$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/562f9a4e-3951-3e03-a47f-2249725de724.roa File: 562f9a4e-3951-3e03-a47f-2249725de724.roa (raw, json) Hash identifier: Gypx+eUlaoVRV5L5rVxqFKso4voExlac7feRyF3LCDs= Subject key identifier: 12:15:99:39:D0:48:AF:07:38:B6:2C:34:23:94:F8:18:24:FD:D1:79 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285845DEC0246544FB61594FFC6C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/562f9a4e-3951-3e03-a47f-2249725de724.roa Signing time: Tue 14 May 2024 12:42:40 +0000 ROA not before: Tue 14 May 2024 12:42:40 +0000 ROA not after: Mon 12 Aug 2024 12:42:40 +0000 asID: 20940 IP address blocks: 23.45.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:de:c0:24:65:44:fb:61:59:4f:fc:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 14 12:42:40 2024 GMT Not After : Aug 12 12:42:40 2024 GMT Subject: CN=9e5371d1-bfb8-4fdd-8043-0bbdff80da2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8c:b0:fb:48:41:da:0b:2f:84:e8:ed:f8:d3: 19:b8:ce:3e:ee:f6:de:3d:08:ad:7a:c5:f5:a4:75: 19:95:2e:cd:e2:b5:20:42:11:64:1a:aa:b5:55:45: aa:14:10:ba:26:55:fc:7e:dc:a6:ca:97:45:a4:f6: f1:bf:21:59:48:8c:ac:28:3f:00:70:a2:a0:a7:10: 9e:71:52:15:07:35:31:b2:a5:c9:e7:69:3a:20:2e: 1e:5c:1d:63:df:30:26:66:08:22:2f:d9:b6:b5:61: 93:b1:ea:f2:23:6c:16:d2:6b:a9:3a:a8:b9:9d:22: 8a:b9:7a:65:bf:b7:36:fc:3c:79:da:ba:a6:53:1c: 3b:a4:bc:c7:03:38:68:0e:bc:d3:67:20:cd:af:bf: de:46:37:15:20:b6:66:dd:e8:9b:dc:fd:53:13:8d: 76:47:52:3f:52:49:0d:aa:40:a2:25:3a:64:c7:41: d8:d0:53:71:fd:11:d9:07:a8:90:4a:a1:ba:3a:f3: 30:f8:8b:a3:21:c8:80:22:b6:31:bc:63:33:45:dd: 5b:d0:d5:6e:a0:d1:73:1b:c9:20:db:6a:00:d7:83: 58:51:36:9a:71:f3:c2:4a:ba:e4:e7:6d:99:89:1b: fe:ac:1f:7f:b5:0f:2a:63:bd:42:c7:3d:d5:c9:b8: d4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:15:99:39:D0:48:AF:07:38:B6:2C:34:23:94:F8:18:24:FD:D1:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/562f9a4e-3951-3e03-a47f-2249725de724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:3f:49:2e:63:93:84:6b:29:e3:fa:d8:a3:20:c6:4f:cc:52: 22:fe:20:aa:ea:c5:b8:fe:61:89:c2:f4:2d:a7:e0:5a:bf:3f: da:f9:2b:a9:84:c6:ec:d0:f0:ba:b6:89:0a:56:b2:2d:5a:b8: 1e:d6:1b:d4:a1:57:67:ed:b4:48:34:cb:b3:3b:0f:23:f3:ef: bd:6f:68:e7:a6:40:89:5a:a9:81:20:37:db:83:9a:0f:81:c8: d8:a4:5b:47:93:f7:89:e8:4a:d9:1e:a7:4f:98:85:c6:d0:dc: a5:80:be:ca:2d:13:81:3b:41:b3:15:c1:35:af:96:63:67:9d: 4d:5b:2b:1a:12:de:dc:93:3f:df:15:9e:bd:88:84:ca:0e:05: f2:29:6a:a1:3f:56:5a:92:29:8c:75:7f:f3:53:f4:28:ac:62: 9b:dd:7b:61:01:14:24:3c:c1:af:d3:c7:37:9f:19:b9:a9:ae: fd:91:13:18:19:41:8b:c7:54:e4:02:6c:20:1d:98:2c:e1:ff: 53:a0:a5:90:4b:ee:ff:49:d2:e7:ad:7a:ce:11:40:3d:c1:bd: 39:9d:54:3c:a7:e4:c2:9d:1d:12:1e:7b:79:8a:32:62:d4:f2: 6b:9a:79:4d:7f:4f:a0:3d:21:bc:a6:d6:da:7d:34:6e:3c:25: 74:a8:57:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXewCRlRPthWU/8bIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDUxNDEyNDI0MFoXDTI0MDgxMjEyNDI0MFowLzEtMCsGA1UEAxMk OWU1MzcxZDEtYmZiOC00ZmRkLTgwNDMtMGJiZGZmODBkYTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoyw+0hB2gsvhOjt+NMZuM4+7vbePQitesX1 pHUZlS7N4rUgQhFkGqq1VUWqFBC6JlX8ftymypdFpPbxvyFZSIysKD8AcKKgpxCe cVIVBzUxsqXJ52k6IC4eXB1j3zAmZggiL9m2tWGTseryI2wW0mupOqi5nSKKuXpl v7c2/Dx52rqmUxw7pLzHAzhoDrzTZyDNr7/eRjcVILZm3eib3P1TE412R1I/UkkN qkCiJTpkx0HY0FNx/RHZB6iQSqG6OvMw+IujIciAIrYxvGMzRd1b0NVuoNFzG8kg 22oA14NYUTaacfPCSrrk522ZiRv+rB9/tQ8qY71Cxz3VybjUVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIVmTnQSK8HOLYsNCOU+Bgk/dF5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTYyZjlhNGUtMzk1MS0z ZTAzLWE0N2YtMjI0OTcyNWRlNzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy10MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHA/SS5jk4RrKeP62KMgxk/MUiL+IKrqxbj+YYnC9C2n4Fq/P9r5K6mE xuzQ8Lq2iQpWsi1auB7WG9ShV2fttEg0y7M7DyPz771vaOemQIlaqYEgN9uDmg+B yNikW0eT94noStkep0+YhcbQ3KWAvsotE4E7QbMVwTWvlmNnnU1bKxoS3tyTP98V nr2IhMoOBfIpaqE/VlqSKYx1f/NT9CisYpvde2EBFCQ8wa/TxzefGbmprv2RExgZ QYvHVOQCbCAdmCzh/1OgpZBL7v9J0uetes4RQD3BvTmdVDyn5MKdHRIee3mKMmLU 8muaeU1/T6A9Ibym1tp9NG48JXSoVx8= -----END CERTIFICATE-----Generated at Sat Jun 1 15:02:34 2024 by rpki-client on console-fra.rpki-client.org