$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/1cee1fb9-f452-30a3-996d-1de632277883.roa File: 1cee1fb9-f452-30a3-996d-1de632277883.roa (raw, json) Hash identifier: POZGN4o0akvaSlDlYr8fzNd1ckJjdwrnKvnGax4Ohr0= Subject key identifier: 35:90:D6:FB:D7:75:0B:08:60:6C:8A:E4:F4:6B:73:32:DE:33:26:8E Certificate issuer: /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Certificate serial: 010D0C9F43285845D66903B5AA9A69CC7CB1D300 Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/1cee1fb9-f452-30a3-996d-1de632277883.roa Signing time: Sat 11 May 2024 13:00:34 +0000 ROA not before: Sat 11 May 2024 13:00:34 +0000 ROA not after: Fri 09 Aug 2024 13:00:34 +0000 asID: 396416 IP address blocks: 23.137.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 May 2024 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d6:69:03:b5:aa:9a:69:cc:7c:b1:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Validity Not Before: May 11 13:00:34 2024 GMT Not After : Aug 9 13:00:34 2024 GMT Subject: CN=ba9cd5bc-0deb-4c56-a945-29f2818ac839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8a:cf:c2:1a:cc:90:86:31:7e:88:cb:10:f1: ad:ad:ab:bd:33:0e:7e:c3:56:8e:03:51:60:be:3c: 6a:c9:af:78:7b:7c:4d:3c:87:1e:b7:de:4d:cf:a3: c5:39:43:89:8a:46:96:34:64:53:cd:fa:7e:93:5e: a2:3d:75:b3:d0:da:00:d7:7f:eb:40:51:5c:cd:00: d6:ef:c8:b8:5d:ad:78:3f:e4:ab:77:d4:4a:d8:01: 04:5f:03:2d:38:09:35:48:29:de:3a:9c:c4:cc:3b: 10:0d:6d:91:27:62:7e:cf:e6:6c:55:4e:41:2e:1d: 36:10:1f:b0:c1:2b:8a:cc:e4:44:97:47:78:bd:cf: eb:6f:5f:d6:08:39:17:bd:f2:61:57:52:08:71:10: 8a:00:1a:12:fa:f0:87:e9:aa:94:29:96:18:5b:fd: 4e:5c:ba:3d:02:0c:39:62:b0:14:14:fd:75:fb:a6: 1d:a2:69:0c:11:7c:49:06:57:af:31:c8:97:cd:20: 66:83:6b:42:10:17:73:e7:11:6d:63:80:d4:5d:70: b8:23:a8:ba:9f:bf:af:03:bf:1a:b8:50:9b:38:72: 6d:3f:53:11:b5:a1:fc:2e:67:09:aa:3b:fa:e0:a9: 56:ca:c7:06:98:b1:ff:7e:ab:53:8b:7e:c3:61:b9: 07:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:90:D6:FB:D7:75:0B:08:60:6C:8A:E4:F4:6B:73:32:DE:33:26:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/1cee1fb9-f452-30a3-996d-1de632277883.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl X509v3 Authority Key Identifier: keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer sbgp-ipAddrBlock: critical IPv4: 23.137.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:3b:f8:d4:c5:70:3f:20:4a:31:bd:84:94:30:6b:b1:f8:3f: a8:82:ec:f5:cd:8b:2b:4f:08:9f:90:76:04:f7:8b:cf:06:ef: de:fb:7e:ae:94:2e:6e:af:61:87:78:23:e1:73:71:7c:42:be: 14:95:50:d6:e9:f3:88:7a:00:c8:58:39:ce:5d:ad:a7:56:a4: 15:fa:1c:0f:30:49:d8:b9:86:42:4f:a1:b8:3d:6a:8b:c8:f0: 8c:9b:ab:73:19:bc:e8:b5:6e:9f:82:a2:82:82:4e:48:ab:7d: 7a:fb:a6:c8:e9:af:e0:14:92:0b:8e:a9:0b:53:a8:d7:ea:7b: 39:2e:28:09:0d:be:65:2a:07:18:d5:8c:d7:76:30:0e:88:97: 9d:21:fb:c8:60:76:dd:7d:09:18:22:81:86:b0:7d:59:c4:da: ec:76:16:f6:20:3e:9a:cb:b8:07:c4:10:2c:11:04:f2:e6:74: a5:b5:6c:eb:1d:e6:fd:fd:e5:69:e7:03:3c:67:d2:29:df:4c: 49:3b:a4:b7:cf:18:9f:9a:88:a2:8f:b9:97:a2:49:c2:22:03: 07:ee:53:4e:49:1d:fc:a1:65:59:02:80:a9:85:9c:e2:35:df: 54:4c:6e:5f:da:df:05:53:f0:e6:d3:72:4c:df:52:c6:80:a9: 17:32:f9:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXWaQO1qpppzHyx0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNzExYjUtZDE2Zi00NTQ5LTllNzUtYmQyMDFmNWI3 YTEzMB4XDTI0MDUxMTEzMDAzNFoXDTI0MDgwOTEzMDAzNFowLzEtMCsGA1UEAxMk YmE5Y2Q1YmMtMGRlYi00YzU2LWE5NDUtMjlmMjgxOGFjODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIrPwhrMkIYxfojLEPGtrau9Mw5+w1aOA1Fg vjxqya94e3xNPIcet95Nz6PFOUOJikaWNGRTzfp+k16iPXWz0NoA13/rQFFczQDW 78i4Xa14P+Srd9RK2AEEXwMtOAk1SCneOpzEzDsQDW2RJ2J+z+ZsVU5BLh02EB+w wSuKzOREl0d4vc/rb1/WCDkXvfJhV1IIcRCKABoS+vCH6aqUKZYYW/1OXLo9Agw5 YrAUFP11+6YdomkMEXxJBlevMciXzSBmg2tCEBdz5xFtY4DUXXC4I6i6n7+vA78a uFCbOHJtP1MRtaH8LmcJqjv64KlWyscGmLH/fqtTi37DYbkHxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWQ1vvXdQsIYGyK5PRrczLeMyaOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3 MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIwMWY1YjdhMTMvMWNlZTFmYjktZjQ1Mi0z MGEzLTk5NmQtMWRlNjMyMjc3ODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmRkNzExYjUtZDE2Zi00NTQ5LTll NzUtYmQyMDFmNWI3YTEzL2ZkZDcxMWI1LWQxNmYtNDU0OS05ZTc1LWJkMjAxZjVi N2ExMy5jcmwwHwYDVR0jBBgwFoAUHHKGSiScg7PMA5PUnLiNgqiJlT8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIw MWY1YjdhMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4koMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHs7+NTFcD8gSjG9hJQwa7H4P6iC7PXNiytPCJ+QdgT3i88G7977fq6U Lm6vYYd4I+FzcXxCvhSVUNbp84h6AMhYOc5dradWpBX6HA8wSdi5hkJPobg9aovI 8Iybq3MZvOi1bp+CooKCTkirfXr7psjpr+AUkguOqQtTqNfqezkuKAkNvmUqBxjV jNd2MA6Il50h+8hgdt19CRgigYawfVnE2ux2FvYgPprLuAfEECwRBPLmdKW1bOsd 5v395WnnAzxn0infTEk7pLfPGJ+aiKKPuZeiScIiAwfuU05JHfyhZVkCgKmFnOI1 31RMbl/a3wVT8ObTckzfUsaAqRcy+QA= -----END CERTIFICATE-----Generated at Sun May 26 01:56:56 2024 by rpki-client on console-ams.rpki-client.org