$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d96d7b2e-fba2-392f-89a6-b3544d82800d.roa File: d96d7b2e-fba2-392f-89a6-b3544d82800d.roa (raw, json) Hash identifier: KZAspuWgGnxTQhRgE+Q5oGHznQbQEPwR26vCnD15j4A= Subject key identifier: 28:5B:EF:AD:7F:E0:D6:74:54:2F:24:E3:10:60:78:9F:88:48:B1:9A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847ED24DFA0545D20C78771EC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d96d7b2e-fba2-392f-89a6-b3544d82800d.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.223.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:df:a0:54:5d:20:c7:87:71:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=dcff71e2-4238-4dc4-8209-2fab1af119b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:ff:ca:58:0b:b3:b3:e6:ac:2a:03:80:91: 9a:63:21:3c:69:ef:67:21:98:0b:02:cc:ab:f8:7f: 8b:66:e0:b4:80:52:d7:d4:c8:eb:33:f9:02:1b:e5: b1:f8:e5:19:97:bf:84:6a:a5:29:27:17:0a:bf:82: 0a:54:88:e3:97:aa:f9:99:2b:77:4d:13:63:5f:d1: 87:26:5a:f3:c4:b2:df:23:d6:6f:8d:20:e5:f4:a7: 3b:21:41:38:f5:a9:24:77:3e:e9:54:4a:59:32:7e: b4:80:eb:8c:5b:38:50:13:28:1f:c8:dc:8a:68:5a: d1:78:8f:7f:2c:83:03:05:77:9f:80:00:c5:5c:ed: 8f:8a:eb:fc:b2:84:0e:da:c0:ec:34:4a:31:f0:4a: ed:00:b0:e7:6e:be:93:33:f2:ab:70:2d:86:88:f7: a3:c1:84:86:05:1a:de:e3:ed:c2:8c:b4:a8:2f:99: 5d:0c:c5:78:94:ed:c2:90:2f:a5:71:60:fa:43:3f: f0:d6:68:fb:97:4a:55:04:f9:c0:25:7a:04:06:f7: 68:0d:06:4c:c8:02:73:b8:cf:ed:54:26:57:0c:03: 12:f3:c2:41:bd:87:a3:83:86:f0:31:eb:c0:ba:e3: 16:96:32:26:70:2f:2f:5e:0e:6a:21:39:07:31:40: 0a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5B:EF:AD:7F:E0:D6:74:54:2F:24:E3:10:60:78:9F:88:48:B1:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d96d7b2e-fba2-392f-89a6-b3544d82800d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:54:51:ed:0c:f9:fc:eb:13:86:f8:41:f1:9a:6d:f2:cc:2f: 19:08:7a:c8:20:7b:7b:fb:50:f7:94:6e:84:9f:d4:11:79:74: a4:c6:19:ba:16:4f:f7:61:1b:33:82:44:92:e7:c6:92:78:1a: 68:a1:31:e5:af:3f:8d:99:39:ad:89:b5:81:3e:91:48:a7:bf: 4e:6e:1e:46:1a:65:14:7a:55:2f:dd:25:1d:83:e1:4f:ba:c6: 12:2d:92:0c:a8:75:f7:ec:5c:5b:fa:00:cb:e2:14:cc:b9:1d: 05:fe:d3:8e:39:e4:f8:7e:ca:3c:4c:99:eb:d3:b7:9d:09:26: 00:25:07:99:74:8a:a0:a9:26:9b:e1:dc:02:51:13:ad:fb:f7: bf:ef:d4:a6:66:d3:aa:c8:56:7a:15:62:ed:2d:c5:e6:ea:9d: 01:06:11:95:ba:9b:8a:8c:1d:08:b1:59:08:4d:1b:15:4d:23: 20:bd:b3:3b:f0:4e:40:8b:19:16:46:60:88:37:9c:60:81:ef: 59:74:1a:24:aa:ba:08:ed:22:c9:7c:d1:9b:32:61:a5:42:d6: ab:65:ae:56:c6:a2:07:87:10:8d:bf:a6:94:be:8f:e6:7b:a7: 24:9e:a5:9b:59:3d:2a:74:56:3f:b4:d8:3c:4e:af:54:c4:1d: 25:02:00:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJN+gVF0gx4dx7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk ZGNmZjcxZTItNDIzOC00ZGM0LTgyMDktMmZhYjFhZjExOWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzL/ylgLs7PmrCoDgJGaYyE8ae9nIZgLAsyr +H+LZuC0gFLX1MjrM/kCG+Wx+OUZl7+EaqUpJxcKv4IKVIjjl6r5mSt3TRNjX9GH JlrzxLLfI9ZvjSDl9Kc7IUE49akkdz7pVEpZMn60gOuMWzhQEygfyNyKaFrReI9/ LIMDBXefgADFXO2Piuv8soQO2sDsNEox8ErtALDnbr6TM/KrcC2GiPejwYSGBRre 4+3CjLSoL5ldDMV4lO3CkC+lcWD6Qz/w1mj7l0pVBPnAJXoEBvdoDQZMyAJzuM/t VCZXDAMS88JBvYejg4bwMevAuuMWljImcC8vXg5qITkHMUAK2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChb761/4NZ0VC8k4xBgeJ+ISLGaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDk2ZDdiMmUtZmJhMi0z OTJmLTg5YTYtYjM1NDRkODI4MDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9/TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBUUe0M+fzrE4b4QfGabfLMLxkIesgge3v7UPeUboSf1BF5dKTGGboW T/dhGzOCRJLnxpJ4GmihMeWvP42ZOa2JtYE+kUinv05uHkYaZRR6VS/dJR2D4U+6 xhItkgyodffsXFv6AMviFMy5HQX+04455Ph+yjxMmevTt50JJgAlB5l0iqCpJpvh 3AJRE63797/v1KZm06rIVnoVYu0txebqnQEGEZW6m4qMHQixWQhNGxVNIyC9szvw TkCLGRZGYIg3nGCB71l0GiSqugjtIsl80ZsyYaVC1qtlrlbGogeHEI2/ppS+j+Z7 pySepZtZPSp0Vj+02DxOr1TEHSUCAMQ= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:44 2024 by rpki-client on console-fra.rpki-client.org