$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/db0d49c2-07c6-353f-b407-3be87c24ae90.roa File: db0d49c2-07c6-353f-b407-3be87c24ae90.roa (raw, json) Hash identifier: 0zCMAnaNGDcauaON6yHPRi8niokdmU9jop0RixODppw= Subject key identifier: 68:F2:72:98:27:AB:A8:7C:73:0B:1E:FC:CD:44:1E:E4:57:D6:EA:0E Certificate issuer: /CN=5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2 Certificate serial: 010D0C9F432858451480310259B37F9F5F031BE0 Authority key identifier: 39:D3:61:6C:A3:A6:88:D3:24:01:A4:C3:A6:95:84:4E:B3:2C:25:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/db0d49c2-07c6-353f-b407-3be87c24ae90.roa Signing time: Sun 03 Mar 2024 02:00:27 +0000 ROA not before: Sun 03 Mar 2024 02:00:27 +0000 ROA not after: Sat 01 Jun 2024 01:00:27 +0000 asID: 400477 IP address blocks: 23.132.56.0/24 maxlen: 24 2602:fbc1::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:14:80:31:02:59:b3:7f:9f:5f:03:1b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2 Validity Not Before: Mar 3 02:00:27 2024 GMT Not After : Jun 1 01:00:27 2024 GMT Subject: CN=cd6cb2a6-b1c2-4ee6-ba18-043c8181ed6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ef:70:fa:84:87:35:ab:81:40:1c:96:9a:52: 25:87:be:7c:c0:ab:44:ae:88:49:81:a7:66:2f:20: bb:2f:e4:8b:bb:45:74:ca:32:31:b8:2a:1d:d5:48: 75:f4:a8:5a:42:8a:76:04:f1:92:c1:20:bc:a4:ce: 16:e7:42:5e:49:bd:3a:3a:92:2c:cf:23:66:9a:fc: 1f:60:d0:fa:f4:14:70:4d:d6:84:dd:ad:c8:b2:c0: 40:0c:ea:ab:ce:02:d8:bb:74:2f:07:75:85:0a:59: 99:84:a6:e9:59:e7:5b:f5:e1:bd:c3:b3:9c:23:e9: c4:a5:22:13:41:17:0e:fe:d6:f3:9b:6c:50:fa:be: 9d:e4:c2:7c:02:b6:9f:0e:8e:d3:04:e0:cc:4e:9b: eb:bf:cd:7f:3f:ae:59:5a:3f:98:56:98:81:7c:ce: 8d:a5:03:f0:8e:b3:22:4f:50:54:ad:43:d8:9a:93: 20:72:8c:ba:cf:16:68:ed:c9:7d:b1:bd:d2:36:9e: d9:7f:02:05:22:8d:7e:ca:87:e7:2a:de:82:ef:09: 7a:34:16:e2:16:d8:a4:88:c3:4a:01:f7:09:d7:fd: b3:96:99:50:28:40:51:00:0e:b5:7f:06:a0:45:4c: 13:e8:b5:7d:ad:3b:0a:14:e2:61:74:c8:1f:3e:e5: 53:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F2:72:98:27:AB:A8:7C:73:0B:1E:FC:CD:44:1E:E4:57:D6:EA:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/db0d49c2-07c6-353f-b407-3be87c24ae90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.crl X509v3 Authority Key Identifier: keyid:39:D3:61:6C:A3:A6:88:D3:24:01:A4:C3:A6:95:84:4E:B3:2C:25:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.cer sbgp-ipAddrBlock: critical IPv4: 23.132.56.0/24 IPv6: 2602:fbc1::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:2b:08:e1:2d:dc:be:7a:ac:d6:56:e8:0a:8f:1f:22:05:40: 3a:72:0e:cf:92:82:d1:e0:38:56:d5:01:0d:1c:7b:b8:36:a2: 9f:f9:ed:81:7e:3d:91:f9:c7:f6:b2:6f:35:70:cf:b0:14:5a: ca:9a:57:a8:6c:09:e3:b1:66:95:d9:28:e5:99:31:a4:e4:ba: 63:3e:ca:d5:a6:e2:00:2f:9b:de:80:3a:d8:e4:97:5f:72:5e: 58:9e:eb:9f:aa:06:ae:38:23:29:f8:c2:99:5f:48:1f:59:cc: 08:c8:6f:3c:e9:af:60:6c:6b:ce:87:35:3a:3e:31:ec:15:50: d8:23:52:e0:f5:21:79:8e:c7:54:0f:29:7c:77:b7:bf:2c:7d: fc:78:0f:ce:71:6f:2a:84:55:57:68:c3:50:0e:74:ea:66:4c: ca:4d:51:38:be:05:18:c8:e7:4d:fa:54:35:e6:ac:72:6e:d6: a8:27:b8:41:ec:1f:81:b0:53:37:f4:2b:33:dc:68:51:88:56: 85:80:ef:82:44:e3:35:ac:d1:e4:49:16:57:03:f5:f6:92:bd: f3:b4:02:63:98:75:ee:09:be:8c:d8:0c:f1:34:9d:7b:cf:09: b7:88:6d:28:aa:13:31:d1:7a:e7:f4:2b:79:ac:af:43:8b:a5: b0:d8:83:e7 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEUUgDECWbN/n18DG+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWExYzNiMWEtZDExZS00NmYyLWI4YmEtMTk3NGI0NGM4 NGIyMB4XDTI0MDMwMzAyMDAyN1oXDTI0MDYwMTAxMDAyN1owLzEtMCsGA1UEAxMk Y2Q2Y2IyYTYtYjFjMi00ZWU2LWJhMTgtMDQzYzgxODFlZDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3e9w+oSHNauBQByWmlIlh758wKtErohJgadm LyC7L+SLu0V0yjIxuCod1Uh19KhaQop2BPGSwSC8pM4W50JeSb06OpIszyNmmvwf YND69BRwTdaE3a3IssBADOqrzgLYu3QvB3WFClmZhKbpWedb9eG9w7OcI+nEpSIT QRcO/tbzm2xQ+r6d5MJ8ArafDo7TBODMTpvrv81/P65ZWj+YVpiBfM6NpQPwjrMi T1BUrUPYmpMgcoy6zxZo7cl9sb3SNp7ZfwIFIo1+yofnKt6C7wl6NBbiFtikiMNK AfcJ1/2zlplQKEBRAA61fwagRUwT6LV9rTsKFOJhdMgfPuVTaQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGjycpgnq6h8cwse/M1EHuRX1uoOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YTFj M2IxYS1kMTFlLTQ2ZjItYjhiYS0xOTc0YjQ0Yzg0YjIvZGIwZDQ5YzItMDdjNi0z NTNmLWI0MDctM2JlODdjMjRhZTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWExYzNiMWEtZDExZS00NmYyLWI4 YmEtMTk3NGI0NGM4NGIyLzVhMWMzYjFhLWQxMWUtNDZmMi1iOGJhLTE5NzRiNDRj ODRiMi5jcmwwHwYDVR0jBBgwFoAUOdNhbKOmiNMkAaTDppWETrMsJVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YTFjM2IxYS1kMTFlLTQ2ZjItYjhiYS0xOTc0 YjQ0Yzg0YjIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4Q4MA4E AgACMAgDBgQmAvvBADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBeKwjhLdy+eqzWVugKjx8iBUA6cg7PkoLR 4DhW1QENHHu4NqKf+e2Bfj2R+cf2sm81cM+wFFrKmleobAnjsWaV2SjlmTGk5Lpj PsrVpuIAL5vegDrY5Jdfcl5YnuufqgauOCMp+MKZX0gfWcwIyG886a9gbGvOhzU6 PjHsFVDYI1Lg9SF5jsdUDyl8d7e/LH38eA/OcW8qhFVXaMNQDnTqZkzKTVE4vgUY yOdN+lQ15qxybtaoJ7hB7B+BsFM39Csz3GhRiFaFgO+CROM1rNHkSRZXA/X2kr3z tAJjmHXuCb6M2AzxNJ17zwm3iG0oqhMx0Xrn9Ct5rK9Di6Ww2IPn -----END CERTIFICATE-----Generated at Wed May 15 17:50:32 2024 by rpki-client on console-fra.rpki-client.org