$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1d199482-8ff4-32b9-8354-66e0f89a6c86.roa File: 1d199482-8ff4-32b9-8354-66e0f89a6c86.roa (raw, json) Hash identifier: F0heUkR3XbpxGU/vLXSnN8nt/lpQAswSGqmotA6vVxw= Subject key identifier: 28:E2:C5:CC:D7:66:62:E0:68:49:8F:95:77:D2:B3:13:0A:34:5B:BB Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F43285844EED0000CDBB771287A188FC0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1d199482-8ff4-32b9-8354-66e0f89a6c86.roa Signing time: Sun 18 Feb 2024 14:00:30 +0000 ROA not before: Sun 18 Feb 2024 14:00:30 +0000 ROA not after: Sat 18 May 2024 13:00:30 +0000 asID: 11404 IP address blocks: 23.252.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:ee:d0:00:0c:db:b7:71:28:7a:18:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Feb 18 14:00:30 2024 GMT Not After : May 18 13:00:30 2024 GMT Subject: CN=6f39a939-1193-4f2f-aef4-659b6c684a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:72:e9:84:76:bb:32:02:91:94:61:c1:4a:bc: 3a:7a:4a:16:72:ae:af:0c:32:4f:f7:52:25:a6:ef: 37:df:dd:82:92:71:c7:49:3f:78:93:96:e9:91:4f: fd:d5:0f:98:d4:81:1b:78:df:30:d8:65:22:93:81: 91:47:ac:3a:7c:d1:80:b7:d4:79:60:45:2b:2d:3c: 8c:4b:3f:e1:fa:aa:eb:3e:9f:84:49:1c:27:f3:e3: 23:21:1d:22:d9:3a:7d:8b:c7:65:ad:77:43:3c:96: da:22:fa:2f:70:68:e4:75:b4:61:56:0c:17:67:f9: db:dc:01:59:62:44:34:74:06:f2:70:52:6c:7f:9f: e1:25:26:31:a4:b0:4d:8d:df:d5:70:a6:d8:57:dc: 2d:d3:80:34:a5:20:f1:ce:02:cf:53:11:de:bb:4a: 10:ae:ca:90:9d:6b:99:9c:8a:c4:47:3b:b2:18:43: 0a:82:90:9a:4f:b0:7c:2f:47:d8:2a:2e:7f:e0:11: bc:b1:a6:0c:95:8b:26:b1:05:aa:ac:62:51:ac:d6: bf:d1:d1:48:f8:96:f7:83:10:ea:81:d1:10:84:34: 61:10:6e:36:6e:5c:7e:85:54:fc:fd:1a:62:7b:ba: cf:47:54:69:de:f6:a0:c4:63:54:cd:7f:12:f3:57: 8c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E2:C5:CC:D7:66:62:E0:68:49:8F:95:77:D2:B3:13:0A:34:5B:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1d199482-8ff4-32b9-8354-66e0f89a6c86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 23.252.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:23:38:cc:f6:61:1e:d0:47:5b:07:5b:3b:e6:91:7a:c6:cb: 88:33:25:43:2d:05:fb:5b:a8:54:a6:17:63:d7:b6:07:d7:03: f4:a5:f5:3c:6a:14:ab:02:0c:2e:04:f7:c6:89:af:f6:2a:33: e5:fe:5a:b0:8d:13:cf:25:7e:2f:d6:17:bd:b9:b9:ab:01:78: a4:44:e8:78:67:f5:6c:85:66:53:74:a2:c8:f4:de:ef:bf:e9: 5a:3c:c8:28:58:94:a7:e9:a7:b7:32:bd:33:6d:05:5f:e4:c8: 22:ac:3e:e5:a0:7c:2d:69:8d:56:48:38:ef:31:1e:01:1c:16: 1f:fe:ee:c4:53:0a:78:1a:20:ef:6b:63:3b:80:82:b9:69:0d: 52:76:d3:a8:2f:9a:63:04:fa:16:21:e6:73:03:cc:c8:b3:bc: 66:9a:d3:96:96:cc:9a:9f:7c:d1:c1:e1:22:c0:75:8e:52:b5: 34:39:00:74:22:de:bd:2d:ba:06:98:f4:5d:bd:28:18:e5:db: 7c:90:52:57:02:e5:de:b1:0e:7c:4e:e3:0b:0c:12:b5:bf:20: 8f:16:4e:8d:ff:f3:59:c0:ee:49:d6:54:3f:b4:f9:8f:60:0d: 1f:ad:1f:4f:f5:16:4a:30:9f:4a:51:d3:39:59:42:5f:b5:c3: 51:f3:68:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETu0AAM27dxKHoYj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI0MDIxODE0MDAzMFoXDTI0MDUxODEzMDAzMFowLzEtMCsGA1UEAxMk NmYzOWE5MzktMTE5My00ZjJmLWFlZjQtNjU5YjZjNjg0YTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHLphHa7MgKRlGHBSrw6ekoWcq6vDDJP91Il pu83392CknHHST94k5bpkU/91Q+Y1IEbeN8w2GUik4GRR6w6fNGAt9R5YEUrLTyM Sz/h+qrrPp+ESRwn8+MjIR0i2Tp9i8dlrXdDPJbaIvovcGjkdbRhVgwXZ/nb3AFZ YkQ0dAbycFJsf5/hJSYxpLBNjd/VcKbYV9wt04A0pSDxzgLPUxHeu0oQrsqQnWuZ nIrERzuyGEMKgpCaT7B8L0fYKi5/4BG8saYMlYsmsQWqrGJRrNa/0dFI+Jb3gxDq gdEQhDRhEG42blx+hVT8/Rpie7rPR1Rp3vagxGNUzX8S81eMPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjixczXZmLgaEmPlXfSsxMKNFu7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMWQxOTk0ODItOGZmNC0z MmI5LTgzNTQtNjZlMGY4OWE2Yzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/wwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMjOMz2YR7QR1sHWzvmkXrGy4gzJUMtBftbqFSmF2PXtgfXA/Sl9Txq FKsCDC4E98aJr/YqM+X+WrCNE88lfi/WF725uasBeKRE6Hhn9WyFZlN0osj03u+/ 6Vo8yChYlKfpp7cyvTNtBV/kyCKsPuWgfC1pjVZIOO8xHgEcFh/+7sRTCngaIO9r YzuAgrlpDVJ206gvmmME+hYh5nMDzMizvGaa05aWzJqffNHB4SLAdY5StTQ5AHQi 3r0tugaY9F29KBjl23yQUlcC5d6xDnxO4wsMErW/II8WTo3/81nA7knWVD+0+Y9g DR+tH0/1Fkown0pR0zlZQl+1w1HzaEw= -----END CERTIFICATE-----Generated at Thu May 2 15:00:01 2024 by rpki-client on console-ams.rpki-client.org