$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/facec0c3-3e20-3ab9-92ff-cea91868e688.roa File: facec0c3-3e20-3ab9-92ff-cea91868e688.roa (raw, json) Hash identifier: 0QtqNoWeG+pIl8e4+y3jkKydD9LqZwgLbMyuhxctnVQ= Subject key identifier: C3:BF:78:5A:49:BC:F0:82:C0:41:10:C1:37:F8:AD:83:88:DB:CC:E3 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285845BDBE7BCEF1EAC15FF2F75640 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/facec0c3-3e20-3ab9-92ff-cea91868e688.roa Signing time: Thu 02 May 2024 16:57:39 +0000 ROA not before: Thu 02 May 2024 16:57:39 +0000 ROA not after: Wed 31 Jul 2024 16:57:39 +0000 asID: 7015 IP address blocks: 23.249.160.0/24 maxlen: 24 23.249.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Jun 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:bd:be:7b:ce:f1:ea:c1:5f:f2:f7:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: May 2 16:57:39 2024 GMT Not After : Jul 31 16:57:39 2024 GMT Subject: CN=a563dab5-a3c6-4897-8185-e14cc7428545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0e:5c:a9:ff:5b:2f:ae:42:2b:ce:c7:c9:b2: 8f:35:49:43:e2:6c:9e:15:39:6a:68:b6:77:8b:e9: 81:11:d1:80:3b:ce:03:fc:82:58:f6:8a:3f:55:c2: 4a:be:1b:f1:85:71:0a:04:62:95:ee:7d:d5:1d:b6: 09:91:c9:87:8f:40:2a:2e:f6:19:7f:dc:ad:c6:75: 7c:b0:d5:de:16:f3:ed:5a:f1:c5:39:fa:81:c9:5b: c3:8a:d8:58:46:22:72:70:21:da:73:b4:24:99:3e: 7f:b8:c4:a5:76:7d:d4:9c:60:d1:36:5c:55:2c:5d: 31:8b:d5:6d:27:e9:0e:5b:0f:17:be:b1:0e:c7:b2: 86:d7:35:08:33:32:a9:3b:9b:9a:5b:47:37:25:e7: e0:25:2d:7e:4c:83:01:5e:81:84:08:65:70:5d:57: 29:a4:59:dc:67:3d:5c:7f:d3:7d:ae:c8:7f:58:b0: 56:3e:17:18:e4:02:5e:b6:ef:99:5f:01:74:30:d3: 5a:00:af:ed:c1:b8:6f:c6:fc:fe:54:e4:42:c9:d2: c0:b4:9c:c8:2b:15:d4:71:72:96:16:82:5e:ec:44: 65:47:d5:9c:c9:62:14:d0:bd:b8:3f:f6:a6:40:4f: 16:82:bb:8a:13:38:19:a2:70:a4:31:9d:37:d0:dd: 29:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BF:78:5A:49:BC:F0:82:C0:41:10:C1:37:F8:AD:83:88:DB:CC:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/facec0c3-3e20-3ab9-92ff-cea91868e688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 23.249.160.0/24 23.249.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:4d:01:e8:ce:80:ca:dc:d6:b6:3e:e8:34:58:da:39:d3:12: 13:10:46:86:13:03:92:2c:86:dd:2c:2a:6a:80:46:86:7c:a1: 1a:9e:af:82:6b:df:6d:85:89:31:22:ce:2e:5d:21:97:31:73: 23:8c:85:41:27:c7:93:90:8d:fa:ee:56:ad:ba:e6:68:3c:51: 48:bd:fd:10:8b:50:81:0a:4b:f4:06:d6:fe:55:f9:7d:1e:1c: 46:57:0a:4f:cb:18:df:d6:66:74:57:69:48:81:67:f1:04:96: cd:a5:5a:a0:4f:9c:82:d7:a1:08:64:f6:fc:1f:c7:c7:61:ff: 16:49:a9:2a:e1:13:0e:51:05:91:2c:87:f2:27:99:1b:01:e6: 03:c0:b6:91:00:39:c1:cc:a3:3d:4f:9b:6d:2c:3d:4f:ea:37: 93:f1:c4:7f:59:6a:ff:40:27:4c:3e:16:e0:a8:16:20:b4:f9: ce:5b:26:65:2f:23:7b:94:16:a3:3d:d0:27:cd:58:ec:14:1c: 60:d7:8e:93:7e:92:d4:81:b8:78:c9:96:b2:86:0c:c4:4c:db: 9b:ee:98:85:b9:39:2f:a6:50:1b:53:07:f2:2b:ae:7d:ae:72: 18:db:80:f6:68:23:09:25:2c:2a:34:f9:a2:f3:5e:ce:96:b7: 5b:47:67:66 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEW9vnvO8erBX/L3VkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MDUwMjE2NTczOVoXDTI0MDczMTE2NTczOVowLzEtMCsGA1UEAxMk YTU2M2RhYjUtYTNjNi00ODk3LTgxODUtZTE0Y2M3NDI4NTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA5cqf9bL65CK87HybKPNUlD4myeFTlqaLZ3 i+mBEdGAO84D/IJY9oo/VcJKvhvxhXEKBGKV7n3VHbYJkcmHj0AqLvYZf9ytxnV8 sNXeFvPtWvHFOfqByVvDithYRiJycCHac7QkmT5/uMSldn3UnGDRNlxVLF0xi9Vt J+kOWw8XvrEOx7KG1zUIMzKpO5uaW0c3JefgJS1+TIMBXoGECGVwXVcppFncZz1c f9N9rsh/WLBWPhcY5AJetu+ZXwF0MNNaAK/twbhvxvz+VORCydLAtJzIKxXUcXKW FoJe7ERlR9WcyWIU0L24P/amQE8WgruKEzgZonCkMZ030N0pUQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMO/eFpJvPCCwEEQwTf4rYOI28zjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZmFjZWMwYzMtM2UyMC0z YWI5LTkyZmYtY2VhOTE4NjhlNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF/mgAwQA F/mqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFVNAejOgMrc1rY+6DRY2jnTEhMQRoYTA5Isht0sKmqARoZ8 oRqer4Jr322FiTEizi5dIZcxcyOMhUEnx5OQjfruVq265mg8UUi9/RCLUIEKS/QG 1v5V+X0eHEZXCk/LGN/WZnRXaUiBZ/EEls2lWqBPnILXoQhk9vwfx8dh/xZJqSrh Ew5RBZEsh/InmRsB5gPAtpEAOcHMoz1Pm20sPU/qN5PxxH9Zav9AJ0w+FuCoFiC0 +c5bJmUvI3uUFqM90CfNWOwUHGDXjpN+ktSBuHjJlrKGDMRM25vumIW5OS+mUBtT B/Irrn2uchjbgPZoIwklLCo0+aLzXs6Wt1tHZ2Y= -----END CERTIFICATE-----Generated at Fri Jun 21 01:56:37 2024 by rpki-client on console-ams.rpki-client.org