7e:47:17:88:65:e1:e8:b2:f1:44:06:bf:9f:ef:01:9b: cd:7d:92:a9:7c:f4:88:02:eb:b7:e5:7d:8e:d5:58:60:41:1a: f3:6d:ab:ca:73:b0:85:38:12:65:aa:56:cf:4d:0c:89:4a:8d: fb:8a:01:8d:2e:3c:17:b5:47:e6:5f:08:7a:71:dc:e2:b2:cd: b6:7b:82:9b:4d:00:9d:1e:e8:95:2f:3d:af:61:99:fc:6f:15: 4d:9f:c2:15:65:16:4d:1b:59:07:4a:5a:f5:90:78:9a:07:7c: 30:96:55:d9:c0:96:ba:6f:4f:1d:3a:14:a7:f4:a4:b5:61:5f: 11:00:74:55:83:92:85:d6:47:9f:91:b9:4b:bb:f1:b9:a1:a9: 4e:a2:56:84:ee:d6:e3:6c:3a:d7:94:b4:f5:7a:a8:cb:7b:52: 41:fa:12:47:36:67:56:de:02:03:6f:71:48:7b:20:68:bf:66: b9:3a:aa:35:0f:1f:0d:8b:c9:d8:37:2f:30:56:0e:5c:87:9a: 94:d7:39:57:30:11:a1:14:3e:35:33:e7:93:f9:8d:33:a8:c9: 4e:21:82:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe2lsZ0wHgPU/wobYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAzMDEzMDA0MFoXDTI1MDEyODE0MDA0MFowLzEtMCsGA1UEAxMk MWFiMzA4NzQtNzA2Zi00NDM0LWJlODQtZDE2NjUzMjY0M2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH2/bU5g/se+rl4cHXmjPRNOv22TqnJb4uu+ 0fFZm6sS5krwbhXRK6QCxYFv8Ktf/lepgB84qh1HvSkVjvKacDhPXuelVhuR154W 0xLxaAhFapsvOoaMRhHw4x0MjXeSZpGQW6pdX4EYQ8g1cGvmmqW02HywMeLMbPFE KXcERhrwCVUL/hfGyg7HqiNmXYcAdfN6zTxEoPnmXVLzPnOHW62rzAOA/wxYDD9b UiGHBb/upeh8f5CXsW+Gh5g8wGX8tAm6cmyoPJPNnKaLB6u44uH/7jSUZv4V/IsL PqPVuTEQY50dq9Ni/CZVDOE5zsaE+sRN6f6iVNyA1S3aztUPuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRIAZbRxuQ9WRvEAcqeOjcgxJcIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDZlMjAyMGQtYTI1YS0z OTg2LWI2NDktYzBiZmQ0MmRhNDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF91UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX4tC8LLXzuoaSwelxsAJBXXK6RTlAh98HK8neAqZ+Q9Aao79A4fkcX iGXh6LLxRAa/n+8Bm819kql89IgC67flfY7VWGBBGvNtq8pzsIU4EmWqVs9NDIlK jfuKAY0uPBe1R+ZfCHpx3OKyzbZ7gptNAJ0e6JUvPa9hmfxvFU2fwhVlFk0bWQdK WvWQeJoHfDCWVdnAlrpvTx06FKf0pLVhXxEAdFWDkoXWR5+RuUu78bmhqU6iVoTu 1uNsOteUtPV6qMt7UkH6Ekc2Z1beAgNvcUh7IGi/Zrk6qjUPHw2Lydg3LzBWDlyH mpTXOVcwEaEUPjUz55P5jTOoyU4hgno= -----END CERTIFICATE-----Generated at Fri Nov 22 04:30:40 2024 by rpki-client on console-fra.rpki-client.org