$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71288f26-c69e-403f-9142-403ab625e8f5/cb21bee7-bd76-3434-a741-1a7f262fb971.roa File: cb21bee7-bd76-3434-a741-1a7f262fb971.roa (raw, json) Hash identifier: pUsVlAe4DytX0wEg3pS1fx2oOfKk3XH+7/gDHhjb3/U= Subject key identifier: 02:54:5B:B5:34:BE:79:10:14:6D:EC:7E:27:CC:AC:10:13:38:8E:49 Certificate issuer: /CN=71288f26-c69e-403f-9142-403ab625e8f5 Certificate serial: 010D0C9F4328584601AE85E91646157BEE8A5400 Authority key identifier: 4C:D5:8C:E9:6D:03:8E:06:21:06:39:2B:E9:D9:F0:CA:65:54:D2:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71288f26-c69e-403f-9142-403ab625e8f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71288f26-c69e-403f-9142-403ab625e8f5/cb21bee7-bd76-3434-a741-1a7f262fb971.roa Signing time: Mon 27 May 2024 01:00:24 +0000 ROA not before: Mon 27 May 2024 01:00:24 +0000 ROA not after: Sun 25 Aug 2024 01:00:24 +0000 asID: 204535 IP address blocks: 23.151.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71288f26-c69e-403f-9142-403ab625e8f5/71288f26-c69e-403f-9142-403ab625e8f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71288f26-c69e-403f-9142-403ab625e8f5/71288f26-c69e-403f-9142-403ab625e8f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71288f26-c69e-403f-9142-403ab625e8f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:01:ae:85:e9:16:46:15:7b:ee:8a:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71288f26-c69e-403f-9142-403ab625e8f5 Validity Not Before: May 27 01:00:24 2024 GMT Not After : Aug 25 01:00:24 2024 GMT Subject: CN=ab2c6eea-17ba-4733-8f22-4507a7c8ab33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:33:d6:06:af:96:71:98:cc:9e:4b:f3:f5:5d: 38:05:68:b9:ea:06:9d:13:dd:b4:68:5f:a9:1a:42: 19:b1:36:25:30:89:a9:11:ea:23:5e:b2:b4:75:29: 05:4b:9e:d3:c8:00:52:8e:52:0a:25:38:4c:78:2f: aa:a8:78:9b:62:6c:0c:bf:df:12:25:08:73:ea:23: 65:c4:ca:da:9f:9f:f3:00:1b:62:f1:6d:90:6d:d1: b0:33:42:62:bb:89:e3:03:70:9d:68:0f:85:2b:6d: 68:8b:83:83:56:cd:db:de:d7:d3:0a:ea:54:e5:62: 20:a3:a8:8f:08:1d:18:2c:44:35:58:e3:a8:90:84: c9:78:81:25:77:48:b7:5d:62:79:18:73:44:40:bd: c0:fc:39:9a:15:0b:6e:28:0f:d3:0a:45:fc:27:9b: ee:0f:2d:c0:cd:2c:5b:d4:40:8c:ee:c7:e1:b0:08: 67:60:70:8c:44:2e:5d:e1:49:04:d8:c1:06:d5:a2: f8:bf:cf:d5:e2:c4:b2:b7:ae:b9:e1:ca:0f:90:0e: ad:4f:aa:71:cf:a6:fd:37:36:9a:bc:00:ef:3a:90: f2:1e:ff:62:50:5e:f1:c9:5b:1e:d9:a6:dc:52:87: 9c:4b:d3:aa:47:9f:58:0f:d6:ce:09:01:71:f0:5f: 66:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:54:5B:B5:34:BE:79:10:14:6D:EC:7E:27:CC:AC:10:13:38:8E:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71288f26-c69e-403f-9142-403ab625e8f5/cb21bee7-bd76-3434-a741-1a7f262fb971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71288f26-c69e-403f-9142-403ab625e8f5/71288f26-c69e-403f-9142-403ab625e8f5.crl X509v3 Authority Key Identifier: keyid:4C:D5:8C:E9:6D:03:8E:06:21:06:39:2B:E9:D9:F0:CA:65:54:D2:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71288f26-c69e-403f-9142-403ab625e8f5.cer sbgp-ipAddrBlock: critical IPv4: 23.151.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:95:14:de:9d:fc:68:73:14:cb:45:3d:b4:5d:98:a5:79:9a: 50:94:5d:de:64:18:9b:e7:c3:93:36:26:65:ab:51:cf:4a:58: 6d:fa:ff:05:47:3e:03:15:4c:fd:95:bb:eb:a5:8c:2f:b7:1c: e3:22:bc:f5:56:bf:bd:93:5b:41:3f:63:7b:c9:f9:23:6f:1c: 3a:80:9a:79:bc:bf:5d:94:5b:73:23:b3:99:d1:e3:9a:ba:22: ad:17:1d:80:6c:c0:56:77:26:fd:14:ac:33:55:fb:94:03:09: 91:b0:c4:60:9e:fe:bd:f5:aa:95:d2:38:9f:f0:42:91:92:89: 20:cb:25:e0:59:30:c9:aa:0c:79:75:ba:47:06:62:3b:06:16: 53:ba:03:01:6c:4e:6a:72:41:82:42:31:41:9a:06:85:a7:91: 12:02:1c:ff:bd:24:12:f6:c6:bf:7f:a7:d2:fa:bb:5d:30:95: 75:9b:b8:c6:a0:63:63:8b:4d:76:e2:96:da:2d:ea:bf:ec:9f: 00:e7:b7:f9:1a:a0:c1:fb:f2:5a:17:f1:66:9d:8e:48:ac:b4: 1d:35:cd:0f:3e:4b:60:d3:bd:5a:10:7f:9c:55:b0:79:27:ab: 3d:ce:38:76:e9:81:d4:8f:e9:75:5f:2f:76:6c:e8:0d:81:34: 1a:1c:c0:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYBroXpFkYVe+6KVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzEyODhmMjYtYzY5ZS00MDNmLTkxNDItNDAzYWI2MjVl OGY1MB4XDTI0MDUyNzAxMDAyNFoXDTI0MDgyNTAxMDAyNFowLzEtMCsGA1UEAxMk YWIyYzZlZWEtMTdiYS00NzMzLThmMjItNDUwN2E3YzhhYjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizPWBq+WcZjMnkvz9V04BWi56gadE920aF+p GkIZsTYlMImpEeojXrK0dSkFS57TyABSjlIKJThMeC+qqHibYmwMv98SJQhz6iNl xMran5/zABti8W2QbdGwM0Jiu4njA3CdaA+FK21oi4ODVs3b3tfTCupU5WIgo6iP CB0YLEQ1WOOokITJeIEld0i3XWJ5GHNEQL3A/DmaFQtuKA/TCkX8J5vuDy3AzSxb 1ECM7sfhsAhnYHCMRC5d4UkE2MEG1aL4v8/V4sSyt6654coPkA6tT6pxz6b9Nzaa vADvOpDyHv9iUF7xyVse2abcUoecS9OqR59YD9bOCQFx8F9muQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJUW7U0vnkQFG3sfifMrBATOI5JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83MTI4 OGYyNi1jNjllLTQwM2YtOTE0Mi00MDNhYjYyNWU4ZjUvY2IyMWJlZTctYmQ3Ni0z NDM0LWE3NDEtMWE3ZjI2MmZiOTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzEyODhmMjYtYzY5ZS00MDNmLTkx NDItNDAzYWI2MjVlOGY1LzcxMjg4ZjI2LWM2OWUtNDAzZi05MTQyLTQwM2FiNjI1 ZThmNS5jcmwwHwYDVR0jBBgwFoAUTNWM6W0DjgYhBjkr6dnwymVU0sQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83MTI4OGYyNi1jNjllLTQwM2YtOTE0Mi00MDNh YjYyNWU4ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5fIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWVFN6d/GhzFMtFPbRdmKV5mlCUXd5kGJvnw5M2JmWrUc9KWG36/wVH PgMVTP2Vu+uljC+3HOMivPVWv72TW0E/Y3vJ+SNvHDqAmnm8v12UW3Mjs5nR45q6 Iq0XHYBswFZ3Jv0UrDNV+5QDCZGwxGCe/r31qpXSOJ/wQpGSiSDLJeBZMMmqDHl1 ukcGYjsGFlO6AwFsTmpyQYJCMUGaBoWnkRICHP+9JBL2xr9/p9L6u10wlXWbuMag Y2OLTXbiltot6r/snwDnt/kaoMH78loX8WadjkistB01zQ8+S2DTvVoQf5xVsHkn qz3OOHbpgdSP6XVfL3Zs6A2BNBocwCM= -----END CERTIFICATE-----Generated at Sun Jun 2 19:24:50 2024 by rpki-client on console-ams.rpki-client.org