$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/67cd331c-0eea-3d40-96d5-7acc007b8867.roa File: 67cd331c-0eea-3d40-96d5-7acc007b8867.roa (raw, json) Hash identifier: 9XgR7lOjO6LVXWCIPq9BhQHnqcPrGoiWxKxvSpudUaI= Subject key identifier: F1:B8:62:93:FA:41:DA:17:06:C6:06:0E:F3:FB:AB:28:B6:77:B0:6B Certificate issuer: /CN=822f9974-af88-4d0b-a65f-065fdd26c645 Certificate serial: 010D0C9F43285845AC8A1AC40D4B8A80AFE07AC0 Authority key identifier: 3C:FD:AA:02:90:05:D1:73:A5:12:3B:E6:2C:2B:A0:C9:51:C9:26:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/67cd331c-0eea-3d40-96d5-7acc007b8867.roa Signing time: Fri 26 Apr 2024 13:00:35 +0000 ROA not before: Fri 26 Apr 2024 13:00:35 +0000 ROA not after: Thu 25 Jul 2024 13:00:35 +0000 asID: 58061 IP address blocks: 23.247.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ac:8a:1a:c4:0d:4b:8a:80:af:e0:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=822f9974-af88-4d0b-a65f-065fdd26c645 Validity Not Before: Apr 26 13:00:35 2024 GMT Not After : Jul 25 13:00:35 2024 GMT Subject: CN=84fc5947-e0a1-404a-8f75-d282fbe2b8aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:16:5f:85:3e:34:41:c1:32:b3:58:12:71:db: 70:81:22:16:4f:65:a4:d2:88:ab:d7:0b:1d:38:af: 61:f0:41:97:1d:f3:e6:3c:69:60:ca:eb:60:dd:28: 4c:5e:06:c7:43:3c:2a:86:63:31:91:84:68:6d:99: 75:bb:c3:be:7c:32:53:fd:ee:a5:50:38:49:13:ea: d5:2e:5a:9c:8a:70:e4:52:df:10:82:38:30:e2:75: 45:64:7c:d9:93:c9:ee:24:a6:95:43:d6:09:2e:28: 79:c9:45:2a:e0:04:22:1d:9d:9b:ba:7a:1d:20:08: b2:bd:34:8f:ae:2d:32:4f:5c:02:80:91:29:72:61: 71:29:54:35:66:5e:9f:8a:b4:34:d3:ef:f0:40:af: e2:ee:11:25:61:b9:fa:c0:d3:6b:0e:14:fc:b6:99: b1:8a:34:c0:88:bf:5d:76:26:fe:21:c6:94:e7:d9: ef:3e:5c:45:d5:ea:0f:2e:b1:bf:15:2c:9f:1f:69: 16:f3:4f:f0:ed:b7:56:45:d0:2a:ec:c5:8c:d1:00: 01:01:c4:ae:e6:cd:f6:98:d4:7e:72:0e:fa:a4:0b: f5:e3:00:8b:a3:41:bf:d4:ef:9f:13:32:f7:d0:57: 73:23:f9:f9:61:06:5e:da:5f:e0:17:a0:1c:76:12: d8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B8:62:93:FA:41:DA:17:06:C6:06:0E:F3:FB:AB:28:B6:77:B0:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/67cd331c-0eea-3d40-96d5-7acc007b8867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.crl X509v3 Authority Key Identifier: keyid:3C:FD:AA:02:90:05:D1:73:A5:12:3B:E6:2C:2B:A0:C9:51:C9:26:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer sbgp-ipAddrBlock: critical IPv4: 23.247.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ce:ff:b5:dd:57:ec:ab:31:7f:b6:57:46:d6:48:c7:01:92: 50:01:c8:b9:59:35:98:5a:8a:5a:b2:9e:d2:f3:f2:44:10:cc: 29:fd:6f:f0:37:6a:43:3f:5b:83:0a:09:1f:5c:44:f6:dc:4a: 25:74:a5:86:ba:65:35:eb:e2:78:66:f7:e2:5b:0b:37:07:0e: b9:64:6b:d4:c7:2f:d3:8b:05:c1:ad:e4:6b:08:59:26:89:36: 66:6e:bc:b9:ea:c9:63:7b:89:f9:7f:2a:2b:f7:fe:0f:7d:da: 85:24:1a:63:b5:df:27:e1:e7:2c:25:c5:de:e5:28:b5:0a:ca: 0a:6c:85:e0:fc:e2:17:b9:fa:b4:85:9a:1a:e4:e8:85:08:74: 68:bd:5d:c7:d5:22:68:02:f6:2f:15:fb:b2:5f:04:44:61:71: 74:72:10:14:83:a3:26:60:4a:37:1c:52:26:b5:20:a8:43:6c: 8b:5c:10:ad:c0:99:10:65:1d:25:7e:9f:c0:0c:4d:5b:db:50: a4:1d:b4:76:4c:b3:9a:6d:6f:ad:9a:e9:39:25:35:19:85:b3: e5:44:c7:66:3c:f0:75:70:00:ef:80:40:ea:99:d5:db:ad:6d: 90:19:ec:cd:bc:8f:6f:61:35:e7:09:6f:bb:f1:72:52:62:c4: 6e:24:b8:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsihrEDUuKgK/gesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIyZjk5NzQtYWY4OC00ZDBiLWE2NWYtMDY1ZmRkMjZj NjQ1MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk ODRmYzU5NDctZTBhMS00MDRhLThmNzUtZDI4MmZiZTJiOGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxZfhT40QcEys1gScdtwgSIWT2Wk0oir1wsd OK9h8EGXHfPmPGlgyutg3ShMXgbHQzwqhmMxkYRobZl1u8O+fDJT/e6lUDhJE+rV LlqcinDkUt8Qgjgw4nVFZHzZk8nuJKaVQ9YJLih5yUUq4AQiHZ2bunodIAiyvTSP ri0yT1wCgJEpcmFxKVQ1Zl6firQ00+/wQK/i7hElYbn6wNNrDhT8tpmxijTAiL9d dib+IcaU59nvPlxF1eoPLrG/FSyfH2kW80/w7bdWRdAq7MWM0QABAcSu5s32mNR+ cg76pAv14wCLo0G/1O+fEzL30FdzI/n5YQZe2l/gF6AcdhLY8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPG4YpP6QdoXBsYGDvP7qyi2d7BrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjJm OTk3NC1hZjg4LTRkMGItYTY1Zi0wNjVmZGQyNmM2NDUvNjdjZDMzMWMtMGVlYS0z ZDQwLTk2ZDUtN2FjYzAwN2I4ODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIyZjk5NzQtYWY4OC00ZDBiLWE2 NWYtMDY1ZmRkMjZjNjQ1LzgyMmY5OTc0LWFmODgtNGQwYi1hNjVmLTA2NWZkZDI2 YzY0NS5jcmwwHwYDVR0jBBgwFoAUPP2qApAF0XOlEjvmLCugyVHJJjUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjJmOTk3NC1hZjg4LTRkMGItYTY1Zi0wNjVm ZGQyNmM2NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/f0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbO/7XdV+yrMX+2V0bWSMcBklAByLlZNZhailqyntLz8kQQzCn9b/A3 akM/W4MKCR9cRPbcSiV0pYa6ZTXr4nhm9+JbCzcHDrlka9THL9OLBcGt5GsIWSaJ NmZuvLnqyWN7ifl/Kiv3/g992oUkGmO13yfh5ywlxd7lKLUKygpsheD84he5+rSF mhrk6IUIdGi9XcfVImgC9i8V+7JfBERhcXRyEBSDoyZgSjccUia1IKhDbItcEK3A mRBlHSV+n8AMTVvbUKQdtHZMs5ptb62a6TklNRmFs+VEx2Y88HVwAO+AQOqZ1dut bZAZ7M28j29hNecJb7vxclJixG4kuGU= -----END CERTIFICATE-----Generated at Wed May 22 20:12:50 2024 by rpki-client on console-ams.rpki-client.org