$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23eae7dc-7725-30e3-a331-bfdd67b0d2e2.roa File: 23eae7dc-7725-30e3-a331-bfdd67b0d2e2.roa (raw, json) Hash identifier: oL6qya7n3Q4i94+FrbRFN8sP3ggAjrhi0bbcfTHwfBU= Subject key identifier: 96:2D:D3:62:2A:4D:5D:C9:9A:5E:7F:3F:56:DC:9E:5A:18:1B:29:0D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847D999FE3F6602195F382B7140 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23eae7dc-7725-30e3-a331-bfdd67b0d2e2.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.205.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:99:fe:3f:66:02:19:5f:38:2b:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=69ccfb8b-195f-41f9-976d-7a47fe820d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7e:ee:ee:3f:41:b9:3d:bf:1d:bb:fb:1e:79: e5:a3:d9:64:98:0c:f3:e1:a8:a9:21:d9:10:24:8b: e5:2d:22:92:84:0f:a3:5f:8a:3c:c2:36:87:3e:4b: 19:9a:db:18:7f:1f:f4:9d:53:d8:64:43:79:1a:26: 29:ab:3e:0c:92:c9:42:c4:da:99:be:e2:52:6d:e8: 10:28:1a:d5:55:76:1a:6c:70:29:b9:25:94:af:bd: ae:95:48:25:21:79:8f:ac:f9:96:0f:ad:5b:95:3e: 52:9f:85:69:9d:3e:09:a8:14:52:ca:fc:34:3a:1d: b2:69:12:16:f1:97:b3:10:cc:6f:12:a2:d0:3d:a6: bb:7b:71:55:0f:8a:15:71:1b:ba:b0:21:68:f9:65: 5f:48:30:fc:8f:f9:7f:df:43:af:ee:91:8b:53:31: ee:b5:00:50:0f:20:9f:46:b6:9a:9f:3b:84:fc:15: 7d:3b:55:9b:7c:35:fa:67:1a:54:30:8a:71:f9:ee: 94:27:eb:88:23:4b:75:d1:7d:cc:cb:ab:ed:b3:b5: fc:fa:df:ab:6f:6e:bd:f3:9e:00:b8:6e:c1:d1:09: 09:7b:5b:ff:67:b5:d2:c1:81:74:f6:95:0b:d0:63: 57:1b:75:77:2a:f8:06:ec:d8:a2:fb:06:bc:4b:5b: 59:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2D:D3:62:2A:4D:5D:C9:9A:5E:7F:3F:56:DC:9E:5A:18:1B:29:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23eae7dc-7725-30e3-a331-bfdd67b0d2e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:25:4a:02:8e:e4:ba:20:fa:9c:a2:3c:fd:92:f9:d5:2b:20: 3e:0d:0b:5a:6c:a4:d8:4f:96:68:c5:ce:08:96:bc:81:f2:2e: aa:56:87:7b:d6:c0:f6:af:9f:ce:76:37:3c:d8:92:25:9f:7c: ce:e7:06:f7:d4:83:02:12:d6:ac:45:c8:85:2b:f4:a7:01:48: 69:02:f5:7c:11:bc:18:2c:28:f3:6b:7b:6f:81:45:26:48:1a: cb:f4:4a:ff:d7:67:6b:67:9b:41:72:ed:ea:67:87:92:bc:e5: 0b:35:b1:8f:b8:d6:06:13:e5:58:9f:1a:af:7f:02:45:35:fb: 4b:bb:77:bc:12:6c:55:1c:32:89:53:2c:24:bb:12:82:b7:48: 91:5a:d8:78:8b:e4:cb:f1:03:82:e7:e7:8a:b8:1b:9c:89:4b: 3a:fb:bd:5d:fc:85:06:cf:1b:3e:d0:fa:61:04:ea:6f:9d:06: 15:9d:36:b3:92:b2:54:f2:93:74:0a:d3:2c:d8:21:93:e7:c2: 26:8f:9e:a4:95:0e:79:54:50:fa:53:c1:8a:a2:05:fd:50:ad: d1:fc:ae:68:2d:ed:5a:61:2b:8c:42:70:26:4a:f9:9f:b7:e0: f8:da:61:e0:3d:3c:ce:ea:9e:18:b9:b9:d2:ad:1e:b8:ee:3c: 10:6f:8f:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmf4/ZgIZXzgrcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk NjljY2ZiOGItMTk1Zi00MWY5LTk3NmQtN2E0N2ZlODIwZDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn7u7j9BuT2/Hbv7Hnnlo9lkmAzz4aipIdkQ JIvlLSKShA+jX4o8wjaHPksZmtsYfx/0nVPYZEN5GiYpqz4MkslCxNqZvuJSbegQ KBrVVXYabHApuSWUr72ulUglIXmPrPmWD61blT5Sn4VpnT4JqBRSyvw0Oh2yaRIW 8ZezEMxvEqLQPaa7e3FVD4oVcRu6sCFo+WVfSDD8j/l/30Ov7pGLUzHutQBQDyCf RraanzuE/BV9O1WbfDX6ZxpUMIpx+e6UJ+uII0t10X3My6vts7X8+t+rb269854A uG7B0QkJe1v/Z7XSwYF09pUL0GNXG3V3KvgG7Nii+wa8S1tZRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYt02IqTV3Jml5/P1bcnloYGykNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjNlYWU3ZGMtNzcyNS0z MGUzLWEzMzEtYmZkZDY3YjBkMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF838MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUlSgKO5Log+pyiPP2S+dUrID4NC1pspNhPlmjFzgiWvIHyLqpWh3vW wPavn852NzzYkiWffM7nBvfUgwIS1qxFyIUr9KcBSGkC9XwRvBgsKPNre2+BRSZI Gsv0Sv/XZ2tnm0Fy7epnh5K85Qs1sY+41gYT5VifGq9/AkU1+0u7d7wSbFUcMolT LCS7EoK3SJFa2HiL5MvxA4Ln54q4G5yJSzr7vV38hQbPGz7Q+mEE6m+dBhWdNrOS slTyk3QK0yzYIZPnwiaPnqSVDnlUUPpTwYqiBf1QrdH8rmgt7VphK4xCcCZK+Z+3 4PjaYeA9PM7qnhi5udKtHrjuPBBvj3Q= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:07 2024 by rpki-client on console-ams.rpki-client.org