$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa File: 65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (raw, json) Hash identifier: i2eM8GMliakoHLDGtaELAmSsXnwOg868KzWY207MNts= Subject key identifier: B0:38:D0:37:46:05:66:C2:8A:28:B8:D5:B5:96:48:E3:33:37:A5:B2 Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F43285844F19AAFF68A917710D5045380 Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa Signing time: Mon 19 Feb 2024 14:00:31 +0000 ROA not before: Mon 19 Feb 2024 14:00:31 +0000 ROA not after: Sun 19 May 2024 13:00:31 +0000 asID: 13849 IP address blocks: 23.133.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f1:9a:af:f6:8a:91:77:10:d5:04:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Feb 19 14:00:31 2024 GMT Not After : May 19 13:00:31 2024 GMT Subject: CN=69f0dbfc-3bfc-4cff-86bf-2c5bb0d001b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:75:8b:1e:ea:7c:00:67:86:20:61:9d:0b:e7: 3d:6f:47:14:b3:b9:32:ee:19:5b:cd:27:0c:43:61: 9a:8c:ff:f0:ad:b7:71:8c:15:fa:24:35:ae:d9:93: e1:fb:08:45:65:0a:80:59:b7:63:0b:7c:74:55:5b: a5:46:f4:52:5e:c6:fe:b6:4d:29:ce:b3:67:0d:81: 87:41:4e:1b:c2:f6:31:43:9d:cc:9e:55:a0:78:81: ca:8f:ad:94:b0:a6:96:d0:b5:65:3a:d2:8a:3d:1b: 70:20:45:7f:ad:01:92:b6:26:e4:5c:6a:e6:4e:b7: 4d:b1:51:2e:94:02:db:a9:ff:39:5e:6a:f3:08:af: 9d:0c:c7:c9:01:8e:de:b5:1a:5e:0d:38:27:45:e1: bb:06:2e:17:47:a3:70:eb:65:d2:b4:b6:13:c4:8a: ac:04:30:99:84:82:58:28:84:40:5d:3d:f0:6b:09: 25:3e:76:c5:8c:3c:31:41:0e:ef:19:ba:35:e8:7a: f5:e1:5f:6f:ea:44:5c:6c:df:4e:cb:64:89:d6:51: 68:20:d0:a0:b8:66:12:40:04:07:2d:4d:7c:a8:56: 86:c7:3c:5d:52:f2:9c:6e:bd:06:cd:40:a2:f8:c4: b8:15:ac:32:13:03:5c:8f:a6:8b:50:d6:34:2f:29: 26:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:38:D0:37:46:05:66:C2:8A:28:B8:D5:B5:96:48:E3:33:37:A5:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: 23.133.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:cb:07:59:b7:d1:19:c6:5f:0a:d7:3e:11:e4:aa:10:fb:c6: 62:68:1c:de:95:f5:52:2e:43:52:b1:7f:2b:b3:38:04:e7:74: 1e:52:9c:af:7f:06:d0:f2:85:b1:54:9a:99:50:86:92:9c:34: 9c:6b:7c:c5:0c:40:c5:be:d6:64:6d:07:a9:c4:8b:c3:5a:a8: 19:bb:ea:f1:73:8d:11:3c:1b:4e:31:9c:bc:ae:ba:4c:32:c0: 9c:26:3d:3f:77:2f:7c:ae:75:98:20:af:0b:fc:97:75:3f:b6: 79:ca:91:53:b1:1b:99:fb:94:71:91:a3:af:be:a6:bd:ec:2e: e5:1f:5f:b9:3a:42:7e:51:2d:d1:42:5c:82:3b:f8:19:fe:2c: d3:ac:5a:fa:64:1d:a2:57:1c:4e:35:48:ff:5a:b7:05:9e:c8: da:88:61:20:b8:bd:2b:4f:80:b9:16:d9:9b:4b:b3:8c:be:2e: 0f:17:1a:11:e5:28:f4:46:e0:55:6d:29:d6:85:7c:fc:61:df: a7:be:13:58:de:9f:03:5f:62:30:2e:48:b7:e5:13:63:0c:d0: 83:20:e2:4f:ad:d3:91:f0:4b:c9:9b:0e:e6:73:77:5c:59:7d: b9:ec:69:99:fa:47:1c:b9:b0:32:aa:dc:39:24:a0:06:33:ac: 11:71:ba:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETxmq/2ipF3ENUEU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI0MDIxOTE0MDAzMVoXDTI0MDUxOTEzMDAzMVowLzEtMCsGA1UEAxMk NjlmMGRiZmMtM2JmYy00Y2ZmLTg2YmYtMmM1YmIwZDAwMWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHWLHup8AGeGIGGdC+c9b0cUs7ky7hlbzScM Q2GajP/wrbdxjBX6JDWu2ZPh+whFZQqAWbdjC3x0VVulRvRSXsb+tk0pzrNnDYGH QU4bwvYxQ53MnlWgeIHKj62UsKaW0LVlOtKKPRtwIEV/rQGStibkXGrmTrdNsVEu lALbqf85XmrzCK+dDMfJAY7etRpeDTgnReG7Bi4XR6Nw62XStLYTxIqsBDCZhIJY KIRAXT3wawklPnbFjDwxQQ7vGbo16Hr14V9v6kRcbN9Oy2SJ1lFoINCguGYSQAQH LU18qFaGxzxdUvKcbr0GzUCi+MS4FawyEwNcj6aLUNY0LykmKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLA40DdGBWbCiii41bWWSOMzN6WyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvNjViYjA3YTQtZWI5Mi0z MDM2LWE3OTEtZjNjZTlhMzMyZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4VSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDLB1m30RnGXwrXPhHkqhD7xmJoHN6V9VIuQ1KxfyuzOATndB5SnK9/ BtDyhbFUmplQhpKcNJxrfMUMQMW+1mRtB6nEi8NaqBm76vFzjRE8G04xnLyuukwy wJwmPT93L3yudZggrwv8l3U/tnnKkVOxG5n7lHGRo6++pr3sLuUfX7k6Qn5RLdFC XII7+Bn+LNOsWvpkHaJXHE41SP9atwWeyNqIYSC4vStPgLkW2ZtLs4y+Lg8XGhHl KPRG4FVtKdaFfPxh36e+E1jenwNfYjAuSLflE2MM0IMg4k+t05HwS8mbDuZzd1xZ fbnsaZn6Rxy5sDKq3DkkoAYzrBFxuqc= -----END CERTIFICATE-----Generated at Thu May 9 03:31:03 2024 by rpki-client on console-fra.rpki-client.org