$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c23ac558-69f5-3c92-9a4a-e12e37e77616.roa File: c23ac558-69f5-3c92-9a4a-e12e37e77616.roa (raw, json) Hash identifier: 4x1LqiorELm8UCW2CrqWmQxI1JaF2lIJN8hIAOU9BYU= Subject key identifier: 3B:21:BB:E3:8D:B7:A4:50:9B:17:47:30:9E:4B:D1:D2:C5:A8:49:20 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584582A8871F44F39A8698AA7080 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c23ac558-69f5-3c92-9a4a-e12e37e77616.roa Signing time: Thu 11 Apr 2024 13:00:36 +0000 ROA not before: Thu 11 Apr 2024 13:00:36 +0000 ROA not after: Wed 10 Jul 2024 13:00:36 +0000 asID: 14297 IP address blocks: 199.189.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:82:a8:87:1f:44:f3:9a:86:98:aa:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Apr 11 13:00:36 2024 GMT Not After : Jul 10 13:00:36 2024 GMT Subject: CN=a5496e82-38dc-4e2d-9619-48b8cc70e2d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:37:d9:d7:f1:ef:24:6f:89:bc:84:6c:b4:4c: 9c:aa:05:58:2f:97:96:4b:44:4b:40:7e:6c:c5:16: b3:c0:4b:8c:19:2f:d3:ec:92:92:0c:76:b7:74:43: 84:b6:41:2a:ce:55:97:f0:1f:27:db:4b:9a:15:c1: d4:ba:5a:8d:cf:13:ba:bf:b7:02:73:dd:06:4d:13: e7:5e:04:82:04:23:46:30:7d:ca:92:27:5f:f4:ea: ab:9f:75:81:9f:89:5e:69:42:01:ce:94:83:a8:aa: 80:7d:dd:b8:2a:5d:f7:64:99:28:9e:b3:cd:88:3a: 95:65:b9:12:a9:be:99:6c:1a:f1:1e:84:eb:4e:c7: d2:6b:78:a6:cd:48:0f:50:74:e7:69:1e:eb:df:7b: da:ff:0e:93:14:00:30:d3:94:af:b0:33:1c:b8:95: 71:e2:38:56:1d:0d:02:03:5a:8e:2f:9b:54:21:68: c6:93:b9:35:3f:61:37:c6:64:b2:42:ff:ed:12:36: 91:c4:3b:82:b8:ca:2f:ac:9e:55:87:06:cc:d4:91: dc:bf:c0:50:7f:c8:ea:54:41:fa:b6:bf:07:b5:6f: d7:ef:73:ab:43:d6:2b:58:1e:e6:5f:9d:87:98:2d: 37:ad:2e:a1:42:e5:09:ce:0d:f6:1c:78:a6:c3:2d: 77:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:21:BB:E3:8D:B7:A4:50:9B:17:47:30:9E:4B:D1:D2:C5:A8:49:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c23ac558-69f5-3c92-9a4a-e12e37e77616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 199.189.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:bb:00:51:5d:6d:28:aa:c0:73:fa:ca:6f:18:82:53:5a:b9: 3c:9e:a8:e4:d8:c4:13:8f:dc:b0:a2:3c:d6:91:df:a6:de:df: e7:91:b7:e2:82:db:09:78:0d:ac:69:f0:f4:2f:46:41:e9:69: 07:66:a4:c1:e3:ce:1a:9c:16:c1:58:03:5e:ff:28:64:c8:25: a3:20:75:47:30:c7:d4:c0:09:20:c5:a1:f7:fc:0c:76:10:e5: d4:f9:74:1e:b9:80:c8:39:df:ea:74:b6:af:1d:57:dc:cb:cc: 37:1e:be:8e:42:89:0c:a8:a8:20:6a:7f:98:73:6c:1e:e7:9e: ce:36:6b:5d:05:d6:bb:97:11:88:9e:26:2c:53:98:ce:05:8f: 70:dd:9c:f6:4f:08:e9:9e:04:ee:a4:b1:c1:67:cd:eb:96:01: d2:f4:2c:34:6c:5a:37:b7:79:29:04:c8:85:6c:36:70:a7:f6: a8:40:32:45:6b:f7:34:a2:b0:98:87:55:57:5a:36:1c:b0:78: 83:79:f7:2e:a8:d0:4d:c4:77:4d:a9:7f:78:21:e8:4d:54:88: 1f:87:39:df:ca:4d:9c:54:cc:45:d0:f3:84:b9:0e:fd:a0:3b: 2e:2b:9d:72:e2:fd:2e:75:33:f5:81:ef:9a:cf:ca:77:72:83: b1:ac:69:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWCqIcfRPOahpiqcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk YTU0OTZlODItMzhkYy00ZTJkLTk2MTktNDhiOGNjNzBlMmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTfZ1/HvJG+JvIRstEycqgVYL5eWS0RLQH5s xRazwEuMGS/T7JKSDHa3dEOEtkEqzlWX8B8n20uaFcHUulqNzxO6v7cCc90GTRPn XgSCBCNGMH3Kkidf9Oqrn3WBn4leaUIBzpSDqKqAfd24Kl33ZJkonrPNiDqVZbkS qb6ZbBrxHoTrTsfSa3imzUgPUHTnaR7r33va/w6TFAAw05SvsDMcuJVx4jhWHQ0C A1qOL5tUIWjGk7k1P2E3xmSyQv/tEjaRxDuCuMovrJ5VhwbM1JHcv8BQf8jqVEH6 tr8HtW/X73OrQ9YrWB7mX52HmC03rS6hQuUJzg32HHimwy13xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDshu+ONt6RQmxdHMJ5L0dLFqEkgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvYzIzYWM1NTgtNjlmNS0z YzkyLTlhNGEtZTEyZTM3ZTc3NjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx73qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFC7AFFdbSiqwHP6ym8YglNauTyeqOTYxBOP3LCiPNaR36be3+eRt+KC 2wl4Daxp8PQvRkHpaQdmpMHjzhqcFsFYA17/KGTIJaMgdUcwx9TACSDFoff8DHYQ 5dT5dB65gMg53+p0tq8dV9zLzDcevo5CiQyoqCBqf5hzbB7nns42a10F1ruXEYie JixTmM4Fj3DdnPZPCOmeBO6kscFnzeuWAdL0LDRsWje3eSkEyIVsNnCn9qhAMkVr 9zSisJiHVVdaNhyweIN59y6o0E3Ed02pf3gh6E1UiB+HOd/KTZxUzEXQ84S5Dv2g Oy4rnXLi/S51M/WB75rPyndyg7GsaTI= -----END CERTIFICATE-----Generated at Sun May 5 15:36:57 2024 by rpki-client on console-fra.rpki-client.org