$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/27e44960-5e03-3089-998e-5143fbfdcd69.roa File: 27e44960-5e03-3089-998e-5143fbfdcd69.roa (raw, json) Hash identifier: FQKEoYVTjiWUCFNYh7Ykmg0FuSzh1h4NiI7KLGS+uQo= Subject key identifier: 63:5D:9B:EA:13:49:54:FA:08:AE:1E:27:4C:E7:9C:C7:BA:C0:BB:85 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847ED24D38A8B5BBF7AE3473380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/27e44960-5e03-3089-998e-5143fbfdcd69.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.220.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:d3:8a:8b:5b:bf:7a:e3:47:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=b0a79d43-4c58-4e26-a1c3-29cc5bc4ccb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6f:d9:41:02:ce:dd:91:46:b2:28:fb:51:5b: a3:01:ec:51:71:5a:06:53:3f:ee:75:89:f0:db:67: 95:ea:f8:16:26:6e:cb:fe:d8:76:0d:e3:e8:0d:85: dd:83:ce:34:6a:e0:f5:3c:b2:02:62:ae:46:23:c0: 81:94:99:eb:51:e6:36:c7:59:c7:88:e1:41:a7:76: 8d:c7:61:45:1a:a0:27:1e:ee:6c:65:ac:9b:7b:e0: cd:89:ff:7f:22:66:ee:3f:a1:74:32:da:1c:80:30: 02:63:84:40:67:3f:6f:bd:dd:24:97:18:5e:23:b9: 51:2e:6f:fe:83:fa:9a:17:34:a2:e4:1b:26:97:7d: 2a:8a:dd:d6:e6:f6:99:2f:66:a0:d8:74:e2:15:38: 8a:15:8a:31:53:db:9f:72:03:4f:dc:43:76:f5:35: 82:f5:c1:ae:52:4d:36:47:a9:4f:92:f4:af:31:54: 4f:54:04:38:d0:f9:2a:21:82:68:fe:e8:93:d3:64: 24:7b:05:91:dc:bf:d0:c1:55:05:d7:6b:ff:6e:4a: 22:0d:35:ef:9b:c0:d2:fa:87:6e:bc:86:a1:01:93: de:b2:5e:ff:c4:fc:9e:f6:e3:06:47:40:7b:d7:4b: 89:51:24:21:2f:c5:ac:bb:4a:5e:7e:7c:9f:74:5d: 3a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5D:9B:EA:13:49:54:FA:08:AE:1E:27:4C:E7:9C:C7:BA:C0:BB:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/27e44960-5e03-3089-998e-5143fbfdcd69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ed:48:2c:5e:6e:8e:e8:29:23:e3:93:1d:00:7e:06:04:9e: 16:c7:93:1c:0e:4d:12:08:50:78:4a:92:06:60:b2:5f:46:05: 90:7a:06:38:cf:4a:45:9f:77:aa:50:01:1e:f0:61:f9:87:d3: 84:88:9b:7a:e4:9a:66:38:3e:66:c8:c7:70:92:da:1e:0c:03: 86:07:a2:67:5c:57:ac:3b:d3:7b:00:bb:d7:80:4d:6e:e9:78: da:8f:14:3d:16:6c:ca:dc:c8:72:92:22:85:89:34:cb:74:f0: c9:47:e5:ff:e8:9f:7a:20:53:69:bc:43:55:3f:2b:1f:66:07: 11:a6:47:6f:21:f4:38:aa:0f:9c:04:e2:d6:df:e8:2b:d0:2e: 7e:10:63:57:ad:ab:b8:99:2d:f6:b3:d3:16:15:4a:30:a2:a6: e4:7d:31:cb:da:14:a0:32:21:9a:5a:a7:5b:bd:bb:00:c5:d3: 53:ae:0b:a3:41:07:34:a8:fd:b5:e0:50:00:3b:f8:28:38:c7: 9b:69:4f:2a:63:94:7b:37:e8:3f:58:a3:b1:7e:e3:8f:aa:56: c2:c3:dc:d7:6b:b2:7d:31:b9:d1:a4:39:f1:43:6d:df:1a:d2: 35:d7:b7:36:05:b8:67:9f:29:fd:9a:8b:82:6a:f9:26:3d:8f: 79:67:c6:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJNOKi1u/euNHM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk YjBhNzlkNDMtNGM1OC00ZTI2LWExYzMtMjljYzViYzRjY2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2/ZQQLO3ZFGsij7UVujAexRcVoGUz/udYnw 22eV6vgWJm7L/th2DePoDYXdg840auD1PLICYq5GI8CBlJnrUeY2x1nHiOFBp3aN x2FFGqAnHu5sZaybe+DNif9/ImbuP6F0MtocgDACY4RAZz9vvd0klxheI7lRLm/+ g/qaFzSi5Bsml30qit3W5vaZL2ag2HTiFTiKFYoxU9ufcgNP3EN29TWC9cGuUk02 R6lPkvSvMVRPVAQ40PkqIYJo/uiT02QkewWR3L/QwVUF12v/bkoiDTXvm8DS+odu vIahAZPesl7/xPye9uMGR0B710uJUSQhL8Wsu0pefnyfdF06lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNdm+oTSVT6CK4eJ0znnMe6wLuFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjdlNDQ5NjAtNWUwMy0z MDg5LTk5OGUtNTE0M2ZiZmRjZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9zKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPtSCxebo7oKSPjkx0AfgYEnhbHkxwOTRIIUHhKkgZgsl9GBZB6BjjP SkWfd6pQAR7wYfmH04SIm3rkmmY4PmbIx3CS2h4MA4YHomdcV6w703sAu9eATW7p eNqPFD0WbMrcyHKSIoWJNMt08MlH5f/on3ogU2m8Q1U/Kx9mBxGmR28h9DiqD5wE 4tbf6CvQLn4QY1etq7iZLfaz0xYVSjCipuR9McvaFKAyIZpap1u9uwDF01OuC6NB BzSo/bXgUAA7+Cg4x5tpTypjlHs36D9Yo7F+44+qVsLD3Ndrsn0xudGkOfFDbd8a 0jXXtzYFuGefKf2ai4Jq+SY9j3lnxr8= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:08 2024 by rpki-client on console-ams.rpki-client.org