$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0a49e57-2b3d-31f5-b990-cc5db9d67bed.roa File: b0a49e57-2b3d-31f5-b990-cc5db9d67bed.roa (raw, json) Hash identifier: g1RmsJgwjB4kTEc4q3lvL0Z4+i0XhlLCPFQQ/8PQdaU= Subject key identifier: 5E:34:72:46:68:19:D7:FF:5A:DA:3E:7C:8E:92:01:24:C1:F1:7F:81 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847EA5A08012AB788265DFE5700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0a49e57-2b3d-31f5-b990-cc5db9d67bed.roa Signing time: Mon 18 Nov 2024 02:00:27 +0000 ROA not before: Mon 18 Nov 2024 02:00:27 +0000 ROA not after: Sun 16 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.218.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ea:5a:08:01:2a:b7:88:26:5d:fe:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 18 02:00:27 2024 GMT Not After : Feb 16 02:00:27 2025 GMT Subject: CN=826e822d-8475-46a5-a38b-ce7af6b18e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0a:f7:7b:08:13:47:1b:04:7a:e3:ec:1b:80: f4:d1:00:ba:85:d9:88:e0:fd:d1:9b:23:7e:05:b5: 51:aa:ee:ba:a9:b6:d6:ff:d6:12:1f:ac:0e:b8:79: bf:52:7b:69:1c:fa:c2:62:86:77:e0:e4:2d:61:b3: 9f:1d:08:fd:9e:dd:12:24:f4:db:ef:0d:0a:7e:40: 3d:16:51:df:f5:3a:de:cd:07:a9:df:f7:fd:c1:be: 3b:d0:f6:86:ae:95:5b:b5:0d:ef:ab:03:71:2e:bd: 20:44:45:46:71:57:50:a7:1c:a5:9a:b6:f8:9c:d8: e1:6d:ea:69:4e:6d:65:75:8c:fc:e9:d9:ab:39:d6: 65:32:1c:c8:84:45:cd:52:00:46:38:59:91:70:d1: 38:29:29:7f:2a:b0:b1:8a:67:33:80:e8:b0:d9:ae: 1a:1b:0c:52:b4:55:cf:36:ab:c9:29:20:94:45:d1: 52:1e:fb:b7:7d:db:cf:2d:b5:07:4a:3c:d5:16:b8: bf:c9:1b:d3:4c:36:af:76:b0:ab:97:76:a3:52:0d: 92:61:39:f9:2d:08:27:b7:df:f4:a3:ce:02:fc:74: 1c:39:cd:b1:da:ed:b9:4d:65:50:ba:26:13:12:97: 7c:fc:5c:44:85:94:42:d5:75:71:f6:6a:14:6f:ea: 13:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:34:72:46:68:19:D7:FF:5A:DA:3E:7C:8E:92:01:24:C1:F1:7F:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0a49e57-2b3d-31f5-b990-cc5db9d67bed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:7f:44:df:cb:e1:61:19:2c:e3:7e:bc:35:cc:7e:d4:97:d1: d1:e8:67:db:b4:fd:2f:1a:85:62:71:6f:32:fd:08:4a:4b:02: 9f:fa:99:ae:f4:cd:7f:d3:41:65:11:ba:1d:69:cf:38:41:b8: 3a:28:79:af:a3:4b:a0:cc:e8:b5:98:0c:84:1d:bc:0b:d5:2d: 19:33:5b:1f:65:fa:84:a5:d4:4f:95:e0:ef:aa:2b:0d:6b:f4: 6a:42:c6:31:43:5f:2c:c9:b7:0e:38:f0:9d:c7:81:6e:5a:35: 1c:82:40:a7:78:4d:af:6c:92:56:17:a6:8e:a4:80:8f:3a:ca: a0:57:5e:69:69:84:08:01:fe:4e:94:0b:4f:8f:fc:0c:23:e3: 54:6d:0d:67:22:5a:45:99:f1:0f:40:0b:a7:9b:3d:be:96:f3: 58:ad:41:81:8a:73:5f:82:8c:ee:f4:f9:87:9f:3b:b6:fb:d5: 00:f5:61:95:d2:bd:5a:c4:3d:f4:a4:53:59:b7:ab:31:44:30: 2a:c3:a0:a4:72:44:88:f9:ce:da:a1:af:78:d7:3f:bf:78:91: 5c:9b:ad:cb:79:c4:1a:82:f3:a0:7a:1c:bc:8d:5a:54:4e:79: 97:2a:0c:0a:1f:ed:03:10:d0:c7:7c:75:23:0a:aa:d3:40:0d: b2:44:e1:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfqWggBKreIJl3+VwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExODAyMDAyN1oXDTI1MDIxNjAyMDAyN1owLzEtMCsGA1UEAxMk ODI2ZTgyMmQtODQ3NS00NmE1LWEzOGItY2U3YWY2YjE4ZTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwr3ewgTRxsEeuPsG4D00QC6hdmI4P3RmyN+ BbVRqu66qbbW/9YSH6wOuHm/UntpHPrCYoZ34OQtYbOfHQj9nt0SJPTb7w0KfkA9 FlHf9TrezQep3/f9wb470PaGrpVbtQ3vqwNxLr0gREVGcVdQpxylmrb4nNjhbepp Tm1ldYz86dmrOdZlMhzIhEXNUgBGOFmRcNE4KSl/KrCximczgOiw2a4aGwxStFXP NqvJKSCURdFSHvu3fdvPLbUHSjzVFri/yRvTTDavdrCrl3ajUg2SYTn5LQgnt9/0 o84C/HQcOc2x2u25TWVQuiYTEpd8/FxEhZRC1XVx9moUb+oTrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF40ckZoGdf/Wto+fI6SASTB8X+BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjBhNDllNTctMmIzZC0z MWY1LWI5OTAtY2M1ZGI5ZDY3YmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9rvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFt/RN/L4WEZLON+vDXMftSX0dHoZ9u0/S8ahWJxbzL9CEpLAp/6ma70 zX/TQWURuh1pzzhBuDooea+jS6DM6LWYDIQdvAvVLRkzWx9l+oSl1E+V4O+qKw1r 9GpCxjFDXyzJtw448J3HgW5aNRyCQKd4Ta9sklYXpo6kgI86yqBXXmlphAgB/k6U C0+P/Awj41RtDWciWkWZ8Q9AC6ebPb6W81itQYGKc1+CjO70+YefO7b71QD1YZXS vVrEPfSkU1m3qzFEMCrDoKRyRIj5ztqhr3jXP794kVybrct5xBqC86B6HLyNWlRO eZcqDAof7QMQ0Md8dSMKqtNADbJE4bc= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:27 2024 by rpki-client on console-fra.rpki-client.org