$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/4ca0fb0e-603a-3c70-926c-431077a6023b.roa File: 4ca0fb0e-603a-3c70-926c-431077a6023b.roa (raw, json) Hash identifier: ULHkxOPDMVqi9V61Hu1MGGnJqh3q4OM7iMGaw86fodI= Subject key identifier: C1:31:D9:32:11:7B:F7:02:B1:8C:16:EC:CB:E1:49:CB:D1:D1:1A:F1 Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Certificate serial: 010D0C9F43285845B21E29209ACF577723A33080 Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/4ca0fb0e-603a-3c70-926c-431077a6023b.roa Signing time: Sun 28 Apr 2024 13:00:34 +0000 ROA not before: Sun 28 Apr 2024 13:00:34 +0000 ROA not after: Sat 27 Jul 2024 13:00:34 +0000 asID: 13780 IP address blocks: 23.128.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b2:1e:29:20:9a:cf:57:77:23:a3:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Validity Not Before: Apr 28 13:00:34 2024 GMT Not After : Jul 27 13:00:34 2024 GMT Subject: CN=091bcc98-e5bc-430e-929a-6af20b934a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ca:74:02:0c:b8:bd:bb:93:1a:80:38:4d:b9: 63:63:c2:18:05:26:ed:16:ce:95:5d:0c:94:ed:e7: 72:3c:83:10:33:a2:de:fc:00:bc:8d:7e:5a:2a:52: 97:e1:37:90:2c:d1:b9:0e:be:17:e2:67:11:48:c2: 64:38:3b:95:12:e4:38:38:4a:09:2e:d3:cf:c4:bc: 21:0d:ec:29:e7:3f:34:c5:8b:c2:f2:e7:a8:45:9b: 2c:24:ad:f3:94:c2:2d:db:d9:38:4c:c4:98:53:5e: eb:4d:1e:77:9b:88:49:d0:83:fd:f4:6a:de:3d:c6: f1:4a:a8:75:ca:c4:3b:6c:8d:95:fb:ce:c2:95:fd: b0:80:b3:02:93:63:5b:d3:b6:20:a2:c4:75:c0:fe: 75:fc:41:65:91:1a:29:3f:21:2d:aa:9c:b8:37:e7: 15:be:eb:1d:0b:6a:36:74:f4:98:db:59:4b:5f:51: 21:4b:35:a4:50:73:08:a5:cf:11:02:9f:53:8d:88: e0:48:13:5d:ea:d3:e1:cf:48:f1:cc:8e:4a:b2:c9: eb:5c:5a:49:7e:2d:d0:b9:aa:db:6c:e6:95:21:37: 9d:ab:18:f1:3e:6a:77:ab:11:2e:df:fe:c9:a5:a1: c0:f5:0f:e4:b8:a3:14:10:b9:ff:d6:df:67:9e:6a: 67:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:31:D9:32:11:7B:F7:02:B1:8C:16:EC:CB:E1:49:CB:D1:D1:1A:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/4ca0fb0e-603a-3c70-926c-431077a6023b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl X509v3 Authority Key Identifier: keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer sbgp-ipAddrBlock: critical IPv4: 23.128.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:9a:c8:b8:f1:49:5c:a0:e8:e9:65:74:10:66:92:f3:09:94: 10:36:b6:48:6a:df:b2:41:82:16:33:29:eb:e9:61:31:3f:f6: c8:09:50:4e:0a:03:7a:64:97:c0:c6:56:a6:5c:1b:83:36:49: 00:31:be:98:9a:c3:79:32:fc:d3:ff:10:d5:24:9f:f6:4f:ce: 01:d6:63:de:a1:9e:bd:4d:58:22:96:d5:0d:9f:69:ae:aa:a5: 57:84:77:df:22:1c:17:b2:8f:3e:41:4d:36:2b:bf:38:d0:f1: ee:e5:3a:8a:35:86:a6:65:d4:e7:13:fc:aa:5b:97:c2:d1:4d: 30:ce:2a:78:d2:86:d0:5f:d6:05:ea:09:7e:e4:d4:33:4b:51: a2:94:23:33:d3:7b:02:ef:4e:af:79:3a:7c:0a:e5:de:24:9a: 6b:d2:7f:ac:08:1d:14:31:4c:50:40:b8:c0:0f:5d:06:04:f0: c5:b0:37:e1:87:9e:83:08:3a:be:05:28:9b:97:3b:94:53:1f: f5:c2:2f:8c:b4:3a:0c:b9:ea:c5:f5:6e:f1:9e:10:98:91:61: 1c:f4:58:c0:9c:2c:55:03:56:d1:fd:28:36:fa:da:8e:fa:49: 49:b2:57:f7:3e:c3:a9:6b:90:c2:6f:dd:90:68:73:09:66:d0: ba:5c:87:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWyHikgms9XdyOjMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3 ZWVlMB4XDTI0MDQyODEzMDAzNFoXDTI0MDcyNzEzMDAzNFowLzEtMCsGA1UEAxMk MDkxYmNjOTgtZTViYy00MzBlLTkyOWEtNmFmMjBiOTM0YTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicp0Agy4vbuTGoA4TbljY8IYBSbtFs6VXQyU 7edyPIMQM6Le/AC8jX5aKlKX4TeQLNG5Dr4X4mcRSMJkODuVEuQ4OEoJLtPPxLwh Dewp5z80xYvC8ueoRZssJK3zlMIt29k4TMSYU17rTR53m4hJ0IP99GrePcbxSqh1 ysQ7bI2V+87Clf2wgLMCk2Nb07YgosR1wP51/EFlkRopPyEtqpy4N+cVvusdC2o2 dPSY21lLX1EhSzWkUHMIpc8RAp9TjYjgSBNd6tPhz0jxzI5KssnrXFpJfi3Quarb bOaVITedqxjxPmp3qxEu3/7JpaHA9Q/kuKMUELn/1t9nnmpn5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEx2TIRe/cCsYwW7MvhScvR0RrxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3 Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvNGNhMGZiMGUtNjAzYS0z YzcwLTkyNmMtNDMxMDc3YTYwMjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk N2MyMDdlZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4BYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmayLjxSVyg6OlldBBmkvMJlBA2tkhq37JBghYzKevpYTE/9sgJUE4K A3pkl8DGVqZcG4M2SQAxvpiaw3ky/NP/ENUkn/ZPzgHWY96hnr1NWCKW1Q2faa6q pVeEd98iHBeyjz5BTTYrvzjQ8e7lOoo1hqZl1OcT/Kpbl8LRTTDOKnjShtBf1gXq CX7k1DNLUaKUIzPTewLvTq95OnwK5d4kmmvSf6wIHRQxTFBAuMAPXQYE8MWwN+GH noMIOr4FKJuXO5RTH/XCL4y0Ogy56sX1bvGeEJiRYRz0WMCcLFUDVtH9KDb62o76 SUmyV/c+w6lrkMJv3ZBocwlm0LpchyI= -----END CERTIFICATE-----Generated at Sat May 18 13:40:22 2024 by rpki-client on console-ams.rpki-client.org