$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2bb0ff2-99f6-31b0-8a38-1ef4da3c0583.roa File: a2bb0ff2-99f6-31b0-8a38-1ef4da3c0583.roa (raw, json) Hash identifier: W7sq7cXzFndcQX1iNVIxBhdaBzbtWBBZXZHUJPaiGSw= Subject key identifier: 38:73:4B:16:AF:82:75:36:81:D6:D4:A6:88:33:C1:5C:E9:B7:9F:22 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285845DB9815EE4995CA5F16C79B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2bb0ff2-99f6-31b0-8a38-1ef4da3c0583.roa Signing time: Mon 13 May 2024 09:34:32 +0000 ROA not before: Mon 13 May 2024 09:34:32 +0000 ROA not after: Sun 11 Aug 2024 09:34:32 +0000 asID: 16625 IP address blocks: 23.37.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Jun 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:db:98:15:ee:49:95:ca:5f:16:c7:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 13 09:34:32 2024 GMT Not After : Aug 11 09:34:32 2024 GMT Subject: CN=7cfb2653-3fdf-4fac-8b28-d1fe98618129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:da:5a:6f:be:d2:70:e7:70:76:1f:79:ce:1e: 0c:22:a2:ae:84:f4:ef:ad:90:17:97:58:ff:cb:5a: 32:8b:cd:d8:10:60:5b:80:ae:6a:89:72:79:4d:9a: bb:d5:72:83:5e:2c:0c:cb:25:03:57:b2:ad:65:2d: b3:9b:f2:79:45:b9:7a:bb:14:97:ba:9f:37:ab:ad: 93:8f:f6:fb:81:b0:0b:e2:6d:62:51:46:65:10:b1: 8b:30:82:1c:7a:e2:25:56:96:48:de:83:69:92:2d: 63:26:13:c6:ca:d4:1a:7e:26:5d:07:bb:18:d7:fe: f3:c0:d1:4c:fa:5b:b4:03:23:a8:e8:ef:cb:a9:18: 7b:e4:7c:a5:e5:a1:1e:24:31:3e:6e:af:a7:dc:8e: 9f:57:ab:18:eb:0d:10:58:42:0d:3d:e7:5b:1f:ac: 1a:6e:6a:87:a3:26:65:5a:c1:9f:db:33:f3:89:4b: 90:df:16:9f:ae:d4:81:5a:02:8c:0a:a8:e7:2d:0e: b6:d2:3b:ce:e9:c4:31:ca:5c:5c:87:7f:89:cd:9c: a0:9f:4f:00:5b:78:42:82:5b:ae:44:34:ae:ae:d2: 8f:a0:38:e5:22:4d:86:24:14:d2:7d:f8:c1:28:57: 61:41:25:38:ae:85:bd:89:57:df:13:07:fb:70:73: f3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:73:4B:16:AF:82:75:36:81:D6:D4:A6:88:33:C1:5C:E9:B7:9F:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2bb0ff2-99f6-31b0-8a38-1ef4da3c0583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.37.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:aa:16:35:24:3f:45:9d:d8:6c:dc:1b:f8:2a:f7:70:f3:ec: 3f:b5:10:a2:2b:20:28:4d:14:09:34:b5:57:81:d7:25:f1:5d: 4b:37:00:6f:d6:2a:bd:86:6f:84:1e:a7:53:3f:40:da:de:ca: 28:72:0f:63:ec:36:00:83:d8:04:c9:dc:c2:6b:02:17:be:36: 4c:86:64:6d:35:e1:61:78:15:82:42:28:35:ae:86:6f:2f:52: 18:7c:17:8e:00:af:0b:f4:2d:ec:07:18:ee:45:1f:61:31:f2: 69:7d:9c:8f:fa:9b:e2:3e:ed:f9:79:16:72:33:3e:0a:d1:75: 01:c1:10:74:7c:21:78:62:64:e1:17:da:5a:a1:15:56:7a:50: 1a:0f:75:b4:5a:3a:06:87:76:10:51:4c:97:71:62:3d:7e:96: 17:7d:32:da:ce:f7:b4:86:8f:81:51:b4:78:08:cd:90:1d:93: f4:a6:ea:6e:fc:9c:b5:f5:3f:86:bb:c6:94:1f:eb:69:b7:13: 30:50:75:58:be:6d:d4:3d:60:b8:e8:13:2b:ac:25:9c:a9:42: 8c:79:5b:86:e4:72:c1:c8:c2:41:7c:a1:b1:fc:4f:7e:ed:e1: 89:4d:bd:6f:96:e5:95:9c:20:44:0d:5f:7b:cb:38:a3:e7:30: 03:cd:0e:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXbmBXuSZXKXxbHmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDUxMzA5MzQzMloXDTI0MDgxMTA5MzQzMlowLzEtMCsGA1UEAxMk N2NmYjI2NTMtM2ZkZi00ZmFjLThiMjgtZDFmZTk4NjE4MTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19pab77ScOdwdh95zh4MIqKuhPTvrZAXl1j/ y1oyi83YEGBbgK5qiXJ5TZq71XKDXiwMyyUDV7KtZS2zm/J5Rbl6uxSXup83q62T j/b7gbAL4m1iUUZlELGLMIIceuIlVpZI3oNpki1jJhPGytQafiZdB7sY1/7zwNFM +lu0AyOo6O/LqRh75Hyl5aEeJDE+bq+n3I6fV6sY6w0QWEINPedbH6wabmqHoyZl WsGf2zPziUuQ3xafrtSBWgKMCqjnLQ620jvO6cQxylxch3+JzZygn08AW3hCgluu RDSurtKPoDjlIk2GJBTSffjBKFdhQSU4roW9iVffEwf7cHPzVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhzSxavgnU2gdbUpogzwVzpt58iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTJiYjBmZjItOTlmNi0z MWIwLThhMzgtMWVmNGRhM2MwNTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWqFjUkP0Wd2GzcG/gq93Dz7D+1EKIrIChNFAk0tVeB1yXxXUs3AG/W Kr2Gb4Qep1M/QNreyihyD2PsNgCD2ATJ3MJrAhe+NkyGZG014WF4FYJCKDWuhm8v Uhh8F44Arwv0LewHGO5FH2Ex8ml9nI/6m+I+7fl5FnIzPgrRdQHBEHR8IXhiZOEX 2lqhFVZ6UBoPdbRaOgaHdhBRTJdxYj1+lhd9MtrO97SGj4FRtHgIzZAdk/Sm6m78 nLX1P4a7xpQf62m3EzBQdVi+bdQ9YLjoEyusJZypQox5W4bkcsHIwkF8obH8T37t 4YlNvW+W5ZWcIEQNX3vLOKPnMAPNDjk= -----END CERTIFICATE-----Generated at Sat Jun 8 06:01:09 2024 by rpki-client on console-ams.rpki-client.org