$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/42c863cf-672c-3dba-b238-a9738d249ba8.roa File: 42c863cf-672c-3dba-b238-a9738d249ba8.roa (raw, json) Hash identifier: DpOfQY4tNylv0FLtb4Uvqe/+1JJJT63njqx0c9CFoHY= Subject key identifier: A0:6D:E5:B9:1A:CD:DE:D1:62:05:CF:3A:D8:F2:19:32:BD:DD:57:6C Certificate issuer: /CN=4aeeea60-e12e-4570-a310-cac6f50c2bef Certificate serial: 010D0C9F43285844F7300ABD8EB2E62D7FF06F00 Authority key identifier: A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/42c863cf-672c-3dba-b238-a9738d249ba8.roa Signing time: Wed 21 Feb 2024 14:00:32 +0000 ROA not before: Wed 21 Feb 2024 14:00:32 +0000 ROA not after: Tue 21 May 2024 13:00:32 +0000 asID: 210630 IP address blocks: 23.137.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f7:30:0a:bd:8e:b2:e6:2d:7f:f0:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aeeea60-e12e-4570-a310-cac6f50c2bef Validity Not Before: Feb 21 14:00:32 2024 GMT Not After : May 21 13:00:32 2024 GMT Subject: CN=5c486f72-6214-4de3-bb4b-b376a053f231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:04:d8:f0:6a:09:52:5e:e1:e8:9c:81:cd:bf: 1d:7a:dd:61:4b:13:1a:cb:fe:f1:cf:51:da:4e:72: 4d:9a:51:10:aa:d4:60:e5:8a:4c:ab:49:49:6c:6f: 81:02:1d:02:ac:24:62:08:6a:04:68:b8:51:c3:84: 61:32:85:0d:ec:11:4f:76:2d:76:93:14:39:b0:3b: 37:5d:af:77:54:df:a3:e5:dd:fe:f8:2f:53:69:7c: aa:c8:e5:75:bd:42:e2:c8:9f:34:d2:a6:3e:ed:35: 62:40:dc:e1:ef:95:71:76:f4:ea:b0:87:a9:d7:67: 72:c8:8e:36:c5:6c:c6:1a:28:21:63:0d:b2:23:04: 72:dc:e9:ca:4c:b1:70:bc:00:59:cf:8e:0c:08:fc: c5:38:c8:22:14:5a:b2:15:f6:5b:74:61:71:d4:a8: 3d:dc:85:62:52:e4:be:ec:bb:70:65:98:f8:06:7b: 0c:83:c7:3e:6f:fe:ae:24:2e:3c:6a:40:91:63:f6: 25:06:a5:e0:7d:02:96:6e:57:54:29:58:70:57:44: 34:53:7e:dd:41:98:54:94:f8:2f:00:ad:c8:20:0c: d9:8e:c0:00:d5:5e:bf:2d:21:a8:a5:99:fc:cc:42: 08:eb:b2:0a:0b:4f:56:df:73:69:14:b8:6f:ba:bf: 3d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6D:E5:B9:1A:CD:DE:D1:62:05:CF:3A:D8:F2:19:32:BD:DD:57:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/42c863cf-672c-3dba-b238-a9738d249ba8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl X509v3 Authority Key Identifier: keyid:A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer sbgp-ipAddrBlock: critical IPv4: 23.137.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ce:d2:42:39:51:0e:c3:d3:41:50:15:7b:d0:69:48:53:76: 1d:70:e5:40:4c:ef:c8:87:5a:aa:4d:82:21:11:eb:3a:14:30: ce:ad:4e:93:e0:b7:0b:95:1a:9d:5f:b4:5b:4a:b0:25:97:a2: 2f:38:4e:c1:de:c3:9f:31:07:95:d6:f6:09:64:51:b7:2c:e3: 70:29:71:0f:1e:b9:6d:7f:c5:18:a5:06:2e:84:9f:d7:57:42: 3f:a9:dc:4d:0d:20:ae:23:71:fc:b4:b3:5f:67:62:f3:91:94: 6f:99:ed:b9:5b:22:36:8a:8f:66:b8:6b:ec:38:3d:85:16:c4: 8f:ec:77:0b:0a:e7:60:2b:d2:d9:e8:ad:3d:f5:5b:c4:00:6e: 7c:f9:b0:11:0d:02:5d:d0:1f:ae:0c:0a:ae:73:5c:af:cb:15: a3:79:2a:26:e7:7d:1b:fc:08:38:a4:88:22:ca:10:da:37:b3: 49:b0:5f:91:bc:35:dd:bb:f4:b0:70:ae:47:8d:44:3a:36:21: f2:00:84:50:83:3b:5a:ad:43:6d:8b:c9:dd:15:06:12:29:6b: ed:3c:1e:68:33:5b:bb:98:f9:1b:0a:b9:43:a4:11:94:92:46: f3:88:b8:31:0d:6d:f2:f8:41:90:31:bd:b3:e9:21:cb:9b:0e: d7:5b:16:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET3MAq9jrLmLX/wbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFlZWVhNjAtZTEyZS00NTcwLWEzMTAtY2FjNmY1MGMy YmVmMB4XDTI0MDIyMTE0MDAzMloXDTI0MDUyMTEzMDAzMlowLzEtMCsGA1UEAxMk NWM0ODZmNzItNjIxNC00ZGUzLWJiNGItYjM3NmEwNTNmMjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhATY8GoJUl7h6JyBzb8det1hSxMay/7xz1Ha TnJNmlEQqtRg5YpMq0lJbG+BAh0CrCRiCGoEaLhRw4RhMoUN7BFPdi12kxQ5sDs3 Xa93VN+j5d3++C9TaXyqyOV1vULiyJ800qY+7TViQNzh75VxdvTqsIep12dyyI42 xWzGGighYw2yIwRy3OnKTLFwvABZz44MCPzFOMgiFFqyFfZbdGFx1Kg93IViUuS+ 7LtwZZj4BnsMg8c+b/6uJC48akCRY/YlBqXgfQKWbldUKVhwV0Q0U37dQZhUlPgv AK3IIAzZjsAA1V6/LSGopZn8zEII67IKC09W33NpFLhvur89AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBt5bkazd7RYgXPOtjyGTK93VdsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80YWVl ZWE2MC1lMTJlLTQ1NzAtYTMxMC1jYWM2ZjUwYzJiZWYvNDJjODYzY2YtNjcyYy0z ZGJhLWIyMzgtYTk3MzhkMjQ5YmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGFlZWVhNjAtZTEyZS00NTcwLWEz MTAtY2FjNmY1MGMyYmVmLzRhZWVlYTYwLWUxMmUtNDU3MC1hMzEwLWNhYzZmNTBj MmJlZi5jcmwwHwYDVR0jBBgwFoAUpJDk1gjBX1VkEHVwfcHmpS1DnY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80YWVlZWE2MC1lMTJlLTQ1NzAtYTMxMC1jYWM2 ZjUwYzJiZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4n8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPO0kI5UQ7D00FQFXvQaUhTdh1w5UBM78iHWqpNgiER6zoUMM6tTpPg twuVGp1ftFtKsCWXoi84TsHew58xB5XW9glkUbcs43ApcQ8euW1/xRilBi6En9dX Qj+p3E0NIK4jcfy0s19nYvORlG+Z7blbIjaKj2a4a+w4PYUWxI/sdwsK52Ar0tno rT31W8QAbnz5sBENAl3QH64MCq5zXK/LFaN5KibnfRv8CDikiCLKENo3s0mwX5G8 Nd279LBwrkeNRDo2IfIAhFCDO1qtQ22Lyd0VBhIpa+08HmgzW7uY+RsKuUOkEZSS RvOIuDENbfL4QZAxvbPpIcubDtdbFqQ= -----END CERTIFICATE-----Generated at Sun May 5 01:28:07 2024 by rpki-client on console-ams.rpki-client.org