$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/a9d6e5c9-bec2-395f-af08-83ce47190965.roa File: a9d6e5c9-bec2-395f-af08-83ce47190965.roa (raw, json) Hash identifier: TGy/FnOdpxZLywQgfIvaDEnI98XwqRLz2pvfKkaOu6Q= Subject key identifier: 2B:C8:31:B5:CA:45:CF:24:69:71:70:AB:9A:F1:4E:17:C0:13:84:B8 Certificate issuer: /CN=d037641d-aa90-4eab-864e-a73e03e24cfa Certificate serial: 010D0C9F43285846011055B30ACB0130BB1DC880 Authority key identifier: B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/a9d6e5c9-bec2-395f-af08-83ce47190965.roa Signing time: Sun 26 May 2024 19:41:44 +0000 ROA not before: Sun 26 May 2024 19:41:44 +0000 ROA not after: Sat 24 Aug 2024 19:41:44 +0000 asID: 398759 IP address blocks: 23.165.120.0/24 maxlen: 24 2602:f9eb::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Jun 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:01:10:55:b3:0a:cb:01:30:bb:1d:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d037641d-aa90-4eab-864e-a73e03e24cfa Validity Not Before: May 26 19:41:44 2024 GMT Not After : Aug 24 19:41:44 2024 GMT Subject: CN=4078124f-6821-401e-a61c-ca98ace2e156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:40:bd:5f:5c:9b:d7:79:64:04:75:9f:42:77: cc:a5:ed:3b:14:c4:a7:dd:29:ce:d6:e8:ea:eb:97: 79:6c:e5:3f:4e:f7:c9:21:6b:90:28:ac:65:f5:37: 20:85:26:6d:ef:7b:72:a6:ca:1e:d0:f0:01:39:4a: 21:b7:3f:7b:06:87:a7:5e:ec:90:72:fe:79:7b:f9: 05:4f:89:22:d7:bf:c1:2f:ef:d9:d6:00:27:64:91: f0:d0:e4:f6:ff:9d:a7:40:e6:86:3d:81:bf:b5:2a: 48:b5:29:fb:b1:56:69:ea:9b:d7:c0:36:dc:71:12: 7a:d5:f0:cc:2e:52:e1:4b:47:71:57:be:14:26:72: 69:2f:2d:e2:93:ab:ef:68:4b:d5:df:21:81:52:71: 5d:48:50:e0:ad:3f:50:78:da:5f:2a:1e:c5:e9:de: de:81:3b:d4:7b:9b:fa:02:71:37:11:15:16:8e:6c: ad:50:c1:bf:3a:3a:aa:79:a6:5b:4d:91:32:74:86: 95:25:00:19:03:54:c3:54:3f:35:2c:83:da:e2:1b: c1:4f:72:50:d3:4a:b3:29:71:b1:76:e5:36:fb:1d: 70:c9:6e:64:55:aa:11:22:2b:14:d6:ca:aa:39:ba: 65:c1:d7:9e:b0:62:9b:65:cd:24:ec:e8:47:37:54: 93:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C8:31:B5:CA:45:CF:24:69:71:70:AB:9A:F1:4E:17:C0:13:84:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/a9d6e5c9-bec2-395f-af08-83ce47190965.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.crl X509v3 Authority Key Identifier: keyid:B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer sbgp-ipAddrBlock: critical IPv4: 23.165.120.0/24 IPv6: 2602:f9eb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:4e:86:a5:b4:b7:34:e0:f6:41:fb:6b:e0:36:00:14:c0:40: f9:c3:b2:be:10:31:71:ab:ea:72:43:e2:dc:2d:bf:16:d1:1a: 3a:54:75:ac:36:ad:ce:a9:f3:d7:e9:27:d5:00:a6:66:aa:7d: 5b:70:0f:51:ca:b8:95:a0:35:ce:0f:68:31:eb:d8:22:9b:b9: 07:80:1d:43:2b:d6:3d:de:4d:09:80:f4:16:02:e4:76:c3:34: fb:fd:4a:b0:4c:8d:93:db:7d:e8:96:9e:4d:5c:bd:53:d5:23: 3a:fb:51:11:ff:9c:3b:24:c5:f8:b4:e6:c5:4c:a5:ca:72:bf: b3:15:23:19:39:e0:f2:8c:50:cb:bb:dd:2f:26:81:8b:cc:c8: 33:7c:de:56:d3:79:cf:8f:b7:d1:a9:29:2d:91:51:dc:be:c2: 1d:51:7d:64:34:8f:04:9f:c8:21:0c:0a:43:a5:0b:06:55:9a: 94:96:a0:55:12:2b:16:1c:d9:47:31:2d:54:b3:f5:63:10:2f: 46:11:cc:8b:57:8d:c5:01:7c:9a:75:b1:8d:fd:80:2a:f1:59: d2:4f:9f:8a:46:09:d5:0e:4f:29:f7:c5:4e:8f:90:d3:df:c4: 32:aa:22:12:b9:6a:ad:00:b6:c8:ba:aa:0b:8e:24:24:3e:e9: da:c0:74:88 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEYBEFWzCssBMLsdyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAzNzY0MWQtYWE5MC00ZWFiLTg2NGUtYTczZTAzZTI0 Y2ZhMB4XDTI0MDUyNjE5NDE0NFoXDTI0MDgyNDE5NDE0NFowLzEtMCsGA1UEAxMk NDA3ODEyNGYtNjgyMS00MDFlLWE2MWMtY2E5OGFjZTJlMTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0C9X1yb13lkBHWfQnfMpe07FMSn3SnO1ujq 65d5bOU/TvfJIWuQKKxl9TcghSZt73typsoe0PABOUohtz97BoenXuyQcv55e/kF T4ki17/BL+/Z1gAnZJHw0OT2/52nQOaGPYG/tSpItSn7sVZp6pvXwDbccRJ61fDM LlLhS0dxV74UJnJpLy3ik6vvaEvV3yGBUnFdSFDgrT9QeNpfKh7F6d7egTvUe5v6 AnE3ERUWjmytUMG/OjqqeaZbTZEydIaVJQAZA1TDVD81LIPa4hvBT3JQ00qzKXGx duU2+x1wyW5kVaoRIisU1sqqObplwdeesGKbZc0k7OhHN1STWwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCvIMbXKRc8kaXFwq5rxThfAE4S4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMDM3 NjQxZC1hYTkwLTRlYWItODY0ZS1hNzNlMDNlMjRjZmEvYTlkNmU1YzktYmVjMi0z OTVmLWFmMDgtODNjZTQ3MTkwOTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDAzNzY0MWQtYWE5MC00ZWFiLTg2 NGUtYTczZTAzZTI0Y2ZhL2QwMzc2NDFkLWFhOTAtNGVhYi04NjRlLWE3M2UwM2Uy NGNmYS5jcmwwHwYDVR0jBBgwFoAUt7tDftH++/QIZeum6I89OeWGSBswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMDM3NjQxZC1hYTkwLTRlYWItODY0ZS1hNzNl MDNlMjRjZmEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6V4MA4E AgACMAgDBgQmAvnrADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCiToaltLc04PZB+2vgNgAUwED5w7K+EDFx q+pyQ+LcLb8W0Ro6VHWsNq3OqfPX6SfVAKZmqn1bcA9RyriVoDXOD2gx69gim7kH gB1DK9Y93k0JgPQWAuR2wzT7/UqwTI2T233olp5NXL1T1SM6+1ER/5w7JMX4tObF TKXKcr+zFSMZOeDyjFDLu90vJoGLzMgzfN5W03nPj7fRqSktkVHcvsIdUX1kNI8E n8ghDApDpQsGVZqUlqBVEisWHNlHMS1Us/VjEC9GEcyLV43FAXyadbGN/YAq8VnS T5+KRgnVDk8p98VOj5DT38QyqiISuWqtALbIuqoLjiQkPunawHSI -----END CERTIFICATE-----Generated at Sun Jun 23 17:14:39 2024 by rpki-client on console-ams.rpki-client.org