$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f40932b7-5578-310a-8198-efa1e63bac7e.roa File: f40932b7-5578-310a-8198-efa1e63bac7e.roa (raw, json) Hash identifier: 0SyyPYhgSDiGQHhyctZIhcjX1BEvQSo6LU/WO6Lpu4s= Subject key identifier: FB:84:CA:D6:80:A3:42:36:B6:6B:E1:35:5F:BE:D1:95:A1:F0:4C:1E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285845DBDD24ADEA65374A4CA7007C Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f40932b7-5578-310a-8198-efa1e63bac7e.roa Signing time: Mon 13 May 2024 11:53:41 +0000 ROA not before: Mon 13 May 2024 11:53:41 +0000 ROA not after: Sun 11 Aug 2024 11:53:41 +0000 asID: 16625 IP address blocks: 23.40.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Jun 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:db:dd:24:ad:ea:65:37:4a:4c:a7:00:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 13 11:53:41 2024 GMT Not After : Aug 11 11:53:41 2024 GMT Subject: CN=3a0b6468-7827-48bb-847e-584209176476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:46:4b:8d:a0:08:9f:84:c6:50:b7:98:05:9d: 4f:0f:70:cc:3a:99:00:03:0c:1a:ff:e9:80:35:fe: 0d:b9:1e:16:ba:3c:bd:ba:3c:80:aa:2d:86:56:5e: 2a:c6:dc:d4:ff:a4:db:b7:78:5e:cf:fc:b3:28:e3: 2c:6f:c2:26:15:be:76:22:6e:eb:ba:50:53:92:6a: fc:6c:86:8d:ce:ac:bb:9c:cf:b3:51:36:1b:31:ca: c1:41:3b:3b:42:ad:10:dd:34:70:84:27:75:58:af: 79:ae:8c:61:af:00:2e:da:27:dc:5f:69:42:cd:8e: 97:b3:41:36:28:99:3d:14:2a:e8:b1:63:49:99:84: 18:83:04:8b:da:58:68:72:74:93:dc:4a:4b:02:85: d4:84:2e:d4:7e:66:24:f2:65:b8:a6:af:69:b9:98: 2a:7a:1c:43:36:42:13:37:b9:60:f1:88:9e:c2:f0: f1:31:99:e4:8a:e2:88:c6:04:d6:ed:f7:c9:7c:d6: d0:be:5d:c8:9f:c2:62:f2:ba:5f:6e:53:85:6d:7c: 3d:2f:91:fc:b6:3b:74:5b:d5:a7:49:e9:99:87:a4: 14:7e:0d:ef:c5:b3:99:c7:bf:f6:e6:2e:ba:a3:a4: d5:4b:a2:c0:b7:30:b5:b8:7e:53:fa:8f:54:d7:83: 13:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:84:CA:D6:80:A3:42:36:B6:6B:E1:35:5F:BE:D1:95:A1:F0:4C:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f40932b7-5578-310a-8198-efa1e63bac7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:81:2c:d2:bb:58:19:b6:1b:a9:f7:bb:9e:ba:6d:a0:89:da: 6d:0e:ea:10:44:2f:55:c7:c9:0e:5f:72:40:65:c1:17:a1:d8: af:d9:e4:9d:b4:dd:bb:6b:18:7e:db:20:67:34:5a:c6:24:fa: b5:4e:fd:a6:4c:40:c5:5f:e3:ad:38:db:d7:26:c9:ae:dc:10: 55:ec:a6:e9:93:cf:8b:a1:21:47:41:07:69:20:07:2a:6d:4f: 0f:33:03:69:35:c0:bc:68:17:a8:75:df:81:34:fe:29:64:83: af:10:ca:88:e3:8a:12:e5:61:94:9d:0d:b5:49:46:d2:b5:b3: 0f:1a:81:5c:81:04:7b:18:0f:b4:71:39:04:04:66:d7:a2:58: e7:0c:73:4b:21:d9:39:5a:10:30:6c:26:c5:87:40:a7:fa:be: fa:16:fa:e2:27:af:e2:d3:47:2a:fc:f4:97:10:bf:30:8e:9a: 8f:7a:81:f6:88:24:61:ba:70:5b:c4:80:d1:35:c7:25:bd:00: 63:b3:9a:82:ff:28:ec:11:93:4e:bb:2f:46:a2:8a:c3:8c:bb: 81:9f:ae:8a:f7:b3:73:95:37:b5:4f:44:33:50:4e:9d:61:eb: 81:01:38:d1:04:a7:be:dd:42:ab:46:48:e0:80:d8:9a:e3:f9: 19:29:e6:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXb3SSt6mU3SkynAHwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDUxMzExNTM0MVoXDTI0MDgxMTExNTM0MVowLzEtMCsGA1UEAxMk M2EwYjY0NjgtNzgyNy00OGJiLTg0N2UtNTg0MjA5MTc2NDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUZLjaAIn4TGULeYBZ1PD3DMOpkAAwwa/+mA Nf4NuR4Wujy9ujyAqi2GVl4qxtzU/6Tbt3hez/yzKOMsb8ImFb52Im7rulBTkmr8 bIaNzqy7nM+zUTYbMcrBQTs7Qq0Q3TRwhCd1WK95roxhrwAu2ifcX2lCzY6Xs0E2 KJk9FCrosWNJmYQYgwSL2lhocnST3EpLAoXUhC7UfmYk8mW4pq9puZgqehxDNkIT N7lg8YiewvDxMZnkiuKIxgTW7ffJfNbQvl3In8Ji8rpfblOFbXw9L5H8tjt0W9Wn SemZh6QUfg3vxbOZx7/25i66o6TVS6LAtzC1uH5T+o9U14MTCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuEytaAo0I2tmvhNV++0ZWh8EweMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjQwOTMyYjctNTU3OC0z MTBhLTgxOTgtZWZhMWU2M2JhYzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyiYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyBLNK7WBm2G6n3u566baCJ2m0O6hBEL1XHyQ5fckBlwReh2K/Z5J20 3btrGH7bIGc0WsYk+rVO/aZMQMVf460429cmya7cEFXspumTz4uhIUdBB2kgBypt Tw8zA2k1wLxoF6h134E0/ilkg68QyojjihLlYZSdDbVJRtK1sw8agVyBBHsYD7Rx OQQEZteiWOcMc0sh2TlaEDBsJsWHQKf6vvoW+uInr+LTRyr89JcQvzCOmo96gfaI JGG6cFvEgNE1xyW9AGOzmoL/KOwRk067L0aiisOMu4Gfror3s3OVN7VPRDNQTp1h 64EBONEEp77dQqtGSOCA2Jrj+Rkp5r4= -----END CERTIFICATE-----Generated at Sat Jun 8 04:59:25 2024 by rpki-client on console-fra.rpki-client.org