$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1e17e94-36fc-38d7-9385-045fa99e20e8.roa File: e1e17e94-36fc-38d7-9385-045fa99e20e8.roa (raw, json) Hash identifier: Ca5fWMz5GFUyamqF7sG0048oytATKwZNjd5Cjdhlkms= Subject key identifier: 6D:F8:70:E3:93:EA:23:87:EB:02:44:D8:99:62:D5:2B:96:BA:71:93 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847DC64C51F1511324C11986D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1e17e94-36fc-38d7-9385-045fa99e20e8.roa Signing time: Wed 13 Nov 2024 02:00:28 +0000 ROA not before: Wed 13 Nov 2024 02:00:28 +0000 ROA not after: Tue 11 Feb 2025 02:00:28 +0000 asID: 20940 IP address blocks: 23.213.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dc:64:c5:1f:15:11:32:4c:11:98:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 13 02:00:28 2024 GMT Not After : Feb 11 02:00:28 2025 GMT Subject: CN=a4a80d8d-68e4-4758-8553-8d3c87825eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8e:24:74:9c:ab:35:24:36:7e:eb:52:f5:5f: e1:d9:b0:a6:17:b1:1c:13:41:dc:68:93:11:90:e0: 72:bb:a2:9c:71:39:5c:6a:09:51:a0:e9:95:11:74: 2c:af:b1:be:aa:00:a7:b9:4c:6b:81:5b:c0:dd:cc: 54:d8:93:7a:af:6d:94:d3:f4:ab:05:a1:2e:1d:10: 28:ba:9b:75:79:7c:57:a1:99:f5:cd:6c:1d:5b:72: 3f:1f:60:d8:19:5f:13:4e:fe:da:39:9d:81:37:1b: 72:d5:dd:4a:14:96:96:4f:66:a8:5f:60:e5:3a:27: 1d:11:a5:d9:b2:db:73:ff:be:8d:6a:ef:09:d2:d0: f1:3d:fc:09:25:94:14:83:f4:42:f5:ca:e3:d9:ea: a0:af:8b:b7:a9:0f:42:51:52:ca:de:45:fe:d1:92: 42:41:40:45:3b:1a:eb:e1:8d:36:56:fe:4f:c3:e7: b4:e7:32:d8:b8:82:89:84:fe:c0:71:dd:c7:10:88: c6:56:4a:11:23:f3:dd:c1:d8:67:05:40:43:c0:81: 29:96:37:63:74:76:f6:6f:02:9e:ac:68:98:03:f4: a3:0d:fc:84:98:fe:18:c8:e2:da:3b:b2:57:7d:1a: 90:47:6a:7c:2a:e1:08:71:07:85:ce:eb:a2:04:89: a0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F8:70:E3:93:EA:23:87:EB:02:44:D8:99:62:D5:2B:96:BA:71:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1e17e94-36fc-38d7-9385-045fa99e20e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:53:4c:c5:70:df:f7:ff:44:2b:90:27:ac:f0:c6:0e:98:ed: 41:ea:8a:ed:b6:2d:bf:f3:63:55:63:a8:1b:6a:d6:6f:48:c0: 94:2d:25:8f:d4:6f:74:0f:2b:14:47:78:ad:eb:99:eb:8b:e3: cc:9b:4c:14:cd:2d:76:60:96:6f:68:6b:42:a6:31:ca:65:24: f0:ac:19:10:8e:07:05:57:27:42:3f:f2:db:8a:c1:5d:7a:dd: 58:76:06:54:e9:fe:24:11:07:b3:67:c1:6f:50:59:6e:00:2c: ee:72:87:86:86:e8:3e:ef:c8:49:43:7f:2f:50:ee:0c:14:43: 67:a0:b9:2a:42:b0:2a:c1:95:7c:14:fb:92:3f:e2:e8:c5:62: 6f:b5:29:b5:0f:54:ac:cb:94:65:2f:f8:53:1b:7d:1d:9c:47: 56:50:85:dd:1c:72:ac:c1:6b:58:b0:de:2c:ba:46:53:ed:4c: f6:a6:db:5e:51:54:e5:2c:61:e2:80:43:e8:4c:cb:b8:df:51: 59:a0:40:34:28:6a:0a:ff:c5:4f:d2:5a:4a:1f:14:a6:4e:29: 0a:61:97:59:65:8d:9f:a5:9d:6c:50:8f:53:9f:08:b3:86:6f: a7:62:57:9e:78:58:ad:2e:d9:77:1c:97:bc:50:4d:e4:a5:b9: 01:ed:51:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcZMUfFREyTBGYbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk YTRhODBkOGQtNjhlNC00NzU4LTg1NTMtOGQzYzg3ODI1ZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA644kdJyrNSQ2futS9V/h2bCmF7EcE0HcaJMR kOByu6KccTlcaglRoOmVEXQsr7G+qgCnuUxrgVvA3cxU2JN6r22U0/SrBaEuHRAo upt1eXxXoZn1zWwdW3I/H2DYGV8TTv7aOZ2BNxty1d1KFJaWT2aoX2DlOicdEaXZ sttz/76Nau8J0tDxPfwJJZQUg/RC9crj2eqgr4u3qQ9CUVLK3kX+0ZJCQUBFOxrr 4Y02Vv5Pw+e05zLYuIKJhP7Acd3HEIjGVkoRI/PdwdhnBUBDwIEpljdjdHb2bwKe rGiYA/SjDfyEmP4YyOLaO7JXfRqQR2p8KuEIcQeFzuuiBImgyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG34cOOT6iOH6wJE2Jli1SuWunGTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTFlMTdlOTQtMzZmYy0z OGQ3LTkzODUtMDQ1ZmE5OWUyMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9X0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpTTMVw3/f/RCuQJ6zwxg6Y7UHqiu22Lb/zY1VjqBtq1m9IwJQtJY/U b3QPKxRHeK3rmeuL48ybTBTNLXZglm9oa0KmMcplJPCsGRCOBwVXJ0I/8tuKwV16 3Vh2BlTp/iQRB7NnwW9QWW4ALO5yh4aG6D7vyElDfy9Q7gwUQ2eguSpCsCrBlXwU +5I/4ujFYm+1KbUPVKzLlGUv+FMbfR2cR1ZQhd0ccqzBa1iw3iy6RlPtTPam215R VOUsYeKAQ+hMy7jfUVmgQDQoagr/xU/SWkofFKZOKQphl1lljZ+lnWxQj1OfCLOG b6diV554WK0u2Xccl7xQTeSluQHtUWg= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:47 2024 by rpki-client on console-fra.rpki-client.org