$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9695ab88-6ac0-328d-a35e-1f1becc5b582.roa File: 9695ab88-6ac0-328d-a35e-1f1becc5b582.roa (raw, json) Hash identifier: zIyVSiE1Di7bNBEkxBpb+VEtFgopIOsdZgIn+Xx+ZQQ= Subject key identifier: 6B:4A:AE:8F:94:BC:B5:56:35:99:25:26:83:35:ED:F5:E2:97:C4:EA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847B3CC1E06D866D0E08E42C800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9695ab88-6ac0-328d-a35e-1f1becc5b582.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.204.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:1e:06:d8:66:d0:e0:8e:42:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=a20e56a8-ca88-4d50-b73a-b50d1cde6d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3f:4b:16:e5:7c:51:68:68:5e:a9:72:40:7e: 3d:67:ce:ce:04:d0:e0:3f:24:3c:8a:13:8a:31:50: e4:53:8a:1d:f2:81:a0:e6:84:5e:b3:26:79:88:b8: ad:51:c7:4a:c5:96:1e:b8:c0:e3:67:89:99:ea:fa: d2:98:47:df:c1:a9:e7:53:a5:0a:43:cf:8d:43:66: 1a:e7:da:5e:5e:cc:c3:1d:bb:9a:6e:ec:61:00:bc: 60:2a:9b:13:51:a5:3b:eb:74:0f:e4:16:b6:44:e4: 53:4c:db:fc:d7:3f:74:4b:2e:5d:74:5b:e7:93:fd: 28:51:56:aa:87:7c:86:3c:46:e0:d2:54:4a:e8:4e: 49:6e:e8:eb:06:82:b2:d3:89:4c:4e:cf:2c:b6:c2: 68:d2:d6:e9:30:b9:e4:4c:97:0c:7a:27:e6:64:32: a5:3e:c7:5a:14:f6:67:30:7c:c3:a5:15:76:0e:d9: a9:d9:d9:72:2e:2f:a2:e0:d1:4a:a3:d1:e1:03:28: 35:98:25:1e:69:2f:c1:ba:4d:94:d3:aa:2f:b9:a9: f8:01:42:d6:b4:f8:cb:54:b4:4f:f0:61:21:f2:e3: d0:37:fa:6c:67:47:fe:70:10:97:5e:3b:1b:32:bc: 6e:a2:d6:9e:1c:ba:33:23:69:de:1f:43:89:d8:c5: 96:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:4A:AE:8F:94:BC:B5:56:35:99:25:26:83:35:ED:F5:E2:97:C4:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9695ab88-6ac0-328d-a35e-1f1becc5b582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:7a:2b:5a:5b:d5:17:6a:8b:85:b5:42:1e:45:3b:8d:0a:ed: e8:ac:32:df:ac:68:88:a9:87:c0:08:b7:e6:09:d0:f0:4a:6a: 80:07:cd:1f:ee:64:d1:d6:1c:5a:fb:6b:c6:69:d6:bc:85:5c: e2:f1:b1:5b:b3:66:00:d0:e6:b3:b2:4b:dd:aa:b3:ac:16:0c: bb:0f:5b:4a:0b:ef:b2:ea:74:93:53:7f:dd:21:d6:e0:ab:78: ac:1d:7b:4a:92:da:a0:1d:d3:f0:11:38:56:a3:5c:03:53:71: 16:13:17:88:be:00:6d:eb:f1:87:2e:79:14:85:df:fa:c3:46: 83:28:41:07:22:5b:1e:d8:31:59:b7:af:af:ae:1e:9a:74:e5: 70:8c:f7:03:6c:b4:44:cb:08:79:a0:8b:c6:d5:38:0e:ea:ff: 1b:07:ab:09:dc:ca:be:d5:43:c8:bf:ed:eb:48:5d:5d:d6:a7: 00:6d:30:a1:b6:8e:f2:83:28:38:b0:f7:a5:09:19:a1:9c:57: 64:74:4b:47:5c:1f:75:cc:c7:af:10:00:5a:c1:7b:2c:13:8c: f8:86:b6:ba:b5:fd:52:69:d0:91:3e:8d:05:9b:86:39:10:2e: b5:8a:20:80:24:23:c3:9a:63:dd:14:40:10:89:e8:a7:d2:64: 5f:6f:f9:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEezzB4G2GbQ4I5CyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk YTIwZTU2YTgtY2E4OC00ZDUwLWI3M2EtYjUwZDFjZGU2ZDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z9LFuV8UWhoXqlyQH49Z87OBNDgPyQ8ihOK MVDkU4od8oGg5oResyZ5iLitUcdKxZYeuMDjZ4mZ6vrSmEffwannU6UKQ8+NQ2Ya 59peXszDHbuabuxhALxgKpsTUaU763QP5Ba2RORTTNv81z90Sy5ddFvnk/0oUVaq h3yGPEbg0lRK6E5JbujrBoKy04lMTs8stsJo0tbpMLnkTJcMeifmZDKlPsdaFPZn MHzDpRV2Dtmp2dlyLi+i4NFKo9HhAyg1mCUeaS/Buk2U06ovuan4AULWtPjLVLRP 8GEh8uPQN/psZ0f+cBCXXjsbMrxuotaeHLozI2neH0OJ2MWW7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtKro+UvLVWNZklJoM17fXil8TqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTY5NWFiODgtNmFjMC0z MjhkLWEzNWUtMWYxYmVjYzViNTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8xsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJ6K1pb1Rdqi4W1Qh5FO40K7eisMt+saIiph8AIt+YJ0PBKaoAHzR/u ZNHWHFr7a8Zp1ryFXOLxsVuzZgDQ5rOyS92qs6wWDLsPW0oL77LqdJNTf90h1uCr eKwde0qS2qAd0/AROFajXANTcRYTF4i+AG3r8YcueRSF3/rDRoMoQQciWx7YMVm3 r6+uHpp05XCM9wNstETLCHmgi8bVOA7q/xsHqwncyr7VQ8i/7etIXV3WpwBtMKG2 jvKDKDiw96UJGaGcV2R0S0dcH3XMx68QAFrBeywTjPiGtrq1/VJp0JE+jQWbhjkQ LrWKIIAkI8OaY90UQBCJ6KfSZF9v+Ss= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:05 2024 by rpki-client on console-ams.rpki-client.org