$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ca1f95e-1c98-301e-adcf-30b884695c8f.roa File: 7ca1f95e-1c98-301e-adcf-30b884695c8f.roa (raw, json) Hash identifier: QvfZFFWqLe1MZ6u+CYw+WL1bD4quvWlv4tQuwQuQ6T4= Subject key identifier: A8:4F:9D:10:28:81:98:3A:FD:13:E6:BD:BD:16:79:6D:21:6C:46:8E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847DF2F6739B725F742272C2B60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ca1f95e-1c98-301e-adcf-30b884695c8f.roa Signing time: Thu 14 Nov 2024 02:00:27 +0000 ROA not before: Thu 14 Nov 2024 02:00:27 +0000 ROA not after: Wed 12 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.217.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:df:2f:67:39:b7:25:f7:42:27:2c:2b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 14 02:00:27 2024 GMT Not After : Feb 12 02:00:27 2025 GMT Subject: CN=aa976bda-54f6-4508-a25b-f438fde146d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:65:f0:f6:58:97:21:bf:b3:4f:6b:4d:29:d7: 1b:4c:02:d3:a4:fc:85:e8:22:e2:61:26:f2:c9:22: e3:d1:c1:c4:85:c1:66:c7:6c:17:cd:9d:f8:1f:93: 13:da:98:37:0f:1f:12:83:d4:9f:fe:bf:1e:c1:2b: b8:59:18:61:44:e6:b3:58:67:53:81:be:a4:30:63: e9:21:12:b4:55:90:7e:c5:79:0d:21:bd:b7:c0:ed: 36:91:05:6c:55:6a:e1:76:4d:41:03:3c:b4:1f:08: 28:56:9b:67:ee:95:2f:7f:34:aa:9b:7e:87:51:05: 25:5a:96:26:37:0d:86:af:d5:d3:7a:21:c7:80:71: 35:41:47:f0:ad:f0:a4:fe:bb:d3:08:74:ed:e1:9f: 59:d8:dc:0b:4f:b8:5b:e6:58:d2:e6:d3:25:da:bb: 74:bd:8c:b5:23:38:c7:c6:dc:88:09:5b:25:9c:7f: 89:96:f4:64:2c:e6:5e:f3:05:00:ce:0f:7f:49:70: 11:4f:2d:7d:cd:e5:0b:3a:a1:40:93:7b:e4:51:14: 49:a3:03:33:b8:cc:71:31:e9:18:3e:8e:f0:30:e0: 4c:3a:4e:82:6b:04:58:76:a7:eb:61:9a:0a:58:8f: 7d:b7:2f:c7:90:0f:45:de:09:b5:e8:fc:d8:27:8d: 3e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4F:9D:10:28:81:98:3A:FD:13:E6:BD:BD:16:79:6D:21:6C:46:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ca1f95e-1c98-301e-adcf-30b884695c8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:17:44:b1:71:54:30:93:b0:f8:ae:ae:68:75:b4:32:c6:5e: b4:a4:7e:8a:e1:77:c1:7d:d6:9b:8b:73:b5:27:9d:44:91:83: 1c:47:90:9d:a7:fe:80:fd:ba:dd:6f:41:c7:52:88:4a:9f:5b: 2b:88:1f:62:99:11:28:b2:10:00:48:e7:1c:ac:d1:8a:06:5e: 01:41:53:82:1d:02:1b:39:24:79:6d:f7:52:bf:06:c9:35:a1: 91:f4:fc:4d:33:0b:b6:ab:61:f9:9b:47:18:ea:0d:1d:51:13: e9:6c:ea:39:fb:32:31:ec:02:77:1e:69:d7:56:86:7b:4a:ea: 14:08:b0:bf:f5:02:65:ff:0d:3b:28:21:4d:3e:2c:6f:c3:ee: 85:d5:76:84:c6:27:9a:35:2f:53:14:03:90:57:c1:86:06:c7: 8f:7d:30:f1:34:73:0e:cd:8a:d5:b4:fe:bf:9c:e3:a5:79:c5: 07:2e:47:32:86:92:69:c9:bc:3a:2a:72:3b:d1:73:6c:23:96: 41:48:70:7e:29:5c:2e:a4:49:ea:f9:da:75:2b:0f:73:a3:81: f4:27:a5:05:ff:39:1c:bb:3a:cc:fb:52:ed:25:c2:d1:0a:09: ec:5e:0c:ec:84:6d:a3:c4:cb:85:56:68:c3:0c:3e:f8:89:ef: 00:6f:3d:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEffL2c5tyX3QicsK2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk YWE5NzZiZGEtNTRmNi00NTA4LWEyNWItZjQzOGZkZTE0NmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GXw9liXIb+zT2tNKdcbTALTpPyF6CLiYSby ySLj0cHEhcFmx2wXzZ34H5MT2pg3Dx8Sg9Sf/r8ewSu4WRhhROazWGdTgb6kMGPp IRK0VZB+xXkNIb23wO02kQVsVWrhdk1BAzy0HwgoVptn7pUvfzSqm36HUQUlWpYm Nw2Gr9XTeiHHgHE1QUfwrfCk/rvTCHTt4Z9Z2NwLT7hb5ljS5tMl2rt0vYy1IzjH xtyICVslnH+JlvRkLOZe8wUAzg9/SXARTy19zeULOqFAk3vkURRJowMzuMxxMekY Po7wMOBMOk6CawRYdqfrYZoKWI99ty/HkA9F3gm16PzYJ40+6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhPnRAogZg6/RPmvb0WeW0hbEaOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2NhMWY5NWUtMWM5OC0z MDFlLWFkY2YtMzBiODg0Njk1YzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYXRLFxVDCTsPiurmh1tDLGXrSkforhd8F91puLc7UnnUSRgxxHkJ2n /oD9ut1vQcdSiEqfWyuIH2KZESiyEABI5xys0YoGXgFBU4IdAhs5JHlt91K/Bsk1 oZH0/E0zC7arYfmbRxjqDR1RE+ls6jn7MjHsAnceaddWhntK6hQIsL/1AmX/DTso IU0+LG/D7oXVdoTGJ5o1L1MUA5BXwYYGx499MPE0cw7NitW0/r+c46V5xQcuRzKG kmnJvDoqcjvRc2wjlkFIcH4pXC6kSer52nUrD3OjgfQnpQX/ORy7Osz7Uu0lwtEK CexeDOyEbaPEy4VWaMMMPviJ7wBvPa4= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:05 2024 by rpki-client on console-fra.rpki-client.org