$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/2d17cd4f-6b8c-3bc6-a816-a2f2add58785.roa File: 2d17cd4f-6b8c-3bc6-a816-a2f2add58785.roa (raw, json) Hash identifier: p7ZsOgaR9eNNand09UkZbmtkr2y16XzTCJj4GW+FeGw= Subject key identifier: 7F:10:59:75:8B:E3:B0:1F:00:50:8F:C4:51:5D:F0:07:A2:BA:76:81 Certificate issuer: /CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b Certificate serial: 010D0C9F43285845CE090D35E5FE1423290C2520 Authority key identifier: 96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/2d17cd4f-6b8c-3bc6-a816-a2f2add58785.roa Signing time: Wed 08 May 2024 13:00:34 +0000 ROA not before: Wed 08 May 2024 13:00:34 +0000 ROA not after: Tue 06 Aug 2024 13:00:34 +0000 asID: 208504 IP address blocks: 23.154.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ce:09:0d:35:e5:fe:14:23:29:0c:25:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b Validity Not Before: May 8 13:00:34 2024 GMT Not After : Aug 6 13:00:34 2024 GMT Subject: CN=e97cda37-9f76-408d-bbc3-6b6104cdab89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:da:ad:99:11:0d:db:c2:ae:ba:8a:08:a8:0b: 15:f0:d0:25:9c:bb:48:eb:e7:86:56:24:30:88:d1: d4:a6:cd:88:47:4f:f1:81:78:28:2f:08:7e:80:6c: 90:19:64:9c:8d:e8:38:8a:de:9c:8d:d9:58:33:e9: 11:c5:4d:57:05:93:aa:d8:94:42:5e:ce:ca:1f:9e: ac:b7:0f:74:77:dd:d1:62:ad:26:96:d7:d2:71:1a: f3:91:e7:8b:b5:09:0a:6e:d8:db:36:77:81:ac:a4: 60:d6:9c:c1:4b:6e:cd:1f:47:59:8c:ed:d5:35:18: a8:83:35:e6:40:2e:ed:e3:b1:39:86:0c:e9:c9:a6: 8c:54:a6:53:0e:22:5b:90:d8:76:b6:88:cc:56:3a: d2:23:2d:13:8d:3c:08:cb:2b:7e:5a:5c:3a:c4:65: d5:9b:58:9e:81:60:6f:c9:78:18:79:87:ef:47:16: 6f:0b:f5:42:26:c8:28:07:51:ee:f4:9f:20:37:d0: 6a:07:94:6a:84:0f:2b:93:c8:35:a8:72:94:d7:77: 06:7a:2f:70:3f:a2:ba:26:98:46:30:3a:11:12:10: f8:e6:01:bb:90:a4:19:22:f1:02:c2:60:3a:67:2f: 9b:0d:b2:ac:62:e8:44:7c:03:c2:f5:6d:95:ac:7f: 57:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:10:59:75:8B:E3:B0:1F:00:50:8F:C4:51:5D:F0:07:A2:BA:76:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/2d17cd4f-6b8c-3bc6-a816-a2f2add58785.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl X509v3 Authority Key Identifier: keyid:96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer sbgp-ipAddrBlock: critical IPv4: 23.154.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f9:2b:bc:d4:0d:7e:48:cb:45:f5:54:d3:83:65:e1:a7:58: c8:d7:cc:30:6c:bf:e1:4a:69:3c:9c:c9:80:46:7a:5e:d4:4f: e7:eb:4f:27:e7:0b:ac:69:3c:80:06:03:c9:9a:96:2c:21:36: a4:66:1d:e6:c7:5d:3a:d3:c2:80:9d:3e:6c:9a:86:12:f1:a2: eb:41:c7:91:1d:ab:6a:a8:d7:4f:55:2b:8b:8f:4b:eb:6a:ad: 9b:a5:ba:57:6d:b5:da:04:fc:8e:c9:a3:30:e2:62:e1:51:29: 1e:3c:8b:59:1a:bd:0a:3e:43:b8:ee:52:83:c5:1e:65:6a:ae: e5:ab:aa:3d:bc:49:53:22:b8:35:05:e1:45:d2:3e:44:60:3b: c4:ee:0f:2f:35:ad:7e:35:56:54:ba:be:ec:75:7b:aa:f7:fc: 83:27:c4:6f:29:38:b4:f3:e3:76:c1:e7:e2:7b:8d:48:45:1c: ed:8f:58:97:79:9e:a6:84:a6:52:13:ae:65:4b:50:f2:e3:e5: 0e:ed:da:8d:94:37:6c:ee:c3:26:7e:95:1c:b4:03:95:a1:ef: 34:3b:e6:c6:13:63:61:a3:0e:31:4c:b8:0e:9d:83:67:c7:35: d6:f9:c8:15:0b:f2:aa:31:a8:ec:9f:d7:8f:b6:19:e0:df:09: a9:e8:07:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXOCQ015f4UIykMJSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5YjgzZmEtMzdhYS00Y2E4LWIwN2MtNWQ3YTYxM2Fm MDliMB4XDTI0MDUwODEzMDAzNFoXDTI0MDgwNjEzMDAzNFowLzEtMCsGA1UEAxMk ZTk3Y2RhMzctOWY3Ni00MDhkLWJiYzMtNmI2MTA0Y2RhYjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdqtmREN28KuuooIqAsV8NAlnLtI6+eGViQw iNHUps2IR0/xgXgoLwh+gGyQGWScjeg4it6cjdlYM+kRxU1XBZOq2JRCXs7KH56s tw90d93RYq0mltfScRrzkeeLtQkKbtjbNneBrKRg1pzBS27NH0dZjO3VNRiogzXm QC7t47E5hgzpyaaMVKZTDiJbkNh2tojMVjrSIy0TjTwIyyt+Wlw6xGXVm1iegWBv yXgYeYfvRxZvC/VCJsgoB1Hu9J8gN9BqB5RqhA8rk8g1qHKU13cGei9wP6K6JphG MDoREhD45gG7kKQZIvECwmA6Zy+bDbKsYuhEfAPC9W2VrH9XAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8QWXWL47AfAFCPxFFd8AeiunaBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80Zjli ODNmYS0zN2FhLTRjYTgtYjA3Yy01ZDdhNjEzYWYwOWIvMmQxN2NkNGYtNmI4Yy0z YmM2LWE4MTYtYTJmMmFkZDU4Nzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGY5YjgzZmEtMzdhYS00Y2E4LWIw N2MtNWQ3YTYxM2FmMDliLzRmOWI4M2ZhLTM3YWEtNGNhOC1iMDdjLTVkN2E2MTNh ZjA5Yi5jcmwwHwYDVR0jBBgwFoAUludc273pvvJ5z9UzPWmH7hV7AfowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZjliODNmYS0zN2FhLTRjYTgtYjA3Yy01ZDdh NjEzYWYwOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5qYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGD5K7zUDX5Iy0X1VNODZeGnWMjXzDBsv+FKaTycyYBGel7UT+frTyfn C6xpPIAGA8maliwhNqRmHebHXTrTwoCdPmyahhLxoutBx5Edq2qo109VK4uPS+tq rZululdttdoE/I7JozDiYuFRKR48i1kavQo+Q7juUoPFHmVqruWrqj28SVMiuDUF 4UXSPkRgO8TuDy81rX41VlS6vux1e6r3/IMnxG8pOLTz43bB5+J7jUhFHO2PWJd5 nqaEplITrmVLUPLj5Q7t2o2UN2zuwyZ+lRy0A5Wh7zQ75sYTY2GjDjFMuA6dg2fH Ndb5yBUL8qoxqOyf14+2GeDfCanoByY= -----END CERTIFICATE-----Generated at Tue May 21 13:18:15 2024 by rpki-client on console-ams.rpki-client.org