$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f5c9445-2b59-31eb-94ac-dab3c3d45eb8.roa File: 4f5c9445-2b59-31eb-94ac-dab3c3d45eb8.roa (raw, json) Hash identifier: CeUyrmGWN8DWefKPBKaUt1Oz0sTtdjhQcy46d7tqc0I= Subject key identifier: 4C:6A:7D:D4:B5:B5:23:85:4C:BA:D5:DD:05:0F:BE:E6:73:EE:FC:7A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847EA5A07180EC4D23EBBB2AC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f5c9445-2b59-31eb-94ac-dab3c3d45eb8.roa Signing time: Mon 18 Nov 2024 02:00:27 +0000 ROA not before: Mon 18 Nov 2024 02:00:27 +0000 ROA not after: Sun 16 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.218.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ea:5a:07:18:0e:c4:d2:3e:bb:b2:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 18 02:00:27 2024 GMT Not After : Feb 16 02:00:27 2025 GMT Subject: CN=7c3f25be-fdf0-4c50-871a-afa5dcc6b9fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7d:c3:69:0a:40:0d:90:f1:1d:58:09:5f:7e: 10:be:fa:09:cc:71:1d:80:97:87:0a:6c:bd:46:28: e2:b9:f3:7d:ed:4d:c9:0f:2e:98:b4:19:c7:e2:c4: ff:35:4f:0b:90:56:bf:c5:7f:c8:5b:34:a9:8b:aa: 6e:bd:e2:a8:df:85:33:31:b9:40:65:c3:80:b5:9f: 1c:d2:44:3b:cf:5f:b0:de:d1:91:39:29:b0:13:0c: f5:bc:f7:4b:f8:82:29:55:bc:1a:b8:7d:e7:2d:74: fa:40:15:5e:43:ad:e9:76:0b:9c:b5:b5:94:f9:d7: 75:27:fe:9f:f2:b2:fb:1f:eb:ae:cf:ab:b1:c1:93: 67:5a:1c:08:b9:88:3e:72:3c:14:52:63:f5:45:ae: a0:4f:16:69:24:83:85:2b:cf:46:e2:03:89:76:59: 65:98:7a:36:50:18:6e:a8:a1:57:02:4d:ec:86:d7: 5f:3c:43:ab:11:d8:fc:9c:bf:5a:0a:9a:5e:d5:15: 04:64:0b:12:0b:a5:31:3f:d4:13:2f:50:fc:29:8c: 19:0e:e1:fc:ba:ff:7a:fd:3a:50:da:88:78:97:db: 9f:93:42:2a:e9:db:61:b9:57:9c:a9:9b:ae:18:d4: 55:28:51:23:a1:32:bb:db:ec:54:eb:14:c6:a1:b7: 3f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6A:7D:D4:B5:B5:23:85:4C:BA:D5:DD:05:0F:BE:E6:73:EE:FC:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f5c9445-2b59-31eb-94ac-dab3c3d45eb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:4f:5d:18:36:e3:f8:8e:87:20:4a:de:d6:80:24:c5:a6:54: ab:30:ac:fc:cb:ac:7e:39:73:ea:c5:b9:87:cd:39:4b:13:55: 04:3b:42:70:dd:af:4b:f2:ec:1b:d7:f8:79:52:37:4a:ba:5f: f8:3e:63:75:74:25:46:2a:1e:68:15:ec:f1:f3:af:49:4d:7e: 34:0f:6f:ec:e5:e5:44:bd:04:8b:0c:7c:32:7a:13:de:3e:e4: aa:c6:b2:88:fe:27:26:f3:69:97:fc:79:63:c1:a5:b2:10:37: 51:ae:20:27:fb:09:2e:a1:92:e0:f9:16:7c:2c:a3:70:0f:71: e6:ab:13:bf:12:bc:e5:99:d1:fd:ce:03:7d:f1:eb:7a:9d:5a: 84:12:3b:0a:d2:a8:04:2d:70:e5:54:d0:ca:b3:d2:d7:61:48: d1:2e:28:c9:ed:ce:62:0e:fe:09:43:3a:59:97:1d:a5:81:42: 5a:cd:d1:3b:e1:49:48:92:aa:d9:ed:2b:78:cd:b0:e2:5f:ea: c5:1d:45:97:1b:a2:81:2c:f4:e5:62:01:da:b4:27:18:fe:a5: 48:07:c5:bc:e5:47:8a:cf:b2:f6:85:24:79:19:c1:66:29:1d: f6:5f:fc:4e:36:4e:e6:0f:61:af:63:2b:3a:9b:b4:91:e7:38: 2a:6c:09:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfqWgcYDsTSPruyrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExODAyMDAyN1oXDTI1MDIxNjAyMDAyN1owLzEtMCsGA1UEAxMk N2MzZjI1YmUtZmRmMC00YzUwLTg3MWEtYWZhNWRjYzZiOWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg33DaQpADZDxHVgJX34QvvoJzHEdgJeHCmy9 RijiufN97U3JDy6YtBnH4sT/NU8LkFa/xX/IWzSpi6puveKo34UzMblAZcOAtZ8c 0kQ7z1+w3tGROSmwEwz1vPdL+IIpVbwauH3nLXT6QBVeQ63pdguctbWU+dd1J/6f 8rL7H+uuz6uxwZNnWhwIuYg+cjwUUmP1Ra6gTxZpJIOFK89G4gOJdlllmHo2UBhu qKFXAk3shtdfPEOrEdj8nL9aCppe1RUEZAsSC6UxP9QTL1D8KYwZDuH8uv96/TpQ 2oh4l9ufk0Iq6dthuVecqZuuGNRVKFEjoTK72+xU6xTGobc/dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExqfdS1tSOFTLrV3QUPvuZz7vx6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGY1Yzk0NDUtMmI1OS0z MWViLTk0YWMtZGFiM2MzZDQ1ZWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9rZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRPXRg24/iOhyBK3taAJMWmVKswrPzLrH45c+rFuYfNOUsTVQQ7QnDd r0vy7BvX+HlSN0q6X/g+Y3V0JUYqHmgV7PHzr0lNfjQPb+zl5US9BIsMfDJ6E94+ 5KrGsoj+JybzaZf8eWPBpbIQN1GuICf7CS6hkuD5Fnwso3APcearE78SvOWZ0f3O A33x63qdWoQSOwrSqAQtcOVU0Mqz0tdhSNEuKMntzmIO/glDOlmXHaWBQlrN0Tvh SUiSqtntK3jNsOJf6sUdRZcbooEs9OViAdq0Jxj+pUgHxbzlR4rPsvaFJHkZwWYp HfZf/E42TuYPYa9jKzqbtJHnOCpsCeE= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:29 2024 by rpki-client on console-ams.rpki-client.org