$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/199388d5-89f8-39dd-b210-3f6c4f38c9a7.roa File: 199388d5-89f8-39dd-b210-3f6c4f38c9a7.roa (raw, json) Hash identifier: TEwAvc6PVdcDQPVw9w5tuGh4XoSVFb87Jas+Tn7IBSk= Subject key identifier: 76:7B:FD:F4:05:5F:A3:FA:CB:BE:09:10:17:87:F8:DB:CA:CD:83:73 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847DF2F666CCE7F25561549EE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/199388d5-89f8-39dd-b210-3f6c4f38c9a7.roa Signing time: Thu 14 Nov 2024 02:00:27 +0000 ROA not before: Thu 14 Nov 2024 02:00:27 +0000 ROA not after: Wed 12 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.217.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:df:2f:66:6c:ce:7f:25:56:15:49:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 14 02:00:27 2024 GMT Not After : Feb 12 02:00:27 2025 GMT Subject: CN=a4860fb3-ac5b-49f0-92d9-66872ac8dba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:32:e8:89:c9:cf:ab:39:05:ed:a5:b1:a9:e1: 5c:2a:29:cc:53:12:51:c8:28:af:e0:e6:5b:42:09: d0:31:9d:91:a4:f6:36:6d:83:14:b4:54:2c:2a:e2: 3e:b0:49:2c:f6:57:4c:54:19:ab:89:03:18:a6:d6: 72:a5:63:0f:2e:85:bc:72:54:7b:2f:e1:52:1e:95: c9:eb:4f:83:f9:a7:db:66:df:26:88:ce:0b:15:5a: f6:a2:1c:0e:b3:2f:a4:bc:dc:e1:80:2b:b8:aa:09: f1:79:a8:73:bb:32:f9:df:34:1f:5a:bf:ba:94:8c: 10:b0:cb:28:28:02:e9:f3:de:cd:ac:2a:db:64:3b: d3:bd:da:f8:3f:3d:94:8b:39:69:96:ad:51:ba:89: aa:5c:c0:1c:29:ef:b7:38:38:9c:fc:e0:4c:bf:c7: c5:d5:be:66:f6:13:15:72:db:78:87:c6:55:62:5d: 0a:05:4c:31:32:0d:9a:93:64:50:69:4a:fb:2e:7a: bd:25:68:78:8d:6a:df:99:15:13:be:88:67:d2:5a: ac:82:a6:61:3f:81:23:1d:4f:8e:a0:5f:20:87:9f: 95:ad:4a:b2:62:56:2e:28:58:c7:17:c8:fa:b5:6d: a2:0e:e9:cc:44:8e:cb:43:6f:90:f1:b0:4c:75:10: 7d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:7B:FD:F4:05:5F:A3:FA:CB:BE:09:10:17:87:F8:DB:CA:CD:83:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/199388d5-89f8-39dd-b210-3f6c4f38c9a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d3:35:96:0d:74:13:5b:14:86:85:6c:9d:6b:d8:a8:13:b6: d9:06:83:27:46:d4:4f:5a:31:fc:27:c5:25:45:3f:7b:2f:d4: 95:11:77:82:ee:d1:46:a4:d1:1e:d2:96:7a:aa:b9:8f:2c:e6: 3d:bc:fe:47:d7:d8:2c:f3:1b:4f:9b:f1:f4:29:8c:2c:2b:e6: f8:18:10:0c:65:fc:7c:82:91:b9:f8:37:e0:27:bf:20:09:f1: 53:62:5a:ae:40:ca:9b:40:e6:9a:ed:f5:34:b7:5d:79:9d:8c: 9e:8c:f7:8c:ea:1d:fb:5b:c7:00:9d:b7:cb:32:df:f3:4b:f0: 2c:13:51:01:43:36:2d:79:38:d8:3c:1f:0f:be:4f:69:ff:bb: da:90:82:3e:14:47:bb:26:79:f2:02:88:e3:d7:49:2b:59:97: 91:7e:00:9b:40:8f:0c:59:ef:67:2a:4c:bf:f9:8c:1c:c3:d7: 71:eb:c1:23:16:1d:a1:b3:79:97:57:8c:7f:c7:73:44:48:a2: 43:cc:5e:21:42:bd:fd:dd:c4:0b:a1:58:88:f5:03:2a:59:78: 68:a4:65:4e:1c:07:9f:d4:6a:8f:d1:5d:f8:61:af:7c:ba:b9: 8d:4f:4f:cc:f3:74:01:1d:ca:7d:44:c0:0f:99:33:be:76:60: 3b:ee:15:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEffL2Zszn8lVhVJ7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk YTQ4NjBmYjMtYWM1Yi00OWYwLTkyZDktNjY4NzJhYzhkYmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTLoicnPqzkF7aWxqeFcKinMUxJRyCiv4OZb QgnQMZ2RpPY2bYMUtFQsKuI+sEks9ldMVBmriQMYptZypWMPLoW8clR7L+FSHpXJ 60+D+afbZt8miM4LFVr2ohwOsy+kvNzhgCu4qgnxeahzuzL53zQfWr+6lIwQsMso KALp897NrCrbZDvTvdr4Pz2Uizlplq1RuomqXMAcKe+3ODic/OBMv8fF1b5m9hMV ctt4h8ZVYl0KBUwxMg2ak2RQaUr7Lnq9JWh4jWrfmRUTvohn0lqsgqZhP4EjHU+O oF8gh5+VrUqyYlYuKFjHF8j6tW2iDunMRI7LQ2+Q8bBMdRB91wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZ7/fQFX6P6y74JEBeH+NvKzYNzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTk5Mzg4ZDUtODlmOC0z OWRkLWIyMTAtM2Y2YzRmMzhjOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ltMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnTNZYNdBNbFIaFbJ1r2KgTttkGgydG1E9aMfwnxSVFP3sv1JURd4Lu 0Uak0R7SlnqquY8s5j28/kfX2CzzG0+b8fQpjCwr5vgYEAxl/HyCkbn4N+AnvyAJ 8VNiWq5AyptA5prt9TS3XXmdjJ6M94zqHftbxwCdt8sy3/NL8CwTUQFDNi15ONg8 Hw++T2n/u9qQgj4UR7smefICiOPXSStZl5F+AJtAjwxZ72cqTL/5jBzD13HrwSMW HaGzeZdXjH/Hc0RIokPMXiFCvf3dxAuhWIj1AypZeGikZU4cB5/Uao/RXfhhr3y6 uY1PT8zzdAEdyn1EwA+ZM752YDvuFQE= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:22 2024 by rpki-client on console-fra.rpki-client.org