$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53462e61-1d9d-34f0-9b90-6ad1b2e9d7d0.roa File: 53462e61-1d9d-34f0-9b90-6ad1b2e9d7d0.roa (raw, json) Hash identifier: ANDCmznz/lJFdLSvesA5d9nWumvtWd6NnTkeO5o8oag= Subject key identifier: C7:4F:4E:3E:59:7A:59:65:30:B9:A7:0E:1D:A2:BA:74:0C:D1:88:CF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847D99A01F5B318743C5AF70AC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53462e61-1d9d-34f0-9b90-6ad1b2e9d7d0.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.207.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:9a:01:f5:b3:18:74:3c:5a:f7:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=68a1d3aa-aa58-445e-9215-f7ea55d4b925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4d:74:01:d3:cf:1e:bb:ad:7e:ce:47:d8:5e: 5d:83:53:f4:ad:a8:c9:2a:79:a9:c1:40:89:7b:b4: cb:be:41:1a:03:86:0b:d7:75:2e:6f:6d:18:aa:60: 21:6d:0f:25:02:66:2e:d0:c2:6a:3f:1f:9d:85:2f: 26:50:0b:52:df:00:ed:1e:c4:1f:f2:cf:7f:a0:fb: e8:f7:f4:e9:6a:e4:5d:ad:02:d9:ea:49:a0:81:25: 39:87:c3:7d:d7:12:e3:3c:5b:b4:2e:59:ae:b9:a5: ae:33:55:13:78:93:44:b0:70:21:c5:5f:72:e2:d5: 2e:24:6b:c6:5c:a3:9b:54:b6:ef:ff:f1:c8:1e:ba: 42:44:6f:c8:3d:c3:42:3e:7b:42:60:0e:65:f3:14: d1:b2:01:a0:31:ad:44:44:28:d3:a0:5f:c2:f0:cc: 92:c0:7b:92:ea:7c:85:47:20:a7:2b:24:2c:65:39: 96:f7:b0:c9:9f:b4:4c:d4:5d:0e:93:73:8d:15:24: 39:3f:b6:ae:09:bb:8b:2b:98:24:37:5e:43:57:c7: 9f:80:32:76:8f:25:6a:c7:e7:ab:8c:b5:19:60:e3: 1e:27:d3:9f:a1:cc:40:83:34:7a:0e:82:b1:7d:30: 3c:7d:4d:7d:fa:62:ff:42:9e:66:16:d5:e9:b2:b4: 86:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4F:4E:3E:59:7A:59:65:30:B9:A7:0E:1D:A2:BA:74:0C:D1:88:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53462e61-1d9d-34f0-9b90-6ad1b2e9d7d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:61:85:95:5a:de:59:a0:ae:5e:b6:9d:20:c8:c6:df:a9:9d: 3e:ad:95:60:4d:bf:56:7c:a1:76:20:a8:e5:ab:25:2b:56:7c: 73:95:f8:cd:34:02:17:ab:3a:c2:ba:c1:33:6e:a7:96:28:66: ad:db:a9:41:69:87:77:23:ce:0a:47:70:db:7b:f0:63:f1:b2: 14:6a:d2:be:a9:eb:06:b1:0b:5d:dc:21:24:ae:66:5a:fb:c9: 7f:66:e6:93:7c:90:db:3e:ee:9c:60:b1:52:40:6d:f6:42:7f: c2:e3:ca:20:26:9a:6f:21:24:ca:1c:76:2d:95:93:3d:8a:5a: 67:3c:de:f6:1a:f7:e0:e9:32:d9:3c:9d:43:48:36:67:1b:11: 5d:69:8e:b4:f7:7f:7a:41:41:33:c3:c9:9e:f3:97:5f:33:37: 2e:ec:2a:4a:e7:0e:38:2a:7b:03:92:8c:35:0a:e1:28:9f:fe: 54:14:a3:fb:00:7f:b0:a7:e5:b8:3f:98:a6:26:e7:6c:7a:74: 15:a4:ef:bf:c6:e5:5e:00:34:8c:69:a2:90:f9:3c:51:83:ea: 43:e0:bc:a9:06:71:cd:ed:45:b1:00:57:ba:c9:35:4e:fa:86: 98:38:72:50:e7:ce:76:b0:91:3a:f7:95:34:0d:68:ec:a1:fc: 80:23:8a:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmgH1sxh0PFr3CsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk NjhhMWQzYWEtYWE1OC00NDVlLTkyMTUtZjdlYTU1ZDRiOTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU10AdPPHrutfs5H2F5dg1P0rajJKnmpwUCJ e7TLvkEaA4YL13Uub20YqmAhbQ8lAmYu0MJqPx+dhS8mUAtS3wDtHsQf8s9/oPvo 9/TpauRdrQLZ6kmggSU5h8N91xLjPFu0LlmuuaWuM1UTeJNEsHAhxV9y4tUuJGvG XKObVLbv//HIHrpCRG/IPcNCPntCYA5l8xTRsgGgMa1ERCjToF/C8MySwHuS6nyF RyCnKyQsZTmW97DJn7RM1F0Ok3ONFSQ5P7auCbuLK5gkN15DV8efgDJ2jyVqx+er jLUZYOMeJ9OfocxAgzR6DoKxfTA8fU19+mL/Qp5mFtXpsrSGRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdPTj5ZelllMLmnDh2iunQM0YjPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTM0NjJlNjEtMWQ5ZC0z NGYwLTliOTAtNmFkMWIyZTlkN2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINhhZVa3lmgrl62nSDIxt+pnT6tlWBNv1Z8oXYgqOWrJStWfHOV+M00 AherOsK6wTNup5YoZq3bqUFph3cjzgpHcNt78GPxshRq0r6p6waxC13cISSuZlr7 yX9m5pN8kNs+7pxgsVJAbfZCf8LjyiAmmm8hJMocdi2Vkz2KWmc83vYa9+DpMtk8 nUNINmcbEV1pjrT3f3pBQTPDyZ7zl18zNy7sKkrnDjgqewOSjDUK4Sif/lQUo/sA f7Cn5bg/mKYm52x6dBWk77/G5V4ANIxpopD5PFGD6kPgvKkGcc3tRbEAV7rJNU76 hpg4clDnznawkTr3lTQNaOyh/IAjikk= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:30 2024 by rpki-client on console-ams.rpki-client.org