$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0fbcd969-84fa-35ad-beb0-5268e8c535cf.roa File: 0fbcd969-84fa-35ad-beb0-5268e8c535cf.roa (raw, json) Hash identifier: anvvI+FDy3wQvKIWtxcIQJhCqZAnB/Ql17CnD3Z0r24= Subject key identifier: FC:16:17:9C:D0:12:D8:FB:E2:DE:71:5D:E8:33:76:8A:B9:CC:3D:53 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847DF2F629EAF30F64333145F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0fbcd969-84fa-35ad-beb0-5268e8c535cf.roa Signing time: Thu 14 Nov 2024 02:00:27 +0000 ROA not before: Thu 14 Nov 2024 02:00:27 +0000 ROA not after: Wed 12 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.215.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:df:2f:62:9e:af:30:f6:43:33:14:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 14 02:00:27 2024 GMT Not After : Feb 12 02:00:27 2025 GMT Subject: CN=a5c5e2c1-4dfc-4bee-8871-8565dbd33a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9a:ea:18:bb:11:90:c2:86:24:e2:f9:98:12: 57:14:f2:cd:42:38:22:c6:c0:90:fb:6f:75:fe:81: e2:a2:34:c2:9a:03:7a:4d:da:bb:50:47:23:07:c1: 61:b1:94:54:80:bb:2d:37:5e:4a:33:04:34:65:c0: 8d:60:b2:94:ca:71:b9:aa:e6:3b:25:96:ee:af:23: 45:49:7c:19:e0:6b:de:5e:72:4f:0f:7d:6f:38:05: 8d:17:dd:61:8c:48:77:4b:8d:f0:75:56:43:6c:a9: 59:61:d1:29:d2:c2:4f:b7:18:7e:1b:50:10:f5:61: 18:0b:91:9c:0a:01:08:74:5d:c0:a3:38:0c:1f:4d: 6c:54:cf:84:ff:5d:a0:7e:f1:9d:80:b9:79:ba:63: 3e:3f:ec:3a:2b:be:8f:ee:05:ee:60:c9:9f:81:60: 96:e1:41:ae:94:f9:90:05:44:c9:31:59:49:42:6e: 2c:7e:e1:15:ca:e6:50:82:72:40:1c:3a:64:c9:b0: 2a:96:ca:b7:30:54:65:81:d5:44:30:7b:d8:1e:a7: 66:18:14:b7:f4:61:d6:ad:e3:6c:55:10:89:8d:10: 2b:b8:aa:44:ea:90:9d:52:0e:57:f5:35:df:b9:b2: 0f:b6:31:71:f8:e9:21:e0:17:dc:ec:bf:04:f3:c3: 5f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:16:17:9C:D0:12:D8:FB:E2:DE:71:5D:E8:33:76:8A:B9:CC:3D:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0fbcd969-84fa-35ad-beb0-5268e8c535cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:26:61:1a:e2:6a:7c:6f:30:1a:d3:08:e7:a2:87:59:7f:6b: 7e:20:c2:bd:8f:67:cc:98:6f:b9:7b:e8:e6:ad:26:17:a2:d8: 5a:6c:97:74:e6:0f:33:43:bd:fd:cb:43:36:0c:b8:06:69:01: 93:53:d2:0e:53:bb:1a:7d:5a:af:65:58:34:ae:21:b0:4e:9b: 23:23:0d:8c:f7:1b:42:98:63:99:66:2c:21:dc:e8:8d:78:5b: a4:0c:88:cf:91:14:0d:44:09:4a:57:b4:f0:82:5f:76:50:f7: df:52:8a:7a:c3:65:66:2d:6d:d3:33:05:19:91:11:fd:09:ab: 8f:07:0f:f2:7f:3a:83:a1:5b:06:1b:b3:39:af:74:49:2b:0a: a5:12:0e:93:5a:06:10:9d:d9:90:10:0b:77:0f:6d:e9:4b:d9: 78:7b:b3:7f:22:bb:e5:0a:0d:a9:b7:a8:1e:ea:e1:ea:9e:41: 7e:a1:8b:03:46:c3:f6:71:6e:1a:54:a8:0f:1b:65:49:b4:fc: 64:ac:7c:8c:bb:86:e4:43:62:fe:ee:e8:ac:06:7c:20:23:9d: e4:ca:7f:fe:58:97:fe:7d:ff:c0:71:da:35:a9:30:6e:62:f3: e0:05:eb:af:e9:7c:21:e0:7a:ad:f9:db:45:cd:1d:ca:c6:75: 95:6e:3c:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEffL2KerzD2QzMUXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk YTVjNWUyYzEtNGRmYy00YmVlLTg4NzEtODU2NWRiZDMzYTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JrqGLsRkMKGJOL5mBJXFPLNQjgixsCQ+291 /oHiojTCmgN6Tdq7UEcjB8FhsZRUgLstN15KMwQ0ZcCNYLKUynG5quY7JZburyNF SXwZ4GveXnJPD31vOAWNF91hjEh3S43wdVZDbKlZYdEp0sJPtxh+G1AQ9WEYC5Gc CgEIdF3AozgMH01sVM+E/12gfvGdgLl5umM+P+w6K76P7gXuYMmfgWCW4UGulPmQ BUTJMVlJQm4sfuEVyuZQgnJAHDpkybAqlsq3MFRlgdVEMHvYHqdmGBS39GHWreNs VRCJjRAruKpE6pCdUg5X9TXfubIPtjFx+Okh4Bfc7L8E88NfnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwWF5zQEtj74t5xXegzdoq5zD1TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGZiY2Q5NjktODRmYS0z NWFkLWJlYjAtNTI2OGU4YzUzNWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9chMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8mYRrianxvMBrTCOeih1l/a34gwr2PZ8yYb7l76OatJhei2Fpsl3Tm DzNDvf3LQzYMuAZpAZNT0g5Tuxp9Wq9lWDSuIbBOmyMjDYz3G0KYY5lmLCHc6I14 W6QMiM+RFA1ECUpXtPCCX3ZQ999SinrDZWYtbdMzBRmREf0Jq48HD/J/OoOhWwYb szmvdEkrCqUSDpNaBhCd2ZAQC3cPbelL2Xh7s38iu+UKDam3qB7q4eqeQX6hiwNG w/ZxbhpUqA8bZUm0/GSsfIy7huRDYv7u6KwGfCAjneTKf/5Yl/59/8Bx2jWpMG5i 8+AF66/pfCHgeq3520XNHcrGdZVuPMA= -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:58 2024 by rpki-client on console-ams.rpki-client.org