$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c8506cf-1749-33d4-8318-a3469fd1b169.roa File: 9c8506cf-1749-33d4-8318-a3469fd1b169.roa (raw, json) Hash identifier: a5gMw5ddk6rLTAeASdxLfDFLJiYqkW9OsXYKllrgWtI= Subject key identifier: 7F:80:58:89:6F:0F:B7:A6:03:61:75:93:6E:80:A9:60:87:0C:F1:43 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285845840DCBD6045C90E8AA0DFC3A Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c8506cf-1749-33d4-8318-a3469fd1b169.roa Signing time: Fri 12 Apr 2024 01:00:26 +0000 ROA not before: Fri 12 Apr 2024 01:00:26 +0000 ROA not after: Thu 11 Jul 2024 01:00:26 +0000 asID: 35994 IP address blocks: 23.33.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:84:0d:cb:d6:04:5c:90:e8:aa:0d:fc:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 12 01:00:26 2024 GMT Not After : Jul 11 01:00:26 2024 GMT Subject: CN=7416cd41-ee00-46a6-81de-0d829485449c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:30:f9:28:61:98:37:82:e5:55:2e:66:ef:c6: 61:42:9e:dc:9f:87:bd:45:40:1b:99:18:c7:54:62: b0:98:9b:f0:a1:2b:49:6d:70:4a:e4:f3:c3:cf:23: 6c:07:e1:48:1d:94:8a:62:ac:bc:3b:86:1b:18:69: b5:74:42:40:71:b9:1a:3b:89:ae:dc:09:61:e5:0c: e5:9c:a7:54:c7:19:16:f5:e9:3c:6f:0b:17:eb:20: 07:ce:25:93:6a:ac:9e:f7:42:b8:37:91:dc:2c:b3: ef:cc:5a:2b:b0:d2:e0:87:16:2c:54:37:95:9a:ff: 94:74:dc:9d:39:1e:ed:d6:2d:da:62:ea:47:7b:42: fb:36:fb:1e:7e:5f:3e:55:ec:cd:24:a2:eb:cc:0f: ef:bf:d8:0d:25:51:ee:29:ff:17:cb:fc:16:3a:e8: e8:d3:1b:f8:0f:12:88:2d:97:08:9d:b2:89:1b:cd: a4:ed:ee:fc:fa:7e:e8:23:e4:aa:13:94:b2:3b:f8: f0:1f:a6:fe:87:b0:45:45:2f:1e:92:c0:a7:56:25: 36:9c:f0:ae:37:f4:c8:15:e9:fa:ac:ea:df:06:fa: 50:e0:2f:1c:15:42:f6:a2:f7:e2:cb:0e:7e:68:2c: 89:56:53:67:ae:d4:ad:85:c4:a4:6e:d7:34:f8:de: 0b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:80:58:89:6F:0F:B7:A6:03:61:75:93:6E:80:A9:60:87:0C:F1:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c8506cf-1749-33d4-8318-a3469fd1b169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:54:1d:49:f3:f4:32:d3:06:4d:17:0f:cb:a3:10:61:13:22: 44:81:05:89:bc:06:61:76:94:0a:1e:ee:9e:f8:01:71:c8:4e: a9:41:21:0b:98:53:4d:29:7d:7f:90:04:0a:4e:3b:e1:67:15: e6:90:66:6b:d6:f4:eb:be:3c:a7:de:98:89:54:49:d5:fe:6a: aa:d2:c3:de:23:30:81:c4:61:8d:65:5a:3c:0a:39:73:cc:5f: a9:be:07:44:27:e4:23:88:08:59:4c:0b:13:32:22:71:c3:ee: 7a:d9:ec:cf:a9:9a:d9:d6:41:cd:13:50:ff:2e:9a:c7:84:14: f9:7e:dc:64:22:d2:84:70:38:3f:51:c2:9b:69:7e:fc:29:ca: 30:8f:35:51:0b:4e:2b:3a:cb:13:1f:02:2c:c7:0f:9a:2b:04: 44:82:46:e0:d5:b7:1f:e1:81:61:1e:8b:a2:e3:d4:35:34:43: ac:0d:82:99:d1:60:28:fc:fe:ff:0c:9b:73:1a:de:17:82:51: 92:02:a3:a3:d7:fe:df:bc:f6:db:0e:43:01:4e:46:9c:f4:0f: f5:6d:18:f8:a4:16:74:2f:c6:3b:ef:1d:85:68:e7:15:a2:fb: 14:e4:a8:fb:f9:d0:09:2c:f5:84:11:fe:41:75:ff:67:a3:a4: a0:d9:a7:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWEDcvWBFyQ6KoN/DowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDQxMjAxMDAyNloXDTI0MDcxMTAxMDAyNlowLzEtMCsGA1UEAxMk NzQxNmNkNDEtZWUwMC00NmE2LTgxZGUtMGQ4Mjk0ODU0NDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjD5KGGYN4LlVS5m78ZhQp7cn4e9RUAbmRjH VGKwmJvwoStJbXBK5PPDzyNsB+FIHZSKYqy8O4YbGGm1dEJAcbkaO4mu3Alh5Qzl nKdUxxkW9ek8bwsX6yAHziWTaqye90K4N5HcLLPvzForsNLghxYsVDeVmv+UdNyd OR7t1i3aYupHe0L7Nvsefl8+VezNJKLrzA/vv9gNJVHuKf8Xy/wWOujo0xv4DxKI LZcInbKJG82k7e78+n7oI+SqE5SyO/jwH6b+h7BFRS8eksCnViU2nPCuN/TIFen6 rOrfBvpQ4C8cFUL2ovfiyw5+aCyJVlNnrtSthcSkbtc0+N4L5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+AWIlvD7emA2F1k26AqWCHDPFDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWM4NTA2Y2YtMTc0OS0z M2Q0LTgzMTgtYTM0NjlmZDFiMTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVUHUnz9DLTBk0XD8ujEGETIkSBBYm8BmF2lAoe7p74AXHITqlBIQuY U00pfX+QBApOO+FnFeaQZmvW9Ou+PKfemIlUSdX+aqrSw94jMIHEYY1lWjwKOXPM X6m+B0Qn5COICFlMCxMyInHD7nrZ7M+pmtnWQc0TUP8umseEFPl+3GQi0oRwOD9R wptpfvwpyjCPNVELTis6yxMfAizHD5orBESCRuDVtx/hgWEei6Lj1DU0Q6wNgpnR YCj8/v8Mm3Ma3heCUZICo6PX/t+89tsOQwFORpz0D/VtGPikFnQvxjvvHYVo5xWi +xTkqPv50Aks9YQR/kF1/2ejpKDZp5c= -----END CERTIFICATE-----Generated at Fri May 17 20:05:33 2024 by rpki-client on console-ams.rpki-client.org