$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3acbdecf-2bad-355c-af51-3f889069c5ed.roa File: 3acbdecf-2bad-355c-af51-3f889069c5ed.roa (raw, json) Hash identifier: kupDdrTNVzmx6VK/OYlVlc5McMUc96GJ5wcqTHa4M28= Subject key identifier: 89:3B:B0:F7:4E:B8:F5:18:CA:34:26:32:0E:02:9D:38:FA:2B:96:F8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285845DE4F94411152534DB766EA20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3acbdecf-2bad-355c-af51-3f889069c5ed.roa Signing time: Tue 14 May 2024 08:55:52 +0000 ROA not before: Tue 14 May 2024 08:55:52 +0000 ROA not after: Mon 12 Aug 2024 08:55:52 +0000 asID: 16625 IP address blocks: 23.43.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Jun 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:de:4f:94:41:11:52:53:4d:b7:66:ea:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 14 08:55:52 2024 GMT Not After : Aug 12 08:55:52 2024 GMT Subject: CN=d8e24d7d-9ec1-49f8-b7d4-a8745238967a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:25:50:fe:35:73:77:60:a0:17:00:ff:61:6e: 4b:44:62:9e:7f:7f:d6:69:e1:71:63:50:9d:e4:d2: 54:6d:a7:9b:1f:70:e8:40:89:cb:7a:80:13:e9:0c: 13:f0:ed:93:24:28:ad:09:0a:80:a9:31:8a:b3:91: 5b:f0:f2:20:76:6a:1a:c8:62:c1:75:0d:ab:71:99: 95:cd:f2:17:20:c3:77:47:a7:0a:af:db:26:d5:4c: b2:47:74:1d:78:ff:d4:57:71:2b:43:50:11:c9:ba: c4:0a:52:1b:b3:10:2f:83:ca:b4:e5:3f:9c:57:57: 51:e9:da:80:21:85:38:99:2a:a0:26:dd:38:cd:56: 5f:68:b8:0f:6b:7b:2f:8f:87:c6:62:81:44:87:df: 66:5f:8f:21:f9:71:41:e3:77:b6:2a:5d:4e:84:8c: ac:f2:70:29:48:4f:db:fa:b9:d5:74:d9:72:1d:57: 34:dc:3a:71:42:4d:34:8b:ed:e9:89:94:e4:93:76: 68:09:f8:4a:f4:6a:be:cc:57:37:cd:54:76:bf:be: 14:4d:79:7f:7b:af:c1:14:ac:4d:9c:15:c7:b1:0a: 79:a4:1e:d5:f6:ae:5d:53:e7:4e:fe:c8:e5:96:eb: 23:dd:f3:ed:2d:a6:85:ad:4a:12:0c:93:c6:32:21: 2e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3B:B0:F7:4E:B8:F5:18:CA:34:26:32:0E:02:9D:38:FA:2B:96:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3acbdecf-2bad-355c-af51-3f889069c5ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:72:63:11:9e:24:76:56:8f:95:ec:dc:a7:2e:47:3b:54:a1: a8:bc:96:e1:3c:cf:50:6a:15:a2:64:87:44:ed:56:74:ce:2c: 8e:cd:21:5e:60:ea:47:ca:c9:3e:88:72:1f:d2:8e:a2:16:d3: 73:0d:08:55:85:92:28:c7:9a:60:eb:06:f6:20:0e:fb:aa:83: 1e:3d:46:51:9d:ae:71:30:b5:3a:4a:48:2a:bc:30:92:ee:04: e8:03:3c:f9:48:72:94:e9:de:cf:47:94:fa:37:0c:ea:99:bf: 36:e7:4a:b0:00:d6:44:32:52:63:af:fa:1a:92:3c:92:60:21: 3c:df:95:59:98:13:65:75:44:d4:35:83:0d:a0:6a:69:3d:56: 9e:67:db:84:28:35:78:c1:1b:16:4a:41:c6:95:ce:e6:65:76: c1:c0:17:32:41:1a:72:94:51:14:94:af:25:4c:c6:03:fa:39: 97:91:05:c1:85:a8:2f:19:a6:4a:23:86:7f:5a:e9:93:d5:b4: 5e:46:b0:e4:41:fc:fc:53:d9:0e:88:ba:1d:12:bf:f4:97:5d: 89:af:63:78:74:16:21:ca:ba:33:72:c2:ce:3d:ee:63:8c:69: 8c:12:bc:f0:f2:da:62:51:d0:cd:ab:e7:9a:5e:db:a3:95:2f: 56:84:a9:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXeT5RBEVJTTbdm6iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDUxNDA4NTU1MloXDTI0MDgxMjA4NTU1MlowLzEtMCsGA1UEAxMk ZDhlMjRkN2QtOWVjMS00OWY4LWI3ZDQtYTg3NDUyMzg5NjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSVQ/jVzd2CgFwD/YW5LRGKef3/WaeFxY1Cd 5NJUbaebH3DoQInLeoAT6QwT8O2TJCitCQqAqTGKs5Fb8PIgdmoayGLBdQ2rcZmV zfIXIMN3R6cKr9sm1UyyR3QdeP/UV3ErQ1ARybrEClIbsxAvg8q05T+cV1dR6dqA IYU4mSqgJt04zVZfaLgPa3svj4fGYoFEh99mX48h+XFB43e2Kl1OhIys8nApSE/b +rnVdNlyHVc03DpxQk00i+3piZTkk3ZoCfhK9Gq+zFc3zVR2v74UTXl/e6/BFKxN nBXHsQp5pB7V9q5dU+dO/sjllusj3fPtLaaFrUoSDJPGMiEufQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIk7sPdOuPUYyjQmMg4CnTj6K5b4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2FjYmRlY2YtMmJhZC0z NTVjLWFmNTEtM2Y4ODkwNjljNWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJyYxGeJHZWj5Xs3KcuRztUoai8luE8z1BqFaJkh0TtVnTOLI7NIV5g 6kfKyT6Ich/SjqIW03MNCFWFkijHmmDrBvYgDvuqgx49RlGdrnEwtTpKSCq8MJLu BOgDPPlIcpTp3s9HlPo3DOqZvzbnSrAA1kQyUmOv+hqSPJJgITzflVmYE2V1RNQ1 gw2gamk9Vp5n24QoNXjBGxZKQcaVzuZldsHAFzJBGnKUURSUryVMxgP6OZeRBcGF qC8Zpkojhn9a6ZPVtF5GsORB/PxT2Q6Iuh0Sv/SXXYmvY3h0FiHKujNyws497mOM aYwSvPDy2mJR0M2r55pe26OVL1aEqUI= -----END CERTIFICATE-----Generated at Fri Jun 7 22:44:02 2024 by rpki-client on console-fra.rpki-client.org