$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9f2d51e-8e57-322b-ac5d-a8e90450bfeb.roa File: a9f2d51e-8e57-322b-ac5d-a8e90450bfeb.roa (raw, json) Hash identifier: emb2Yvy7DPGJqUT+i8Gx5gopEpQIWasmPctGF7Wd47s= Subject key identifier: DE:79:68:7E:8B:7D:62:D2:69:20:73:0C:16:1F:19:53:20:3C:4A:44 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847D999FB87DF6B740C00810920 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9f2d51e-8e57-322b-ac5d-a8e90450bfeb.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.204.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:99:fb:87:df:6b:74:0c:00:81:09:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=fa7fa08f-2b18-44e7-9859-c9920c2b5f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:39:2d:41:80:51:4a:d3:72:bb:c7:06:92:de: 81:f0:e3:62:71:4d:cb:a5:75:41:0b:0d:0a:3a:11: 84:5b:2d:d9:72:76:dc:63:a1:e5:5e:2e:b4:ef:af: 89:50:f5:6a:1a:d7:80:bb:4a:76:97:79:29:f1:74: 29:4f:c0:ca:13:79:a5:1a:44:42:5b:2d:c9:07:00: 2b:a5:a8:58:00:c9:6d:99:0b:d0:af:eb:61:f4:25: 4f:65:ff:d4:ec:5b:4c:ad:76:e9:c8:eb:3c:9b:62: 57:29:b9:4e:fa:fe:2c:b2:3d:b9:c5:99:13:71:32: e7:f6:23:18:c6:b2:e5:1d:ad:c2:ee:20:9c:2f:67: d7:f9:81:64:b1:65:9f:1b:d9:d1:fb:ba:e5:6f:2f: 31:1b:37:7d:50:da:5b:94:01:00:b4:f0:f1:69:5a: 12:31:6e:e9:38:10:0a:8e:c7:74:c2:a8:98:87:46: dd:e5:4d:f9:3a:98:e5:10:20:5e:7d:1b:a5:ea:3f: 8c:4d:5f:b5:9f:2d:ef:ec:34:3f:7e:74:ea:75:39: d4:60:ea:f1:67:fc:9f:42:a6:36:f5:d0:c5:ca:72: 17:6c:80:83:85:b5:5c:88:97:16:86:41:5e:fb:fb: 14:12:c8:cb:3a:67:b3:aa:18:e1:d6:a6:f6:25:8f: 7d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:79:68:7E:8B:7D:62:D2:69:20:73:0C:16:1F:19:53:20:3C:4A:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9f2d51e-8e57-322b-ac5d-a8e90450bfeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:ce:c6:f8:eb:6d:fe:d5:a3:56:c3:ae:2a:54:77:ee:89:41: fd:a7:70:43:44:bc:9b:f8:c8:14:ec:40:06:39:89:e7:59:40: 49:22:5b:6a:35:66:03:57:25:c6:7c:6f:28:b8:55:83:84:ad: f1:d5:bb:14:72:07:6d:f5:16:20:75:ab:14:f3:f7:88:a0:b1: 26:b0:21:ba:88:a1:c5:f8:b8:34:a4:c6:dd:d0:81:48:44:d6: cf:e1:1e:65:0f:dd:e4:45:6f:16:6c:b7:ec:b9:75:ae:ca:04: e1:a8:42:51:6c:7c:68:37:a7:d4:62:e5:a5:85:b5:74:22:da: 0c:69:34:be:34:80:00:27:47:04:cd:8f:7f:a3:23:fa:f0:ec: 42:1d:5a:ef:b3:13:31:b6:5f:5d:46:30:1c:2a:3e:57:b0:46: 64:d2:ff:b7:20:3c:54:bc:0d:49:86:63:aa:92:af:91:7d:40: 7c:62:a2:41:c7:94:66:e8:26:e6:71:8e:72:b0:bc:33:e9:d4: e4:dc:78:26:0d:ac:77:63:5c:70:21:29:99:28:fe:34:89:d1: 60:79:6b:00:53:7c:a8:68:fb:e0:f4:b5:7b:60:79:97:8c:2e: b0:e3:2e:33:c8:14:04:b1:07:9f:9d:01:84:08:49:dd:bb:03: 75:07:c9:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmfuH32t0DACBCSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk ZmE3ZmEwOGYtMmIxOC00NGU3LTk4NTktYzk5MjBjMmI1ZjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjktQYBRStNyu8cGkt6B8ONicU3LpXVBCw0K OhGEWy3ZcnbcY6HlXi6076+JUPVqGteAu0p2l3kp8XQpT8DKE3mlGkRCWy3JBwAr pahYAMltmQvQr+th9CVPZf/U7FtMrXbpyOs8m2JXKblO+v4ssj25xZkTcTLn9iMY xrLlHa3C7iCcL2fX+YFksWWfG9nR+7rlby8xGzd9UNpblAEAtPDxaVoSMW7pOBAK jsd0wqiYh0bd5U35OpjlECBefRul6j+MTV+1ny3v7DQ/fnTqdTnUYOrxZ/yfQqY2 9dDFynIXbICDhbVciJcWhkFe+/sUEsjLOmezqhjh1qb2JY99IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN55aH6LfWLSaSBzDBYfGVMgPEpEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTlmMmQ1MWUtOGU1Ny0z MjJiLWFjNWQtYThlOTA0NTBiZmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8ySMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3Oxvjrbf7Vo1bDripUd+6JQf2ncENEvJv4yBTsQAY5iedZQEkiW2o1 ZgNXJcZ8byi4VYOErfHVuxRyB231FiB1qxTz94igsSawIbqIocX4uDSkxt3QgUhE 1s/hHmUP3eRFbxZst+y5da7KBOGoQlFsfGg3p9Ri5aWFtXQi2gxpNL40gAAnRwTN j3+jI/rw7EIdWu+zEzG2X11GMBwqPlewRmTS/7cgPFS8DUmGY6qSr5F9QHxiokHH lGboJuZxjnKwvDPp1OTceCYNrHdjXHAhKZko/jSJ0WB5awBTfKho++D0tXtgeZeM LrDjLjPIFASxB5+dAYQISd27A3UHye0= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:25 2024 by rpki-client on console-fra.rpki-client.org