$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88c7f56d-3d8e-355b-8ba9-217d9e28ff11.roa File: 88c7f56d-3d8e-355b-8ba9-217d9e28ff11.roa (raw, json) Hash identifier: KPUpHvCU+tVyApfL0TFV2+OnQzePWd50hEo12/CC0jk= Subject key identifier: 29:4A:B1:92:D1:32:2F:8B:50:4B:13:1C:51:99:B2:F0:9E:6C:98:6F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847D99A0552931B1D24D00E6A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88c7f56d-3d8e-355b-8ba9-217d9e28ff11.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.205.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:9a:05:52:93:1b:1d:24:d0:0e:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=79f85f91-1187-48ba-81bb-9f58a6b0f6e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6e:6f:8d:7b:ca:fa:ba:13:b0:f7:6c:14:15: 45:32:34:71:c2:13:72:47:7f:41:a4:02:23:3c:60: 3f:39:9f:c2:2e:14:c9:42:dc:d0:02:9b:ea:94:76: 6a:3a:6b:8f:80:16:17:ae:87:6b:5a:38:6e:e1:92: 3d:f0:10:ec:8b:af:22:e9:43:fe:ed:c8:f0:76:3b: 38:6d:c7:6b:4c:17:b2:a2:8d:17:3e:fb:e2:94:a6: 04:5d:e7:32:d7:99:d9:e7:a8:a1:94:81:c4:78:68: 2d:c8:b5:97:23:25:b8:88:87:6f:a4:fc:41:bf:7a: d2:f0:d9:04:a3:85:27:70:64:88:09:f4:05:0b:5a: 74:d1:01:cd:98:da:2d:06:72:42:d8:69:a8:64:67: 0e:55:4f:d6:2f:2f:6c:1e:0f:a8:10:c4:f8:25:cf: 21:19:1e:4f:d6:90:0f:12:b4:4d:0e:c0:0d:e1:47: 02:4d:8d:8f:17:3f:17:19:6b:77:d8:2c:a6:92:72: 38:27:78:70:90:91:e8:f4:11:1e:2d:42:83:2b:23: 2a:a9:89:45:84:87:3c:89:af:4e:3e:e4:22:54:70: 8e:b4:72:4b:53:be:4d:fd:5d:8f:e1:8f:3a:f7:b2: 21:a2:1b:1f:3d:15:c0:3c:ed:ac:2f:1d:d3:8b:ab: 4d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4A:B1:92:D1:32:2F:8B:50:4B:13:1C:51:99:B2:F0:9E:6C:98:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88c7f56d-3d8e-355b-8ba9-217d9e28ff11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:b9:29:37:c8:c5:86:ad:d7:b9:e3:0d:06:31:1e:e5:be:ee: 69:45:54:d8:3f:5a:60:ba:7c:f1:c5:b1:90:10:6f:cb:e1:bc: 43:33:88:54:b7:8b:81:2d:43:04:07:39:21:31:32:b5:56:d1: 5e:78:1e:e0:f8:fc:9d:43:e9:8c:16:3c:be:f9:89:73:54:b4: fc:65:bd:28:78:52:b2:fb:a9:97:ff:32:38:f3:19:e3:00:43: 2b:da:64:85:eb:44:ce:03:73:70:c7:3f:63:1f:66:f9:10:ca: 62:2a:f6:db:f6:c4:72:08:cf:61:66:e4:b1:a2:bd:2b:f4:8f: ea:87:b3:c3:c5:82:37:6d:9f:77:db:69:8f:ff:fb:d8:54:83: 67:f5:da:3f:8d:01:d7:61:a6:6e:3a:35:40:72:74:88:22:0f: d8:21:c4:1e:cc:8d:12:4a:db:30:1e:65:de:81:45:9d:e6:3d: 78:ed:d1:cc:be:28:de:de:54:7d:31:10:fc:57:4e:6c:dd:90: c0:f6:c8:62:55:76:f4:71:c5:a0:18:17:41:4e:a5:9e:f8:d4: e5:53:aa:d6:85:24:59:2a:ce:31:1f:6e:8b:d3:8e:24:24:e9: a1:19:c5:e5:4c:17:0c:7e:d5:bb:77:72:5e:fa:e5:70:5f:ec: 0c:c5:f6:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmgVSkxsdJNAOagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk NzlmODVmOTEtMTE4Ny00OGJhLTgxYmItOWY1OGE2YjBmNmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG5vjXvK+roTsPdsFBVFMjRxwhNyR39BpAIj PGA/OZ/CLhTJQtzQApvqlHZqOmuPgBYXrodrWjhu4ZI98BDsi68i6UP+7cjwdjs4 bcdrTBeyoo0XPvvilKYEXecy15nZ56ihlIHEeGgtyLWXIyW4iIdvpPxBv3rS8NkE o4UncGSICfQFC1p00QHNmNotBnJC2GmoZGcOVU/WLy9sHg+oEMT4Jc8hGR5P1pAP ErRNDsAN4UcCTY2PFz8XGWt32CymknI4J3hwkJHo9BEeLUKDKyMqqYlFhIc8ia9O PuQiVHCOtHJLU75N/V2P4Y8697IhohsfPRXAPO2sLx3Ti6tNTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClKsZLRMi+LUEsTHFGZsvCebJhvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODhjN2Y1NmQtM2Q4ZS0z NTViLThiYTktMjE3ZDllMjhmZjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF81tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGq5KTfIxYat17njDQYxHuW+7mlFVNg/WmC6fPHFsZAQb8vhvEMziFS3 i4EtQwQHOSExMrVW0V54HuD4/J1D6YwWPL75iXNUtPxlvSh4UrL7qZf/MjjzGeMA QyvaZIXrRM4Dc3DHP2MfZvkQymIq9tv2xHIIz2Fm5LGivSv0j+qHs8PFgjdtn3fb aY//+9hUg2f12j+NAddhpm46NUBydIgiD9ghxB7MjRJK2zAeZd6BRZ3mPXjt0cy+ KN7eVH0xEPxXTmzdkMD2yGJVdvRxxaAYF0FOpZ741OVTqtaFJFkqzjEfbovTjiQk 6aEZxeVMFwx+1bt3cl765XBf7AzF9gc= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:54 2024 by rpki-client on console-ams.rpki-client.org