$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa File: 599a3cef-130f-3ac0-802b-3ae5797ea70e.roa (raw, json) Hash identifier: FHLRXl8gbEmjT0I2bVWyHY6gOs3LNtZWofM9ap8ntjc= Subject key identifier: 3B:25:55:65:0F:11:F9:9E:6F:EB:40:6B:35:3C:2D:B7:DD:48:45:42 Certificate issuer: /CN=c88386bc-096d-46b5-8278-7abb79f23665 Certificate serial: 010D0C9F43285845B21E2E7B09342B8D9007E600 Authority key identifier: 7D:3F:78:AA:D9:A1:EE:C4:6E:D8:24:9F:83:D2:8C:69:53:09:D2:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa Signing time: Sun 28 Apr 2024 13:00:34 +0000 ROA not before: Sun 28 Apr 2024 13:00:34 +0000 ROA not after: Sat 27 Jul 2024 13:00:34 +0000 asID: 7311 IP address blocks: 161.129.186.0/24 maxlen: 24 23.155.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b2:1e:2e:7b:09:34:2b:8d:90:07:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c88386bc-096d-46b5-8278-7abb79f23665 Validity Not Before: Apr 28 13:00:34 2024 GMT Not After : Jul 27 13:00:34 2024 GMT Subject: CN=8a334d20-2ccc-45e8-b6ff-24c0b261e1a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d6:b4:ac:b6:11:61:6a:04:45:07:2b:64:2b: 39:66:81:66:bb:84:ef:56:6c:99:1f:bc:90:d7:20: 3d:36:69:f7:83:f6:66:8c:c2:ca:12:8f:a3:a1:d8: cc:79:49:4a:9b:d8:56:7f:fb:9e:7d:83:f9:d2:e7: 16:75:b3:20:90:7c:62:01:b1:e6:e6:23:88:b4:da: a6:0a:bb:1a:76:1d:21:93:76:e8:d5:7e:91:4b:14: dd:17:9d:d2:05:f2:65:9b:00:be:31:7a:59:53:65: 9e:62:e1:ca:fb:8e:46:80:33:af:dc:62:06:2f:a1: 8c:45:40:d2:46:4f:99:41:56:41:64:97:c5:9c:71: 24:07:40:c4:44:63:c9:9b:10:bc:91:b7:cd:f9:b9: 41:7c:21:5b:fc:7d:b8:ed:01:80:c1:e2:58:a4:16: 42:cf:9b:3a:71:a9:90:3f:ac:4e:9c:b7:45:ad:75: 0f:9c:ac:5f:d1:6d:cd:bb:b7:48:00:f0:51:cd:7e: b2:db:b5:e5:26:84:4c:f0:86:82:62:c2:56:4e:e1: 08:51:56:32:bd:5d:60:67:97:2c:1d:9e:63:9e:37: b9:b8:14:b2:01:ef:be:8c:52:17:f5:c9:c7:66:68: bd:e1:c3:0d:fe:fa:57:29:d6:6a:a0:79:3f:86:33: 0d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:25:55:65:0F:11:F9:9E:6F:EB:40:6B:35:3C:2D:B7:DD:48:45:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.crl X509v3 Authority Key Identifier: keyid:7D:3F:78:AA:D9:A1:EE:C4:6E:D8:24:9F:83:D2:8C:69:53:09:D2:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer sbgp-ipAddrBlock: critical IPv4: 23.155.64.0/24 161.129.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:bd:23:53:22:0c:89:97:f9:87:91:79:ea:90:ba:34:9c:4b: 47:92:bc:4b:7b:a4:ac:4b:a8:f4:5c:75:21:f7:71:65:16:62: 24:3a:2e:63:f6:b0:3c:c4:b6:51:75:02:f2:8f:e6:93:a4:f4: 0e:df:c0:cd:0c:dc:e3:0d:72:64:e1:1e:fd:b0:cd:3c:a2:19: de:4f:d0:b5:52:4d:56:dc:94:02:7c:21:c5:71:22:d0:c1:69: 82:ae:75:0c:9e:e0:4f:16:4f:44:1b:df:2a:bb:28:14:3b:c9: 97:47:23:d8:2c:d6:43:e5:94:4e:e5:24:05:9d:bd:2a:e7:f7: 3d:67:97:1a:97:38:fc:01:ec:60:d3:b8:d6:29:a8:5b:09:0d: b7:9d:97:5e:71:d4:c4:e3:7a:f2:43:28:04:33:6e:b7:b2:2b: 3f:e3:e8:1f:4f:a5:7d:46:12:67:d9:23:00:0b:f7:54:19:69: 38:68:67:88:b1:d4:98:c9:fe:45:9e:4d:97:5b:cd:2d:1f:04: 59:52:95:b9:6b:68:9b:0d:05:58:ea:14:7b:cd:0c:4c:36:27: 8e:b3:be:b0:b1:2a:48:8f:ed:f0:9b:e0:8b:ae:7f:99:5a:4e: c8:0c:4f:99:4f:35:65:a2:9f:34:e1:89:f9:a8:6f:9d:a6:3c: 21:58:74:ee -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEWyHi57CTQrjZAH5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg4Mzg2YmMtMDk2ZC00NmI1LTgyNzgtN2FiYjc5ZjIz NjY1MB4XDTI0MDQyODEzMDAzNFoXDTI0MDcyNzEzMDAzNFowLzEtMCsGA1UEAxMk OGEzMzRkMjAtMmNjYy00NWU4LWI2ZmYtMjRjMGIyNjFlMWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9a0rLYRYWoERQcrZCs5ZoFmu4TvVmyZH7yQ 1yA9Nmn3g/ZmjMLKEo+jodjMeUlKm9hWf/uefYP50ucWdbMgkHxiAbHm5iOItNqm Crsadh0hk3bo1X6RSxTdF53SBfJlmwC+MXpZU2WeYuHK+45GgDOv3GIGL6GMRUDS Rk+ZQVZBZJfFnHEkB0DERGPJmxC8kbfN+blBfCFb/H247QGAweJYpBZCz5s6camQ P6xOnLdFrXUPnKxf0W3Nu7dIAPBRzX6y27XlJoRM8IaCYsJWTuEIUVYyvV1gZ5cs HZ5jnje5uBSyAe++jFIX9cnHZmi94cMN/vpXKdZqoHk/hjMN7wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDslVWUPEfmeb+tAazU8LbfdSEVCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODgz ODZiYy0wOTZkLTQ2YjUtODI3OC03YWJiNzlmMjM2NjUvNTk5YTNjZWYtMTMwZi0z YWMwLTgwMmItM2FlNTc5N2VhNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg4Mzg2YmMtMDk2ZC00NmI1LTgy NzgtN2FiYjc5ZjIzNjY1L2M4ODM4NmJjLTA5NmQtNDZiNS04Mjc4LTdhYmI3OWYy MzY2NS5jcmwwHwYDVR0jBBgwFoAUfT94qtmh7sRu2CSfg9KMaVMJ0jowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODgzODZiYy0wOTZkLTQ2YjUtODI3OC03YWJi NzlmMjM2NjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF5tAAwQA oYG6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIi9I1MiDImX+YeReeqQujScS0eSvEt7pKxLqPRcdSH3cWUW YiQ6LmP2sDzEtlF1AvKP5pOk9A7fwM0M3OMNcmThHv2wzTyiGd5P0LVSTVbclAJ8 IcVxItDBaYKudQye4E8WT0Qb3yq7KBQ7yZdHI9gs1kPllE7lJAWdvSrn9z1nlxqX OPwB7GDTuNYpqFsJDbedl15x1MTjevJDKAQzbreyKz/j6B9PpX1GEmfZIwAL91QZ aThoZ4ix1JjJ/kWeTZdbzS0fBFlSlblraJsNBVjqFHvNDEw2J46zvrCxKkiP7fCb 4Iuuf5laTsgMT5lPNWWinzThifmob52mPCFYdO4= -----END CERTIFICATE-----Generated at Sat May 18 16:10:16 2024 by rpki-client on console-ams.rpki-client.org