$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c565353-fea2-3856-88ce-f2955b2932be.roa File: 0c565353-fea2-3856-88ce-f2955b2932be.roa (raw, json) Hash identifier: 1rshlmLSvnydp0Dkk4KfAXA+YMmqDg9hWoknIL1Bdmk= Subject key identifier: C7:12:96:9B:F2:2A:48:E3:05:13:51:5E:24:B0:26:16:B0:80:83:B5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858474687D099CD1FA21A726FD800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c565353-fea2-3856-88ce-f2955b2932be.roa Signing time: Fri 20 Sep 2024 09:40:11 +0000 ROA not before: Fri 20 Sep 2024 09:40:11 +0000 ROA not after: Thu 19 Dec 2024 10:40:11 +0000 asID: 20940 IP address blocks: 23.217.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:46:87:d0:99:cd:1f:a2:1a:72:6f:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 20 09:40:11 2024 GMT Not After : Dec 19 10:40:11 2024 GMT Subject: CN=0ad41b17-57d2-48ba-9ae0-e5de163828f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f2:a5:65:8c:28:7a:61:0b:ce:23:44:7f:83: cc:2d:c7:e0:77:de:f0:38:06:a7:38:e5:7d:bb:de: 73:70:65:72:38:44:71:81:5d:99:d6:23:b7:6b:e6: 41:4d:13:e1:ce:3e:07:9a:3a:3d:24:30:2c:df:6f: cf:41:46:19:86:c6:d1:22:8b:38:6f:ff:91:90:cc: f8:2f:05:05:44:7e:91:9d:df:f7:a2:83:37:4b:07: 7d:fd:53:b8:2d:18:0f:7b:39:92:68:af:71:e9:bf: d8:ab:f3:d0:08:96:b2:5b:d4:45:b9:4c:b8:ce:da: ec:5f:12:69:2e:99:6d:df:74:a8:5e:f2:b4:1a:fe: 0d:9b:48:af:ac:ba:26:ac:75:a0:da:7f:dd:e7:3d: 59:60:8a:9d:cc:91:3d:a6:bc:ce:6c:39:65:e7:da: ef:4d:84:b2:00:d3:d5:ac:98:9e:03:e6:a7:64:f8: 79:af:0d:18:dd:03:c6:c4:d6:59:e1:0b:91:75:ce: 81:68:de:a5:29:aa:4b:18:7d:53:81:31:d4:3c:49: 78:6a:8a:07:d6:04:19:d4:6e:78:1d:c9:87:50:b8: cd:bc:38:62:40:6b:6e:5d:f2:42:70:13:f0:6f:7e: 66:15:4e:37:2f:10:28:99:f5:40:79:47:41:fb:4c: 00:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:12:96:9B:F2:2A:48:E3:05:13:51:5E:24:B0:26:16:B0:80:83:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c565353-fea2-3856-88ce-f2955b2932be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:1d:4c:9d:75:df:f3:e5:73:e8:86:da:50:87:89:70:10:75: 03:d2:1e:62:2b:7f:0c:a2:68:73:35:66:85:48:9b:46:29:59: b2:05:c5:fd:5c:43:a9:37:6c:99:75:65:89:a9:0a:45:33:59: bc:e8:f9:cd:7a:1c:c8:fb:4e:a5:9e:6c:11:35:97:aa:b3:ff: 28:7a:d9:4d:4a:76:a9:11:38:b5:0b:e5:47:41:57:c7:99:d4: 72:9c:bb:77:77:ba:ed:13:f2:f9:e4:c6:f7:39:5c:ed:e9:46: 39:fa:2a:7b:91:98:60:9c:20:dc:33:25:6b:2c:e2:99:f9:a8: 4a:c4:d7:a3:1e:af:d4:3c:d5:c2:52:16:88:64:b8:7a:cf:c4: dc:e7:5f:de:98:36:3f:55:72:bb:7f:6a:14:f7:55:69:97:38: 5c:ec:2b:ad:60:4b:9a:10:3d:5f:f2:3b:b6:59:ee:5b:47:0a: 1b:5f:85:09:da:af:f6:44:6b:b1:58:1e:63:64:86:6e:10:3e: 3c:46:7f:45:65:c6:6b:c7:1c:e3:7d:dc:a0:49:0d:02:b9:c4: 16:91:62:46:f4:ad:91:24:bd:5b:06:b1:b9:2a:57:b6:76:73: bf:9b:7a:cb:7d:8f:20:d8:37:b1:a4:fa:04:5b:3e:64:7b:2a: 0c:1d:60:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdGh9CZzR+iGnJv2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyMDA5NDAxMVoXDTI0MTIxOTEwNDAxMVowLzEtMCsGA1UEAxMk MGFkNDFiMTctNTdkMi00OGJhLTlhZTAtZTVkZTE2MzgyOGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovKlZYwoemELziNEf4PMLcfgd97wOAanOOV9 u95zcGVyOERxgV2Z1iO3a+ZBTRPhzj4Hmjo9JDAs32/PQUYZhsbRIos4b/+RkMz4 LwUFRH6Rnd/3ooM3Swd9/VO4LRgPezmSaK9x6b/Yq/PQCJayW9RFuUy4ztrsXxJp Lplt33SoXvK0Gv4Nm0ivrLomrHWg2n/d5z1ZYIqdzJE9przObDll59rvTYSyANPV rJieA+anZPh5rw0Y3QPGxNZZ4QuRdc6BaN6lKapLGH1TgTHUPEl4aooH1gQZ1G54 HcmHULjNvDhiQGtuXfJCcBPwb35mFU43LxAomfVAeUdB+0wA4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcSlpvyKkjjBRNRXiSwJhawgIO1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGM1NjUzNTMtZmVhMi0z ODU2LTg4Y2UtZjI5NTViMjkzMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9lmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMdTJ113/Plc+iG2lCHiXAQdQPSHmIrfwyiaHM1ZoVIm0YpWbIFxf1c Q6k3bJl1ZYmpCkUzWbzo+c16HMj7TqWebBE1l6qz/yh62U1KdqkROLUL5UdBV8eZ 1HKcu3d3uu0T8vnkxvc5XO3pRjn6KnuRmGCcINwzJWss4pn5qErE16Mer9Q81cJS FohkuHrPxNznX96YNj9Vcrt/ahT3VWmXOFzsK61gS5oQPV/yO7ZZ7ltHChtfhQna r/ZEa7FYHmNkhm4QPjxGf0VlxmvHHON93KBJDQK5xBaRYkb0rZEkvVsGsbkqV7Z2 c7+best9jyDYN7Gk+gRbPmR7KgwdYKc= -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:57 2024 by rpki-client on console-ams.rpki-client.org