$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cde9d4b-59c4-33b4-8d1d-591f13f7f0d7.roa File: 2cde9d4b-59c4-33b4-8d1d-591f13f7f0d7.roa (raw, json) Hash identifier: e/hj9jyyIaVORKh0ltZjAf6DTmd/tAgTfqA5QaoFdf0= Subject key identifier: 8D:2C:B1:D4:71:7A:7D:DE:EF:79:46:09:8D:52:B9:1A:8D:89:52:F3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847521616ED434F160C8B204100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cde9d4b-59c4-33b4-8d1d-591f13f7f0d7.roa Signing time: Tue 24 Sep 2024 13:00:40 +0000 ROA not before: Tue 24 Sep 2024 13:00:40 +0000 ROA not after: Mon 23 Dec 2024 14:00:40 +0000 asID: 20940 IP address blocks: 173.223.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:52:16:16:ed:43:4f:16:0c:8b:20:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 13:00:40 2024 GMT Not After : Dec 23 14:00:40 2024 GMT Subject: CN=a349a212-3672-4821-b4e8-afcbd2e0d642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5a:7d:52:50:1e:7e:1f:82:08:b3:f0:5e:fa: 20:63:f5:ad:d0:7b:d1:2f:4c:71:9c:d1:94:c6:8c: b1:5a:9d:4d:69:b3:12:90:ec:92:e5:11:d7:99:0b: 15:7b:b2:ba:56:6b:8d:56:43:73:42:9c:83:fe:1c: 1a:54:00:1c:8b:4a:21:a2:f7:fc:95:35:51:50:a3: 13:d9:c6:ff:87:a3:6d:a9:a6:e4:59:a6:23:3a:ee: 8a:a5:18:25:23:57:ba:4f:7e:c4:b6:e1:09:01:79: b0:14:64:a0:ed:92:ee:61:5a:4a:e2:37:d8:e7:4b: 41:f5:02:42:2c:bc:7a:e5:3b:ad:70:3a:90:2d:4a: 50:92:9f:8a:06:13:84:2c:20:e2:d7:eb:d7:ce:16: 51:44:9c:5f:93:5e:ca:c1:3f:ad:e8:eb:69:30:0a: 05:60:8a:0f:6f:d9:91:ca:dd:ab:aa:02:b6:a2:45: cb:82:a2:81:92:ea:f8:52:76:f7:d2:00:eb:2c:90: 33:63:17:28:25:fa:1b:53:a9:07:52:0b:59:d7:64: 51:75:07:96:62:42:da:4c:99:bb:16:c2:86:a5:97: a3:1b:d9:45:99:2d:15:69:dd:6a:52:fd:81:e4:85: 84:6e:fb:fb:77:1b:43:f7:0c:ef:70:6d:50:2c:ee: 48:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2C:B1:D4:71:7A:7D:DE:EF:79:46:09:8D:52:B9:1A:8D:89:52:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cde9d4b-59c4-33b4-8d1d-591f13f7f0d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:f9:f8:f3:e3:cb:87:40:ee:8a:76:6b:2e:03:ea:d6:a1:51: 62:b2:7f:1a:bb:5c:dd:31:e7:d9:4f:43:ab:f7:80:50:a2:d8: 45:2f:0d:37:75:ea:02:82:c4:5b:ae:ac:24:0b:28:2e:d0:16: ae:0d:77:bb:64:fc:63:f2:f2:27:9f:51:32:a1:fc:55:72:99: c5:ab:18:e2:9c:7c:0c:b4:46:c6:5c:f2:c2:c1:55:0d:dc:5f: d1:82:94:f5:10:b4:1c:78:17:a4:b1:eb:8d:87:fe:8f:2e:b3: f8:76:4f:89:b0:5e:4f:bd:49:74:90:f3:72:8a:52:da:49:56: cd:7a:cf:ce:b0:57:9e:b3:23:d0:8e:22:02:07:12:6e:4c:d0: 21:f7:31:fb:5e:84:3a:5c:62:3b:b2:74:f6:ed:f2:de:2e:f8: 44:e8:cc:97:ba:54:2b:22:9f:3e:89:19:43:e1:0a:58:22:01: cf:2b:1b:02:a7:11:98:96:06:43:74:78:1b:ae:dc:30:91:7a: 08:9f:38:6f:97:9a:a1:cf:d8:b0:33:96:c8:f7:18:83:2d:80: e6:e7:60:5c:aa:63:0b:03:b2:55:67:74:14:81:18:82:b8:89: f5:7b:90:5e:0d:2b:c1:24:65:c6:c0:be:eb:39:d3:1a:e4:ed: 5a:ba:ec:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdSFhbtQ08WDIsgQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyNDEzMDA0MFoXDTI0MTIyMzE0MDA0MFowLzEtMCsGA1UEAxMk YTM0OWEyMTItMzY3Mi00ODIxLWI0ZTgtYWZjYmQyZTBkNjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1p9UlAefh+CCLPwXvogY/Wt0HvRL0xxnNGU xoyxWp1NabMSkOyS5RHXmQsVe7K6VmuNVkNzQpyD/hwaVAAci0ohovf8lTVRUKMT 2cb/h6NtqabkWaYjOu6KpRglI1e6T37EtuEJAXmwFGSg7ZLuYVpK4jfY50tB9QJC LLx65TutcDqQLUpQkp+KBhOELCDi1+vXzhZRRJxfk17KwT+t6OtpMAoFYIoPb9mR yt2rqgK2okXLgqKBkur4Unb30gDrLJAzYxcoJfobU6kHUgtZ12RRdQeWYkLaTJm7 FsKGpZejG9lFmS0Vad1qUv2B5IWEbvv7dxtD9wzvcG1QLO5IvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0ssdRxen3e73lGCY1SuRqNiVLzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmNkZTlkNGItNTljNC0z M2I0LThkMWQtNTkxZjEzZjdmMGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArd/qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAb5+PPjy4dA7op2ay4D6tahUWKyfxq7XN0x59lPQ6v3gFCi2EUvDTd1 6gKCxFuurCQLKC7QFq4Nd7tk/GPy8iefUTKh/FVymcWrGOKcfAy0RsZc8sLBVQ3c X9GClPUQtBx4F6Sx642H/o8us/h2T4mwXk+9SXSQ83KKUtpJVs16z86wV56zI9CO IgIHEm5M0CH3MftehDpcYjuydPbt8t4u+ETozJe6VCsinz6JGUPhClgiAc8rGwKn EZiWBkN0eBuu3DCRegifOG+XmqHP2LAzlsj3GIMtgObnYFyqYwsDslVndBSBGIK4 ifV7kF4NK8EkZcbAvus50xrk7Vq67Eg= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:30 2024 by rpki-client on console-fra.rpki-client.org