$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/a05edcb1-cd53-3361-9a4a-f92812c5008e.roa File: a05edcb1-cd53-3361-9a4a-f92812c5008e.roa (raw, json) Hash identifier: STBqlGRrT8kwYChBjz0SjR8opy3+oep0+UkD8BUvLv4= Subject key identifier: BE:55:5A:51:87:F3:4D:EB:F4:A0:67:45:B0:6E:CE:81:73:DE:C4:0A Certificate issuer: /CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8 Certificate serial: 010D0C9F43285845AC88C0F4CED293F8AA3D7F00 Authority key identifier: 8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/a05edcb1-cd53-3361-9a4a-f92812c5008e.roa Signing time: Fri 26 Apr 2024 13:00:35 +0000 ROA not before: Fri 26 Apr 2024 13:00:35 +0000 ROA not after: Thu 25 Jul 2024 13:00:35 +0000 asID: 400312 IP address blocks: 23.131.168.0/24 maxlen: 24 2602:fbf0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ac:88:c0:f4:ce:d2:93:f8:aa:3d:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8 Validity Not Before: Apr 26 13:00:35 2024 GMT Not After : Jul 25 13:00:35 2024 GMT Subject: CN=cd335c99-55c7-4894-ada5-ce65190fa613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:27:2b:2a:75:da:c8:fa:19:73:04:04:0e:dc: 9c:84:0b:fd:e8:aa:fc:64:46:6c:b9:9e:89:67:91: bf:bf:3d:07:2c:51:d0:58:7a:4d:09:e2:1b:be:b8: 64:d2:4d:ff:d5:16:fe:cf:fb:34:ae:f4:59:fa:e0: 43:28:f7:b5:ad:9d:df:f6:6f:69:1b:ce:01:18:23: 0c:e9:21:8f:1a:e6:a9:dd:f6:45:ac:ec:c6:fb:2b: d8:97:4e:dd:68:2e:42:41:ed:2b:e6:12:e6:01:9d: 84:9e:de:92:d2:5b:d7:a3:b6:80:91:fa:39:08:c3: ae:0a:21:7c:63:54:df:ca:e8:4a:bf:67:62:f4:28: b8:cd:ac:99:87:6d:85:92:55:99:77:7e:2b:c0:26: 8b:4b:d1:75:cf:4c:f3:31:da:5c:fe:94:91:52:df: 98:a3:ab:6a:2e:6a:e0:11:16:69:66:a0:77:4d:59: f7:86:78:c1:b5:16:74:4e:10:a9:87:e4:c0:36:12: df:c8:e3:d4:5c:d7:1b:a4:c1:6c:65:1d:7a:46:a6: e3:4f:f6:ed:b3:ca:a8:57:ee:2c:f0:7c:41:3e:95: 72:49:d8:6a:85:7a:78:5a:c2:df:43:2d:50:df:c2: 3f:9c:cd:d6:63:b3:6b:3f:63:e1:ab:66:56:cf:1b: 4d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:55:5A:51:87:F3:4D:EB:F4:A0:67:45:B0:6E:CE:81:73:DE:C4:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/a05edcb1-cd53-3361-9a4a-f92812c5008e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl X509v3 Authority Key Identifier: keyid:8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer sbgp-ipAddrBlock: critical IPv4: 23.131.168.0/24 IPv6: 2602:fbf0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:1a:11:e7:a6:e2:8e:d2:a3:1f:0c:60:65:b0:3b:c9:3c:c8: 5f:d0:55:80:47:fb:a0:60:27:d3:71:0f:3e:ec:0e:c8:28:2c: cf:01:04:b6:58:12:1c:8b:e7:8d:a8:b8:75:95:39:63:53:99: c3:95:fc:34:f5:ee:8b:79:dc:28:4b:2e:e3:ad:ae:4a:cf:3c: 0a:1c:f3:d8:09:73:d9:b9:19:6f:e5:31:fb:1e:e8:8c:eb:f1: f2:57:40:a7:b7:48:9e:cf:53:57:12:ab:75:23:57:1d:e0:de: b3:3d:8d:f1:fc:e9:cb:0b:29:66:d7:13:f8:ac:08:f0:96:5f: b6:6b:83:a7:40:9e:08:ff:77:92:0a:e9:36:8e:f8:56:9d:b2: 43:c0:01:79:e1:41:19:b9:68:f1:20:3a:59:e7:b3:ff:b3:83: 9a:67:07:a7:82:16:ed:76:1c:cf:51:46:85:0c:43:34:86:8d: c5:55:62:31:4b:a2:e9:91:68:a5:15:14:94:f1:b5:1c:01:0b: e2:fc:77:fc:c4:10:df:3c:55:28:e0:08:66:b0:31:93:50:6c: b6:81:06:07:39:58:7b:c0:b3:16:36:11:6f:48:2f:b7:05:cc: 91:fc:1a:26:4c:3c:08:19:b0:0e:7f:1d:2c:f4:f5:69:28:c9: 8c:a8:67:d5 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEWsiMD0ztKT+Ko9fwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2ZTlhMjUtMTU5OS00ZTliLWE4YTItMDE1OTk1Yzgw NWI4MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk Y2QzMzVjOTktNTVjNy00ODk0LWFkYTUtY2U2NTE5MGZhNjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ycrKnXayPoZcwQEDtychAv96Kr8ZEZsuZ6J Z5G/vz0HLFHQWHpNCeIbvrhk0k3/1Rb+z/s0rvRZ+uBDKPe1rZ3f9m9pG84BGCMM 6SGPGuap3fZFrOzG+yvYl07daC5CQe0r5hLmAZ2Ent6S0lvXo7aAkfo5CMOuCiF8 Y1TfyuhKv2di9Ci4zayZh22FklWZd34rwCaLS9F1z0zzMdpc/pSRUt+Yo6tqLmrg ERZpZqB3TVn3hnjBtRZ0ThCph+TANhLfyOPUXNcbpMFsZR16RqbjT/bts8qoV+4s 8HxBPpVySdhqhXp4WsLfQy1Q38I/nM3WY7NrP2Phq2ZWzxtNfwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFL5VWlGH803r9KBnRbBuzoFz3sQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YzZl OWEyNS0xNTk5LTRlOWItYThhMi0wMTU5OTVjODA1YjgvYTA1ZWRjYjEtY2Q1My0z MzYxLTlhNGEtZjkyODEyYzUwMDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWM2ZTlhMjUtMTU5OS00ZTliLWE4 YTItMDE1OTk1YzgwNWI4LzljNmU5YTI1LTE1OTktNGU5Yi1hOGEyLTAxNTk5NWM4 MDViOC5jcmwwHwYDVR0jBBgwFoAUjvfJnlBoZhsQD1ZqN6tb/9Qmj6cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YzZlOWEyNS0xNTk5LTRlOWItYThhMi0wMTU5 OTVjODA1YjguY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4OoMA0E AgACMAcDBQAmAvvwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADEaEeem4o7Sox8MYGWwO8k8yF/QVYBH+6Bg J9NxDz7sDsgoLM8BBLZYEhyL542ouHWVOWNTmcOV/DT17ot53ChLLuOtrkrPPAoc 89gJc9m5GW/lMfse6Izr8fJXQKe3SJ7PU1cSq3UjVx3g3rM9jfH86csLKWbXE/is CPCWX7Zrg6dAngj/d5IK6TaO+FadskPAAXnhQRm5aPEgOlnns/+zg5pnB6eCFu12 HM9RRoUMQzSGjcVVYjFLoumRaKUVFJTxtRwBC+L8d/zEEN88VSjgCGawMZNQbLaB Bgc5WHvAsxY2EW9IL7cFzJH8GiZMPAgZsA5/HSz09WkoyYyoZ9U= -----END CERTIFICATE-----Generated at Fri May 24 02:53:38 2024 by rpki-client on console-ams.rpki-client.org