$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8c49ef6-0c22-35fb-bd04-c61098ff797c.roa File: f8c49ef6-0c22-35fb-bd04-c61098ff797c.roa (raw, json) Hash identifier: ivSKUdNgiBFlhHV94wwuZVCWrIsZjrwt1Z9zx6eXjaQ= Subject key identifier: 14:7C:80:55:90:AD:E0:8A:2A:04:43:9C:B6:03:93:77:AD:9E:AB:40 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847EA5A06B795611EAB314EB380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8c49ef6-0c22-35fb-bd04-c61098ff797c.roa Signing time: Mon 18 Nov 2024 02:00:27 +0000 ROA not before: Mon 18 Nov 2024 02:00:27 +0000 ROA not after: Sun 16 Feb 2025 02:00:27 +0000 asID: 16625 IP address blocks: 23.218.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ea:5a:06:b7:95:61:1e:ab:31:4e:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 18 02:00:27 2024 GMT Not After : Feb 16 02:00:27 2025 GMT Subject: CN=ed991fe6-27e8-422f-b5c5-59d32f312aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d9:e6:1f:fa:aa:da:28:76:5e:00:fc:05:3f: 11:8b:eb:97:c1:7f:0b:32:ed:29:b9:1b:17:49:26: b8:21:87:85:f1:dc:8f:4c:a9:4a:64:4c:40:06:11: ef:df:d2:3e:ca:bf:89:52:ad:85:7a:ed:40:74:c6: be:7e:46:1b:a1:63:13:aa:26:f0:4b:28:a8:d6:7f: 5c:1b:9a:ef:ed:cd:92:11:53:9a:4a:43:cd:33:7e: 87:99:52:86:04:80:ce:a4:0a:94:5d:23:e2:e4:9f: 31:8b:d8:1e:bb:31:ac:1b:e6:93:89:c9:13:6a:b5: d9:fd:55:bd:54:bf:1e:cb:4d:c2:03:ff:c6:90:3e: 1b:b9:96:34:6b:ce:73:47:7b:67:5d:36:0a:e8:70: 42:71:8a:c2:37:86:56:af:be:dd:5f:34:d7:f2:50: fb:35:06:25:3d:fd:6e:08:f8:13:10:c8:cb:8d:01: ae:14:95:35:bd:ce:02:5f:ee:04:df:05:a7:2f:b0: 99:91:a4:bf:8d:fc:c1:6a:a2:50:2f:07:14:25:3a: 6f:a2:ae:9f:e8:ea:86:bf:9a:ee:77:5e:d9:51:12: ec:9f:10:39:3b:34:aa:82:6c:23:dc:b5:2e:59:1c: 18:e3:6b:5c:b0:b7:31:a2:f5:66:8c:e7:a4:aa:3c: 2c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7C:80:55:90:AD:E0:8A:2A:04:43:9C:B6:03:93:77:AD:9E:AB:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8c49ef6-0c22-35fb-bd04-c61098ff797c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:8f:d8:87:b6:76:0a:7c:57:97:c0:ed:8b:a1:46:88:05:72: be:d1:26:9f:0d:15:33:e2:07:d3:73:3b:cf:05:de:3e:32:1a: 94:9b:cc:cc:58:97:f9:1a:2c:25:99:dd:38:2d:c6:a5:89:d4: ab:d8:78:c9:de:ca:72:83:ce:60:5a:11:34:30:dc:93:a2:e7: e9:23:69:c0:7d:e9:09:21:0f:12:6d:52:8b:cf:d1:4a:0c:84: 8b:e2:16:16:cf:4a:d5:41:3e:8d:4e:38:47:8b:4a:0c:21:af: a2:38:63:bb:c9:7d:d5:41:69:c6:40:c5:41:81:58:05:bb:3f: 2b:16:5f:49:81:ad:b1:bc:61:00:98:c2:7c:6e:c5:88:80:fc: c3:86:69:c7:fc:e9:38:24:c1:8e:9c:34:5f:33:0c:27:bd:11: 36:5d:62:e7:1d:3d:7d:26:21:34:2d:80:c4:c6:f3:ec:9e:06: b2:58:94:7b:75:da:e8:e6:30:77:61:20:06:91:a4:4f:e0:2b: 74:24:29:b5:26:c6:59:0c:2e:7c:b8:f2:fa:9b:6a:47:77:df: 49:82:d9:4b:d4:09:66:37:87:ba:0f:36:a9:85:17:f2:81:2f: 41:87:9c:4a:00:18:2d:02:8a:55:2d:84:59:28:95:0b:f0:be: 2b:45:5d:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfqWga3lWEeqzFOs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExODAyMDAyN1oXDTI1MDIxNjAyMDAyN1owLzEtMCsGA1UEAxMk ZWQ5OTFmZTYtMjdlOC00MjJmLWI1YzUtNTlkMzJmMzEyYWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitnmH/qq2ih2XgD8BT8Ri+uXwX8LMu0puRsX SSa4IYeF8dyPTKlKZExABhHv39I+yr+JUq2Feu1AdMa+fkYboWMTqibwSyio1n9c G5rv7c2SEVOaSkPNM36HmVKGBIDOpAqUXSPi5J8xi9geuzGsG+aTickTarXZ/VW9 VL8ey03CA//GkD4buZY0a85zR3tnXTYK6HBCcYrCN4ZWr77dXzTX8lD7NQYlPf1u CPgTEMjLjQGuFJU1vc4CX+4E3wWnL7CZkaS/jfzBaqJQLwcUJTpvoq6f6OqGv5ru d17ZURLsnxA5OzSqgmwj3LUuWRwY42tcsLcxovVmjOekqjwsgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBR8gFWQreCKKgRDnLYDk3etnqtAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjhjNDllZjYtMGMyMi0z NWZiLWJkMDQtYzYxMDk4ZmY3OTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9q8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyP2Ie2dgp8V5fA7YuhRogFcr7RJp8NFTPiB9NzO88F3j4yGpSbzMxY l/kaLCWZ3TgtxqWJ1KvYeMneynKDzmBaETQw3JOi5+kjacB96QkhDxJtUovP0UoM hIviFhbPStVBPo1OOEeLSgwhr6I4Y7vJfdVBacZAxUGBWAW7PysWX0mBrbG8YQCY wnxuxYiA/MOGacf86TgkwY6cNF8zDCe9ETZdYucdPX0mITQtgMTG8+yeBrJYlHt1 2ujmMHdhIAaRpE/gK3QkKbUmxlkMLny48vqbakd330mC2UvUCWY3h7oPNqmFF/KB L0GHnEoAGC0CilUthFkolQvwvitFXfk= -----END CERTIFICATE-----Generated at Mon Nov 25 16:07:12 2024 by rpki-client on console-fra.rpki-client.org