$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/c0888bfe-5f4f-3e00-83d8-b424d973531e.roa File: c0888bfe-5f4f-3e00-83d8-b424d973531e.roa (raw, json) Hash identifier: IkxyXSTl/YGqEP/8jo2Bn9g7jOd7ZmgX/xeTxlBGmxk= Subject key identifier: C2:BB:DC:A6:3B:80:1C:50:CE:97:A9:C0:9A:F2:6A:E3:13:2C:95:C2 Certificate issuer: /CN=3c7535f4-d3f1-4e7f-b379-0835e02fb280 Certificate serial: 010D0C9F432858457A48706068B6C915DD4D2C80 Authority key identifier: 6A:75:98:EE:10:F6:3C:A4:73:F2:97:8B:E2:08:9A:00:F0:E2:DA:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/c0888bfe-5f4f-3e00-83d8-b424d973531e.roa Signing time: Mon 08 Apr 2024 13:00:34 +0000 ROA not before: Mon 08 Apr 2024 13:00:34 +0000 ROA not after: Sun 07 Jul 2024 13:00:34 +0000 asID: 53758 IP address blocks: 23.128.96.0/24 maxlen: 24 2620:137:e000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 May 2024 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:7a:48:70:60:68:b6:c9:15:dd:4d:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c7535f4-d3f1-4e7f-b379-0835e02fb280 Validity Not Before: Apr 8 13:00:34 2024 GMT Not After : Jul 7 13:00:34 2024 GMT Subject: CN=cb607481-5e21-4719-aadb-c5e753bf2944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cc:f5:09:ec:c2:2b:01:08:b1:87:43:46:4a: c6:51:7a:dc:79:48:7b:c9:38:af:d0:73:df:a1:00: 9c:f6:a4:97:6a:52:46:a5:90:7b:5e:df:7d:51:d0: 52:71:1e:34:48:5c:35:5a:b1:ac:74:e3:03:ef:fb: 1a:c6:c1:52:e0:10:96:c5:4e:bd:bd:38:cf:2f:35: d4:f1:8a:e5:de:8f:55:69:93:16:cc:4f:14:2c:c2: 17:be:ea:3a:69:5d:f8:8b:76:ef:5b:69:cb:fc:83: fd:1c:a4:96:92:2f:8d:5e:d3:e9:32:f6:43:ec:5b: a9:e1:87:00:9b:cc:17:39:2d:cd:fb:7a:e4:97:a2: 2f:3a:c0:53:66:f5:4b:1a:d1:39:ba:d1:bd:f8:f9: 77:e4:dd:50:95:b9:a2:53:b4:ed:c4:72:a3:d5:07: 3a:c8:a4:28:fd:38:2b:93:32:4c:8c:3d:0b:60:12: a2:18:a6:d5:a2:15:1f:71:37:36:3a:95:02:b1:c0: 1c:ac:90:51:ba:c5:a6:ba:58:8c:1d:69:96:4f:f7: e6:32:19:09:41:f9:2b:ba:63:9b:d6:d5:cb:1f:17: 0d:04:83:ce:13:44:00:af:88:30:5f:d0:14:70:91: 96:94:63:19:a4:43:2d:05:7f:2a:4e:9a:b2:11:76: 56:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BB:DC:A6:3B:80:1C:50:CE:97:A9:C0:9A:F2:6A:E3:13:2C:95:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/c0888bfe-5f4f-3e00-83d8-b424d973531e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.crl X509v3 Authority Key Identifier: keyid:6A:75:98:EE:10:F6:3C:A4:73:F2:97:8B:E2:08:9A:00:F0:E2:DA:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer sbgp-ipAddrBlock: critical IPv4: 23.128.96.0/24 IPv6: 2620:137:e000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:40:25:4b:1e:38:5f:2e:c1:5f:9c:3b:2b:6c:3a:24:b1:51: 4d:79:0d:85:9f:21:27:04:fb:c1:b0:95:49:66:b6:72:de:82: 5b:de:01:2e:f5:9f:96:b0:74:5c:72:27:76:7f:ab:e4:37:07: 79:cb:61:eb:9f:8d:76:81:4f:f8:03:c6:a6:20:de:75:f2:b9: 03:2b:bc:b9:2d:90:8a:e8:87:8c:a7:31:3e:5f:43:49:e8:1e: 10:24:f3:3e:91:ce:9e:2e:75:61:39:1c:73:1c:e7:c8:95:85: f3:18:17:46:11:e1:5a:93:c7:ae:08:4a:d8:2f:cf:71:be:dc: fd:30:dd:70:c1:c0:64:42:9d:de:2b:72:19:3d:a7:a9:da:8c: 53:2f:60:e9:b0:15:a2:36:42:c3:01:f2:d0:b5:27:49:55:58: 9a:50:6b:38:f5:8d:86:ef:43:5e:57:73:19:2e:78:ae:79:1f: 22:d3:c6:6d:65:d0:d5:db:ce:30:b6:4a:1b:b5:0c:1c:02:cb: 0a:90:b2:89:d5:1b:b7:db:d5:33:1d:99:e1:3c:65:6f:84:01: 5a:3f:11:5e:3b:a6:c6:33:28:ed:b8:93:c0:58:d1:7d:2d:02: 87:05:0f:5f:fa:32:0b:6a:71:04:3c:f2:26:88:aa:8e:4d:d3: f6:29:9d:a7 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEV6SHBgaLbJFd1NLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M3NTM1ZjQtZDNmMS00ZTdmLWIzNzktMDgzNWUwMmZi MjgwMB4XDTI0MDQwODEzMDAzNFoXDTI0MDcwNzEzMDAzNFowLzEtMCsGA1UEAxMk Y2I2MDc0ODEtNWUyMS00NzE5LWFhZGItYzVlNzUzYmYyOTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8z1CezCKwEIsYdDRkrGUXrceUh7yTiv0HPf oQCc9qSXalJGpZB7Xt99UdBScR40SFw1WrGsdOMD7/saxsFS4BCWxU69vTjPLzXU 8Yrl3o9VaZMWzE8ULMIXvuo6aV34i3bvW2nL/IP9HKSWki+NXtPpMvZD7Fup4YcA m8wXOS3N+3rkl6IvOsBTZvVLGtE5utG9+Pl35N1QlbmiU7TtxHKj1Qc6yKQo/Tgr kzJMjD0LYBKiGKbVohUfcTc2OpUCscAcrJBRusWmuliMHWmWT/fmMhkJQfkrumOb 1tXLHxcNBIPOE0QAr4gwX9AUcJGWlGMZpEMtBX8qTpqyEXZWJQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFMK73KY7gBxQzpepwJryauMTLJXCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYzc1 MzVmNC1kM2YxLTRlN2YtYjM3OS0wODM1ZTAyZmIyODAvYzA4ODhiZmUtNWY0Zi0z ZTAwLTgzZDgtYjQyNGQ5NzM1MzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2M3NTM1ZjQtZDNmMS00ZTdmLWIz NzktMDgzNWUwMmZiMjgwLzNjNzUzNWY0LWQzZjEtNGU3Zi1iMzc5LTA4MzVlMDJm YjI4MC5jcmwwHwYDVR0jBBgwFoAUanWY7hD2PKRz8peL4giaAPDi2ocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYzc1MzVmNC1kM2YxLTRlN2YtYjM3OS0wODM1 ZTAyZmIyODAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4BgMA8E AgACMAkDBwQmIAE34AAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAakAlSx44Xy7BX5w7K2w6JLFRTXkNhZ8h JwT7wbCVSWa2ct6CW94BLvWflrB0XHIndn+r5DcHecth65+NdoFP+APGpiDedfK5 Ayu8uS2QiuiHjKcxPl9DSegeECTzPpHOni51YTkccxznyJWF8xgXRhHhWpPHrghK 2C/Pcb7c/TDdcMHAZEKd3ityGT2nqdqMUy9g6bAVojZCwwHy0LUnSVVYmlBrOPWN hu9DXldzGS54rnkfItPGbWXQ1dvOMLZKG7UMHALLCpCyidUbt9vVMx2Z4Txlb4QB Wj8RXjumxjMo7biTwFjRfS0ChwUPX/oyC2pxBDzyJoiqjk3T9imdpw== -----END CERTIFICATE-----Generated at Tue May 21 16:53:11 2024 by rpki-client on console-fra.rpki-client.org