$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dafcac1a-14f2-3b1e-9943-0b7f47c4327e.roa File: dafcac1a-14f2-3b1e-9943-0b7f47c4327e.roa (raw, json) Hash identifier: 57LqTX3M0Zbh6sNZovCSEFTDODlXtSNHkL6O5FXw97Q= Subject key identifier: 2A:69:E4:B7:54:64:C1:30:25:6F:83:17:4C:BC:10:F6:83:E6:3B:77 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847D999FB594692E4750F169200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dafcac1a-14f2-3b1e-9943-0b7f47c4327e.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.204.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:99:fb:59:46:92:e4:75:0f:16:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=0332cdf7-fc9e-40e7-963e-963c305009d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:25:e1:38:65:21:d3:f8:82:df:23:74:42:fb: 4b:a9:08:dc:43:16:7f:28:a9:c4:6d:c9:3e:a1:56: ef:49:e5:20:f8:bb:e1:ce:4d:f3:13:c5:15:96:43: 9e:fe:2a:9f:88:f9:7e:71:91:f7:1f:e1:5f:1f:4b: 5d:7c:65:66:b2:80:b7:84:0a:0e:2c:4e:c8:41:b7: 16:e1:5f:d2:88:12:d8:8d:e9:da:c3:ab:cf:26:34: 5f:f9:32:39:53:62:c0:78:a3:2a:57:88:b9:cf:df: 2a:5b:86:3c:2e:85:d2:3c:d3:e6:a4:28:0b:78:b5: ff:9d:be:32:a2:8c:70:66:dc:24:46:31:9b:5a:2a: 5d:17:24:66:b4:23:50:d9:09:e0:16:cf:48:7c:99: 38:4d:13:5c:7f:f1:99:3f:96:14:63:4a:6a:cb:06: 8f:89:9f:d9:8b:7b:34:6e:0c:63:2e:b7:f5:db:30: bc:93:b0:d9:3d:aa:04:62:cb:a0:9a:0d:94:1d:72: cc:fd:f9:af:1f:8b:53:fd:95:6b:26:90:33:ac:5d: bf:02:33:a4:86:8f:3e:e3:29:b3:48:16:d9:c2:bb: 77:aa:69:38:f2:06:00:85:dc:8e:6e:72:26:1b:88: 8a:02:fd:0b:dc:60:48:94:aa:06:ef:78:9b:79:22: f6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:69:E4:B7:54:64:C1:30:25:6F:83:17:4C:BC:10:F6:83:E6:3B:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dafcac1a-14f2-3b1e-9943-0b7f47c4327e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:f6:7e:b8:85:bd:97:69:ab:eb:bc:c3:97:85:64:b9:2a:b1: 0b:6b:12:c1:6d:11:dc:ab:c3:05:6c:c5:41:ad:55:8e:f8:21: c8:e6:20:6d:f6:c6:47:0a:99:9f:06:86:53:c3:9d:76:86:5c: af:be:2a:85:b8:94:41:92:b7:1b:89:77:fe:d0:e2:43:de:91: a9:cc:d7:ee:7f:2b:72:a4:c2:a2:18:7f:a5:19:3f:02:ec:ae: 61:e8:9e:37:0f:7f:6d:af:03:b3:62:bc:65:fb:98:5d:66:86: be:4f:aa:17:95:b1:0c:61:38:99:20:33:be:6a:9b:ed:97:ec: 98:c5:1d:98:3f:45:5a:bf:ee:82:e9:af:a5:d1:d2:30:f9:9f: ee:e9:4a:32:78:44:ed:f9:53:82:2e:cb:c4:bc:a8:61:4d:1d: f6:34:a3:a7:ba:91:36:5f:a8:cc:5e:ba:66:b9:a4:d6:6e:f4: aa:29:2d:66:44:4e:d0:f2:39:a3:bd:5a:e2:7b:1f:71:91:5f: ed:5a:55:5f:ca:08:bb:11:37:fc:d3:4e:c7:75:10:4c:84:ad: 7f:87:c6:25:7c:de:7f:3e:2f:c9:8c:dd:a7:f3:d7:d6:f6:9f: c3:47:87:68:35:d9:ab:0a:77:a8:c5:e4:8e:c8:67:35:77:a9: 6b:e6:48:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmftZRpLkdQ8WkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk MDMzMmNkZjctZmM5ZS00MGU3LTk2M2UtOTYzYzMwNTAwOWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCXhOGUh0/iC3yN0QvtLqQjcQxZ/KKnEbck+ oVbvSeUg+Lvhzk3zE8UVlkOe/iqfiPl+cZH3H+FfH0tdfGVmsoC3hAoOLE7IQbcW 4V/SiBLYjenaw6vPJjRf+TI5U2LAeKMqV4i5z98qW4Y8LoXSPNPmpCgLeLX/nb4y ooxwZtwkRjGbWipdFyRmtCNQ2QngFs9IfJk4TRNcf/GZP5YUY0pqywaPiZ/Zi3s0 bgxjLrf12zC8k7DZPaoEYsugmg2UHXLM/fmvH4tT/ZVrJpAzrF2/AjOkho8+4ymz SBbZwrt3qmk48gYAhdyObnImG4iKAv0L3GBIlKoG73ibeSL2+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpp5LdUZMEwJW+DF0y8EPaD5jt3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGFmY2FjMWEtMTRmMi0z YjFlLTk5NDMtMGI3ZjQ3YzQzMjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8yKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABb2friFvZdpq+u8w5eFZLkqsQtrEsFtEdyrwwVsxUGtVY74IcjmIG32 xkcKmZ8GhlPDnXaGXK++KoW4lEGStxuJd/7Q4kPekanM1+5/K3KkwqIYf6UZPwLs rmHonjcPf22vA7NivGX7mF1mhr5PqheVsQxhOJkgM75qm+2X7JjFHZg/RVq/7oLp r6XR0jD5n+7pSjJ4RO35U4Iuy8S8qGFNHfY0o6e6kTZfqMxeuma5pNZu9KopLWZE TtDyOaO9WuJ7H3GRX+1aVV/KCLsRN/zTTsd1EEyErX+HxiV83n8+L8mM3afz19b2 n8NHh2g12asKd6jF5I7IZzV3qWvmSBo= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:32 2024 by rpki-client on console-ams.rpki-client.org