$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80d1cfb5-e6d9-32dd-aa6a-3056e113667a.roa File: 80d1cfb5-e6d9-32dd-aa6a-3056e113667a.roa (raw, json) Hash identifier: ZNAJHmpjLpVF9oiGDsI5CfX44Qds/4qWkIej0GC4z7w= Subject key identifier: 32:BF:C6:5C:22:58:99:D6:14:6F:3A:97:EC:F2:48:27:B1:62:23:CB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584752161746BD128C20DD3B3680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80d1cfb5-e6d9-32dd-aa6a-3056e113667a.roa Signing time: Tue 24 Sep 2024 13:00:40 +0000 ROA not before: Tue 24 Sep 2024 13:00:40 +0000 ROA not after: Mon 23 Dec 2024 14:00:40 +0000 asID: 20940 IP address blocks: 173.223.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:52:16:17:46:bd:12:8c:20:dd:3b:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 13:00:40 2024 GMT Not After : Dec 23 14:00:40 2024 GMT Subject: CN=1ebdda00-847d-4dc7-827d-70505b860528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cb:90:54:08:f6:bc:16:7e:a7:0a:59:a6:aa: 23:2a:41:47:c4:1e:3c:4f:44:54:e2:cb:9a:c5:45: 83:18:59:cf:0b:f4:b0:58:8b:4e:fa:af:e7:90:0b: 79:72:2c:4e:d4:44:76:b5:c0:89:55:1b:14:ef:17: 64:dd:3e:52:c4:98:7f:41:16:fb:67:a9:fc:00:3c: 0d:e4:51:52:bf:bd:17:4c:9b:ed:3f:b5:d7:5e:67: 69:76:58:56:c9:c5:b6:c2:14:a5:2d:a3:8e:76:cc: d9:a5:7d:0f:2b:d7:ce:af:a2:f0:38:d0:41:bd:4c: 2f:3a:47:c3:b0:c0:86:fc:a8:a4:c1:df:2a:1c:fc: d7:e6:0b:c6:67:32:bb:e5:fd:ba:d4:70:8b:fe:b2: 35:05:ad:87:d0:be:86:00:76:45:f8:3a:a7:37:9c: a3:3b:96:7d:62:d2:84:82:25:27:bd:1e:bf:95:ef: e1:2d:67:24:36:3e:e4:2b:00:a0:ed:97:4f:67:51: f7:47:e4:26:b0:bf:e5:23:63:23:d5:3c:f7:fe:76: 63:b2:cf:22:f9:6c:c4:55:e8:e7:00:ab:49:07:a6: 18:b5:c2:29:7f:b8:b6:ca:e0:b1:bc:14:80:40:b4: 71:68:62:08:19:32:19:83:72:47:f5:c9:5f:08:c0: 8b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BF:C6:5C:22:58:99:D6:14:6F:3A:97:EC:F2:48:27:B1:62:23:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80d1cfb5-e6d9-32dd-aa6a-3056e113667a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:3e:f7:50:fc:2e:9c:d2:28:5c:fa:7c:a9:15:12:34:b2:31: 06:8b:3c:e4:3c:4b:eb:f5:e6:e8:70:d5:74:43:6a:18:e2:b3: a1:5f:29:ee:8f:bc:14:69:dc:5d:f9:fd:0c:b5:3d:44:cf:07: 52:64:ea:eb:3b:29:05:5c:c4:27:5e:db:c2:3c:00:e7:27:2b: 1e:7f:76:49:a0:cc:e0:33:59:d3:a6:f7:4d:15:26:36:bd:39: 8c:ba:d0:11:05:4f:e5:51:c6:f9:3c:91:27:6f:5d:4c:ae:ca: 15:ac:d6:31:f8:28:a0:49:30:b0:89:d4:de:4f:fe:b1:3e:af: 2f:82:11:0d:02:d1:49:e5:74:7e:24:a6:6d:7e:74:59:a8:5e: c2:ef:01:56:a2:b1:4b:b0:8a:1e:45:fc:e1:0e:38:dc:70:6d: 84:cd:d7:7f:5e:31:71:62:7a:83:f3:bb:c9:6f:5e:3a:3b:3e: ba:f5:b4:11:4a:87:8b:52:49:f3:b7:be:01:0e:f5:89:51:ec: f7:84:a9:8b:b6:e1:b2:2a:e8:e7:eb:9e:72:3e:9c:90:6d:f6: 44:25:b3:5b:dd:fa:6a:a4:2b:80:27:36:79:db:21:9f:e8:f6: 57:1f:08:88:14:8a:37:21:89:6a:35:03:9d:f5:62:5f:ba:a7: 89:b1:38:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdSFhdGvRKMIN07NoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyNDEzMDA0MFoXDTI0MTIyMzE0MDA0MFowLzEtMCsGA1UEAxMk MWViZGRhMDAtODQ3ZC00ZGM3LTgyN2QtNzA1MDViODYwNTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsuQVAj2vBZ+pwpZpqojKkFHxB48T0RU4sua xUWDGFnPC/SwWItO+q/nkAt5cixO1ER2tcCJVRsU7xdk3T5SxJh/QRb7Z6n8ADwN 5FFSv70XTJvtP7XXXmdpdlhWycW2whSlLaOOdszZpX0PK9fOr6LwONBBvUwvOkfD sMCG/Kikwd8qHPzX5gvGZzK75f261HCL/rI1Ba2H0L6GAHZF+DqnN5yjO5Z9YtKE giUnvR6/le/hLWckNj7kKwCg7ZdPZ1H3R+QmsL/lI2Mj1Tz3/nZjss8i+WzEVejn AKtJB6YYtcIpf7i2yuCxvBSAQLRxaGIIGTIZg3JH9clfCMCL9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDK/xlwiWJnWFG86l+zySCexYiPLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODBkMWNmYjUtZTZkOS0z MmRkLWFhNmEtMzA1NmUxMTM2NjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArd/vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADs+91D8LpzSKFz6fKkVEjSyMQaLPOQ8S+v15uhw1XRDahjis6FfKe6P vBRp3F35/Qy1PUTPB1Jk6us7KQVcxCde28I8AOcnKx5/dkmgzOAzWdOm900VJja9 OYy60BEFT+VRxvk8kSdvXUyuyhWs1jH4KKBJMLCJ1N5P/rE+ry+CEQ0C0UnldH4k pm1+dFmoXsLvAVaisUuwih5F/OEOONxwbYTN139eMXFieoPzu8lvXjo7Prr1tBFK h4tSSfO3vgEO9YlR7PeEqYu24bIq6OfrnnI+nJBt9kQls1vd+mqkK4AnNnnbIZ/o 9lcfCIgUijchiWo1A531Yl+6p4mxOCQ= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:07 2024 by rpki-client on console-fra.rpki-client.org