$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4d8fa3b-6b5a-3036-8f8b-8cfe22a3c6fd.roa File: a4d8fa3b-6b5a-3036-8f8b-8cfe22a3c6fd.roa (raw, json) Hash identifier: 5Tt6aZzARzoL/a0wlR5p4yl/Q0QQMOZ2YfGFToiPQLY= Subject key identifier: 68:7E:51:51:6A:C7:4C:FC:A9:7C:40:2D:55:56:02:97:56:50:AF:58 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285845BD2BDF5EB2245C6AF0082700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4d8fa3b-6b5a-3036-8f8b-8cfe22a3c6fd.roa Signing time: Thu 02 May 2024 12:02:15 +0000 ROA not before: Thu 02 May 2024 12:02:15 +0000 ROA not after: Wed 31 Jul 2024 12:02:15 +0000 asID: 16625 IP address blocks: 23.39.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:bd:2b:df:5e:b2:24:5c:6a:f0:08:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 2 12:02:15 2024 GMT Not After : Jul 31 12:02:15 2024 GMT Subject: CN=e64c9b32-aa1e-4542-b3db-cb74337795f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1b:69:51:c1:0e:2d:93:3a:5c:67:73:31:b7: 1b:52:3a:6f:7e:b0:32:1a:04:65:0a:5d:c7:cf:10: 02:26:8c:df:b7:cb:08:9b:c7:fe:15:44:b0:05:47: 48:37:2a:58:30:05:65:c8:54:b8:b2:76:34:a9:78: 2d:3c:68:68:25:f4:d8:1f:78:f6:92:ef:94:95:24: 93:80:de:47:66:b7:74:16:3d:2c:5e:73:fb:0d:4e: 92:ae:93:96:83:32:f6:e9:9f:cb:56:91:92:74:2c: 0e:cf:a4:39:b1:5c:6b:20:c3:56:d5:6d:6e:82:b6: 47:ab:16:0c:cd:04:42:fa:07:11:c4:61:b9:e5:b5: 0e:a8:ff:33:da:c4:78:dc:20:de:4e:66:57:39:21: cb:6f:3f:41:e1:89:c4:28:88:85:f6:88:21:77:8f: 31:f6:92:ec:68:26:27:99:41:30:8c:80:e9:3d:8e: fb:13:b2:93:ed:6b:1c:be:41:05:79:2d:61:46:f3: 83:bc:9d:01:b9:9f:3d:98:c2:5e:6b:76:27:2d:9e: b2:79:f4:22:40:14:f4:14:a5:31:7a:bd:f7:86:7c: 92:89:05:da:f2:32:71:1e:8c:d2:4d:c0:c4:a3:47: 86:e3:3d:e2:ae:79:ca:dc:c7:6c:43:a2:8b:6b:c5: 19:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7E:51:51:6A:C7:4C:FC:A9:7C:40:2D:55:56:02:97:56:50:AF:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4d8fa3b-6b5a-3036-8f8b-8cfe22a3c6fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:4b:b0:af:55:6a:08:69:31:af:26:9c:4d:ae:e1:8b:cd:f1: 38:9e:4c:7d:af:7b:55:a8:ae:1c:a1:5b:1d:88:4c:ad:f1:b7: 05:5f:ce:f1:e4:4f:03:9b:e5:c8:b1:45:81:bb:5e:c6:cb:40: eb:ab:34:dd:9d:64:21:27:3f:01:21:bf:56:5f:8b:05:08:0d: 37:86:ab:d9:54:d7:68:3f:96:87:03:8a:ad:d5:d3:b2:1e:e5: fc:4d:59:12:0a:ef:54:45:a9:79:31:45:8c:fe:7a:90:2a:30: 7b:38:20:0d:d1:f9:a9:90:52:cf:43:b2:db:9d:88:b1:5c:e9: 8a:0f:c8:f5:af:a6:df:63:6f:7e:e2:e1:8d:cd:12:82:44:41: b7:42:97:79:27:d5:b0:44:8b:74:ff:6a:02:3f:b4:2a:5a:58: f2:3f:38:13:4b:19:91:7a:e4:63:d6:78:d0:28:8a:a2:4a:3c: a4:da:4b:ef:91:7b:9f:f0:ea:6a:39:5a:fb:8a:72:66:62:e5: 8c:2b:58:35:41:1d:f1:d1:41:7a:b5:e3:51:7a:b3:f0:66:4d: 6f:f2:cf:75:b0:fc:3a:7d:21:f4:95:97:7e:83:13:c9:ae:19: 03:71:95:2d:e3:bc:22:17:4e:89:bd:c2:ba:6c:0e:a7:85:4e: df:dd:dc:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW9K99esiRcavAIJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDUwMjEyMDIxNVoXDTI0MDczMTEyMDIxNVowLzEtMCsGA1UEAxMk ZTY0YzliMzItYWExZS00NTQyLWIzZGItY2I3NDMzNzc5NWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRtpUcEOLZM6XGdzMbcbUjpvfrAyGgRlCl3H zxACJozft8sIm8f+FUSwBUdINypYMAVlyFS4snY0qXgtPGhoJfTYH3j2ku+UlSST gN5HZrd0Fj0sXnP7DU6SrpOWgzL26Z/LVpGSdCwOz6Q5sVxrIMNW1W1ugrZHqxYM zQRC+gcRxGG55bUOqP8z2sR43CDeTmZXOSHLbz9B4YnEKIiF9oghd48x9pLsaCYn mUEwjIDpPY77E7KT7WscvkEFeS1hRvODvJ0BuZ89mMJea3YnLZ6yefQiQBT0FKUx er33hnySiQXa8jJxHozSTcDEo0eG4z3irnnK3MdsQ6KLa8UZKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGh+UVFqx0z8qXxALVVWApdWUK9YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTRkOGZhM2ItNmI1YS0z MDM2LThmOGItOGNmZTIyYTNjNmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFycQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApLsK9VaghpMa8mnE2u4YvN8TieTH2ve1WorhyhWx2ITK3xtwVfzvHk TwOb5cixRYG7XsbLQOurNN2dZCEnPwEhv1ZfiwUIDTeGq9lU12g/locDiq3V07Ie 5fxNWRIK71RFqXkxRYz+epAqMHs4IA3R+amQUs9DstudiLFc6YoPyPWvpt9jb37i 4Y3NEoJEQbdCl3kn1bBEi3T/agI/tCpaWPI/OBNLGZF65GPWeNAoiqJKPKTaS++R e5/w6mo5WvuKcmZi5YwrWDVBHfHRQXq141F6s/BmTW/yz3Ww/Dp9IfSVl36DE8mu GQNxlS3jvCIXTom9wrpsDqeFTt/d3IU= -----END CERTIFICATE-----Generated at Fri May 17 20:05:34 2024 by rpki-client on console-ams.rpki-client.org