$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/143a9322-104a-3282-bef5-611d1147110d.roa File: 143a9322-104a-3282-bef5-611d1147110d.roa (raw, json) Hash identifier: 2mBvvSKlA8jFEGxNue5QW5CCSIkT2mjlJE1kcg9XC9E= Subject key identifier: BC:99:4A:E8:95:81:ED:8E:3A:E2:19:8B:CE:91:B6:DB:8B:66:70:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285845BCF6B4B8B3E5857744B95800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/143a9322-104a-3282-bef5-611d1147110d.roa Signing time: Thu 02 May 2024 10:15:08 +0000 ROA not before: Thu 02 May 2024 10:15:08 +0000 ROA not after: Wed 31 Jul 2024 10:15:08 +0000 asID: 16625 IP address blocks: 23.39.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:bc:f6:b4:b8:b3:e5:85:77:44:b9:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 2 10:15:08 2024 GMT Not After : Jul 31 10:15:08 2024 GMT Subject: CN=8e663b7a-3367-483d-ad23-05424af3d5f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:47:9c:d8:da:a3:27:64:68:2a:bf:28:ce:5c: e0:ed:57:aa:5c:45:04:06:26:d3:11:ac:79:b5:23: c5:7e:14:55:ad:6e:26:ed:16:00:ba:a0:54:74:d8: 91:97:f7:65:e2:75:66:5b:00:8a:0b:9e:c6:ef:94: fa:ef:22:a4:07:54:81:c2:3a:0d:ba:00:81:84:f5: 91:79:56:9e:61:79:11:07:c8:24:a7:3f:24:b3:61: 12:d7:cc:28:d3:6b:21:b2:ab:e5:40:c8:ce:f1:d4: ca:1e:1b:95:77:88:b2:f7:47:78:6a:a6:9b:a0:71: ae:a2:94:fb:a4:34:48:fe:7a:42:b5:4d:2b:63:00: 9a:6b:b6:21:50:1a:fc:e0:d7:fc:d4:38:cd:3c:a0: b6:e8:e1:a6:e5:83:36:a4:3b:a8:7a:90:96:d1:30: 82:47:b3:b4:31:58:e3:c4:75:5d:2a:c7:6e:c2:aa: ab:9b:4e:48:bd:2c:96:e9:4d:2e:6a:53:1f:ce:ce: 2f:56:e5:69:8f:bc:c4:e4:bf:19:e9:1e:29:a2:25: 0c:fe:dc:7d:35:aa:ba:82:24:40:e1:0d:b5:c0:c2: f5:60:cb:50:9b:70:72:6e:ec:00:45:38:92:9c:09: 36:56:b2:97:17:f6:d0:f3:9b:49:d9:d5:46:9b:d4: 27:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:99:4A:E8:95:81:ED:8E:3A:E2:19:8B:CE:91:B6:DB:8B:66:70:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/143a9322-104a-3282-bef5-611d1147110d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:86:00:68:4e:2b:27:a6:d8:93:71:67:41:d0:a5:fe:9f:ce: 6a:a7:c7:c9:93:38:c5:69:0d:27:ef:ab:f8:01:10:40:42:3c: 0b:79:83:59:87:9e:f2:ff:8d:0b:04:16:a1:c9:09:fe:03:8c: 1c:72:35:c5:13:f8:5a:f0:c9:98:a2:31:1b:7d:3a:bb:5d:f2: 79:74:14:b6:c3:f6:3b:8f:ab:3c:5e:e1:36:14:7f:46:aa:1c: 53:96:a8:a7:6b:71:dd:3a:8c:13:38:29:5c:2e:b7:67:77:dd: fe:0e:8a:d7:88:f9:57:02:9c:51:4f:64:9c:25:1e:24:99:a3: 4a:86:e4:e6:f7:62:6b:e9:09:b0:a2:0d:46:a6:36:69:b2:df: 37:ec:aa:d9:41:5d:85:6e:04:c7:17:5c:3e:ed:25:c4:d5:48: 4b:04:b0:69:6a:93:45:89:9e:24:52:ba:28:37:17:cf:57:70: a6:ff:0b:58:07:52:e0:eb:e5:14:87:ec:9e:2f:2e:36:d6:5d: 51:04:b9:85:ff:19:5d:cf:d9:8f:72:9b:a3:55:6e:f7:bc:30: 42:40:c2:cb:a3:da:ca:b9:c1:e3:fc:2b:a6:49:e3:81:b6:f8: 23:9f:ab:ce:ce:0f:5a:31:0b:74:0e:be:85:d7:68:48:27:48: 0e:29:28:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW89rS4s+WFd0S5WAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDUwMjEwMTUwOFoXDTI0MDczMTEwMTUwOFowLzEtMCsGA1UEAxMk OGU2NjNiN2EtMzM2Ny00ODNkLWFkMjMtMDU0MjRhZjNkNWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEec2NqjJ2RoKr8ozlzg7VeqXEUEBibTEax5 tSPFfhRVrW4m7RYAuqBUdNiRl/dl4nVmWwCKC57G75T67yKkB1SBwjoNugCBhPWR eVaeYXkRB8gkpz8ks2ES18wo02shsqvlQMjO8dTKHhuVd4iy90d4aqaboHGuopT7 pDRI/npCtU0rYwCaa7YhUBr84Nf81DjNPKC26OGm5YM2pDuoepCW0TCCR7O0MVjj xHVdKsduwqqrm05IvSyW6U0ualMfzs4vVuVpj7zE5L8Z6R4poiUM/tx9Naq6giRA 4Q21wML1YMtQm3BybuwARTiSnAk2VrKXF/bQ85tJ2dVGm9QncQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyZSuiVge2OOuIZi86RttuLZnARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTQzYTkzMjItMTA0YS0z MjgyLWJlZjUtNjExZDExNDcxMTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFycYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGGAGhOKyem2JNxZ0HQpf6fzmqnx8mTOMVpDSfvq/gBEEBCPAt5g1mH nvL/jQsEFqHJCf4DjBxyNcUT+FrwyZiiMRt9Ortd8nl0FLbD9juPqzxe4TYUf0aq HFOWqKdrcd06jBM4KVwut2d33f4OiteI+VcCnFFPZJwlHiSZo0qG5Ob3YmvpCbCi DUamNmmy3zfsqtlBXYVuBMcXXD7tJcTVSEsEsGlqk0WJniRSuig3F89XcKb/C1gH UuDr5RSH7J4vLjbWXVEEuYX/GV3P2Y9ym6NVbve8MEJAwsuj2sq5weP8K6ZJ44G2 +COfq87OD1oxC3QOvoXXaEgnSA4pKFQ= -----END CERTIFICATE-----Generated at Wed May 29 03:12:47 2024 by rpki-client on console-ams.rpki-client.org