$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d85ad17a-9443-36be-a0cd-94ed340eaab8.roa File: d85ad17a-9443-36be-a0cd-94ed340eaab8.roa (raw, json) Hash identifier: K+FuY7bgSXuPC/iNzN2WMm+auZQlNhfIoKMLCZueexc= Subject key identifier: 21:B0:1C:5D:B7:65:A1:8C:0A:B8:D4:8A:94:37:00:5F:97:F0:0A:29 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285845E193B802B3F4900D1ADAF4E0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d85ad17a-9443-36be-a0cd-94ed340eaab8.roa Signing time: Wed 15 May 2024 13:00:34 +0000 ROA not before: Wed 15 May 2024 13:00:34 +0000 ROA not after: Tue 13 Aug 2024 13:00:34 +0000 asID: 989 IP address blocks: 8.36.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:e1:93:b8:02:b3:f4:90:0d:1a:da:f4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 15 13:00:34 2024 GMT Not After : Aug 13 13:00:34 2024 GMT Subject: CN=d5390d0c-6602-4a4c-83d0-b93b5f67d235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1d:28:29:0a:c4:2c:04:86:44:9d:11:bf:4e: 5a:ef:ef:5b:3e:73:b9:b4:bb:26:ef:df:cd:0e:12: 81:81:03:74:89:26:ab:40:1a:c1:a4:d6:5e:3e:8d: 44:0e:e1:b4:06:4e:a5:1c:d7:5e:f7:a9:d2:47:16: 95:81:4f:4f:74:01:dd:75:5a:0b:2b:83:9c:d9:49: e7:d9:7d:bf:a3:55:be:09:9f:95:67:76:93:29:57: 3f:7c:7c:fd:36:2c:a2:ca:a1:ee:42:86:84:40:e8: 55:23:dc:7f:06:8b:29:25:69:04:42:af:73:29:07: fd:7b:2c:4d:30:60:51:d4:27:da:7e:f0:96:e3:01: 86:1e:0d:de:c5:d5:1f:8c:40:09:4e:39:64:69:44: b4:00:ab:df:69:ac:9e:62:b1:87:f1:62:33:40:8f: 92:37:ce:a4:42:ec:a4:c4:65:1e:ce:6e:ac:9e:75: 9e:72:fa:10:80:43:c1:c0:ce:b1:4b:4a:18:15:83: c1:b5:eb:19:6d:64:f4:f7:16:11:5f:76:ac:5e:6a: e3:f5:db:43:c2:f1:33:91:85:c4:0f:db:78:23:56: e6:5d:2a:67:7b:d9:6d:36:4c:d0:73:86:55:c0:e9: 35:d3:4c:4d:1e:db:19:6a:f9:83:00:e4:12:74:62: 9e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B0:1C:5D:B7:65:A1:8C:0A:B8:D4:8A:94:37:00:5F:97:F0:0A:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d85ad17a-9443-36be-a0cd-94ed340eaab8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.36.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:1e:31:42:6b:54:90:28:19:68:a9:2f:c8:c0:57:06:00:a2: c1:03:f0:31:6f:48:11:fd:c3:71:73:e9:ef:aa:4d:d1:32:26: 4e:90:4c:7f:d0:7e:90:39:a4:1a:a6:1f:da:bf:d5:fb:dc:b2: dd:67:b3:39:19:fe:0e:99:47:c0:78:18:0d:ea:30:a1:67:46: b6:39:eb:78:c0:4e:82:ec:6e:ab:37:6e:75:d9:72:b3:a5:f5: 94:1c:74:7f:dd:cf:94:cf:fd:76:42:65:94:34:27:83:7d:7c: 5a:7b:39:81:89:c5:79:da:94:37:07:f5:b9:ee:3d:d4:b3:8e: 50:ba:7b:b7:11:25:bd:b8:cf:ee:a5:ae:65:ad:1f:c9:d7:12: a5:34:0d:44:42:85:ce:c2:08:e4:fd:43:20:0f:f7:cb:9a:03: 08:d1:fc:50:a2:5a:5d:a0:d6:6d:70:8f:2d:b4:cf:1a:c8:15: b9:27:a2:73:59:d5:d3:ee:fd:31:0c:a0:1a:5f:79:d2:58:64: 12:a1:1b:8d:40:7b:e1:56:7a:e7:95:0e:58:a8:ad:b8:16:d9: b3:92:3a:8a:9a:4a:98:d6:63:9c:02:62:27:da:09:95:3b:69: f5:74:21:09:b1:27:e4:4d:c9:47:3e:3d:96:2b:73:9e:57:fc: e7:27:51:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXhk7gCs/SQDRra9OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MDUxNTEzMDAzNFoXDTI0MDgxMzEzMDAzNFowLzEtMCsGA1UEAxMk ZDUzOTBkMGMtNjYwMi00YTRjLTgzZDAtYjkzYjVmNjdkMjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR0oKQrELASGRJ0Rv05a7+9bPnO5tLsm79/N DhKBgQN0iSarQBrBpNZePo1EDuG0Bk6lHNde96nSRxaVgU9PdAHddVoLK4Oc2Unn 2X2/o1W+CZ+VZ3aTKVc/fHz9NiyiyqHuQoaEQOhVI9x/BospJWkEQq9zKQf9eyxN MGBR1CfafvCW4wGGHg3exdUfjEAJTjlkaUS0AKvfaayeYrGH8WIzQI+SN86kQuyk xGUezm6snnWecvoQgEPBwM6xS0oYFYPBtesZbWT09xYRX3asXmrj9dtDwvEzkYXE D9t4I1bmXSpne9ltNkzQc4ZVwOk100xNHtsZavmDAOQSdGKedwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGwHF23ZaGMCrjUipQ3AF+X8AopMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZDg1YWQxN2EtOTQ0My0z NmJlLWEwY2QtOTRlZDM0MGVhYWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBCCTuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgeMUJrVJAoGWipL8jAVwYAosED8DFvSBH9w3Fz6e+qTdEyJk6QTH/Q fpA5pBqmH9q/1fvcst1nszkZ/g6ZR8B4GA3qMKFnRrY563jAToLsbqs3bnXZcrOl 9ZQcdH/dz5TP/XZCZZQ0J4N9fFp7OYGJxXnalDcH9bnuPdSzjlC6e7cRJb24z+6l rmWtH8nXEqU0DURChc7CCOT9QyAP98uaAwjR/FCiWl2g1m1wjy20zxrIFbknonNZ 1dPu/TEMoBpfedJYZBKhG41Ae+FWeueVDliorbgW2bOSOoqaSpjWY5wCYifaCZU7 afV0IQmxJ+RNyUc+PZYrc55X/OcnUUo= -----END CERTIFICATE-----Generated at Fri May 17 15:24:11 2024 by rpki-client on console-ams.rpki-client.org