$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa File: d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa (raw, json) Hash identifier: 1jTo5qUdDEKUJHoKh7cwkTf3WV9NDwjSLfWehKKK81Y= Subject key identifier: 51:EC:B7:A3:82:41:E6:7A:4A:4F:81:98:66:F2:17:9B:F3:5D:75:49 Certificate issuer: /CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Certificate serial: 010D0C9F4328584533836115095BA85D3F757700 Authority key identifier: 30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa Signing time: Thu 14 Mar 2024 04:37:01 +0000 ROA not before: Thu 14 Mar 2024 04:37:01 +0000 ROA not after: Wed 12 Jun 2024 04:37:01 +0000 asID: 209242 IP address blocks: 23.170.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:33:83:61:15:09:5b:a8:5d:3f:75:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Validity Not Before: Mar 14 04:37:01 2024 GMT Not After : Jun 12 04:37:01 2024 GMT Subject: CN=37e3dc19-c762-4e16-a9fa-dfc7ea4f65b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:aa:d2:91:f5:d2:7c:3a:46:73:ff:fd:52:0f: c3:6e:dd:42:b7:40:12:92:a8:5c:f3:57:24:74:d1: c9:63:99:d4:82:9e:72:0e:6e:e4:2a:26:ec:35:3f: aa:40:5e:4a:18:3a:42:e7:30:e0:2c:dc:bd:4f:7e: ce:a3:1d:65:48:b7:a3:b2:84:4a:bd:4f:0c:29:88: 85:c1:93:2d:b7:90:1c:9b:35:a0:6a:c1:d3:a2:47: fd:7c:02:f5:48:a7:ef:93:c8:4e:1e:bf:26:9d:d5: cb:e8:b1:86:ac:37:92:e1:70:85:5d:20:19:c3:42: a9:ec:ed:58:3b:af:5e:92:ed:73:c3:d0:41:ab:42: e4:da:04:eb:ac:f6:76:0f:7f:59:f2:ea:34:d4:82: ec:d9:b8:86:0e:0c:00:15:1b:6d:42:b4:8f:b4:39: 01:8a:59:ac:b8:09:63:94:96:cf:df:47:b2:38:a3: 05:d4:7d:c7:ca:f5:bc:e9:11:87:a1:21:bf:37:d3: 52:76:b7:f9:30:ff:6a:3d:2e:b6:f9:74:f1:59:d7: 0b:cb:0f:7e:db:71:6f:23:25:8f:8e:cb:f2:73:9b: 84:27:03:27:63:7e:bd:2a:80:f4:48:b4:56:56:da: 77:b2:46:65:d0:36:35:97:c4:59:36:d8:73:bc:ac: 3d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:EC:B7:A3:82:41:E6:7A:4A:4F:81:98:66:F2:17:9B:F3:5D:75:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl X509v3 Authority Key Identifier: keyid:30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer sbgp-ipAddrBlock: critical IPv4: 23.170.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c2:be:e8:d4:d0:08:2d:fa:eb:e5:b8:d7:00:e9:8e:42:c5: 0e:0a:b4:5d:60:6e:9a:37:e1:a2:16:de:93:94:d6:0f:72:29: 37:54:74:60:84:57:37:12:00:93:fa:08:37:ae:12:17:15:f7: ea:cc:41:6f:9c:f3:fc:d6:9d:57:dd:10:7d:66:80:ea:68:30: 55:5f:ca:d2:2d:54:c0:fe:c9:b0:cf:50:ba:2e:6b:b1:6e:17: f0:2b:85:d1:c0:71:15:4f:3c:20:fc:96:ca:a0:9c:dd:d8:e0: 0c:31:6a:f6:bf:84:21:9d:00:da:c1:71:b7:15:bd:d1:ca:76: c6:11:9b:e6:b0:3b:06:b2:1d:05:58:9c:d1:43:72:27:8d:7d: 35:3a:c6:96:15:d1:88:bf:1d:98:f8:64:83:de:87:93:ba:c8: a6:60:15:4b:13:31:03:5b:a3:3f:2b:62:c5:8e:f4:85:f2:34: 11:d9:f5:5b:7f:1b:6c:ef:ce:f9:3f:a3:61:b5:51:3d:6c:da: c8:4a:75:fa:df:f8:88:c9:b3:46:ef:a4:19:c6:a1:9d:72:7b: 3f:28:05:dc:86:27:e6:11:e8:93:7a:db:3c:47:07:c3:da:6d: d1:e7:39:d9:71:a1:58:2d:3d:82:7a:6a:36:9f:06:a2:4a:57: 1c:ad:9b:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUzg2EVCVuoXT91dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NjdmOGItZTdiNy00YzM0LWFhYTAtMDBmZGRiZWVm NDhkMB4XDTI0MDMxNDA0MzcwMVoXDTI0MDYxMjA0MzcwMVowLzEtMCsGA1UEAxMk MzdlM2RjMTktYzc2Mi00ZTE2LWE5ZmEtZGZjN2VhNGY2NWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6rSkfXSfDpGc//9Ug/Dbt1Ct0ASkqhc81ck dNHJY5nUgp5yDm7kKibsNT+qQF5KGDpC5zDgLNy9T37Oox1lSLejsoRKvU8MKYiF wZMtt5AcmzWgasHTokf9fAL1SKfvk8hOHr8mndXL6LGGrDeS4XCFXSAZw0Kp7O1Y O69eku1zw9BBq0Lk2gTrrPZ2D39Z8uo01ILs2biGDgwAFRttQrSPtDkBilmsuAlj lJbP30eyOKMF1H3HyvW86RGHoSG/N9NSdrf5MP9qPS62+XTxWdcLyw9+23FvIyWP jsvyc5uEJwMnY369KoD0SLRWVtp3skZl0DY1l8RZNthzvKw9wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHst6OCQeZ6Sk+BmGbyF5vzXXVJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zOTY2 N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZkZGJlZWY0OGQvZDNiNDFjOWYtNWE5OC0z ZGM5LTkwOGUtOGI0YzEwZWU4NDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzk2NjdmOGItZTdiNy00YzM0LWFh YTAtMDBmZGRiZWVmNDhkLzM5NjY3ZjhiLWU3YjctNGMzNC1hYWEwLTAwZmRkYmVl ZjQ4ZC5jcmwwHwYDVR0jBBgwFoAUMN8a5EPYVgbeIdFXPxgyY3q5bw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zOTY2N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZk ZGJlZWY0OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6o4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHCvujU0Agt+uvluNcA6Y5CxQ4KtF1gbpo34aIW3pOU1g9yKTdUdGCE VzcSAJP6CDeuEhcV9+rMQW+c8/zWnVfdEH1mgOpoMFVfytItVMD+ybDPULoua7Fu F/ArhdHAcRVPPCD8lsqgnN3Y4Awxava/hCGdANrBcbcVvdHKdsYRm+awOwayHQVY nNFDcieNfTU6xpYV0Yi/HZj4ZIPeh5O6yKZgFUsTMQNboz8rYsWO9IXyNBHZ9Vt/ G2zvzvk/o2G1UT1s2shKdfrf+IjJs0bvpBnGoZ1yez8oBdyGJ+YR6JN62zxHB8Pa bdHnOdlxoVgtPYJ6ajafBqJKVxytm/Y= -----END CERTIFICATE-----Generated at Tue May 7 04:36:11 2024 by rpki-client on console-fra.rpki-client.org