$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/a05edcb1-cd53-3361-9a4a-f92812c5008e.roa File: a05edcb1-cd53-3361-9a4a-f92812c5008e.roa (raw, json) Hash identifier: Xd+Uni0FgA3/pIPYH57lxoxsfCPwtlmPQaaecA97V4g= Subject key identifier: 38:81:81:DF:90:D0:F6:45:5C:9E:BB:96:EA:44:60:F3:CD:6C:F0:CC Certificate issuer: /CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8 Certificate serial: 010D0C9F43285841E46D37A0B6F387123D74A880 Authority key identifier: 8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/a05edcb1-cd53-3361-9a4a-f92812c5008e.roa Signing time: Mon 15 May 2023 18:21:01 +0000 ROA not before: Mon 15 May 2023 18:21:01 +0000 ROA not after: Tue 20 Jun 2023 10:42:20 +0000 asID: 400312 IP address blocks: 23.131.168.0/24 maxlen: 24 2602:fbf0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 May 2023 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:6d:37:a0:b6:f3:87:12:3d:74:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8 Validity Not Before: May 15 18:21:01 2023 GMT Not After : Jun 20 10:42:20 2023 GMT Subject: CN=8cbf863e-eb6d-4114-af7b-d5a3e1fa6ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:09:79:74:5b:41:39:c2:d4:aa:5d:eb:6b:c1: 55:8a:fb:ee:60:0f:de:7a:8d:a7:ce:9d:dd:f1:1e: ab:21:a1:54:bf:c8:b8:26:1f:55:79:01:65:e4:c3: a2:57:b3:3c:6c:ee:7d:75:bf:25:72:d0:9c:b4:9a: 4c:ab:af:5c:3f:aa:f7:bb:02:57:9f:a8:05:39:e3: a3:42:4e:88:bf:d6:0f:be:b1:25:14:aa:87:37:71: 80:76:69:bf:f0:43:ca:73:53:2e:b8:11:91:5e:35: af:59:52:96:46:63:88:74:62:86:61:50:2a:c8:e8: b1:32:4d:df:83:ce:a8:25:19:cc:34:12:c1:0a:b8: 61:b1:46:d9:39:e8:64:29:7b:43:36:4e:49:8c:d1: 9d:1c:59:67:3c:84:2a:a4:d4:a7:dc:c7:e5:35:6d: b3:71:06:a0:2a:9f:91:ad:92:e3:2e:ce:cb:ea:bc: ad:b2:08:2f:bb:28:bb:79:f0:71:9a:ea:5a:bc:4e: ed:3d:ad:b2:8f:cb:73:b3:d1:4d:03:7f:aa:0e:a6: 1f:31:b9:55:96:6d:4d:51:5d:1f:46:a9:9e:b6:db: fa:ce:c7:0b:7b:2e:7c:ca:c9:c1:06:13:91:23:4b: a0:ee:c5:7b:ba:e1:a4:3c:85:01:28:af:72:8d:b2: c3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:81:81:DF:90:D0:F6:45:5C:9E:BB:96:EA:44:60:F3:CD:6C:F0:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/a05edcb1-cd53-3361-9a4a-f92812c5008e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl X509v3 Authority Key Identifier: keyid:8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer sbgp-ipAddrBlock: critical IPv4: 23.131.168.0/24 IPv6: 2602:fbf0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:c2:be:d3:4c:de:21:a9:18:66:ca:46:8a:ef:7f:1a:21:77: eb:1e:f4:15:3c:51:22:eb:2c:6a:af:3b:0d:d0:01:80:a0:d2: 3a:a9:db:99:86:ae:fe:88:d3:42:01:65:ce:48:a6:aa:97:e3: 99:9c:b9:63:0e:4c:b4:44:cb:bb:42:c7:00:9f:e7:3e:c0:22: 91:91:d2:1a:a4:97:af:25:e5:ff:ae:79:c9:d8:12:03:95:9d: a1:04:1b:42:cb:4c:d9:8e:48:14:64:05:e7:75:46:ac:a3:32: 50:7a:91:f0:5b:0f:e9:af:81:ca:95:d8:ef:6f:9a:6f:31:c8: 78:2c:fb:83:7c:cd:5f:93:a5:95:1f:4b:27:20:91:50:fc:80: 64:ec:a0:4f:d8:55:a3:57:ad:ac:fa:cf:f1:6e:f6:d2:16:22: c5:ed:76:f5:92:92:63:43:e8:2e:70:9b:38:47:81:12:77:dc: f1:c3:18:8b:1d:79:f3:cf:ef:2e:fe:f3:34:28:7c:53:30:74: 62:d8:ef:1b:c3:58:09:d6:15:f0:32:c5:03:72:6f:5f:f7:b2: 00:8c:28:ba:de:db:3e:2f:d5:b1:14:56:54:dd:b3:fd:ca:8a: 20:bb:b9:93:5a:69:78:a9:d5:71:ad:05:c6:4d:ba:a1:a2:6e: ed:c3:d0:21 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEHkbTegtvOHEj10qIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2ZTlhMjUtMTU5OS00ZTliLWE4YTItMDE1OTk1Yzgw NWI4MB4XDTIzMDUxNTE4MjEwMVoXDTIzMDYyMDEwNDIyMFowLzEtMCsGA1UEAxMk OGNiZjg2M2UtZWI2ZC00MTE0LWFmN2ItZDVhM2UxZmE2YWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Al5dFtBOcLUql3ra8FVivvuYA/eeo2nzp3d 8R6rIaFUv8i4Jh9VeQFl5MOiV7M8bO59db8lctCctJpMq69cP6r3uwJXn6gFOeOj Qk6Iv9YPvrElFKqHN3GAdmm/8EPKc1MuuBGRXjWvWVKWRmOIdGKGYVAqyOixMk3f g86oJRnMNBLBCrhhsUbZOehkKXtDNk5JjNGdHFlnPIQqpNSn3MflNW2zcQagKp+R rZLjLs7L6rytsggvuyi7efBxmupavE7tPa2yj8tzs9FNA3+qDqYfMblVlm1NUV0f Rqmettv6zscLey58ysnBBhORI0ug7sV7uuGkPIUBKK9yjbLDIwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFDiBgd+Q0PZFXJ67lupEYPPNbPDMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YzZl OWEyNS0xNTk5LTRlOWItYThhMi0wMTU5OTVjODA1YjgvYTA1ZWRjYjEtY2Q1My0z MzYxLTlhNGEtZjkyODEyYzUwMDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWM2ZTlhMjUtMTU5OS00ZTliLWE4 YTItMDE1OTk1YzgwNWI4LzljNmU5YTI1LTE1OTktNGU5Yi1hOGEyLTAxNTk5NWM4 MDViOC5jcmwwHwYDVR0jBBgwFoAUjvfJnlBoZhsQD1ZqN6tb/9Qmj6cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YzZlOWEyNS0xNTk5LTRlOWItYThhMi0wMTU5 OTVjODA1YjguY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4OoMA0E AgACMAcDBQAmAvvwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBABLCvtNM3iGpGGbKRorvfxohd+se9BU8USLr LGqvOw3QAYCg0jqp25mGrv6I00IBZc5IpqqX45mcuWMOTLREy7tCxwCf5z7AIpGR 0hqkl68l5f+uecnYEgOVnaEEG0LLTNmOSBRkBed1RqyjMlB6kfBbD+mvgcqV2O9v mm8xyHgs+4N8zV+TpZUfSycgkVD8gGTsoE/YVaNXraz6z/Fu9tIWIsXtdvWSkmND 6C5wmzhHgRJ33PHDGIsdefPP7y7+8zQofFMwdGLY7xvDWAnWFfAyxQNyb1/3sgCM KLre2z4v1bEUVlTds/3KiiC7uZNaaXip1XGtBcZNuqGibu3D0CE= -----END CERTIFICATE-----Generated at Mon May 15 18:56:59 2023 by rpki-client on console-ams.rpki-client.org