$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a3dea1a-e5e6-3444-87b5-25017150721d.roa File: 7a3dea1a-e5e6-3444-87b5-25017150721d.roa (raw, json) Hash identifier: 3FSCcRY3VPm+TBjiXMfXBldzy0VHFGwqvSY7VJzoS+Q= Subject key identifier: 27:1A:09:A1:21:20:B4:07:2A:D5:07:D7:80:51:E4:B8:9C:45:CA:48 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285845D077CA3698CDD78F875ADC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a3dea1a-e5e6-3444-87b5-25017150721d.roa Signing time: Thu 09 May 2024 09:55:34 +0000 ROA not before: Thu 09 May 2024 09:55:34 +0000 ROA not after: Wed 07 Aug 2024 09:55:34 +0000 asID: 20940 IP address blocks: 23.33.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d0:77:ca:36:98:cd:d7:8f:87:5a:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 9 09:55:34 2024 GMT Not After : Aug 7 09:55:34 2024 GMT Subject: CN=1420165d-d129-45ec-a6f5-38ddd7c2350c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f3:a5:ff:e6:bd:5d:a2:bf:f3:d1:1d:8d:12: 9f:ea:cd:42:14:b1:55:90:ff:66:83:63:68:c4:0e: 77:93:53:a5:8a:82:e2:9e:f2:79:49:57:93:18:4b: 6f:51:38:25:ec:a5:1f:db:1c:84:9b:f4:c4:2b:4b: 5c:87:dc:68:00:44:5e:e1:33:75:f0:a0:6d:77:8e: c3:af:b8:0c:43:dc:66:1f:30:ba:9c:f4:2b:7e:9c: 2c:26:be:36:72:64:3d:3d:04:81:20:81:69:89:46: c1:bf:33:ec:c7:eb:18:f9:02:8d:eb:38:ef:db:07: fd:cc:ac:3b:49:64:38:25:4b:35:30:fe:2d:23:c3: d5:2f:67:a5:6c:93:11:23:87:12:15:c2:91:2c:96: 49:db:4f:5e:d6:89:11:26:e3:b2:96:38:1f:46:01: a1:85:23:6f:42:b4:b6:0a:4a:73:25:ab:e5:ce:20: 54:05:2e:42:62:3d:fe:c4:23:af:a3:98:46:51:fe: ba:ff:6a:26:1c:73:a5:67:59:33:0c:a4:6a:12:77: c8:a3:0e:f4:b2:8b:b7:b2:e7:8a:4f:af:fd:d2:c9: 3b:7e:89:38:b0:c4:a4:26:c8:ad:8b:47:f3:96:43: c4:d5:08:da:b4:61:2f:ad:14:c1:5d:da:1a:a1:31: 19:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1A:09:A1:21:20:B4:07:2A:D5:07:D7:80:51:E4:B8:9C:45:CA:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a3dea1a-e5e6-3444-87b5-25017150721d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:f5:1c:c3:b5:18:cb:ea:bf:9a:00:ff:d3:90:a7:28:d5:39: 11:96:28:98:94:9d:39:57:45:82:cb:6c:2a:07:a5:24:9e:e7: c1:62:80:da:b0:92:d8:32:91:ea:54:2b:ef:00:bb:5e:54:79: 56:33:ec:ea:20:1c:b4:bb:07:cb:ce:a7:21:c2:9f:cc:5a:60: 0c:52:94:91:fe:04:eb:08:24:0c:82:3f:13:ab:9d:49:de:91: 32:f0:cc:be:20:a3:97:51:ad:97:c2:f7:f1:01:a8:ca:f9:61: 75:11:4e:22:8e:d3:f2:e8:51:50:6a:72:1c:65:f5:9b:78:84: 57:d5:a2:21:02:c1:ff:b0:7a:a8:c9:7d:c5:b3:0c:55:56:09: 50:14:af:5b:67:2b:4a:f1:02:bb:e2:05:54:3e:7f:4f:ba:48: 14:9c:1a:2b:02:59:7b:4c:78:dd:59:fe:ab:df:b0:b3:86:07: c9:b9:48:c3:87:a6:f3:21:a4:79:a0:a0:33:00:47:6a:30:f3: 49:6b:5f:3b:3a:20:90:ab:74:dd:89:8a:f2:39:41:97:74:a3: 7f:e3:43:ba:86:e7:9a:b0:04:fc:25:fc:3e:b1:15:d6:00:fb: 3b:da:1c:24:41:9b:b1:4e:ab:bc:19:ca:4f:60:18:a6:02:ac: fe:aa:20:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXQd8o2mM3Xj4da3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDUwOTA5NTUzNFoXDTI0MDgwNzA5NTUzNFowLzEtMCsGA1UEAxMk MTQyMDE2NWQtZDEyOS00NWVjLWE2ZjUtMzhkZGQ3YzIzNTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovOl/+a9XaK/89EdjRKf6s1CFLFVkP9mg2No xA53k1OlioLinvJ5SVeTGEtvUTgl7KUf2xyEm/TEK0tch9xoAERe4TN18KBtd47D r7gMQ9xmHzC6nPQrfpwsJr42cmQ9PQSBIIFpiUbBvzPsx+sY+QKN6zjv2wf9zKw7 SWQ4JUs1MP4tI8PVL2elbJMRI4cSFcKRLJZJ209e1okRJuOyljgfRgGhhSNvQrS2 CkpzJavlziBUBS5CYj3+xCOvo5hGUf66/2omHHOlZ1kzDKRqEnfIow70sou3sueK T6/90sk7fok4sMSkJsiti0fzlkPE1QjatGEvrRTBXdoaoTEZIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcaCaEhILQHKtUH14BR5LicRcpIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2EzZGVhMWEtZTVlNi0z NDQ0LTg3YjUtMjUwMTcxNTA3MjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyE8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADv1HMO1GMvqv5oA/9OQpyjVORGWKJiUnTlXRYLLbCoHpSSe58FigNqw ktgykepUK+8Au15UeVYz7OogHLS7B8vOpyHCn8xaYAxSlJH+BOsIJAyCPxOrnUne kTLwzL4go5dRrZfC9/EBqMr5YXURTiKO0/LoUVBqchxl9Zt4hFfVoiECwf+weqjJ fcWzDFVWCVAUr1tnK0rxArviBVQ+f0+6SBScGisCWXtMeN1Z/qvfsLOGB8m5SMOH pvMhpHmgoDMAR2ow80lrXzs6IJCrdN2JivI5QZd0o3/jQ7qG55qwBPwl/D6xFdYA +zvaHCRBm7FOq7wZyk9gGKYCrP6qIC8= -----END CERTIFICATE-----Generated at Sat Jun 1 15:02:41 2024 by rpki-client on console-fra.rpki-client.org