$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4ec9f10-67f3-3683-9f86-e6109d336dec.roa File: d4ec9f10-67f3-3683-9f86-e6109d336dec.roa (raw, json) Hash identifier: 5/Lv1JJgixaFtENwQ3RmPQdHSda6Hejtd4EyuQAQHgw= Subject key identifier: 73:F5:6D:4C:6F:28:5F:9A:99:ED:37:49:3E:2C:6A:31:B2:38:5A:64 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847B3CC1B4B85DC0C2B3558DBC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4ec9f10-67f3-3683-9f86-e6109d336dec.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.207.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:1b:4b:85:dc:0c:2b:35:58:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=e5189a27-6098-4827-b607-b8583b35828c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:82:f4:0f:5e:bb:78:54:93:e4:06:89:c3:a1: cc:71:20:82:5a:08:42:dc:31:15:7d:03:f6:a4:71: 61:f5:83:48:d0:9b:d5:b4:db:25:f5:83:e3:fe:b0: 72:b9:79:48:45:ba:d7:ee:3d:53:cf:d8:6e:0c:64: 5a:8e:f7:b8:af:b0:bb:d6:47:56:bb:fa:88:62:e7: 6f:1b:a9:7c:cb:06:03:53:51:7d:ba:c3:dc:70:cd: de:c0:c9:45:ba:c6:c9:f2:61:c0:b7:e4:e8:e9:45: 52:b1:05:d0:0e:e6:d2:e4:40:63:b5:14:7c:67:bd: 43:5f:10:63:96:ad:4a:d8:63:e9:32:01:2e:92:cc: d6:fb:97:4b:46:d8:eb:0a:0e:5e:d2:a3:64:ec:e7: d1:38:20:1d:58:fa:dc:fa:00:52:02:b6:fc:b0:c4: 68:23:ae:79:bd:92:aa:bf:76:e1:1a:95:07:b3:af: e7:41:0c:cf:92:ec:7a:12:2d:af:e8:79:41:df:38: 4c:1d:eb:90:40:48:b5:33:56:30:ff:4c:bf:35:b9: 5f:bb:47:ce:f2:5b:76:e2:53:fe:eb:a9:82:b6:17: 94:33:fd:15:77:36:88:31:17:ed:5e:64:69:76:e0: 48:78:40:00:3c:9d:32:7f:82:5b:ce:bf:5b:4a:2a: 68:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F5:6D:4C:6F:28:5F:9A:99:ED:37:49:3E:2C:6A:31:B2:38:5A:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4ec9f10-67f3-3683-9f86-e6109d336dec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:9f:d2:5c:02:f5:fd:82:27:d9:5b:73:c1:ac:8e:7c:92:5c: 80:33:2e:c4:6e:82:fb:ff:bc:17:94:56:8b:2b:13:f0:07:f7: fd:d8:b6:a2:fa:22:86:03:e6:3b:75:00:27:b9:10:0a:51:36: 23:5d:33:a0:38:6d:7d:dc:33:ad:17:43:7c:d7:49:71:79:30: 17:07:d0:fc:c5:86:68:ec:08:3d:0e:67:83:4a:74:23:9b:a0: a9:b2:e1:cd:5a:08:49:40:22:f7:a7:c1:65:60:1e:cc:9a:09: 77:0d:fe:52:0f:c7:53:0c:4c:d8:72:36:62:25:21:18:dd:e6: f8:12:05:79:63:6c:91:64:b8:30:f1:57:06:0c:14:09:00:31: 9e:b1:a2:7e:e7:9f:86:04:07:d8:27:82:be:31:82:1e:4a:f3: 2b:26:92:8b:78:55:7b:64:69:67:fe:fd:d8:58:52:f4:8e:e7: d6:67:a6:01:12:61:67:a9:31:71:78:bb:ae:f8:9b:0d:2d:aa: b6:8e:ac:28:c1:08:d5:cd:86:8f:70:7f:4e:80:9d:51:23:3f: 5d:3e:c7:41:a9:4f:26:68:71:04:fd:6e:1a:cb:d6:03:1c:14: a1:d4:e0:8f:30:63:2d:4e:2e:18:c8:1f:91:72:ac:49:a9:87: e4:b4:80:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEezzBtLhdwMKzVY28AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk ZTUxODlhMjctNjA5OC00ODI3LWI2MDctYjg1ODNiMzU4MjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4L0D167eFST5AaJw6HMcSCCWghC3DEVfQP2 pHFh9YNI0JvVtNsl9YPj/rByuXlIRbrX7j1Tz9huDGRajve4r7C71kdWu/qIYudv G6l8ywYDU1F9usPccM3ewMlFusbJ8mHAt+To6UVSsQXQDubS5EBjtRR8Z71DXxBj lq1K2GPpMgEukszW+5dLRtjrCg5e0qNk7OfROCAdWPrc+gBSArb8sMRoI655vZKq v3bhGpUHs6/nQQzPkux6Ei2v6HlB3zhMHeuQQEi1M1Yw/0y/Nblfu0fO8lt24lP+ 66mCtheUM/0VdzaIMRftXmRpduBIeEAAPJ0yf4Jbzr9bSipoCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHP1bUxvKF+ame03ST4sajGyOFpkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDRlYzlmMTAtNjdmMy0z NjgzLTlmODYtZTYxMDlkMzM2ZGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyf0lwC9f2CJ9lbc8GsjnySXIAzLsRugvv/vBeUVosrE/AH9/3YtqL6 IoYD5jt1ACe5EApRNiNdM6A4bX3cM60XQ3zXSXF5MBcH0PzFhmjsCD0OZ4NKdCOb oKmy4c1aCElAIvenwWVgHsyaCXcN/lIPx1MMTNhyNmIlIRjd5vgSBXljbJFkuDDx VwYMFAkAMZ6xon7nn4YEB9gngr4xgh5K8ysmkot4VXtkaWf+/dhYUvSO59ZnpgES YWepMXF4u674mw0tqraOrCjBCNXNho9wf06AnVEjP10+x0GpTyZocQT9bhrL1gMc FKHU4I8wYy1OLhjIH5FyrEmph+S0gM8= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:30 2024 by rpki-client on console-ams.rpki-client.org