$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34798cda-5e77-35d0-bce9-5f1b8a7a2168.roa File: 34798cda-5e77-35d0-bce9-5f1b8a7a2168.roa (raw, json) Hash identifier: fH71gl6rvHzvGs31GVse73EPVQwsihtLD1EYRA/1zU8= Subject key identifier: 16:E5:A8:EB:10:B0:A9:2C:D8:44:9C:90:E1:49:C4:D1:38:17:4C:FB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285845DB97CD34E74B467624E68200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34798cda-5e77-35d0-bce9-5f1b8a7a2168.roa Signing time: Mon 13 May 2024 09:33:58 +0000 ROA not before: Mon 13 May 2024 09:33:58 +0000 ROA not after: Sun 11 Aug 2024 09:33:58 +0000 asID: 20940 IP address blocks: 23.36.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Jun 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:db:97:cd:34:e7:4b:46:76:24:e6:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 13 09:33:58 2024 GMT Not After : Aug 11 09:33:58 2024 GMT Subject: CN=5cc271ec-8495-4d62-87cd-75f5b4f46576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:99:e1:f9:e3:b4:05:41:1e:2e:80:21:77:b6: b0:7b:eb:6e:0b:01:ed:ff:f8:65:2d:e6:70:38:e0: bd:cc:42:94:76:68:46:bb:6a:f6:92:6d:0a:f0:74: 02:e2:7a:e7:12:aa:60:a8:2d:98:fb:b0:84:5e:66: 4b:c2:73:5d:32:4e:bd:52:1f:52:9f:a3:9b:12:99: 8c:10:ee:8c:a9:e1:38:c6:19:0e:15:00:06:55:19: 95:87:37:35:25:3e:b9:1e:7f:3a:87:b6:62:49:bb: 92:44:93:b6:ce:98:1a:d6:1b:ca:bc:3c:95:70:a5: 96:53:15:e2:44:6e:e0:ed:d1:fe:94:cc:f3:66:81: 1f:31:21:52:0e:13:29:2f:fa:cb:45:05:dd:fc:9f: 20:96:da:d4:71:ae:22:f1:c9:dd:2f:e3:fd:34:98: 0b:57:d8:02:ba:b1:63:db:42:1b:ae:40:39:9f:54: b1:3f:7e:c4:0c:f7:38:1a:95:3e:ed:3a:1c:70:d8: ed:24:f1:7e:62:fb:08:5e:de:7e:01:b9:8d:a6:ee: ee:16:e6:5f:dc:f8:26:a9:32:85:d8:f4:a6:c1:bb: 6c:03:17:36:d3:86:81:07:d3:f1:b2:e9:e6:15:d6: 2e:38:ab:f9:0a:cd:9f:0e:ad:89:05:05:a6:99:6f: be:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E5:A8:EB:10:B0:A9:2C:D8:44:9C:90:E1:49:C4:D1:38:17:4C:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34798cda-5e77-35d0-bce9-5f1b8a7a2168.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:78:e6:e0:83:3a:1d:b6:03:21:58:63:b4:45:2f:5e:58:84: 43:d0:61:5b:c1:5d:03:32:fd:72:16:e1:21:43:83:19:fc:e8: 82:8a:dd:a8:5b:02:a4:96:16:6f:5e:e2:22:0c:0d:83:ff:14: b5:18:86:76:1e:e8:08:af:54:ca:59:08:a4:3d:c3:16:c8:3b: ee:89:b4:c3:13:ab:4e:12:c4:4c:91:e9:f8:3a:7c:8e:49:05: 48:11:f3:ca:9a:66:23:de:4c:91:36:fa:8e:4d:8f:83:fc:e3: 61:ba:26:af:f5:cc:e0:67:11:f6:59:63:d7:04:e6:d3:e7:cd: 08:79:fa:01:38:dc:22:ab:b6:af:d0:f4:39:75:20:b9:3b:58: 99:97:89:db:26:06:ce:dd:98:39:1a:75:23:bf:f5:f4:6f:1e: ec:70:0e:0e:35:1d:0c:62:cc:ab:eb:0f:fa:40:36:a4:ca:23: f8:41:a7:fa:b8:36:7a:2d:69:81:43:16:2b:d4:2b:98:43:c9: 32:df:3a:e7:58:61:75:1e:81:37:1b:f6:8b:96:42:ee:fe:7b: 69:d2:12:39:17:56:60:b4:04:f4:09:d4:4c:1d:a7:fe:0b:24: 38:17:00:23:f5:8f:d0:ea:40:b4:e7:bd:27:f5:fd:10:2d:17: 56:60:0c:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXbl80050tGdiTmggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDUxMzA5MzM1OFoXDTI0MDgxMTA5MzM1OFowLzEtMCsGA1UEAxMk NWNjMjcxZWMtODQ5NS00ZDYyLTg3Y2QtNzVmNWI0ZjQ2NTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspnh+eO0BUEeLoAhd7awe+tuCwHt//hlLeZw OOC9zEKUdmhGu2r2km0K8HQC4nrnEqpgqC2Y+7CEXmZLwnNdMk69Uh9Sn6ObEpmM EO6MqeE4xhkOFQAGVRmVhzc1JT65Hn86h7ZiSbuSRJO2zpga1hvKvDyVcKWWUxXi RG7g7dH+lMzzZoEfMSFSDhMpL/rLRQXd/J8gltrUca4i8cndL+P9NJgLV9gCurFj 20IbrkA5n1SxP37EDPc4GpU+7ToccNjtJPF+YvsIXt5+AbmNpu7uFuZf3PgmqTKF 2PSmwbtsAxc204aBB9PxsunmFdYuOKv5Cs2fDq2JBQWmmW++vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBblqOsQsKks2ESckOFJxNE4F0z7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzQ3OThjZGEtNWU3Ny0z NWQwLWJjZTktNWYxYjhhN2EyMTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADx45uCDOh22AyFYY7RFL15YhEPQYVvBXQMy/XIW4SFDgxn86IKK3ahb AqSWFm9e4iIMDYP/FLUYhnYe6AivVMpZCKQ9wxbIO+6JtMMTq04SxEyR6fg6fI5J BUgR88qaZiPeTJE2+o5Nj4P842G6Jq/1zOBnEfZZY9cE5tPnzQh5+gE43CKrtq/Q 9Dl1ILk7WJmXidsmBs7dmDkadSO/9fRvHuxwDg41HQxizKvrD/pANqTKI/hBp/q4 NnotaYFDFivUK5hDyTLfOudYYXUegTcb9ouWQu7+e2nSEjkXVmC0BPQJ1Ewdp/4L JDgXACP1j9DqQLTnvSf1/RAtF1ZgDBY= -----END CERTIFICATE-----Generated at Fri Jun 7 22:07:06 2024 by rpki-client on console-ams.rpki-client.org