$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/19601375-8b5a-3c05-9dfe-bdc6f601106d.roa File: 19601375-8b5a-3c05-9dfe-bdc6f601106d.roa (raw, json) Hash identifier: DN3bPNlxkDeOWRnAIM28A0gFHCQIagQMKURrxVyT9i4= Subject key identifier: AC:6D:51:65:63:34:0C:FD:98:6E:FC:EA:B5:D5:E0:9A:94:36:0B:21 Certificate issuer: /CN=a1853cd3-3329-4b61-a321-f6705ea74197 Certificate serial: 010D0C9F43285844D87A82CD3DEEE1685F94C200 Authority key identifier: 2D:1A:A6:F8:8B:DB:6D:1F:8D:7A:34:72:43:B1:F2:AD:6E:F9:CD:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/19601375-8b5a-3c05-9dfe-bdc6f601106d.roa Signing time: Sat 10 Feb 2024 14:00:32 +0000 ROA not before: Sat 10 Feb 2024 14:00:32 +0000 ROA not after: Fri 10 May 2024 13:00:32 +0000 asID: 400554 IP address blocks: 23.134.120.0/24 maxlen: 24 2602:fb9d::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/a1853cd3-3329-4b61-a321-f6705ea74197.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/a1853cd3-3329-4b61-a321-f6705ea74197.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Apr 2024 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:d8:7a:82:cd:3d:ee:e1:68:5f:94:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1853cd3-3329-4b61-a321-f6705ea74197 Validity Not Before: Feb 10 14:00:32 2024 GMT Not After : May 10 13:00:32 2024 GMT Subject: CN=5d624d54-e2e3-4311-88a6-f4306da98606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e5:31:09:c4:fb:9e:9e:28:e0:5d:cd:55:8c: 31:94:9f:40:d3:10:ac:3c:de:2b:ed:82:0a:60:41: 05:47:1e:0a:82:f9:54:ae:64:f1:f9:78:26:49:06: d3:5d:d7:79:0c:19:35:b3:13:af:b6:7b:cb:e6:c5: c7:a8:ce:e3:08:95:b6:bb:ee:91:9b:2e:73:f3:cd: 6e:79:79:67:13:d9:9d:1c:a9:d3:33:63:72:e3:41: 62:57:07:c8:df:d6:db:b1:a6:46:04:54:87:a8:46: 44:bd:ea:0e:3b:47:73:fb:35:b7:74:cf:1a:08:14: 3c:84:de:c3:18:e3:97:95:1d:fd:83:a9:bd:fd:90: 3d:25:ce:b8:fa:95:d4:9d:af:e0:f2:33:fd:af:d4: 36:3e:0d:e7:b6:ba:ae:90:9e:b1:34:16:12:f7:d5: b0:4c:f1:d8:91:07:19:4a:0b:b3:cd:bd:15:6b:a6: 73:02:d8:a8:42:cf:8f:2f:53:6d:0a:c2:65:42:8c: 2a:b5:e3:ed:60:e5:f8:cf:83:d7:f8:dc:f2:9f:b6: f9:5a:bc:b2:61:69:07:fa:ba:d4:b8:bb:18:80:55: 71:72:67:4e:eb:b6:eb:12:d0:e3:69:8a:76:d7:20: f2:7f:ca:20:d3:c9:f9:7d:21:a1:bb:e8:c5:8a:9e: eb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6D:51:65:63:34:0C:FD:98:6E:FC:EA:B5:D5:E0:9A:94:36:0B:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/19601375-8b5a-3c05-9dfe-bdc6f601106d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/a1853cd3-3329-4b61-a321-f6705ea74197.crl X509v3 Authority Key Identifier: keyid:2D:1A:A6:F8:8B:DB:6D:1F:8D:7A:34:72:43:B1:F2:AD:6E:F9:CD:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197.cer sbgp-ipAddrBlock: critical IPv4: 23.134.120.0/24 IPv6: 2602:fb9d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:e4:25:c1:85:52:67:97:b8:03:70:21:e7:cc:5c:44:d1:c3: 24:73:30:c5:44:0f:b5:84:ef:8e:59:f2:64:82:6c:35:cb:9e: 4f:e0:5f:6d:39:ec:29:f2:93:e5:15:33:d1:10:45:41:a3:0e: 99:e5:5a:4a:1e:5e:01:1c:92:70:98:75:3d:7f:4c:09:e4:f4: ee:88:d9:5d:3f:63:21:40:f6:69:f0:33:24:57:4b:83:85:d7: d9:5d:36:16:a5:9a:79:81:f0:2c:05:23:f5:08:c5:65:3c:f4: c5:7f:c4:a8:fa:54:26:69:97:a8:69:13:8a:32:1a:23:0a:c1: 73:f5:17:e1:08:00:b9:69:a6:6d:51:e7:77:87:f0:f3:52:82: 78:93:89:3f:55:9e:fb:0a:b9:ea:43:e6:01:0c:80:8b:d1:01: 1e:f1:08:79:c0:00:71:63:5c:a2:1c:4c:ba:ea:b7:77:b0:eb: 99:56:e3:9d:c0:d0:d1:75:b3:25:18:59:73:ce:8d:b1:59:98: ac:ae:48:cd:97:93:a7:7f:cb:7f:88:60:00:82:c5:24:ff:96: e3:77:18:b9:9b:20:1e:22:ec:45:e5:30:c9:b9:e7:fa:5e:ca: 25:58:ee:71:52:ca:6e:53:90:89:14:75:2d:32:57:1b:68:86: 8a:4a:2e:f6 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWETYeoLNPe7haF+UwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTE4NTNjZDMtMzMyOS00YjYxLWEzMjEtZjY3MDVlYTc0 MTk3MB4XDTI0MDIxMDE0MDAzMloXDTI0MDUxMDEzMDAzMlowLzEtMCsGA1UEAxMk NWQ2MjRkNTQtZTJlMy00MzExLTg4YTYtZjQzMDZkYTk4NjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uUxCcT7np4o4F3NVYwxlJ9A0xCsPN4r7YIK YEEFRx4KgvlUrmTx+XgmSQbTXdd5DBk1sxOvtnvL5sXHqM7jCJW2u+6Rmy5z881u eXlnE9mdHKnTM2Ny40FiVwfI39bbsaZGBFSHqEZEveoOO0dz+zW3dM8aCBQ8hN7D GOOXlR39g6m9/ZA9Jc64+pXUna/g8jP9r9Q2Pg3ntrqukJ6xNBYS99WwTPHYkQcZ Sguzzb0Va6ZzAtioQs+PL1NtCsJlQowqtePtYOX4z4PX+Nzyn7b5WryyYWkH+rrU uLsYgFVxcmdO67brEtDjaYp21yDyf8og08n5fSGhu+jFip7rfwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKxtUWVjNAz9mG786rXV4JqUNgshMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMTg1 M2NkMy0zMzI5LTRiNjEtYTMyMS1mNjcwNWVhNzQxOTcvMTk2MDEzNzUtOGI1YS0z YzA1LTlkZmUtYmRjNmY2MDExMDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTE4NTNjZDMtMzMyOS00YjYxLWEz MjEtZjY3MDVlYTc0MTk3L2ExODUzY2QzLTMzMjktNGI2MS1hMzIxLWY2NzA1ZWE3 NDE5Ny5jcmwwHwYDVR0jBBgwFoAULRqm+IvbbR+NejRyQ7HyrW75zQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMTg1M2NkMy0zMzI5LTRiNjEtYTMyMS1mNjcw NWVhNzQxOTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4Z4MA4E AgACMAgDBgAmAvudADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAP5CXBhVJnl7gDcCHnzFxE0cMkczDFRA+1 hO+OWfJkgmw1y55P4F9tOewp8pPlFTPREEVBow6Z5VpKHl4BHJJwmHU9f0wJ5PTu iNldP2MhQPZp8DMkV0uDhdfZXTYWpZp5gfAsBSP1CMVlPPTFf8So+lQmaZeoaROK MhojCsFz9RfhCAC5aaZtUed3h/DzUoJ4k4k/VZ77CrnqQ+YBDICL0QEe8Qh5wABx Y1yiHEy66rd3sOuZVuOdwNDRdbMlGFlzzo2xWZisrkjNl5Onf8t/iGAAgsUk/5bj dxi5myAeIuxF5TDJuef6XsolWO5xUspuU5CJFHUtMlcbaIaKSi72 -----END CERTIFICATE-----Generated at Sat Apr 20 15:16:44 2024 by rpki-client on console-ams.rpki-client.org