$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9855adf-0642-381e-bbc2-c369710b7d8a.roa File: a9855adf-0642-381e-bbc2-c369710b7d8a.roa (raw, json) Hash identifier: ZR+ajniGSRP3EgcHPTSTPcU0ujxuwMLemc2bRrLWseE= Subject key identifier: CE:BB:8B:84:E8:D3:8F:12:3A:CE:10:1E:9F:4F:A6:BF:84:AF:99:4F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847D99A07BC0B5A75353A3C4500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9855adf-0642-381e-bbc2-c369710b7d8a.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.206.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:9a:07:bc:0b:5a:75:35:3a:3c:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=b95ff9c2-9220-4190-9d8a-e36cfd0bdf4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b4:16:49:13:cc:e7:fb:bc:ec:f9:fc:b4:da: cc:bd:63:9f:0a:15:57:e2:fc:a6:7c:fe:6f:2c:f2: a8:51:94:ab:76:3e:47:24:84:17:04:ab:f5:30:48: 8a:73:4e:ec:d8:8d:50:50:64:b2:b7:d1:70:ad:88: b2:61:81:c8:2d:e1:6f:9d:66:df:83:04:fe:a2:a6: 3e:14:ad:23:d0:ca:36:b9:6b:31:c3:62:ff:80:ff: d9:f8:95:68:c2:3c:14:94:f0:0d:1e:ad:2b:9b:ea: fe:14:2f:74:ae:c9:9f:df:e7:5a:fe:10:fe:33:2c: d7:ed:1b:76:0d:9f:0e:58:64:4e:10:91:66:40:0f: 32:02:b7:b1:66:55:33:91:1d:9f:4a:69:4d:6f:9a: c1:2d:60:d4:7c:4b:d6:ed:84:85:2d:ea:5c:b9:ae: 61:32:06:2a:c0:47:6e:78:f9:6e:fd:d9:b7:70:1b: 3e:e3:12:5d:90:87:4b:20:cf:75:4a:89:68:fd:57: d1:10:96:f9:51:16:be:57:a9:4d:1a:b1:33:64:1e: 30:41:ac:41:c7:35:1a:16:44:23:5f:fd:9c:03:69: b6:ea:da:92:e3:47:65:20:79:56:f4:3a:93:ac:48: 84:e0:eb:a9:48:02:3c:ed:06:e3:77:a4:3c:86:29: 17:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BB:8B:84:E8:D3:8F:12:3A:CE:10:1E:9F:4F:A6:BF:84:AF:99:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9855adf-0642-381e-bbc2-c369710b7d8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:94:d0:82:fe:38:41:53:b7:e0:e5:68:a4:7e:e2:7c:f8:f8: 2b:6e:12:8d:0f:33:3e:f0:f1:00:c4:b9:0d:f5:ef:5e:1d:f8: b8:5e:b8:a1:07:e4:62:94:4c:46:65:76:0e:d6:a5:36:15:a1: dc:8c:c1:1d:40:31:30:2a:cf:5c:76:b3:54:3f:13:04:3f:4f: 8e:7d:e7:5a:c4:c5:7d:af:ce:de:3a:59:63:8e:8e:f6:59:f4: a8:03:98:87:d1:1a:3d:d9:85:73:a2:34:b2:88:71:59:b7:c2: 06:9e:ed:fa:2f:7f:9a:3b:f5:07:10:8b:fd:05:f0:2b:16:a9: f3:72:bb:9e:69:bb:8a:10:53:8a:15:fe:51:6b:4b:46:a7:39: ca:fc:f5:93:18:c4:15:c7:31:9b:df:53:67:0e:eb:5d:f0:89: 6d:d0:15:57:cb:2f:2e:14:e1:71:f1:85:46:bb:53:be:2d:72: ef:7a:59:5c:8a:63:55:ea:51:e9:64:26:62:86:f1:d2:d4:18: a1:4d:d1:3a:f5:39:ed:05:92:06:76:95:e2:ab:fb:e6:14:4d: fa:df:e3:ef:b1:2d:85:cc:69:2a:a0:a6:cb:2d:3c:32:91:dc: 57:b8:69:d9:80:16:e8:34:05:23:c0:03:13:af:eb:89:01:bf: 63:e9:c6:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmge8C1p1NTo8RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk Yjk1ZmY5YzItOTIyMC00MTkwLTlkOGEtZTM2Y2ZkMGJkZjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbQWSRPM5/u87Pn8tNrMvWOfChVX4vymfP5v LPKoUZSrdj5HJIQXBKv1MEiKc07s2I1QUGSyt9FwrYiyYYHILeFvnWbfgwT+oqY+ FK0j0Mo2uWsxw2L/gP/Z+JVowjwUlPANHq0rm+r+FC90rsmf3+da/hD+MyzX7Rt2 DZ8OWGROEJFmQA8yArexZlUzkR2fSmlNb5rBLWDUfEvW7YSFLepcua5hMgYqwEdu ePlu/dm3cBs+4xJdkIdLIM91Solo/VfREJb5URa+V6lNGrEzZB4wQaxBxzUaFkQj X/2cA2m26tqS40dlIHlW9DqTrEiE4OupSAI87Qbjd6Q8hikXhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM67i4To048SOs4QHp9Ppr+Er5lPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTk4NTVhZGYtMDY0Mi0z ODFlLWJiYzItYzM2OTcxMGI3ZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF87yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCU0IL+OEFTt+DlaKR+4nz4+CtuEo0PMz7w8QDEuQ31714d+LheuKEH 5GKUTEZldg7WpTYVodyMwR1AMTAqz1x2s1Q/EwQ/T45951rExX2vzt46WWOOjvZZ 9KgDmIfRGj3ZhXOiNLKIcVm3wgae7fovf5o79QcQi/0F8CsWqfNyu55pu4oQU4oV /lFrS0anOcr89ZMYxBXHMZvfU2cO613wiW3QFVfLLy4U4XHxhUa7U74tcu96WVyK Y1XqUelkJmKG8dLUGKFN0Tr1Oe0FkgZ2leKr++YUTfrf4++xLYXMaSqgpsstPDKR 3Fe4admAFug0BSPAAxOv64kBv2PpxkQ= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:13 2024 by rpki-client on console-ams.rpki-client.org