$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff01b934-071a-3ff0-90cc-0f27218f3423.roa File: ff01b934-071a-3ff0-90cc-0f27218f3423.roa (raw, json) Hash identifier: J9RndOzt4Fr6kiDNuPpsLJQFupfHTkaL0RnH5s+mIJE= Subject key identifier: 4A:66:19:9A:1C:0A:71:59:97:77:9F:48:35:22:71:EE:99:3F:B8:BE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847C77496F2C06FA7E43CB69680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff01b934-071a-3ff0-90cc-0f27218f3423.roa Signing time: Tue 05 Nov 2024 14:00:38 +0000 ROA not before: Tue 05 Nov 2024 14:00:38 +0000 ROA not after: Mon 03 Feb 2025 14:00:38 +0000 asID: 20940 IP address blocks: 23.199.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c7:74:96:f2:c0:6f:a7:e4:3c:b6:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 5 14:00:38 2024 GMT Not After : Feb 3 14:00:38 2025 GMT Subject: CN=e89dd1fa-c673-43b8-bb78-9fd5f186fa28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ba:5b:81:a4:cf:b5:45:9b:d5:c7:e6:8b:cb: cb:62:d5:b4:9d:c9:46:b2:d5:56:f1:b6:12:67:fa: 29:79:27:9b:2f:7d:37:5c:29:ae:b7:f6:76:71:b0: 18:a2:0d:a3:ca:07:21:32:bb:b0:84:6f:dd:a1:22: 73:bd:f5:79:cd:a9:62:b2:17:30:2f:31:14:61:75: d3:2f:fe:c0:1e:6a:40:e9:a6:9e:d7:7d:9a:cd:9c: a4:af:7b:f8:59:df:c6:ce:c4:b1:81:42:00:88:c9: 9d:ac:6f:f1:7b:b3:d3:a3:eb:6e:9a:28:39:11:3d: 14:b6:a8:1f:e3:86:77:2a:96:2c:1c:8f:44:42:d2: 0a:95:5e:66:24:84:c9:d2:4f:04:ed:d1:6f:01:15: a8:ca:66:81:49:55:24:1d:cf:2c:9d:76:fd:15:9f: 2e:f8:8b:2e:34:0d:a8:1f:a1:de:38:21:e2:6d:75: bf:a3:4f:3f:ac:ec:93:ea:7d:91:78:a7:b7:bf:b2: 76:19:e6:42:43:1a:fa:6e:dc:dd:e2:3c:c8:5b:78: fe:15:c3:51:89:ad:cb:b5:88:6c:5c:3e:9a:6b:ea: 91:90:ac:76:2f:65:48:c0:9e:a0:a6:32:d4:e6:89: 40:83:5c:b0:d6:ee:b1:98:07:51:c9:34:16:b4:fd: 55:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:66:19:9A:1C:0A:71:59:97:77:9F:48:35:22:71:EE:99:3F:B8:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff01b934-071a-3ff0-90cc-0f27218f3423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:ae:f4:6c:77:31:c4:18:f3:6b:07:50:48:96:e9:bd:ef:ef: 40:58:ef:70:56:8d:be:42:06:1a:0f:94:1f:25:04:3b:0e:69: e6:1a:e0:cb:e8:b0:bd:a9:4a:16:f7:bc:84:bd:31:94:0a:6f: a6:86:40:b6:e3:4f:6f:32:d8:fc:20:24:03:a7:6d:78:93:f9: 81:0d:42:4e:00:70:af:04:b2:f1:3b:c0:b1:e2:6f:6f:b2:c9: 8f:0d:26:3a:4f:84:e5:fa:00:76:11:bc:27:96:e7:d2:19:c9: e7:bb:f0:f7:f2:9a:d9:ad:70:50:e6:ca:9a:07:84:80:5d:07: 0a:a8:f4:cf:a4:aa:a7:53:ef:f7:19:2e:7d:91:4a:4c:32:c7: ec:a2:cd:6d:b3:d1:90:ea:49:76:ec:40:95:77:d3:7e:aa:17: 05:df:9f:b2:18:39:c0:70:03:4f:df:b4:db:10:a3:74:e4:69: 27:af:95:7a:55:c3:e3:83:74:20:f3:a4:52:dd:d4:2e:b9:7c: f9:0a:10:24:2b:d4:c8:fe:20:60:81:f0:e8:73:98:73:b1:78: ce:03:51:7d:2e:c3:6f:9f:a3:12:ce:43:c6:c6:22:12:94:57: d4:b5:98:72:88:8d:62:fa:91:8a:d2:d3:5f:fe:ff:d0:07:45: 02:8c:be:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfHdJbywG+n5Dy2loAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwNTE0MDAzOFoXDTI1MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk ZTg5ZGQxZmEtYzY3My00M2I4LWJiNzgtOWZkNWYxODZmYTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLpbgaTPtUWb1cfmi8vLYtW0nclGstVW8bYS Z/opeSebL303XCmut/Z2cbAYog2jygchMruwhG/doSJzvfV5zalishcwLzEUYXXT L/7AHmpA6aae132azZykr3v4Wd/GzsSxgUIAiMmdrG/xe7PTo+tumig5ET0Utqgf 44Z3KpYsHI9EQtIKlV5mJITJ0k8E7dFvARWoymaBSVUkHc8snXb9FZ8u+IsuNA2o H6HeOCHibXW/o08/rOyT6n2ReKe3v7J2GeZCQxr6btzd4jzIW3j+FcNRia3LtYhs XD6aa+qRkKx2L2VIwJ6gpjLU5olAg1yw1u6xmAdRyTQWtP1VdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpmGZocCnFZl3efSDUice6ZP7i+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmYwMWI5MzQtMDcxYS0z ZmYwLTkwY2MtMGYyNzIxOGYzNDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8f8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSu9Gx3McQY82sHUEiW6b3v70BY73BWjb5CBhoPlB8lBDsOaeYa4Mvo sL2pShb3vIS9MZQKb6aGQLbjT28y2PwgJAOnbXiT+YENQk4AcK8EsvE7wLHib2+y yY8NJjpPhOX6AHYRvCeW59IZyee78PfymtmtcFDmypoHhIBdBwqo9M+kqqdT7/cZ Ln2RSkwyx+yizW2z0ZDqSXbsQJV3036qFwXfn7IYOcBwA0/ftNsQo3TkaSevlXpV w+ODdCDzpFLd1C65fPkKECQr1Mj+IGCB8OhzmHOxeM4DUX0uw2+foxLOQ8bGIhKU V9S1mHKIjWL6kYrS01/+/9AHRQKMvvU= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:59 2024 by rpki-client on console-fra.rpki-client.org