$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa File: 509d5bf3-4c6a-3407-89d3-119b86f42934.roa (raw, json) Hash identifier: RQ6VQ6Gfllct1isLZYvjPFNYc1qaanGKuLTAJReiYmY= Subject key identifier: C6:78:82:DD:9D:D3:FA:5F:87:D9:6A:CF:08:E2:6C:D1:63:C1:33:F4 Certificate issuer: /CN=38d6b993-a8bd-44a2-8e04-89483e698a23 Certificate serial: 010D0C9F43285845280AF382610FD7DF85CFF180 Authority key identifier: 6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa Signing time: Sun 10 Mar 2024 02:00:25 +0000 ROA not before: Sun 10 Mar 2024 02:00:25 +0000 ROA not after: Sat 08 Jun 2024 01:00:25 +0000 asID: 57406 IP address blocks: 23.145.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:28:0a:f3:82:61:0f:d7:df:85:cf:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38d6b993-a8bd-44a2-8e04-89483e698a23 Validity Not Before: Mar 10 02:00:25 2024 GMT Not After : Jun 8 01:00:25 2024 GMT Subject: CN=76919e07-3491-44e4-8779-feaecb4254bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:80:ef:1a:a6:34:7d:1d:3e:b3:bc:88:23:65: 48:ab:98:6c:6e:e2:2f:e2:1f:7d:88:2d:3e:5b:a8: 6c:76:0c:2f:a4:6d:33:11:c0:2b:c8:06:82:a2:ab: b1:e9:40:be:d1:8e:88:c0:50:3a:e2:71:c2:65:60: 72:bb:83:e0:63:55:59:d8:a5:84:c4:f5:2a:5e:3c: dd:2d:71:28:94:12:c1:6a:f0:f5:2b:5e:1c:0f:f7: 3c:1c:13:5b:81:a6:67:de:bd:4a:03:e0:f6:d3:38: 46:43:86:57:63:27:67:9b:e6:89:4f:62:e4:ce:61: 17:eb:84:d5:5b:aa:ab:3d:f2:26:50:1a:57:ff:9b: af:37:be:eb:71:1f:35:dc:72:f8:1d:cc:75:5a:c7: ef:d1:75:5c:0b:a4:d7:44:10:88:2f:6d:c7:76:b8: 68:2e:83:62:cd:67:33:42:4b:42:87:2a:2e:2d:df: 2c:3d:2f:9b:e7:ac:7f:e9:f7:cf:e3:d3:d5:75:c7: b2:0e:1a:58:fb:41:2b:7b:ee:35:50:9b:33:9d:4c: d3:f7:3f:98:4d:8f:28:f3:18:9b:a0:5a:c9:af:d7: 1a:58:8f:9c:35:5a:c1:67:a2:cb:e9:dc:8c:ee:cd: d0:ec:67:75:0e:5a:42:28:2d:e4:74:16:5e:fe:f5: 8d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:78:82:DD:9D:D3:FA:5F:87:D9:6A:CF:08:E2:6C:D1:63:C1:33:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl X509v3 Authority Key Identifier: keyid:6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer sbgp-ipAddrBlock: critical IPv4: 23.145.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:79:99:63:f2:94:f6:02:37:c3:fb:68:1d:22:85:cb:93:06: bb:ef:7d:c6:d0:70:30:03:8d:f3:65:59:57:da:37:5b:1e:a2: 14:88:c6:c6:dd:c4:5e:fc:69:1d:cd:94:96:05:19:da:cd:fe: 29:b3:1f:6e:a7:57:c1:c8:33:7d:e3:c0:cc:c3:6f:8b:b5:80: e3:ea:a6:6b:76:b5:30:23:2c:a1:c6:36:4a:2e:3d:89:e9:fb: 39:16:cc:38:bf:2e:ec:26:73:b1:50:b6:e4:df:20:e2:10:c9: 63:73:ed:bd:02:b8:68:29:ef:27:f1:2f:ab:5e:c9:23:0e:5e: 1c:f9:d2:cc:d3:e1:c0:96:9a:bc:e6:b5:ac:47:70:bf:df:5c: 30:69:ff:b9:ff:97:92:42:e8:a2:05:62:e1:f1:70:16:10:ee: b0:1b:4e:95:6c:08:eb:db:e2:c9:51:33:39:a5:f5:31:cc:06: 79:16:0d:10:10:70:b9:6b:cb:32:b6:b0:a8:03:5f:23:7d:f2: ab:86:b8:bf:19:13:45:07:d2:cf:6d:26:72:60:1c:70:53:96: 84:31:15:3b:a1:b5:76:d6:4b:f0:10:20:2d:99:41:f6:4f:bc: 77:3b:49:1e:4d:ce:cb:d1:09:38:e7:39:b3:18:ef:a6:f3:b5: d2:e2:af:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUoCvOCYQ/X34XP8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhkNmI5OTMtYThiZC00NGEyLThlMDQtODk0ODNlNjk4 YTIzMB4XDTI0MDMxMDAyMDAyNVoXDTI0MDYwODAxMDAyNVowLzEtMCsGA1UEAxMk NzY5MTllMDctMzQ5MS00NGU0LTg3NzktZmVhZWNiNDI1NGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoDvGqY0fR0+s7yII2VIq5hsbuIv4h99iC0+ W6hsdgwvpG0zEcAryAaCoqux6UC+0Y6IwFA64nHCZWByu4PgY1VZ2KWExPUqXjzd LXEolBLBavD1K14cD/c8HBNbgaZn3r1KA+D20zhGQ4ZXYydnm+aJT2LkzmEX64TV W6qrPfImUBpX/5uvN77rcR813HL4Hcx1Wsfv0XVcC6TXRBCIL23HdrhoLoNizWcz QktChyouLd8sPS+b56x/6ffP49PVdceyDhpY+0Ere+41UJsznUzT9z+YTY8o8xib oFrJr9caWI+cNVrBZ6LL6dyM7s3Q7Gd1DlpCKC3kdBZe/vWNKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZ4gt2d0/pfh9lqzwjibNFjwTP0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGQ2 Yjk5My1hOGJkLTQ0YTItOGUwNC04OTQ4M2U2OThhMjMvNTA5ZDViZjMtNGM2YS0z NDA3LTg5ZDMtMTE5Yjg2ZjQyOTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhkNmI5OTMtYThiZC00NGEyLThl MDQtODk0ODNlNjk4YTIzLzM4ZDZiOTkzLWE4YmQtNDRhMi04ZTA0LTg5NDgzZTY5 OGEyMy5jcmwwHwYDVR0jBBgwFoAUbkSnmZUUo47HjKF4cBdzXF0ApswwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGQ2Yjk5My1hOGJkLTQ0YTItOGUwNC04OTQ4 M2U2OThhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIp5mWPylPYCN8P7aB0ihcuTBrvvfcbQcDADjfNlWVfaN1seohSIxsbd xF78aR3NlJYFGdrN/imzH26nV8HIM33jwMzDb4u1gOPqpmt2tTAjLKHGNkouPYnp +zkWzDi/Luwmc7FQtuTfIOIQyWNz7b0CuGgp7yfxL6teySMOXhz50szT4cCWmrzm taxHcL/fXDBp/7n/l5JC6KIFYuHxcBYQ7rAbTpVsCOvb4slRMzml9THMBnkWDRAQ cLlryzK2sKgDXyN98quGuL8ZE0UH0s9tJnJgHHBTloQxFTuhtXbWS/AQIC2ZQfZP vHc7SR5NzsvRCTjnObMY76bztdLir+c= -----END CERTIFICATE-----Generated at Wed May 15 15:09:00 2024 by rpki-client on console-fra.rpki-client.org