$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/2798972b-fe2c-3ced-a28d-a282be3e435d.roa File: 2798972b-fe2c-3ced-a28d-a282be3e435d.roa (raw, json) Hash identifier: hw4QPNn1ewQbRqmdxyJcviKGy6cPUzpAPjFjTrPeI4c= Subject key identifier: 37:E2:A1:0B:02:55:F6:32:B5:47:E7:5E:7D:FE:0E:39:CB:EB:5F:49 Certificate issuer: /CN=a683f70a-4d8a-489e-b03c-abca94cd7852 Certificate serial: 010D0C9F4328584589A32631AECB18A921C8C700 Authority key identifier: B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/2798972b-fe2c-3ced-a28d-a282be3e435d.roa Signing time: Sun 14 Apr 2024 01:00:24 +0000 ROA not before: Sun 14 Apr 2024 01:00:24 +0000 ROA not after: Sat 13 Jul 2024 01:00:24 +0000 asID: 36369 IP address blocks: 23.131.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:89:a3:26:31:ae:cb:18:a9:21:c8:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a683f70a-4d8a-489e-b03c-abca94cd7852 Validity Not Before: Apr 14 01:00:24 2024 GMT Not After : Jul 13 01:00:24 2024 GMT Subject: CN=52f27c38-8633-466a-83bc-8a218ddf74e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:be:c3:40:af:36:f8:cf:30:6a:d6:f8:57:9c: f3:f2:1d:68:e0:bd:4f:71:f1:14:c2:87:0d:db:93: 8a:dd:23:5b:a2:bc:1c:d8:36:90:00:e1:b7:d7:d0: 62:f3:cd:82:15:57:7e:67:0c:84:db:dc:9d:34:f8: 77:5d:21:29:d0:74:0d:ca:e7:56:90:5b:35:c9:cd: b4:ae:ab:2b:af:e3:61:5f:34:9e:7b:37:c9:7f:d4: d2:72:b7:7f:fd:a0:67:38:d4:f1:ff:37:83:a7:6a: d5:46:77:2f:8c:7c:f7:ab:52:d7:a9:52:ed:48:c4: 62:84:c5:ad:13:2f:83:5a:71:ef:7c:08:b6:aa:16: 2c:b0:48:a8:d0:d5:76:48:23:14:04:d7:8d:cc:a2: 3b:20:4e:07:99:85:20:ee:93:f8:d2:ed:29:e5:bc: 75:0b:e2:4c:bc:08:0d:1b:9d:e6:b3:ce:c8:7f:77: 01:5c:f6:de:bd:f7:e6:6e:e0:9f:64:63:21:7f:1d: 83:d0:f7:7b:c4:b1:37:50:d6:f3:c1:c1:50:42:3f: 71:fb:c4:e2:50:6c:1e:e6:42:88:15:0b:c0:b4:0f: e5:91:d6:77:94:e0:8c:48:d3:27:e4:e9:01:38:37: e7:cf:2d:f2:dc:d3:83:87:97:fe:0a:e3:99:96:aa: 91:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E2:A1:0B:02:55:F6:32:B5:47:E7:5E:7D:FE:0E:39:CB:EB:5F:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/2798972b-fe2c-3ced-a28d-a282be3e435d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.crl X509v3 Authority Key Identifier: keyid:B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer sbgp-ipAddrBlock: critical IPv4: 23.131.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:df:2d:ef:4a:2c:5d:88:61:d7:51:fc:82:46:5f:ab:1c:43: d0:07:15:99:3f:a0:23:9a:12:25:89:80:f2:b6:93:10:27:4c: 86:e9:fe:d0:4c:ae:b0:47:30:1b:92:07:d1:ff:d8:89:ff:b1: be:db:04:10:ad:57:b9:6b:7f:aa:a6:71:6e:7b:1d:47:e3:09: 0a:2c:fb:8b:03:0f:ea:53:61:88:16:21:1c:b1:e2:6a:4d:fb: 5b:6f:fc:f7:84:6a:d4:44:e2:d7:66:4c:ec:ec:4e:11:bb:0f: b0:4c:a5:f0:11:2b:ca:00:8e:fd:e6:c3:00:9f:e0:12:e8:51: 70:8a:27:a1:1f:eb:81:a2:58:ba:97:93:21:01:8d:a7:af:c6: 68:70:b8:8f:71:83:2f:fc:4c:a9:d8:2f:91:4a:c5:ad:11:77: 58:a1:01:a9:af:13:78:9e:c9:fc:7c:80:85:b7:3e:90:b9:53: 84:52:50:d6:2f:f6:7e:e0:42:a0:a4:8b:4c:95:75:94:34:10: a9:72:9c:7a:0c:02:72:d3:38:37:d8:f5:dd:a1:2d:97:59:b4: fe:49:cc:c3:a1:22:5b:eb:a9:cf:96:61:11:11:58:ab:1e:f4: e8:34:e6:ce:f1:90:ea:c6:17:94:b9:ef:60:bf:6f:4d:43:0e: 82:f9:f3:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWJoyYxrssYqSHIxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4M2Y3MGEtNGQ4YS00ODllLWIwM2MtYWJjYTk0Y2Q3 ODUyMB4XDTI0MDQxNDAxMDAyNFoXDTI0MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk NTJmMjdjMzgtODYzMy00NjZhLTgzYmMtOGEyMThkZGY3NGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr7DQK82+M8watb4V5zz8h1o4L1PcfEUwocN 25OK3SNborwc2DaQAOG319Bi882CFVd+ZwyE29ydNPh3XSEp0HQNyudWkFs1yc20 rqsrr+NhXzSeezfJf9TScrd//aBnONTx/zeDp2rVRncvjHz3q1LXqVLtSMRihMWt Ey+DWnHvfAi2qhYssEio0NV2SCMUBNeNzKI7IE4HmYUg7pP40u0p5bx1C+JMvAgN G53ms87If3cBXPbevffmbuCfZGMhfx2D0Pd7xLE3UNbzwcFQQj9x+8TiUGwe5kKI FQvAtA/lkdZ3lOCMSNMn5OkBODfnzy3y3NODh5f+CuOZlqqRPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfioQsCVfYytUfnXn3+DjnL619JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNjgz ZjcwYS00ZDhhLTQ4OWUtYjAzYy1hYmNhOTRjZDc4NTIvMjc5ODk3MmItZmUyYy0z Y2VkLWEyOGQtYTI4MmJlM2U0MzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTY4M2Y3MGEtNGQ4YS00ODllLWIw M2MtYWJjYTk0Y2Q3ODUyL2E2ODNmNzBhLTRkOGEtNDg5ZS1iMDNjLWFiY2E5NGNk Nzg1Mi5jcmwwHwYDVR0jBBgwFoAUuFkDntg3BBzZjRt1Jf/q8lgoSeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNjgzZjcwYS00ZDhhLTQ4OWUtYjAzYy1hYmNh OTRjZDc4NTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4MgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjfLe9KLF2IYddR/IJGX6scQ9AHFZk/oCOaEiWJgPK2kxAnTIbp/tBM rrBHMBuSB9H/2In/sb7bBBCtV7lrf6qmcW57HUfjCQos+4sDD+pTYYgWIRyx4mpN +1tv/PeEatRE4tdmTOzsThG7D7BMpfARK8oAjv3mwwCf4BLoUXCKJ6Ef64GiWLqX kyEBjaevxmhwuI9xgy/8TKnYL5FKxa0Rd1ihAamvE3ieyfx8gIW3PpC5U4RSUNYv 9n7gQqCki0yVdZQ0EKlynHoMAnLTODfY9d2hLZdZtP5JzMOhIlvrqc+WYRERWKse 9Og05s7xkOrGF5S572C/b01DDoL586c= -----END CERTIFICATE-----Generated at Sat May 4 11:25:13 2024 by rpki-client on console-fra.rpki-client.org