$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c09196e-3fe2-3e7f-bf2f-a5b39c08eef6.roa File: 4c09196e-3fe2-3e7f-bf2f-a5b39c08eef6.roa (raw, json) Hash identifier: imjJK0Mb0a5HmGxOVH5IzxMrdqOJ+Qz4DpYF71sOZxs= Subject key identifier: 6A:8C:FF:66:0B:62:21:D7:C1:BC:FB:BB:B1:15:50:D5:F1:23:1D:C0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847D99A03D34EEEE4FD896AFA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c09196e-3fe2-3e7f-bf2f-a5b39c08eef6.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 55836 IP address blocks: 23.204.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:9a:03:d3:4e:ee:e4:fd:89:6a:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=8b0788a6-3529-4877-80f6-9fb5fca404a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d6:99:96:7f:50:9f:8e:63:99:39:e6:c9:48: 98:ee:91:7a:d6:84:a3:8f:51:75:fd:5c:19:17:44: 01:e8:bd:0b:f8:0d:a3:3a:d4:e5:6c:82:6a:1a:0e: 41:24:e8:19:54:81:0c:5e:09:de:68:68:19:b5:75: 1b:15:28:28:d7:f3:1e:4f:f9:a1:78:31:23:0c:f0: 10:53:6f:31:aa:a7:0b:3a:68:0f:50:62:1e:36:c8: d4:be:2a:4e:f7:fc:d9:03:77:72:73:4d:87:1f:6a: c1:f4:b7:88:b3:17:10:88:14:59:60:ad:2c:f2:63: 08:7a:01:01:00:6e:32:c4:a2:4e:fe:e6:13:22:ff: 62:e5:3e:c9:f5:a3:ab:bb:37:4b:cb:57:fa:4a:37: f5:be:d2:10:a1:f0:2b:e0:68:18:b7:a2:71:5f:f1: b4:d8:34:f8:e7:8c:bd:c8:af:17:86:33:5a:ca:bc: 78:de:cd:5c:25:e5:80:97:3e:29:99:2e:ad:d4:b1: db:6d:3c:eb:39:54:71:e9:5f:0e:40:78:3e:1d:21: fc:8c:b9:68:eb:c3:9e:2c:20:82:16:bc:04:f1:f7: b0:7b:e9:5a:46:fc:4d:9b:af:aa:ae:e8:8c:eb:bf: a5:86:23:39:24:18:34:11:89:c5:bf:94:08:aa:ae: 56:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8C:FF:66:0B:62:21:D7:C1:BC:FB:BB:B1:15:50:D5:F1:23:1D:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c09196e-3fe2-3e7f-bf2f-a5b39c08eef6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:e5:9d:3a:4a:e9:69:a4:fe:14:4e:89:c0:96:4f:dd:7e:ce: 73:79:f8:cb:56:a1:08:8b:22:fa:0a:fd:64:63:f0:44:13:9a: bd:d7:ce:f9:29:40:11:8e:ed:4f:7b:1a:40:6f:06:f0:2c:05: b5:c1:5d:10:6c:32:92:af:75:ca:64:5c:19:04:e8:05:c5:f2: 4c:0e:ea:e8:51:f2:55:0d:1c:29:1f:a0:0e:89:54:8d:3d:df: bc:dd:1b:35:1f:bc:e8:85:6c:d1:77:eb:ff:f9:7c:4d:72:5a: 96:98:73:04:7d:fc:8b:7b:0c:73:cf:74:2e:4e:39:e3:d9:dd: c0:31:27:bf:9e:b9:04:af:73:5d:b1:96:d1:5e:eb:a2:26:70: db:16:95:24:97:9d:80:ae:6b:8a:97:14:25:a5:e9:79:7f:da: 7e:cc:f5:db:c6:10:78:f6:f9:28:4b:59:a1:aa:bc:71:90:e5: 0a:4b:28:f5:dc:44:cc:e7:d6:fc:17:0d:c9:3e:ac:8f:c6:ad: 39:65:4e:3c:71:ae:1b:80:40:b4:cf:e4:3f:d5:66:f5:ce:73: 30:90:db:05:20:2e:1c:a3:fd:4f:3e:11:2d:c6:e2:b9:f3:35: 9c:56:74:e9:ea:91:0b:02:3d:cd:17:63:4b:9a:2c:9f:7f:71: fc:97:b6:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmgPTTu7k/Ylq+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk OGIwNzg4YTYtMzUyOS00ODc3LTgwZjYtOWZiNWZjYTQwNGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdaZln9Qn45jmTnmyUiY7pF61oSjj1F1/VwZ F0QB6L0L+A2jOtTlbIJqGg5BJOgZVIEMXgneaGgZtXUbFSgo1/MeT/mheDEjDPAQ U28xqqcLOmgPUGIeNsjUvipO9/zZA3dyc02HH2rB9LeIsxcQiBRZYK0s8mMIegEB AG4yxKJO/uYTIv9i5T7J9aOruzdLy1f6Sjf1vtIQofAr4GgYt6JxX/G02DT454y9 yK8XhjNayrx43s1cJeWAlz4pmS6t1LHbbTzrOVRx6V8OQHg+HSH8jLlo68OeLCCC FrwE8fewe+laRvxNm6+qruiM67+lhiM5JBg0EYnFv5QIqq5WzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqM/2YLYiHXwbz7u7EVUNXxIx3AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGMwOTE5NmUtM2ZlMi0z ZTdmLWJmMmYtYTViMzljMDhlZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInlnTpK6Wmk/hROicCWT91+znN5+MtWoQiLIvoK/WRj8EQTmr3Xzvkp QBGO7U97GkBvBvAsBbXBXRBsMpKvdcpkXBkE6AXF8kwO6uhR8lUNHCkfoA6JVI09 37zdGzUfvOiFbNF36//5fE1yWpaYcwR9/It7DHPPdC5OOePZ3cAxJ7+euQSvc12x ltFe66ImcNsWlSSXnYCua4qXFCWl6Xl/2n7M9dvGEHj2+ShLWaGqvHGQ5QpLKPXc RMzn1vwXDck+rI/GrTllTjxxrhuAQLTP5D/VZvXOczCQ2wUgLhyj/U8+ES3G4rnz NZxWdOnqkQsCPc0XY0uaLJ9/cfyXtms= -----END CERTIFICATE-----Generated at Mon Nov 25 16:31:59 2024 by rpki-client on console-ams.rpki-client.org