$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25e9fe1c-36a8-3d91-aaa8-c813a3b465ad.roa File: 25e9fe1c-36a8-3d91-aaa8-c813a3b465ad.roa (raw, json) Hash identifier: 3nSsDLfOX95ue+l5hPIGchwYRMq+xMTO6lsKIg41MdU= Subject key identifier: 09:B6:EC:30:E4:31:A2:78:67:AF:C3:5B:37:A1:1C:3C:56:8A:A0:68 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285845D669031EF1E6EC0DC6A0ECC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25e9fe1c-36a8-3d91-aaa8-c813a3b465ad.roa Signing time: Sat 11 May 2024 13:00:34 +0000 ROA not before: Sat 11 May 2024 13:00:34 +0000 ROA not after: Fri 09 Aug 2024 13:00:34 +0000 asID: 20940 IP address blocks: 23.207.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d6:69:03:1e:f1:e6:ec:0d:c6:a0:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 11 13:00:34 2024 GMT Not After : Aug 9 13:00:34 2024 GMT Subject: CN=0e40dfab-19bb-4b9e-8a92-618169a2ccc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:13:ae:33:df:8f:5b:19:25:15:15:2e:c5: f0:59:c6:df:89:83:fe:39:a8:ee:ca:b4:14:0f:a7: 66:80:c4:02:09:b3:ef:d6:37:d5:1e:b9:7e:68:b5: c8:f2:0f:74:2a:d1:63:f4:04:ce:39:31:87:54:8f: c7:0c:97:28:65:54:c0:76:d3:f2:6b:0e:1a:28:16: 4b:53:5d:b5:80:a3:6e:df:13:db:d5:77:f1:0e:15: c7:85:90:6c:43:e1:06:18:53:6c:e8:ab:ed:e5:47: 44:2f:b7:6a:6a:d1:ac:92:9b:eb:2c:ed:65:0b:49: 61:35:55:03:28:43:6f:6e:72:d5:af:da:29:fc:ac: 57:35:43:72:4f:9d:38:9c:d4:25:ac:25:33:23:95: bf:ee:d0:47:3e:e3:26:76:98:4f:e5:16:5c:b6:cc: cb:6d:57:4e:c4:bb:40:a9:35:8a:cb:97:57:2c:7e: 75:91:a2:6c:7f:fd:5d:3e:46:2d:19:f1:36:f5:f5: c8:ea:b4:3f:9d:12:d9:5a:fa:f7:1d:cd:0e:53:dc: 8a:3c:c5:60:84:2c:75:aa:b6:8d:42:d8:05:ab:52: 74:bd:57:f8:12:2c:27:d5:1d:64:ed:01:92:39:ab: 39:a3:73:06:f4:2d:dc:ad:18:a4:f0:55:b2:9d:ac: 49:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B6:EC:30:E4:31:A2:78:67:AF:C3:5B:37:A1:1C:3C:56:8A:A0:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25e9fe1c-36a8-3d91-aaa8-c813a3b465ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:45:61:79:eb:61:1b:6f:26:cb:2f:2b:3d:2a:24:53:7e:d4: 57:ce:52:43:59:eb:45:23:79:3e:49:22:78:65:b2:d5:98:00: d6:a8:6b:f7:07:cd:d8:96:ba:2d:7b:6f:f0:b7:03:82:65:7d: 7e:78:58:90:c7:cc:fd:ac:b3:2f:95:42:f3:b3:c8:62:bd:57: 47:66:f4:ae:90:dc:a6:ae:34:61:87:73:a1:01:2b:f2:52:6d: b7:f5:ee:37:ae:96:aa:87:34:40:1e:b9:ff:02:11:e6:9d:9d: bf:88:b5:94:11:30:27:c4:e0:2e:d0:43:a6:5d:0c:24:d4:23: 2e:74:1a:dd:f1:de:26:ca:99:78:45:17:b8:28:9b:5a:46:78: 5e:12:bb:25:40:96:c6:b2:0c:38:7b:9e:63:5f:08:14:e0:ad: 39:09:6b:fe:8f:56:d5:34:0d:14:c1:50:46:bb:7b:d3:33:27: 62:60:b4:f9:d2:a0:84:50:3e:ef:56:38:2d:f2:d0:b7:98:71: 3e:46:42:fc:c3:16:41:4a:32:23:94:bf:82:c6:85:28:a3:8f: d6:a7:61:8f:48:d7:2c:22:71:84:1f:b2:21:15:5a:f2:1d:6e: af:04:9b:2c:5f:2f:c3:b6:fa:0f:22:92:82:ab:f6:19:99:58: 9b:4a:d8:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXWaQMe8ebsDcag7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDUxMTEzMDAzNFoXDTI0MDgwOTEzMDAzNFowLzEtMCsGA1UEAxMk MGU0MGRmYWItMTliYi00YjllLThhOTItNjE4MTY5YTJjY2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvETrjPfj1sZJRUVLsXwWcbfiYP+OajuyrQU D6dmgMQCCbPv1jfVHrl+aLXI8g90KtFj9ATOOTGHVI/HDJcoZVTAdtPyaw4aKBZL U121gKNu3xPb1XfxDhXHhZBsQ+EGGFNs6Kvt5UdEL7dqatGskpvrLO1lC0lhNVUD KENvbnLVr9op/KxXNUNyT504nNQlrCUzI5W/7tBHPuMmdphP5RZctszLbVdOxLtA qTWKy5dXLH51kaJsf/1dPkYtGfE29fXI6rQ/nRLZWvr3Hc0OU9yKPMVghCx1qraN QtgFq1J0vVf4Eiwn1R1k7QGSOas5o3MG9C3crRik8FWynaxJkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAm27DDkMaJ4Z6/DWzehHDxWiqBoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjVlOWZlMWMtMzZhOC0z ZDkxLWFhYTgtYzgxM2EzYjQ2NWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5FYXnrYRtvJssvKz0qJFN+1FfOUkNZ60UjeT5JInhlstWYANaoa/cH zdiWui17b/C3A4JlfX54WJDHzP2ssy+VQvOzyGK9V0dm9K6Q3KauNGGHc6EBK/JS bbf17jeulqqHNEAeuf8CEeadnb+ItZQRMCfE4C7QQ6ZdDCTUIy50Gt3x3ibKmXhF F7gom1pGeF4SuyVAlsayDDh7nmNfCBTgrTkJa/6PVtU0DRTBUEa7e9MzJ2JgtPnS oIRQPu9WOC3y0LeYcT5GQvzDFkFKMiOUv4LGhSijj9anYY9I1ywicYQfsiEVWvId bq8EmyxfL8O2+g8ikoKr9hmZWJtK2Nc= -----END CERTIFICATE-----Generated at Fri May 17 20:11:59 2024 by rpki-client on console-fra.rpki-client.org