$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/99e92a98-6ceb-3d2d-8dc5-7376844cf267.roa File: 99e92a98-6ceb-3d2d-8dc5-7376844cf267.roa (raw, json) Hash identifier: ytPGu8FjkDqMTj72I7RVSCpeoH+CpC7QJRPf1MN7kZ0= Subject key identifier: 6C:1C:4E:C3:6A:6C:9E:F6:2B:F2:5C:E4:1F:FB:D7:A0:32:0A:37:61 Certificate issuer: /CN=eff73345-b771-45fd-be81-1f41a7f777ec Certificate serial: 010D0C9F43285845973628266C2D773D7901BC40 Authority key identifier: 9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/99e92a98-6ceb-3d2d-8dc5-7376844cf267.roa Signing time: Thu 18 Apr 2024 21:42:15 +0000 ROA not before: Thu 18 Apr 2024 21:42:15 +0000 ROA not after: Wed 17 Jul 2024 21:42:15 +0000 asID: 400967 IP address blocks: 23.175.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:97:36:28:26:6c:2d:77:3d:79:01:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eff73345-b771-45fd-be81-1f41a7f777ec Validity Not Before: Apr 18 21:42:15 2024 GMT Not After : Jul 17 21:42:15 2024 GMT Subject: CN=6b53fc2a-540b-4982-83a4-23e4c39ffc61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:aa:9e:48:1e:91:bc:8e:5f:3b:04:e2:e3:8c: 5d:ba:e4:fb:c9:c6:ff:4f:a8:a4:ab:66:a5:93:5d: a0:e5:c8:58:2d:d8:72:4f:dd:f9:1c:4c:f2:6c:7f: 1f:32:26:d9:d5:31:10:a5:02:47:be:1f:e5:36:99: 61:ad:2c:ce:8e:de:ef:8a:ac:0a:22:ee:16:4d:58: c3:a7:27:bd:30:db:66:b6:33:11:60:d6:33:56:ab: 96:8b:34:4b:51:07:ef:15:63:89:77:7b:86:c0:44: 69:b8:42:68:7d:30:86:3b:d1:2c:34:92:1a:4b:ae: bc:e5:1d:ca:e6:00:6b:3b:e4:99:7b:40:ec:55:50: 5e:5b:47:25:a7:1e:66:94:24:39:68:9a:f1:f3:5a: a0:7a:28:f9:8d:10:3e:8c:1b:ed:f6:5a:40:0c:a8: 34:b5:e6:23:e5:05:db:09:7c:46:24:22:8c:4e:ed: dc:2b:a9:31:8f:fa:28:14:a8:13:7c:1b:65:e3:1d: 44:44:4a:d5:96:44:6f:55:b0:98:84:47:67:a1:c7: c1:90:f3:b4:38:ae:e4:8c:fa:62:76:88:35:50:58: cf:5d:48:b2:08:96:1d:54:c4:b9:00:ef:c5:64:6d: d9:05:35:2c:35:03:8b:17:3d:af:d3:e7:0b:9f:8b: be:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1C:4E:C3:6A:6C:9E:F6:2B:F2:5C:E4:1F:FB:D7:A0:32:0A:37:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/99e92a98-6ceb-3d2d-8dc5-7376844cf267.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl X509v3 Authority Key Identifier: keyid:9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer sbgp-ipAddrBlock: critical IPv4: 23.175.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:0d:bc:b4:8c:96:f4:03:c7:0a:26:3a:5d:f7:83:1c:15:89: 8b:e7:11:c1:5b:6d:cc:3d:19:58:5e:2b:f6:f2:7f:2f:22:43: 30:f6:8c:e5:b1:00:24:7a:ef:fc:bc:8b:02:31:5b:48:82:81: fe:51:d5:46:38:60:44:77:20:ef:65:aa:ec:4e:a7:21:cc:7b: bd:00:08:c2:21:c9:72:83:ff:f1:c9:43:72:86:e9:ea:1b:a4: 1d:63:5d:2b:72:03:11:02:50:46:b5:15:a2:62:e8:a8:7a:14: 0e:6f:40:1a:33:f5:a8:1d:37:d2:6f:8b:eb:9f:69:3f:71:8c: 38:7a:fd:31:23:c8:2c:5e:d3:e6:9a:ea:8b:8b:11:db:00:f7: 9f:f2:c3:16:47:4c:ac:54:a8:51:be:68:bb:9e:0f:c3:d6:19: e4:f7:d6:c7:84:f9:0f:18:7a:9a:d5:c2:55:bd:b4:88:b4:9b: e5:ff:ec:09:a0:03:b1:4d:dd:06:bd:0f:29:59:34:31:30:06: 82:52:d2:a4:f6:f2:23:c6:0c:17:1c:0a:6a:6a:d9:1d:c1:ef: 18:3d:01:fe:e7:e6:dc:35:db:07:de:12:86:33:f3:6e:f5:a2: dc:f1:f3:e8:e0:0e:75:58:d5:9c:11:8a:ff:62:ae:e5:a5:40: e3:c4:5c:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWXNigmbC13PXkBvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZmNzMzNDUtYjc3MS00NWZkLWJlODEtMWY0MWE3Zjc3 N2VjMB4XDTI0MDQxODIxNDIxNVoXDTI0MDcxNzIxNDIxNVowLzEtMCsGA1UEAxMk NmI1M2ZjMmEtNTQwYi00OTgyLTgzYTQtMjNlNGMzOWZmYzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6qeSB6RvI5fOwTi44xduuT7ycb/T6ikq2al k12g5chYLdhyT935HEzybH8fMibZ1TEQpQJHvh/lNplhrSzOjt7viqwKIu4WTVjD pye9MNtmtjMRYNYzVquWizRLUQfvFWOJd3uGwERpuEJofTCGO9EsNJIaS6685R3K 5gBrO+SZe0DsVVBeW0clpx5mlCQ5aJrx81qgeij5jRA+jBvt9lpADKg0teYj5QXb CXxGJCKMTu3cK6kxj/ooFKgTfBtl4x1ERErVlkRvVbCYhEdnocfBkPO0OK7kjPpi dog1UFjPXUiyCJYdVMS5AO/FZG3ZBTUsNQOLFz2v0+cLn4u+oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwcTsNqbJ72K/Jc5B/716AyCjdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3 MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQxYTdmNzc3ZWMvOTllOTJhOTgtNmNlYi0z ZDJkLThkYzUtNzM3Njg0NGNmMjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWZmNzMzNDUtYjc3MS00NWZkLWJl ODEtMWY0MWE3Zjc3N2VjL2VmZjczMzQ1LWI3NzEtNDVmZC1iZTgxLTFmNDFhN2Y3 NzdlYy5jcmwwHwYDVR0jBBgwFoAUmmU/aXxyav0itCAZwUUwlk0VckYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQx YTdmNzc3ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF694MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoNvLSMlvQDxwomOl33gxwViYvnEcFbbcw9GVheK/byfy8iQzD2jOWx ACR67/y8iwIxW0iCgf5R1UY4YER3IO9lquxOpyHMe70ACMIhyXKD//HJQ3KG6eob pB1jXStyAxECUEa1FaJi6Kh6FA5vQBoz9agdN9Jvi+ufaT9xjDh6/TEjyCxe0+aa 6ouLEdsA95/ywxZHTKxUqFG+aLueD8PWGeT31seE+Q8YeprVwlW9tIi0m+X/7Amg A7FN3Qa9DylZNDEwBoJS0qT28iPGDBccCmpq2R3B7xg9Af7n5tw12wfeEoYz8271 otzx8+jgDnVY1ZwRiv9iruWlQOPEXCI= -----END CERTIFICATE-----Generated at Sat May 18 15:35:49 2024 by rpki-client on console-fra.rpki-client.org