$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/99f3809d-ec71-387f-b47f-d40d61add1c9.roa File: 99f3809d-ec71-387f-b47f-d40d61add1c9.roa (raw, json) Hash identifier: CWmakZr5Jsw1jZFnQ1xNquwnDDct//xS9E74Ecc8bRg= Subject key identifier: 20:CF:C1:FD:71:90:3F:F5:3C:E8:23:5F:CC:11:D0:00:09:E4:17:3B Certificate issuer: /CN=25d202df-6bec-4085-8c1b-d1f141557cfe Certificate serial: 010D0C9F4328584523DAF9CDF15D5D29E09DA5A0 Authority key identifier: 62:29:36:6F:6F:B8:51:FB:6E:F9:A7:A1:71:11:EB:58:47:04:11:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/99f3809d-ec71-387f-b47f-d40d61add1c9.roa Signing time: Fri 08 Mar 2024 14:00:30 +0000 ROA not before: Fri 08 Mar 2024 14:00:30 +0000 ROA not after: Thu 06 Jun 2024 13:00:30 +0000 asID: 211051 IP address blocks: 23.144.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/25d202df-6bec-4085-8c1b-d1f141557cfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/25d202df-6bec-4085-8c1b-d1f141557cfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:23:da:f9:cd:f1:5d:5d:29:e0:9d:a5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25d202df-6bec-4085-8c1b-d1f141557cfe Validity Not Before: Mar 8 14:00:30 2024 GMT Not After : Jun 6 13:00:30 2024 GMT Subject: CN=2a0d7703-c69f-4645-bf3c-72f12c323bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:83:b6:d4:97:1f:d5:3e:e4:89:a2:7c:12:8a: 44:e7:87:3f:45:21:4d:64:0c:ea:0a:1b:d4:3f:8d: 58:7b:bb:73:af:6e:8a:8e:66:98:8d:0d:a2:7f:d2: 37:27:66:54:74:5d:24:b8:ed:3f:cf:f1:a1:5b:45: db:b2:70:b2:d3:e6:01:aa:1b:f8:96:a2:43:70:6d: 0c:76:fc:da:7a:c2:08:96:e7:96:95:3d:2d:d1:77: 1f:25:3f:29:12:e6:02:58:e0:54:12:9c:72:1f:88: 65:be:a5:9b:1a:1a:21:bd:e7:71:a3:85:d2:47:b3: 7e:15:e0:71:b6:a6:90:4c:04:7e:ac:5b:06:98:45: 0a:6e:6d:4b:84:93:fc:13:e2:cb:7e:bc:5a:c7:b5: 4e:73:8c:da:f9:c6:61:51:1a:64:b4:0d:48:23:1f: 08:33:88:40:83:bd:0c:89:6e:7a:dc:35:ad:48:92: d9:3e:a4:44:8e:64:13:41:0d:21:63:5a:a0:e9:0a: 5d:62:c6:57:be:76:63:ac:2a:d5:51:36:c8:24:73: 29:c5:61:ba:e8:53:8c:f7:16:c7:ab:3c:b0:0b:63: fc:05:23:42:41:75:fc:dd:26:77:da:66:56:9f:f0: 2d:05:e2:39:cc:f7:3b:54:e7:1a:85:2c:53:4f:fc: 9a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CF:C1:FD:71:90:3F:F5:3C:E8:23:5F:CC:11:D0:00:09:E4:17:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/99f3809d-ec71-387f-b47f-d40d61add1c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/25d202df-6bec-4085-8c1b-d1f141557cfe.crl X509v3 Authority Key Identifier: keyid:62:29:36:6F:6F:B8:51:FB:6E:F9:A7:A1:71:11:EB:58:47:04:11:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe.cer sbgp-ipAddrBlock: critical IPv4: 23.144.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:d1:29:72:8d:1f:6a:35:96:ef:a9:11:e1:bd:cc:b9:66:1e: 9c:58:16:8d:96:a5:68:62:94:14:35:d8:2f:08:81:d5:35:f9: 9e:a8:ab:27:30:2a:c7:15:96:17:ac:41:52:bc:59:3b:41:c1: ce:1c:c6:e9:51:13:4e:10:e3:64:71:7e:be:69:51:68:b2:67: da:b2:a6:92:65:9e:c3:1b:eb:20:2a:ab:da:84:ae:b2:70:23: 3c:1f:ac:72:c2:e7:f9:6f:98:89:c5:63:db:9d:67:60:d8:87: 4f:35:1b:77:e2:4b:4c:e8:32:2c:52:e3:57:40:8b:29:ed:18: 8c:22:d8:81:42:a2:72:db:88:32:15:bb:2f:84:f5:c5:4f:b8: e2:d0:17:61:07:e6:63:f6:85:b1:ab:5a:06:9c:47:fc:ce:8a: 65:35:04:39:aa:02:14:f5:0c:48:18:bc:05:04:1f:42:47:6e: b9:bd:99:cf:1b:49:4e:ba:ba:04:2a:9d:eb:2a:6e:e7:3a:6c: a9:99:47:3a:0a:c3:f2:70:e7:7d:74:ef:81:0d:b2:5e:51:ff: e5:8e:a2:39:01:c9:23:b6:cd:f2:7a:57:38:1b:e0:d6:bb:dd: 7f:c4:52:b7:a9:7e:fa:75:75:6c:76:8e:f1:d9:4f:b3:24:8d: 7d:14:b0:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUj2vnN8V1dKeCdpaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVkMjAyZGYtNmJlYy00MDg1LThjMWItZDFmMTQxNTU3 Y2ZlMB4XDTI0MDMwODE0MDAzMFoXDTI0MDYwNjEzMDAzMFowLzEtMCsGA1UEAxMk MmEwZDc3MDMtYzY5Zi00NjQ1LWJmM2MtNzJmMTJjMzIzYmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4O21Jcf1T7kiaJ8EopE54c/RSFNZAzqChvU P41Ye7tzr26KjmaYjQ2if9I3J2ZUdF0kuO0/z/GhW0XbsnCy0+YBqhv4lqJDcG0M dvzaesIIlueWlT0t0XcfJT8pEuYCWOBUEpxyH4hlvqWbGhohvedxo4XSR7N+FeBx tqaQTAR+rFsGmEUKbm1LhJP8E+LLfrxax7VOc4za+cZhURpktA1IIx8IM4hAg70M iW563DWtSJLZPqREjmQTQQ0hY1qg6QpdYsZXvnZjrCrVUTbIJHMpxWG66FOM9xbH qzywC2P8BSNCQXX83SZ32mZWn/AtBeI5zPc7VOcahSxTT/yaowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDPwf1xkD/1POgjX8wR0AAJ5Bc7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNWQy MDJkZi02YmVjLTQwODUtOGMxYi1kMWYxNDE1NTdjZmUvOTlmMzgwOWQtZWM3MS0z ODdmLWI0N2YtZDQwZDYxYWRkMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjVkMjAyZGYtNmJlYy00MDg1LThj MWItZDFmMTQxNTU3Y2ZlLzI1ZDIwMmRmLTZiZWMtNDA4NS04YzFiLWQxZjE0MTU1 N2NmZS5jcmwwHwYDVR0jBBgwFoAUYik2b2+4Uftu+aehcRHrWEcEEckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNWQyMDJkZi02YmVjLTQwODUtOGMxYi1kMWYx NDE1NTdjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5DoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXRKXKNH2o1lu+pEeG9zLlmHpxYFo2WpWhilBQ12C8IgdU1+Z6oqycw KscVlhesQVK8WTtBwc4cxulRE04Q42Rxfr5pUWiyZ9qyppJlnsMb6yAqq9qErrJw IzwfrHLC5/lvmInFY9udZ2DYh081G3fiS0zoMixS41dAiyntGIwi2IFConLbiDIV uy+E9cVPuOLQF2EH5mP2hbGrWgacR/zOimU1BDmqAhT1DEgYvAUEH0JHbrm9mc8b SU66ugQqnesqbuc6bKmZRzoKw/Jw531074ENsl5R/+WOojkBySO2zfJ6Vzgb4Na7 3X/EUrepfvp1dWx2jvHZT7MkjX0UsIc= -----END CERTIFICATE-----Generated at Wed May 15 16:06:06 2024 by rpki-client on console-ams.rpki-client.org