$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/06b87a17-da72-35cd-99c5-447ec65e01d5.roa File: 06b87a17-da72-35cd-99c5-447ec65e01d5.roa (raw, json) Hash identifier: 2f3vVHUE68tdXmRNrGuv38mOMWdhE2pfqt7lXUeT8hs= Subject key identifier: 44:FB:D4:66:1A:CD:26:AF:19:40:CE:ED:4D:36:A2:82:7D:E0:E1:FD Certificate issuer: /CN=67b004e8-3b23-4f9d-9325-beac85825fe1 Certificate serial: 010D0C9F43285845B4E8D2030BAD3192CA620500 Authority key identifier: 40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/06b87a17-da72-35cd-99c5-447ec65e01d5.roa Signing time: Mon 29 Apr 2024 13:00:33 +0000 ROA not before: Mon 29 Apr 2024 13:00:33 +0000 ROA not after: Sun 28 Jul 2024 13:00:33 +0000 asID: 22224 IP address blocks: 23.187.128.0/24 maxlen: 24 207.174.168.0/22 maxlen: 24 2602:fed6::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b4:e8:d2:03:0b:ad:31:92:ca:62:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b004e8-3b23-4f9d-9325-beac85825fe1 Validity Not Before: Apr 29 13:00:33 2024 GMT Not After : Jul 28 13:00:33 2024 GMT Subject: CN=85c7ff18-b550-49d6-bcf2-a4b08aed90cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5a:36:c7:bb:2c:6e:c9:53:85:b1:d9:55:db: 8a:ad:8c:42:f9:d8:d6:71:01:41:02:86:9f:9c:a9: 60:7e:a4:33:98:92:57:2a:84:1a:a6:2c:02:55:7f: de:57:0f:67:33:cb:b2:f5:de:8d:20:ad:10:82:a8: 92:87:c4:9e:42:0a:d2:bf:47:24:7f:9a:07:0a:c5: fb:f5:6f:9e:80:c0:c9:7b:c1:d7:ba:4d:b8:70:fe: e2:0a:87:5d:f2:b6:64:fe:df:c8:f7:21:96:07:9c: bd:e0:b2:0c:a2:64:84:03:66:71:a2:48:f4:77:82: bb:16:c2:87:08:df:83:9b:2a:69:10:db:5f:18:64: 12:61:9d:ec:eb:4b:a9:18:7b:ac:69:d9:88:9e:da: c3:c9:b2:a8:d9:62:0c:9e:3a:f3:72:15:0e:db:e7: e1:4d:75:5e:65:32:b5:8f:11:47:f4:e7:86:62:77: 99:d6:89:56:ff:d1:37:b4:15:6a:0a:a6:ba:25:d6: 67:37:3d:ff:f1:b0:11:d5:ba:ef:ef:42:3e:6f:b1: 6f:84:fa:ac:06:40:d7:f2:4b:33:8f:7b:88:61:4c: dd:1e:e3:81:52:2d:c5:1b:05:02:b2:31:79:03:0d: 79:9e:f0:4f:61:08:f4:b6:8a:49:0a:02:9d:06:e3: 89:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FB:D4:66:1A:CD:26:AF:19:40:CE:ED:4D:36:A2:82:7D:E0:E1:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/06b87a17-da72-35cd-99c5-447ec65e01d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl X509v3 Authority Key Identifier: keyid:40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer sbgp-ipAddrBlock: critical IPv4: 23.187.128.0/24 207.174.168.0/22 IPv6: 2602:fed6::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e5:0e:1d:88:23:8c:34:f6:d6:8b:3b:a0:b3:27:d9:d2:61: 2d:71:36:b8:ab:4f:aa:2b:ea:6b:5b:66:9e:e4:86:14:3a:95: 0e:af:dd:f6:00:29:c2:72:14:04:ca:a9:22:3b:10:ab:ec:a6: aa:42:65:59:ab:54:22:73:53:a3:b9:80:8e:fc:87:79:53:4a: e1:a8:f7:cb:79:20:0d:a6:db:20:62:70:33:7d:df:ca:12:fd: 46:e7:bb:a1:5d:df:96:25:fe:19:4f:41:1e:83:5b:b6:d8:08: 72:9c:8d:9c:ca:99:27:8b:e8:0e:f0:b4:bb:2f:6d:a5:18:f6: a8:c0:62:5f:42:03:43:88:8a:3d:ff:59:9b:71:f2:10:93:2f: 21:a9:71:84:d3:17:0c:42:1d:72:cb:8d:19:17:a9:8a:ca:7a: d9:8b:63:96:1d:ee:7e:32:d6:01:1c:50:d9:39:42:57:e5:e3: 8c:8d:47:61:4d:67:82:d0:cc:4f:83:d1:9b:e2:8d:48:b6:4b: 86:c3:f9:05:d6:81:0b:2e:ee:0b:e6:84:ed:5d:28:e5:b7:9e: c6:b2:ad:9c:33:32:6b:75:d3:84:8f:80:07:9c:e2:7e:4f:f2: 0d:25:4f:11:28:2b:31:89:3b:84:c3:52:95:cf:be:0f:d4:cb: 13:b1:6e:10 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEW06NIDC60xkspiBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdiMDA0ZTgtM2IyMy00ZjlkLTkzMjUtYmVhYzg1ODI1 ZmUxMB4XDTI0MDQyOTEzMDAzM1oXDTI0MDcyODEzMDAzM1owLzEtMCsGA1UEAxMk ODVjN2ZmMTgtYjU1MC00OWQ2LWJjZjItYTRiMDhhZWQ5MGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVo2x7ssbslThbHZVduKrYxC+djWcQFBAoaf nKlgfqQzmJJXKoQapiwCVX/eVw9nM8uy9d6NIK0QgqiSh8SeQgrSv0ckf5oHCsX7 9W+egMDJe8HXuk24cP7iCodd8rZk/t/I9yGWB5y94LIMomSEA2Zxokj0d4K7FsKH CN+DmyppENtfGGQSYZ3s60upGHusadmIntrDybKo2WIMnjrzchUO2+fhTXVeZTK1 jxFH9OeGYneZ1olW/9E3tBVqCqa6JdZnNz3/8bAR1brv70I+b7FvhPqsBkDX8ksz j3uIYUzdHuOBUi3FGwUCsjF5Aw15nvBPYQj0topJCgKdBuOJEwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFET71GYazSavGUDO7U02ooJ94OH9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82N2Iw MDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFjODU4MjVmZTEvMDZiODdhMTctZGE3Mi0z NWNkLTk5YzUtNDQ3ZWM2NWUwMWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjdiMDA0ZTgtM2IyMy00ZjlkLTkz MjUtYmVhYzg1ODI1ZmUxLzY3YjAwNGU4LTNiMjMtNGY5ZC05MzI1LWJlYWM4NTgy NWZlMS5jcmwwHwYDVR0jBBgwFoAUQFyQ+sCtey1+tsX0s1WQ8mUc/q4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82N2IwMDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFj ODU4MjVmZTEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF7uAAwQC z66oMA4EAgACMAgDBgQmAv7WADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAk5Q4diCOMNPbWizugsyfZ0mEt cTa4q0+qK+prW2ae5IYUOpUOr932ACnCchQEyqkiOxCr7KaqQmVZq1Qic1OjuYCO /Id5U0rhqPfLeSANptsgYnAzfd/KEv1G57uhXd+WJf4ZT0Eeg1u22AhynI2cypkn i+gO8LS7L22lGPaowGJfQgNDiIo9/1mbcfIQky8hqXGE0xcMQh1yy40ZF6mKynrZ i2OWHe5+MtYBHFDZOUJX5eOMjUdhTWeC0MxPg9Gb4o1ItkuGw/kF1oELLu4L5oTt XSjlt57Gsq2cMzJrddOEj4AHnOJ+T/INJU8RKCsxiTuEw1KVz74P1MsTsW4Q -----END CERTIFICATE-----Generated at Fri May 10 03:34:17 2024 by rpki-client on console-fra.rpki-client.org