$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b5a2e67-246b-3a95-aeb9-42ed7e2f8b39.roa File: 5b5a2e67-246b-3a95-aeb9-42ed7e2f8b39.roa (raw, json) Hash identifier: NkbqbG/NuUBzMz5u2ihd79YXfVdIu6sN7qje6Oru0yk= Subject key identifier: DF:C3:53:E0:F2:70:9B:97:58:39:B8:F3:F6:67:74:59:DF:31:28:B2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285845BD88E02A6FE9970119974840 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b5a2e67-246b-3a95-aeb9-42ed7e2f8b39.roa Signing time: Thu 02 May 2024 15:09:38 +0000 ROA not before: Thu 02 May 2024 15:09:38 +0000 ROA not after: Wed 31 Jul 2024 15:09:38 +0000 asID: 20940 IP address blocks: 23.46.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:bd:88:e0:2a:6f:e9:97:01:19:97:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 2 15:09:38 2024 GMT Not After : Jul 31 15:09:38 2024 GMT Subject: CN=0f3b61d3-6535-4ad7-840a-342fca7ad8b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dd:66:60:bf:b4:88:82:7c:e7:1d:c2:e1:0c: cf:da:1f:92:de:2c:e1:d4:a8:33:99:32:7c:5f:50: 63:63:30:b7:10:79:3c:89:3d:4c:d5:f0:4f:de:ff: 50:60:d4:35:2e:01:37:f7:38:d3:28:59:90:2c:c2: fe:75:3e:cd:5e:d2:59:cf:1d:ce:91:ce:81:3a:b4: f0:1b:7a:b9:49:bc:7e:0d:06:4a:0c:72:fc:1c:88: 62:09:40:f3:c4:86:7b:92:5c:0d:ff:89:70:33:49: b9:99:0b:d4:6e:8b:ba:35:44:2b:15:4a:6d:a0:ad: 4e:89:f4:0b:29:47:f2:cd:c1:cd:39:89:b7:6c:e8: 1e:66:00:08:60:7c:03:5f:5a:2b:55:37:30:fa:1e: 6c:a2:e6:5b:87:62:a6:b8:95:8f:af:32:99:26:77: bc:6a:61:d3:99:d1:75:7c:b6:95:85:27:19:fb:6d: a3:79:0c:b4:0f:54:7c:29:e3:20:52:ca:61:25:86: ec:a3:b8:9d:1a:70:c4:46:fc:f0:04:25:f1:67:87: e7:b2:fc:83:33:5c:82:de:41:51:32:65:29:20:4c: f6:81:84:eb:3e:43:bd:d2:35:f9:53:c3:d1:ee:ad: b6:a5:18:a6:c6:35:ee:16:d5:95:e3:af:50:10:f8: 1c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C3:53:E0:F2:70:9B:97:58:39:B8:F3:F6:67:74:59:DF:31:28:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b5a2e67-246b-3a95-aeb9-42ed7e2f8b39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.46.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:a4:a8:ff:73:54:7f:4f:a6:d1:7c:da:7b:6f:bb:be:db:22: e1:38:bb:85:22:83:8c:c7:40:59:a0:ad:a8:e6:9b:7e:15:5b: a5:e7:53:57:df:90:2d:71:98:bf:91:70:f4:41:65:5f:1a:33: c7:fb:ac:0c:34:0f:82:11:8a:69:87:df:13:7e:98:ba:fd:d1: 0f:86:87:5d:20:90:4c:81:c0:40:3a:0c:b6:56:1d:be:93:6b: be:4c:22:c9:5e:23:54:e5:63:80:87:86:fc:a7:09:ba:ca:ae: a4:91:c6:22:76:37:0f:bb:d2:cf:69:34:b9:4a:5f:fc:40:81: e4:fb:98:d1:4f:b3:37:81:97:67:6d:17:02:ad:ab:22:e2:f3: 22:45:9a:a4:b1:f1:a7:aa:52:32:23:86:04:f0:b6:90:53:09: 37:fa:bc:59:4c:e2:06:d6:92:2e:d6:ba:18:2e:1d:b3:98:b2: b5:13:6b:51:d0:a7:bc:91:8a:b0:c0:80:85:90:88:ac:bf:11: c2:7d:0e:f6:2f:31:b0:42:a6:84:04:08:8c:61:0f:30:c7:15: 10:bc:0d:48:c1:7e:c1:8a:9b:61:1d:1e:af:ed:d8:9b:9e:51: 60:21:42:49:51:bc:fb:a1:d3:38:48:40:12:ab:5d:22:73:81: ac:a3:03:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW9iOAqb+mXARmXSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDUwMjE1MDkzOFoXDTI0MDczMTE1MDkzOFowLzEtMCsGA1UEAxMk MGYzYjYxZDMtNjUzNS00YWQ3LTg0MGEtMzQyZmNhN2FkOGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd1mYL+0iIJ85x3C4QzP2h+S3izh1KgzmTJ8 X1BjYzC3EHk8iT1M1fBP3v9QYNQ1LgE39zjTKFmQLML+dT7NXtJZzx3Okc6BOrTw G3q5Sbx+DQZKDHL8HIhiCUDzxIZ7klwN/4lwM0m5mQvUbou6NUQrFUptoK1OifQL KUfyzcHNOYm3bOgeZgAIYHwDX1orVTcw+h5souZbh2KmuJWPrzKZJne8amHTmdF1 fLaVhScZ+22jeQy0D1R8KeMgUsphJYbso7idGnDERvzwBCXxZ4fnsvyDM1yC3kFR MmUpIEz2gYTrPkO90jX5U8PR7q22pRimxjXuFtWV469QEPgciwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/DU+DycJuXWDm48/ZndFnfMSiyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWI1YTJlNjctMjQ2Yi0z YTk1LWFlYjktNDJlZDdlMmY4YjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy4+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2kqP9zVH9PptF82ntvu77bIuE4u4Uig4zHQFmgrajmm34VW6XnU1ff kC1xmL+RcPRBZV8aM8f7rAw0D4IRimmH3xN+mLr90Q+Gh10gkEyBwEA6DLZWHb6T a75MIsleI1TlY4CHhvynCbrKrqSRxiJ2Nw+70s9pNLlKX/xAgeT7mNFPszeBl2dt FwKtqyLi8yJFmqSx8aeqUjIjhgTwtpBTCTf6vFlM4gbWki7WuhguHbOYsrUTa1HQ p7yRirDAgIWQiKy/EcJ9DvYvMbBCpoQECIxhDzDHFRC8DUjBfsGKm2EdHq/t2Jue UWAhQklRvPuh0zhIQBKrXSJzgayjA5g= -----END CERTIFICATE-----Generated at Fri May 17 20:58:00 2024 by rpki-client on console-fra.rpki-client.org