$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/177925c3-a46e-3c33-9294-0c94dbddfd83.roa File: 177925c3-a46e-3c33-9294-0c94dbddfd83.roa (raw, json) Hash identifier: QFYw0CQT/P/Fn33ubbZWkvsfgUGYbrhVfCcQSlc6HPs= Subject key identifier: 50:93:2D:1A:5F:E8:82:F1:41:2F:54:7E:F5:C6:47:71:6E:60:55:4C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847CA3F911ED088DE353E49AE40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/177925c3-a46e-3c33-9294-0c94dbddfd83.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.203.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:91:1e:d0:88:de:35:3e:49:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=647b831e-5a21-4dcb-be21-fb277de545ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b0:80:27:a1:63:ed:5c:6b:d1:31:57:ea:9d: e0:62:c2:41:0a:e9:c4:ff:16:a4:bf:4d:35:82:b9: ec:e7:38:b4:d1:16:60:5d:36:07:d4:1d:c6:15:5a: ac:3a:6b:01:95:b9:25:de:bd:0a:7d:e4:69:44:55: 90:17:a6:da:20:57:76:a5:72:72:5e:81:86:e7:d2: 47:69:aa:be:de:bc:0f:5d:75:8e:26:ea:93:86:10: af:ae:dc:c6:f7:0f:31:aa:62:84:9c:ba:54:46:7a: f7:b4:b7:e1:d1:14:44:9d:e8:d5:87:01:da:23:13: 16:3a:58:f9:83:02:fb:88:ca:d4:28:c1:f4:59:1a: 0e:52:b5:38:81:84:f8:25:2c:da:b8:c2:fb:ca:f0: 83:68:20:2a:78:b0:bf:77:03:e7:fa:b4:4a:8a:04: dd:a3:a4:88:a8:46:53:8a:6b:db:2b:7a:42:dc:e9: 63:c2:b5:1f:3a:02:01:c5:d9:a5:b2:91:69:a7:96: 8c:db:bf:dc:e5:a5:bd:9e:69:39:64:90:b3:6f:b0: 9b:7f:77:8d:59:ba:c5:3b:0b:92:2d:76:5c:fc:9c: dc:73:e4:a8:2d:c9:3e:25:b8:5a:a9:f6:90:bc:31: e5:4b:2e:09:c3:94:2f:3f:d0:d4:0d:db:36:0d:c3: e1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:93:2D:1A:5F:E8:82:F1:41:2F:54:7E:F5:C6:47:71:6E:60:55:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/177925c3-a46e-3c33-9294-0c94dbddfd83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:95:48:77:3f:e8:e2:38:b3:0e:b1:84:af:c0:1e:5d:79:65: 26:5c:62:5d:f9:c9:08:78:f4:df:89:9b:d5:b9:47:f9:e0:d0: fa:dc:c1:26:d9:38:8d:77:4b:15:1a:7c:84:0c:b8:a1:0d:4e: 2c:26:ab:15:d5:dd:56:f9:13:8d:73:90:b7:dc:c8:18:4b:e0: 29:47:2b:7b:fb:53:c0:f7:d3:0e:39:9f:b6:51:aa:5b:25:1f: 89:3e:c7:84:67:c3:81:be:19:a8:f3:0c:4a:72:ba:25:1f:1c: 1f:d0:cd:70:c2:a2:f2:d5:d3:db:f7:db:bd:07:7b:41:f6:bc: 6c:26:d5:8f:08:17:fa:8b:96:4c:33:64:95:01:ed:36:19:24: 31:34:35:41:51:1c:f0:e3:97:a7:96:e2:d2:ba:40:dd:94:28: bc:c7:5b:5d:3b:29:9e:b9:45:e7:55:aa:54:80:11:b0:1c:50: c9:6d:d9:e6:c6:1a:a6:e9:ae:2c:8c:29:3f:ed:12:9a:39:97: 20:8e:fe:4d:e2:19:82:1e:1b:27:e8:20:81:d6:53:45:64:e9: 80:8a:56:0e:cf:12:57:07:38:a5:01:f9:ad:1c:63:3e:c4:ff: 6b:eb:3f:07:ac:d1:f4:53:b5:0d:bc:e3:60:18:36:d0:2b:92: e5:fd:6e:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP5Ee0IjeNT5JrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NjQ3YjgzMWUtNWEyMS00ZGNiLWJlMjEtZmIyNzdkZTU0NWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7CAJ6Fj7Vxr0TFX6p3gYsJBCunE/xakv001 grns5zi00RZgXTYH1B3GFVqsOmsBlbkl3r0KfeRpRFWQF6baIFd2pXJyXoGG59JH aaq+3rwPXXWOJuqThhCvrtzG9w8xqmKEnLpURnr3tLfh0RREnejVhwHaIxMWOlj5 gwL7iMrUKMH0WRoOUrU4gYT4JSzauML7yvCDaCAqeLC/dwPn+rRKigTdo6SIqEZT imvbK3pC3OljwrUfOgIBxdmlspFpp5aM27/c5aW9nmk5ZJCzb7Cbf3eNWbrFOwuS LXZc/Jzcc+SoLck+JbhaqfaQvDHlSy4Jw5QvP9DUDds2DcPh6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCTLRpf6ILxQS9UfvXGR3FuYFVMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTc3OTI1YzMtYTQ2ZS0z YzMzLTkyOTQtMGM5NGRiZGRmZDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8v4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWVSHc/6OI4sw6xhK/AHl15ZSZcYl35yQh49N+Jm9W5R/ng0PrcwSbZ OI13SxUafIQMuKENTiwmqxXV3Vb5E41zkLfcyBhL4ClHK3v7U8D30w45n7ZRqlsl H4k+x4Rnw4G+GajzDEpyuiUfHB/QzXDCovLV09v3270He0H2vGwm1Y8IF/qLlkwz ZJUB7TYZJDE0NUFRHPDjl6eW4tK6QN2UKLzHW107KZ65RedVqlSAEbAcUMlt2ebG GqbpriyMKT/tEpo5lyCO/k3iGYIeGyfoIIHWU0Vk6YCKVg7PElcHOKUB+a0cYz7E /2vrPwes0fRTtQ2842AYNtArkuX9brw= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:02 2024 by rpki-client on console-ams.rpki-client.org