$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5954475b-f6ad-37fb-b987-bbbe07a3d6e9.roa File: 5954475b-f6ad-37fb-b987-bbbe07a3d6e9.roa (raw, json) Hash identifier: fPImJDrqb2fjhCSBnmtqPaFYoVyW2LxJEq/ux5jCnPY= Subject key identifier: 49:86:02:EA:2A:60:4B:DF:B7:07:E6:87:60:D4:3F:D1:A4:97:FC:20 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285845D933D5336C96B5466AB4B340 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5954475b-f6ad-37fb-b987-bbbe07a3d6e9.roa Signing time: Sun 12 May 2024 13:00:34 +0000 ROA not before: Sun 12 May 2024 13:00:34 +0000 ROA not after: Sat 10 Aug 2024 13:00:34 +0000 asID: 22898 IP address blocks: 64.193.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d9:33:d5:33:6c:96:b5:46:6a:b4:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 12 13:00:34 2024 GMT Not After : Aug 10 13:00:34 2024 GMT Subject: CN=6b5a0ba1-caeb-47ef-8b23-6347076c7cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3c:2b:27:0c:3d:c5:fa:0e:ea:42:1d:67:9b: 07:55:c6:52:e4:13:dc:15:de:fd:a5:9c:3a:3a:66: ad:bb:9b:ef:87:0e:b3:a5:63:af:30:4d:f1:80:89: ce:aa:39:75:ee:17:e0:b4:ad:a8:4d:51:1c:b5:d7: 55:62:86:20:9c:95:0f:93:7c:3c:93:ff:6a:45:7b: c3:2c:25:47:ea:90:7b:f8:d8:b4:de:ef:7a:52:9f: 3f:da:25:d9:89:1b:a0:24:d8:a6:1b:e6:05:88:82: ed:70:46:0b:99:6b:66:ae:50:a9:25:ba:61:5c:c6: 98:8a:04:55:58:ad:ef:77:eb:c5:a9:ad:50:03:cd: cb:c4:40:6f:76:68:d9:28:1f:bb:16:6f:45:12:3c: aa:c8:4d:ed:29:43:85:9e:bd:86:de:41:f1:8a:44: 48:cc:65:45:36:7b:22:8b:1c:97:7c:38:d4:2b:8b: 5f:8f:aa:5c:ff:c7:e2:60:90:89:8c:61:d2:45:71: 6c:ba:b1:0e:2f:8b:38:7b:ec:ab:87:da:b1:75:b0: 30:db:ea:bb:30:40:23:86:26:84:4a:39:8c:3b:c9: 59:f0:48:d3:1c:db:ac:cb:36:00:bd:f4:57:43:c7: 1e:97:3b:70:3e:c7:e2:79:6a:a0:f8:60:0a:51:7c: 3d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:86:02:EA:2A:60:4B:DF:B7:07:E6:87:60:D4:3F:D1:A4:97:FC:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5954475b-f6ad-37fb-b987-bbbe07a3d6e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.193.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:8c:82:a1:10:c0:a0:80:ad:6b:99:76:c4:9c:a4:dc:b5:5f: 58:c6:92:82:27:c3:e0:ae:9d:b0:ef:b4:38:6f:b2:1c:ef:22: 9f:93:62:4c:9c:7d:42:1d:dc:86:35:c4:f9:64:8a:e2:5f:5b: 15:72:c2:81:9a:71:6c:1b:71:26:5a:96:06:f6:6a:a5:5e:1c: 2b:7e:ea:91:48:a5:cc:f9:2e:ef:8f:9e:29:70:5e:a1:39:1d: d8:ff:56:9d:f3:00:96:24:c0:42:e6:a8:f3:f6:de:07:32:08: 10:13:89:fc:65:84:40:86:de:c1:11:97:54:1c:85:50:0e:bc: b9:42:e8:26:a0:8a:b1:eb:61:91:cc:29:80:bb:ab:6f:e8:ea: d7:21:d1:fd:c4:43:2b:06:cb:fb:47:e1:69:39:3e:bc:28:97: 30:60:ea:c0:4f:5c:90:24:90:45:51:df:a6:83:52:47:ce:52: 8e:ed:26:78:00:31:f2:5b:14:0b:dd:3d:ec:0a:52:df:2f:95: 2e:3e:e4:40:bc:c8:1d:c0:c9:5e:4f:02:af:da:68:f2:2c:ef: 07:8f:2c:65:2f:42:61:ce:05:45:71:95:c1:e3:e1:68:99:5e: c9:01:a9:7d:04:cb:a7:d7:d1:8d:38:ff:bf:2e:0f:e1:10:fd: b0:a7:ad:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXZM9UzbJa1Rmq0s0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MDUxMjEzMDAzNFoXDTI0MDgxMDEzMDAzNFowLzEtMCsGA1UEAxMk NmI1YTBiYTEtY2FlYi00N2VmLThiMjMtNjM0NzA3NmM3Y2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TwrJww9xfoO6kIdZ5sHVcZS5BPcFd79pZw6 Omatu5vvhw6zpWOvME3xgInOqjl17hfgtK2oTVEctddVYoYgnJUPk3w8k/9qRXvD LCVH6pB7+Ni03u96Up8/2iXZiRugJNimG+YFiILtcEYLmWtmrlCpJbphXMaYigRV WK3vd+vFqa1QA83LxEBvdmjZKB+7Fm9FEjyqyE3tKUOFnr2G3kHxikRIzGVFNnsi ixyXfDjUK4tfj6pc/8fiYJCJjGHSRXFsurEOL4s4e+yrh9qxdbAw2+q7MEAjhiaE SjmMO8lZ8EjTHNusyzYAvfRXQ8celztwPsfieWqg+GAKUXw9iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmGAuoqYEvftwfmh2DUP9Gkl/wgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNTk1NDQ3NWItZjZhZC0z N2ZiLWI5ODctYmJiZTA3YTNkNmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQMF8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqMgqEQwKCArWuZdsScpNy1X1jGkoInw+CunbDvtDhvshzvIp+TYkyc fUId3IY1xPlkiuJfWxVywoGacWwbcSZalgb2aqVeHCt+6pFIpcz5Lu+PnilwXqE5 Hdj/Vp3zAJYkwELmqPP23gcyCBATifxlhECG3sERl1QchVAOvLlC6CagirHrYZHM KYC7q2/o6tch0f3EQysGy/tH4Wk5PrwolzBg6sBPXJAkkEVR36aDUkfOUo7tJngA MfJbFAvdPewKUt8vlS4+5EC8yB3AyV5PAq/aaPIs7wePLGUvQmHOBUVxlcHj4WiZ XskBqX0Ey6fX0Y04/78uD+EQ/bCnrRo= -----END CERTIFICATE-----Generated at Sat May 18 01:32:46 2024 by rpki-client on console-fra.rpki-client.org