$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9620580-3882-3de7-b3b0-d37b7e1cf12a.roa File: f9620580-3882-3de7-b3b0-d37b7e1cf12a.roa (raw, json) Hash identifier: PjVd4ucsiNFoJLeBmqSTIFvIuOnGpdP/CquofIPUb4M= Subject key identifier: 1D:88:95:F1:4C:CF:BC:BB:82:7B:2B:EF:03:3D:B1:E0:8E:B7:CF:C5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847DF2F63F1FE5C7C6AE5E5EEA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9620580-3882-3de7-b3b0-d37b7e1cf12a.roa Signing time: Thu 14 Nov 2024 02:00:27 +0000 ROA not before: Thu 14 Nov 2024 02:00:27 +0000 ROA not after: Wed 12 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.215.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:df:2f:63:f1:fe:5c:7c:6a:e5:e5:ee:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 14 02:00:27 2024 GMT Not After : Feb 12 02:00:27 2025 GMT Subject: CN=d554e814-ca9f-4698-905e-07a9ce6fa4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8f:ac:9f:57:83:7c:be:f6:32:7b:2b:14:6e: e8:2c:43:24:f4:68:d5:ee:31:9a:c3:74:68:7e:e8: ce:7e:fd:8b:e6:da:bc:18:a6:72:99:92:7e:42:9e: 4f:8d:bb:8c:31:27:a4:11:30:e6:5e:94:43:a6:f7: 99:9a:7f:79:da:5d:c1:3c:4a:e7:2e:5b:eb:1e:f3: 89:62:d4:85:3d:a3:ca:3f:91:08:3a:6e:f7:56:b3: b2:c7:85:ab:12:00:49:25:cf:b8:74:23:d3:7a:4b: 12:7e:c7:c9:d2:a9:e5:19:2f:6c:0b:98:6b:09:e9: 34:76:8f:97:e1:80:48:f9:e5:97:b5:94:6c:f5:eb: 80:32:cb:8e:c9:55:61:7c:2e:00:b7:e3:ac:fb:61: 03:71:e5:9a:5e:7d:7a:03:66:62:ea:ab:57:57:dc: a8:22:3d:f6:c1:79:71:59:7b:ad:a1:29:9b:17:f8: e6:5f:1d:b4:84:e7:56:71:b7:40:d6:5d:46:82:2a: bc:37:47:27:b3:ed:24:92:e7:21:3a:26:1b:86:3d: 38:6c:44:32:f5:d3:fc:cf:a2:9b:a7:f9:ba:71:67: a4:f0:39:88:19:3c:35:2d:5a:a6:19:4d:93:3e:3f: 81:e3:8b:e1:96:a0:23:4e:88:f6:27:c3:ab:21:bb: 97:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:88:95:F1:4C:CF:BC:BB:82:7B:2B:EF:03:3D:B1:E0:8E:B7:CF:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9620580-3882-3de7-b3b0-d37b7e1cf12a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:01:3d:21:c1:61:a0:af:bd:46:d6:a3:ba:c1:d3:4d:76:b3: 9e:ec:85:f2:9b:00:75:6b:c8:aa:c9:52:b3:d8:83:7b:f3:d9: 48:60:9f:87:05:0a:c9:4b:f6:73:e5:68:e0:5d:18:fa:8d:30: 03:c3:7e:7a:64:1c:8f:9e:b0:ba:ef:ce:44:7d:f8:d1:81:5b: d8:a3:6f:ec:8a:76:dc:0f:7d:eb:75:45:6a:01:71:d3:1c:eb: 72:bf:f3:2d:d4:22:7c:66:ea:f0:04:23:40:17:71:c4:0c:d5: f3:98:a8:76:1e:06:89:4b:e1:ee:34:fa:d5:37:0a:65:a8:52: 5c:5e:bb:63:7b:07:e4:89:db:0b:74:ed:99:d0:08:eb:9b:7f: 0b:fe:9a:75:5e:cd:68:76:48:e4:52:01:0a:81:15:bb:59:26: b9:0d:7b:10:95:dc:c3:7a:34:25:ac:eb:81:b0:6d:03:67:f8: ec:86:a2:6a:8d:00:1a:e5:0a:f6:c9:70:08:b1:fe:49:eb:69: 12:e4:2b:ce:02:80:ab:84:40:0a:9b:f4:92:1f:36:1a:1f:4d: 72:69:8f:0c:f7:ff:37:2d:cf:15:d6:6b:c9:5b:6f:df:cf:f7: ff:4a:af:96:79:ff:ec:bf:83:fb:20:6b:ea:50:c9:e7:be:29: ae:fc:11:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEffL2Px/lx8auXl7qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk ZDU1NGU4MTQtY2E5Zi00Njk4LTkwNWUtMDdhOWNlNmZhNGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74+sn1eDfL72MnsrFG7oLEMk9GjV7jGaw3Ro fujOfv2L5tq8GKZymZJ+Qp5PjbuMMSekETDmXpRDpveZmn952l3BPErnLlvrHvOJ YtSFPaPKP5EIOm73VrOyx4WrEgBJJc+4dCPTeksSfsfJ0qnlGS9sC5hrCek0do+X 4YBI+eWXtZRs9euAMsuOyVVhfC4At+Os+2EDceWaXn16A2Zi6qtXV9yoIj32wXlx WXutoSmbF/jmXx20hOdWcbdA1l1Ggiq8N0cns+0kkuchOiYbhj04bEQy9dP8z6Kb p/m6cWek8DmIGTw1LVqmGU2TPj+B44vhlqAjToj2J8OrIbuXbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2IlfFMz7y7gnsr7wM9seCOt8/FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjk2MjA1ODAtMzg4Mi0z ZGU3LWIzYjAtZDM3YjdlMWNmMTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ffMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoBPSHBYaCvvUbWo7rB0012s57shfKbAHVryKrJUrPYg3vz2Uhgn4cF CslL9nPlaOBdGPqNMAPDfnpkHI+esLrvzkR9+NGBW9ijb+yKdtwPfet1RWoBcdMc 63K/8y3UInxm6vAEI0AXccQM1fOYqHYeBolL4e40+tU3CmWoUlxeu2N7B+SJ2wt0 7ZnQCOubfwv+mnVezWh2SORSAQqBFbtZJrkNexCV3MN6NCWs64GwbQNn+OyGomqN ABrlCvbJcAix/knraRLkK84CgKuEQAqb9JIfNhofTXJpjwz3/zctzxXWa8lbb9/P 9/9Kr5Z5/+y/g/sga+pQyee+Ka78Eas= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:46 2024 by rpki-client on console-ams.rpki-client.org