$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/394d8786-185c-3bfb-9e5a-2a4a57146ab1.roa File: 394d8786-185c-3bfb-9e5a-2a4a57146ab1.roa (raw, json) Hash identifier: PBgzRymcX8EFacXXHmjCD93opSg6oeT7W17QHyUZfzc= Subject key identifier: 50:0D:80:F1:F9:CF:65:D1:EF:86:83:D6:E9:49:96:CB:1B:25:56:BA Certificate issuer: /CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec Certificate serial: 010D0C9F43285845840DC8BE07603842E8573440 Authority key identifier: D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/394d8786-185c-3bfb-9e5a-2a4a57146ab1.roa Signing time: Fri 12 Apr 2024 01:00:26 +0000 ROA not before: Fri 12 Apr 2024 01:00:26 +0000 ROA not after: Thu 11 Jul 2024 01:00:26 +0000 asID: 63072 IP address blocks: 23.135.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:84:0d:c8:be:07:60:38:42:e8:57:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec Validity Not Before: Apr 12 01:00:26 2024 GMT Not After : Jul 11 01:00:26 2024 GMT Subject: CN=951af558-34cb-40fd-b8f5-5872b4e348b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:36:44:75:40:64:cf:c2:d1:1a:3a:e5:b4:a2: 7a:fc:1a:d8:95:70:43:79:b0:65:dc:9f:55:52:7b: d2:43:f5:03:03:56:88:2b:5b:ca:20:c8:b9:8a:c4: d9:5c:32:dd:b4:de:30:ed:25:49:25:52:de:9f:1c: 99:2c:72:a8:51:e6:a6:2f:ca:a6:87:b1:f8:fe:98: 9b:ed:23:c7:8c:b9:84:af:27:95:61:c8:96:d3:02: bc:a5:57:97:1a:e3:0e:3d:d3:33:c0:59:8b:2f:ef: d7:94:5e:39:15:bb:7d:a3:6d:94:e9:38:d8:68:b5: c9:17:14:a5:8d:ce:b5:34:88:92:d2:a5:fd:f8:a1: 2a:9d:36:ef:51:07:f5:77:0c:c3:14:b2:2e:f9:84: 02:fb:ff:e6:e2:c2:ca:3c:c8:79:f0:b1:ce:95:5c: 15:bf:cb:5d:ba:da:25:07:3a:37:8b:37:a2:62:2b: ea:77:05:b8:48:e2:18:16:ad:a6:53:cd:c7:61:29: 48:1c:d2:a3:ab:1e:44:37:db:4d:26:f5:38:3b:b7: a9:aa:46:92:3d:2f:65:cf:12:db:63:c5:07:9d:2d: c2:da:e3:69:20:a8:a3:03:45:da:52:bf:6f:d9:6d: 4b:3d:8c:f0:50:f2:e6:ea:43:7d:15:48:a9:f7:f4: 94:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0D:80:F1:F9:CF:65:D1:EF:86:83:D6:E9:49:96:CB:1B:25:56:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/394d8786-185c-3bfb-9e5a-2a4a57146ab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl X509v3 Authority Key Identifier: keyid:D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer sbgp-ipAddrBlock: critical IPv4: 23.135.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:aa:59:46:d3:eb:de:c3:99:98:11:a4:96:2a:47:66:fb:7f: 82:10:01:85:cc:49:5c:45:35:7c:70:3c:b6:6f:8f:50:04:30: 83:1c:8d:2f:47:df:2d:51:94:7b:c9:ff:7b:69:37:e4:9c:0a: 4c:81:f6:83:7e:09:9e:70:e3:2a:8a:5f:60:88:a1:4e:e9:63: 0c:d8:e0:09:5c:40:d5:cd:1f:ce:34:47:a8:07:fa:56:ec:57: b3:f6:a3:36:5a:57:a4:c7:1e:76:7e:10:f1:ae:87:46:a0:b6: 5a:60:76:5a:67:bb:dd:ab:c3:fc:00:95:f7:89:28:bf:08:43: c7:be:09:c4:fa:31:8e:cf:9e:d7:21:df:bd:cb:a9:6a:f6:82: 5b:0a:3d:9a:0b:73:a5:09:2f:37:27:c7:0f:20:43:5a:0a:af: 60:18:30:97:0d:08:d5:81:79:5a:81:db:ac:84:08:d4:f7:99: 05:64:13:02:e2:65:6d:6f:99:9b:66:c5:40:e4:d3:1d:48:4f: a4:be:05:ec:34:cd:ba:e1:37:57:4b:e1:b4:71:16:cf:be:1b: 39:80:34:b8:f9:8a:6a:93:93:09:7a:ec:e1:31:fe:ad:8a:49: c9:ff:8a:1f:6c:2e:9d:7e:a9:8c:8e:bc:eb:7e:bb:cf:dc:cd: ce:1a:70:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWEDci+B2A4QuhXNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwOWQ5M2EtZDllNy00ZWI3LTk0Y2QtZmZlYzA2MThj M2VjMB4XDTI0MDQxMjAxMDAyNloXDTI0MDcxMTAxMDAyNlowLzEtMCsGA1UEAxMk OTUxYWY1NTgtMzRjYi00MGZkLWI4ZjUtNTg3MmI0ZTM0OGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTZEdUBkz8LRGjrltKJ6/BrYlXBDebBl3J9V UnvSQ/UDA1aIK1vKIMi5isTZXDLdtN4w7SVJJVLenxyZLHKoUeamL8qmh7H4/pib 7SPHjLmEryeVYciW0wK8pVeXGuMOPdMzwFmLL+/XlF45Fbt9o22U6TjYaLXJFxSl jc61NIiS0qX9+KEqnTbvUQf1dwzDFLIu+YQC+//m4sLKPMh58LHOlVwVv8tdutol Bzo3izeiYivqdwW4SOIYFq2mU83HYSlIHNKjqx5EN9tNJvU4O7epqkaSPS9lzxLb Y8UHnS3C2uNpIKijA0XaUr9v2W1LPYzwUPLm6kN9FUip9/SUPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFANgPH5z2XR74aD1ulJlssbJVa6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MDA5 ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVjMDYxOGMzZWMvMzk0ZDg3ODYtMTg1Yy0z YmZiLTllNWEtMmE0YTU3MTQ2YWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDAwOWQ5M2EtZDllNy00ZWI3LTk0 Y2QtZmZlYzA2MThjM2VjLzQwMDlkOTNhLWQ5ZTctNGViNy05NGNkLWZmZWMwNjE4 YzNlYy5jcmwwHwYDVR0jBBgwFoAU2Sm45szUI0NGR4kzl0okdpmMq3IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80MDA5ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVj MDYxOGMzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4ewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyqWUbT697DmZgRpJYqR2b7f4IQAYXMSVxFNXxwPLZvj1AEMIMcjS9H 3y1RlHvJ/3tpN+ScCkyB9oN+CZ5w4yqKX2CIoU7pYwzY4AlcQNXNH840R6gH+lbs V7P2ozZaV6THHnZ+EPGuh0agtlpgdlpnu92rw/wAlfeJKL8IQ8e+CcT6MY7Pntch 373LqWr2glsKPZoLc6UJLzcnxw8gQ1oKr2AYMJcNCNWBeVqB26yECNT3mQVkEwLi ZW1vmZtmxUDk0x1IT6S+Bew0zbrhN1dL4bRxFs++GzmANLj5imqTkwl67OEx/q2K Scn/ih9sLp1+qYyOvOt+u8/czc4acDA= -----END CERTIFICATE-----Generated at Fri May 3 20:36:38 2024 by rpki-client on console-fra.rpki-client.org