$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb7d2257-fc5f-3ff0-a19f-f59a18225b5d.roa File: fb7d2257-fc5f-3ff0-a19f-f59a18225b5d.roa (raw, json) Hash identifier: y9RJzxLmUxqtR8p+DxV0sW4z2L54SMaKPvvPB5N7Dos= Subject key identifier: 3C:54:19:03:D1:DA:F6:15:9B:0B:30:71:16:98:36:DD:98:66:51:48 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847D999FA7B8BC4D71823CB7BC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb7d2257-fc5f-3ff0-a19f-f59a18225b5d.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 16625 IP address blocks: 23.204.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:99:fa:7b:8b:c4:d7:18:23:cb:7b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=7bd4c276-3b68-43d1-bec7-c6067df90a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4b:5a:16:f3:92:18:9c:c9:a0:88:c4:65:be: 1d:d5:fb:d7:10:93:77:53:be:bc:56:d1:53:a3:9b: 17:f7:0c:3a:be:fb:be:64:c4:24:8e:6b:07:0b:92: 57:7c:e2:4b:e9:27:74:2d:4e:66:df:79:6a:5e:bc: 7b:09:83:43:68:70:e2:ae:39:31:fc:f8:50:d6:75: 15:44:de:2f:ef:a6:fc:9e:4e:82:30:cd:a6:92:24: 22:0d:c6:dd:43:20:28:43:a1:8c:96:9a:1e:3e:a3: 23:39:a7:1e:a5:1a:cd:ae:63:ed:a6:49:ba:e8:b6: 08:5a:ec:28:14:47:5d:0f:72:e6:1c:ac:f2:cb:6f: 81:69:0a:1e:38:40:dc:8f:12:66:8f:a9:20:d2:74: 92:02:c1:bc:45:c2:fe:38:9b:b5:4b:d3:8d:67:75: db:e5:42:1e:83:ba:23:bd:3f:35:45:25:b2:cf:05: 2f:89:d2:19:72:a4:19:02:10:c7:66:ca:e2:3b:08: d7:a6:4d:39:ad:ed:81:1d:11:18:b9:2e:c9:93:1f: 19:9b:0c:cc:40:de:cb:f2:01:8d:57:ac:54:b2:36: ff:ab:24:63:19:04:2b:03:96:44:af:26:8e:28:bc: 43:72:dc:50:4e:fd:03:eb:ef:68:d8:8f:76:2b:ba: 0e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:54:19:03:D1:DA:F6:15:9B:0B:30:71:16:98:36:DD:98:66:51:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb7d2257-fc5f-3ff0-a19f-f59a18225b5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:1c:94:bb:2b:7f:a6:fd:6f:e7:4a:98:aa:8a:35:1c:80:cf: 67:82:60:5a:69:e0:64:c2:82:17:7c:cd:b0:5d:ab:df:59:80: f7:92:4f:1b:23:a3:32:f1:e0:ba:14:7b:44:19:1d:4d:de:8c: e1:bc:5e:3b:d6:51:d2:bf:58:dd:48:20:b2:8f:a8:cb:4a:f9: 81:54:86:07:01:b0:ba:df:68:a8:e3:79:8b:56:a1:4c:6f:a0: ec:a9:cd:37:80:e2:0e:0b:59:fa:b5:5f:20:c2:a7:d7:b7:8b: 3c:8d:bc:19:44:31:1a:4b:34:03:6e:ad:2d:4e:62:a2:f6:e6: 34:fd:fb:f1:95:60:0c:b1:aa:e9:2c:97:c3:b5:aa:09:95:74: db:40:f3:c8:23:7e:97:85:73:1a:c9:18:0d:d1:97:07:c6:58: 14:45:d2:8c:b4:d6:c0:1e:63:eb:26:46:16:6c:86:2d:9e:80: 54:9f:47:0f:15:53:cd:19:26:ba:36:1c:c3:d1:0b:6d:af:4b: d9:41:59:bb:9e:11:e6:63:25:a7:59:a1:5c:cf:69:33:6b:d8: f6:0d:26:7d:93:d2:d9:d7:f2:eb:63:f6:e6:16:62:5c:43:c4: 7d:af:ea:c5:4e:5b:9a:36:4a:8e:c4:6c:d6:f2:d3:04:42:ed: 20:b4:ff:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmfp7i8TXGCPLe8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk N2JkNGMyNzYtM2I2OC00M2QxLWJlYzctYzYwNjdkZjkwYTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEtaFvOSGJzJoIjEZb4d1fvXEJN3U768VtFT o5sX9ww6vvu+ZMQkjmsHC5JXfOJL6Sd0LU5m33lqXrx7CYNDaHDirjkx/PhQ1nUV RN4v76b8nk6CMM2mkiQiDcbdQyAoQ6GMlpoePqMjOacepRrNrmPtpkm66LYIWuwo FEddD3LmHKzyy2+BaQoeOEDcjxJmj6kg0nSSAsG8RcL+OJu1S9ONZ3Xb5UIeg7oj vT81RSWyzwUvidIZcqQZAhDHZsriOwjXpk05re2BHREYuS7Jkx8ZmwzMQN7L8gGN V6xUsjb/qyRjGQQrA5ZEryaOKLxDctxQTv0D6+9o2I92K7oOwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxUGQPR2vYVmwswcRaYNt2YZlFIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmI3ZDIyNTctZmM1Zi0z ZmYwLWExOWYtZjU5YTE4MjI1YjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8xEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwclLsrf6b9b+dKmKqKNRyAz2eCYFpp4GTCghd8zbBdq99ZgPeSTxsj ozLx4LoUe0QZHU3ejOG8XjvWUdK/WN1IILKPqMtK+YFUhgcBsLrfaKjjeYtWoUxv oOypzTeA4g4LWfq1XyDCp9e3izyNvBlEMRpLNANurS1OYqL25jT9+/GVYAyxquks l8O1qgmVdNtA88gjfpeFcxrJGA3RlwfGWBRF0oy01sAeY+smRhZshi2egFSfRw8V U80ZJro2HMPRC22vS9lBWbueEeZjJadZoVzPaTNr2PYNJn2T0tnX8utj9uYWYlxD xH2v6sVOW5o2So7EbNby0wRC7SC0/5M= -----END CERTIFICATE-----Generated at Fri Nov 22 04:48:48 2024 by rpki-client on console-ams.rpki-client.org