$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee905cbb-5ff9-343c-b9ef-53b1be80031e.roa File: ee905cbb-5ff9-343c-b9ef-53b1be80031e.roa (raw, json) Hash identifier: ZpaWROaivxlxq+PGdh5+7mrqjVL6R4roiKjRSEe7VOA= Subject key identifier: 30:16:46:0C:E8:84:58:51:C8:39:1B:B5:F1:74:84:9A:37:CE:99:C8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584752161B32B4A2DCA0D17C0E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee905cbb-5ff9-343c-b9ef-53b1be80031e.roa Signing time: Tue 24 Sep 2024 13:00:40 +0000 ROA not before: Tue 24 Sep 2024 13:00:40 +0000 ROA not after: Mon 23 Dec 2024 14:00:40 +0000 asID: 16625 IP address blocks: 173.223.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:52:16:1b:32:b4:a2:dc:a0:d1:7c:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 13:00:40 2024 GMT Not After : Dec 23 14:00:40 2024 GMT Subject: CN=ec5f24a1-d108-4468-8098-fe40c8163436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4d:a3:78:a1:f4:c1:a7:d9:19:72:4f:be:4f: 5f:18:a3:59:2d:ae:0d:a1:f3:38:99:aa:15:5a:d5: 04:e0:25:82:8c:59:05:c6:94:bb:c4:11:47:a6:c6: 09:19:6b:bb:25:f4:38:9a:17:fe:98:5e:90:53:6a: 62:4a:8f:f9:de:f0:61:e4:14:d7:75:6b:a1:bb:8d: fe:62:1c:a8:87:aa:11:3c:e7:74:b4:73:09:2c:3d: 32:ef:d0:92:3a:89:b2:b0:5f:15:ed:0f:b6:14:f7: 4d:1b:e7:6a:f2:96:14:9b:be:17:03:ac:bd:66:d4: d1:10:ab:2d:f5:8d:f3:95:c3:15:f7:d6:57:4d:8b: 3e:67:dc:86:70:36:30:b5:3a:17:1b:c6:b8:d3:61: f3:27:5b:e7:ef:8a:b9:b6:90:b0:9a:44:7c:32:8f: 78:f3:56:15:79:1d:5f:88:d0:e5:e4:9f:46:8c:dd: 34:a0:7e:6e:d6:83:c6:85:04:aa:26:22:2d:66:2b: a2:ff:5f:c5:04:f1:69:29:6a:58:dd:11:f2:11:58: ca:b3:dc:53:bf:50:51:6c:fd:0a:99:9c:7a:e6:18: 96:22:f8:c5:e4:8b:c6:fc:aa:ef:86:02:eb:10:e5: d1:be:a0:ef:ac:ef:8b:b0:41:25:ae:e0:02:8f:a1: 74:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:16:46:0C:E8:84:58:51:C8:39:1B:B5:F1:74:84:9A:37:CE:99:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee905cbb-5ff9-343c-b9ef-53b1be80031e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:8c:ea:cc:50:2e:dd:74:08:89:3b:82:ca:d1:a6:f0:a2:ad: 60:cf:50:b9:58:dd:e5:ad:16:32:a2:f1:97:40:d0:6f:3e:38: 74:85:c2:7b:5b:51:0d:a8:06:60:37:55:19:ed:4a:8b:e1:10: f0:cd:39:c0:c3:7f:ef:8b:bf:ae:c4:10:9d:de:b7:6d:28:02: 84:4f:17:cb:b8:40:5c:93:93:be:50:05:f0:ff:cd:13:cb:d3: 94:ec:f0:b0:68:1f:ac:9c:18:80:1f:21:9d:a5:56:75:58:6e: d0:35:36:94:37:20:93:e2:18:84:7c:4f:46:93:99:47:23:0a: f1:36:f5:de:c2:de:fc:7b:19:a3:28:3f:10:1f:b3:5e:53:08: 24:33:36:97:d9:a4:60:60:ae:a1:c6:94:90:ab:92:81:ba:98: ce:d4:d6:39:a5:23:95:08:55:f8:31:1e:31:3c:f8:b3:75:c0: 26:ca:ff:be:9a:d8:63:41:f8:6a:88:db:eb:b2:2b:ae:4c:4f: a7:fe:ff:de:8b:54:fd:a8:b0:a5:8d:d5:b3:19:74:b3:fd:1f: 1b:dd:23:c6:a3:e0:2d:bd:24:f7:ef:a2:0b:40:20:0e:bd:a1: 78:9b:1c:4c:02:88:e1:24:e9:c3:89:63:de:2f:be:6d:89:a4: 73:60:35:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdSFhsytKLcoNF8DoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyNDEzMDA0MFoXDTI0MTIyMzE0MDA0MFowLzEtMCsGA1UEAxMk ZWM1ZjI0YTEtZDEwOC00NDY4LTgwOTgtZmU0MGM4MTYzNDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr02jeKH0wafZGXJPvk9fGKNZLa4NofM4maoV WtUE4CWCjFkFxpS7xBFHpsYJGWu7JfQ4mhf+mF6QU2piSo/53vBh5BTXdWuhu43+ Yhyoh6oRPOd0tHMJLD0y79CSOomysF8V7Q+2FPdNG+dq8pYUm74XA6y9ZtTREKst 9Y3zlcMV99ZXTYs+Z9yGcDYwtToXG8a402HzJ1vn74q5tpCwmkR8Mo9481YVeR1f iNDl5J9GjN00oH5u1oPGhQSqJiItZiui/1/FBPFpKWpY3RHyEVjKs9xTv1BRbP0K mZx65hiWIvjF5IvG/KrvhgLrEOXRvqDvrO+LsEElruACj6F0YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAWRgzohFhRyDkbtfF0hJo3zpnIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWU5MDVjYmItNWZmOS0z NDNjLWI5ZWYtNTNiMWJlODAwMzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd9sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6M6sxQLt10CIk7gsrRpvCirWDPULlY3eWtFjKi8ZdA0G8+OHSFwntb UQ2oBmA3VRntSovhEPDNOcDDf++Lv67EEJ3et20oAoRPF8u4QFyTk75QBfD/zRPL 05Ts8LBoH6ycGIAfIZ2lVnVYbtA1NpQ3IJPiGIR8T0aTmUcjCvE29d7C3vx7GaMo PxAfs15TCCQzNpfZpGBgrqHGlJCrkoG6mM7U1jmlI5UIVfgxHjE8+LN1wCbK/76a 2GNB+GqI2+uyK65MT6f+/96LVP2osKWN1bMZdLP9HxvdI8aj4C29JPfvogtAIA69 oXibHEwCiOEk6cOJY94vvm2JpHNgNX8= -----END CERTIFICATE-----Generated at Mon Nov 25 16:33:04 2024 by rpki-client on console-ams.rpki-client.org