$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/898dd1dc-c6f2-3dd9-b9a2-4fd6e4794702.roa File: 898dd1dc-c6f2-3dd9-b9a2-4fd6e4794702.roa (raw, json) Hash identifier: BMCgwSStLwmlllQSPS+odejJtvn4RhmL7y8WX80jI0U= Subject key identifier: AD:11:7E:56:7B:33:18:EB:86:CB:F5:C1:C2:B2:71:1E:97:B5:88:91 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847EA5A0CC0055F079A56306D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/898dd1dc-c6f2-3dd9-b9a2-4fd6e4794702.roa Signing time: Mon 18 Nov 2024 02:00:27 +0000 ROA not before: Mon 18 Nov 2024 02:00:27 +0000 ROA not after: Sun 16 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.218.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ea:5a:0c:c0:05:5f:07:9a:56:30:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 18 02:00:27 2024 GMT Not After : Feb 16 02:00:27 2025 GMT Subject: CN=cf0af7e8-232f-4c1b-b156-f34335f26323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c5:7d:d4:b3:0d:78:59:aa:79:d8:f7:7b:d1: 33:5c:9a:68:cf:2d:34:88:a8:6e:18:ea:4d:e3:77: 38:77:80:d1:c8:66:a2:15:55:6d:80:77:dd:0b:d2: 88:00:4e:84:58:51:bf:4e:c0:8e:45:f3:09:42:da: d7:4f:19:24:77:09:98:c5:92:0d:09:ac:37:ea:db: 11:1e:e7:77:c7:e5:fd:43:1c:74:df:d1:96:76:cc: da:fd:89:4c:87:20:f8:64:be:da:13:a0:7d:7a:7b: 5a:b7:46:2c:ae:0f:b3:e4:48:5a:45:b8:ac:34:6b: 97:ac:ce:41:b3:b0:50:e1:6b:80:30:51:d7:89:80: 76:70:b6:55:5b:78:86:5a:9f:ea:fa:f0:a5:6f:02: b6:a0:97:0f:4d:91:82:ee:dc:13:54:49:86:29:50: 0b:dd:08:e0:0c:de:17:6f:b4:7a:f1:fd:a3:d5:12: e9:b2:62:e4:58:ac:75:d6:f5:08:d8:fe:4a:73:90: 70:13:7e:24:0e:94:02:5a:8d:49:43:bb:e4:02:86: 4c:25:f9:f4:0f:03:74:b6:36:58:79:20:22:19:24: 93:97:7b:a9:24:37:77:76:c6:74:35:5c:9a:ce:1b: 9a:32:13:e8:05:91:64:b4:1e:20:da:0f:8f:b7:41: b0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:11:7E:56:7B:33:18:EB:86:CB:F5:C1:C2:B2:71:1E:97:B5:88:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/898dd1dc-c6f2-3dd9-b9a2-4fd6e4794702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:00:5b:9e:15:ed:59:be:99:e9:3d:27:59:8a:17:25:d3:da: c3:f2:ce:88:39:3f:99:79:fc:5d:44:2f:9c:ab:cf:64:2f:a3: 31:08:5d:6b:88:be:30:a3:f4:4f:c3:dd:25:13:34:32:cc:4f: d8:55:1e:25:c9:30:64:3a:be:45:e7:b7:fb:cc:39:0d:7c:56: 53:6f:71:60:bb:2f:2f:15:a2:97:39:93:fe:e1:14:dc:85:3a: 51:df:77:77:5e:3a:4a:6d:d9:67:b1:3f:32:21:6c:b4:72:ea: 07:17:53:00:a9:09:85:cb:d8:37:69:96:4b:7c:dc:37:93:ac: 3a:cb:af:89:9e:4f:14:04:09:c9:4c:26:45:9a:8e:c9:12:80: 75:81:ee:8d:87:f1:78:b8:65:72:a9:98:0c:ec:9d:56:11:5c: 41:8c:a7:d5:2d:36:37:cf:3d:00:48:d2:9d:35:50:99:d3:71: b3:54:e7:87:e6:2b:f7:2f:73:6f:e9:8d:36:69:0c:f4:bb:99: 26:ca:cd:ba:05:63:8e:96:00:5f:42:e7:ea:27:dc:aa:eb:fe: 7d:b1:6d:e3:ee:0f:79:b9:39:5e:e9:08:d5:71:6d:d8:5b:99: 49:42:b4:66:1f:1e:39:db:5e:67:b9:4b:86:5a:d9:90:0b:0d: 3f:3d:3a:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfqWgzABV8HmlYwbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExODAyMDAyN1oXDTI1MDIxNjAyMDAyN1owLzEtMCsGA1UEAxMk Y2YwYWY3ZTgtMjMyZi00YzFiLWIxNTYtZjM0MzM1ZjI2MzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cV91LMNeFmqedj3e9EzXJpozy00iKhuGOpN 43c4d4DRyGaiFVVtgHfdC9KIAE6EWFG/TsCORfMJQtrXTxkkdwmYxZINCaw36tsR Hud3x+X9Qxx039GWdsza/YlMhyD4ZL7aE6B9entat0Ysrg+z5EhaRbisNGuXrM5B s7BQ4WuAMFHXiYB2cLZVW3iGWp/q+vClbwK2oJcPTZGC7twTVEmGKVAL3QjgDN4X b7R68f2j1RLpsmLkWKx11vUI2P5Kc5BwE34kDpQCWo1JQ7vkAoZMJfn0DwN0tjZY eSAiGSSTl3upJDd3dsZ0NVyazhuaMhPoBZFktB4g2g+Pt0GwqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0RflZ7Mxjrhsv1wcKycR6XtYiRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODk4ZGQxZGMtYzZmMi0z ZGQ5LWI5YTItNGZkNmU0Nzk0NzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9r4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4AW54V7Vm+mek9J1mKFyXT2sPyzog5P5l5/F1EL5yrz2QvozEIXWuI vjCj9E/D3SUTNDLMT9hVHiXJMGQ6vkXnt/vMOQ18VlNvcWC7Ly8Vopc5k/7hFNyF OlHfd3deOkpt2WexPzIhbLRy6gcXUwCpCYXL2Ddplkt83DeTrDrLr4meTxQECclM JkWajskSgHWB7o2H8Xi4ZXKpmAzsnVYRXEGMp9UtNjfPPQBI0p01UJnTcbNU54fm K/cvc2/pjTZpDPS7mSbKzboFY46WAF9C5+on3Krr/n2xbePuD3m5OV7pCNVxbdhb mUlCtGYfHjnbXme5S4Za2ZALDT89OtA= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:11 2024 by rpki-client on console-fra.rpki-client.org