$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1be44621-9135-31a4-801e-906f3069ed5a.roa File: 1be44621-9135-31a4-801e-906f3069ed5a.roa (raw, json) Hash identifier: hqa8jo6sScoqm7rqWuyGGa7HlO/lhj2GNj0t2Ioa6To= Subject key identifier: D3:A5:20:9C:B2:A4:1C:E5:0F:39:2D:A9:D6:7C:CF:7C:1A:E2:50:63 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285845931B70AFE850477B8953E980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1be44621-9135-31a4-801e-906f3069ed5a.roa Signing time: Wed 17 Apr 2024 10:25:11 +0000 ROA not before: Wed 17 Apr 2024 10:25:11 +0000 ROA not after: Tue 16 Jul 2024 10:25:11 +0000 asID: 20940 IP address blocks: 173.223.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:93:1b:70:af:e8:50:47:7b:89:53:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 17 10:25:11 2024 GMT Not After : Jul 16 10:25:11 2024 GMT Subject: CN=457912b5-bfaa-47d2-a65f-ea3ad8ac8bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5a:96:85:e8:0e:6d:94:04:75:de:4c:25:c7: e0:45:6b:63:f6:87:ef:c2:c8:66:83:e8:76:66:a9: 73:9d:f1:72:e9:66:b5:bd:46:ee:ee:8e:d2:27:7d: f3:8d:aa:ee:a9:a7:5d:82:e7:5c:32:fd:0b:77:60: 45:04:fd:dd:33:9f:9f:73:e1:17:72:49:77:10:5b: 50:7c:65:c1:c8:be:72:0f:e1:c6:57:1b:2f:02:74: 8d:03:b5:7f:ed:2c:26:16:f1:77:52:0d:ee:db:46: 33:a7:51:a2:ec:d9:e3:98:cf:96:c3:3c:68:84:9e: e5:07:df:80:9b:26:11:fe:e5:44:3e:e9:b2:44:2b: 9e:3b:17:d7:34:35:25:84:c5:bf:6a:a3:d4:fe:f1: 7b:22:4d:c8:b0:76:0a:e3:0f:96:fd:7f:ca:ea:19: 06:d9:ab:b1:eb:d3:12:ff:8c:8d:40:5b:39:f0:ed: de:f5:84:d2:69:35:3c:47:1b:44:72:12:6d:b4:df: 3d:5e:a3:13:45:b9:23:6f:fa:d9:6d:30:36:06:c4: 5e:fc:48:b3:f4:7b:a9:88:be:96:e6:ed:88:b5:8b: 6a:46:db:d1:84:bc:25:fd:66:ea:fa:65:c4:1a:b7: a4:2c:c7:6d:fa:79:be:97:5b:85:b0:53:96:69:de: 84:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A5:20:9C:B2:A4:1C:E5:0F:39:2D:A9:D6:7C:CF:7C:1A:E2:50:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1be44621-9135-31a4-801e-906f3069ed5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:46:02:29:28:e7:47:22:27:5b:e7:7e:f8:9d:06:cb:45:1c: 8a:36:45:06:dc:5a:67:bd:db:46:85:4c:9a:6c:29:d1:92:2e: c5:ce:ec:56:c5:b0:e6:82:ff:7d:e9:e6:c4:26:69:78:74:26: b4:a3:a7:6e:4a:55:e3:9f:1f:e7:66:17:f3:72:52:c6:15:2e: d2:21:78:c2:75:d0:12:2d:fd:0f:08:75:91:06:6a:93:7e:62: 66:79:d8:14:47:92:0b:ad:81:07:ca:7e:81:65:c1:e9:6b:67: 70:91:27:df:44:72:37:66:3a:fe:da:48:2b:78:bf:cb:8b:43: 47:33:30:ee:48:7a:34:d2:23:05:6c:47:41:0c:40:14:93:c1: a0:67:bd:7c:db:2a:15:e4:d6:b6:e9:8c:ac:48:ff:c0:f9:f2: 1d:19:69:ad:b5:da:06:3d:e5:fe:7b:48:12:ed:95:c5:e1:90: 57:c3:69:f9:af:17:fb:17:0a:05:9c:83:db:49:47:7c:53:03: 99:b2:9d:96:a9:35:7c:34:3a:e5:48:d1:dd:72:68:a4:2d:a6: 92:9f:0f:c0:67:cd:e6:88:77:ba:30:79:db:96:77:ea:0f:50: bf:75:31:09:e0:0b:5e:c5:7d:94:31:88:36:74:42:0a:3e:93: d8:36:e3:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWTG3Cv6FBHe4lT6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDQxNzEwMjUxMVoXDTI0MDcxNjEwMjUxMVowLzEtMCsGA1UEAxMk NDU3OTEyYjUtYmZhYS00N2QyLWE2NWYtZWEzYWQ4YWM4YmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFqWhegObZQEdd5MJcfgRWtj9ofvwshmg+h2 ZqlznfFy6Wa1vUbu7o7SJ33zjaruqaddgudcMv0Ld2BFBP3dM5+fc+EXckl3EFtQ fGXByL5yD+HGVxsvAnSNA7V/7SwmFvF3Ug3u20Yzp1Gi7NnjmM+WwzxohJ7lB9+A myYR/uVEPumyRCueOxfXNDUlhMW/aqPU/vF7Ik3IsHYK4w+W/X/K6hkG2aux69MS /4yNQFs58O3e9YTSaTU8RxtEchJttN89XqMTRbkjb/rZbTA2BsRe/Eiz9HupiL6W 5u2ItYtqRtvRhLwl/Wbq+mXEGrekLMdt+nm+l1uFsFOWad6E7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOlIJyypBzlDzktqdZ8z3wa4lBjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWJlNDQ2MjEtOTEzNS0z MWE0LTgwMWUtOTA2ZjMwNjllZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArd/rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRGAiko50ciJ1vnfvidBstFHIo2RQbcWme920aFTJpsKdGSLsXO7FbF sOaC/33p5sQmaXh0JrSjp25KVeOfH+dmF/NyUsYVLtIheMJ10BIt/Q8IdZEGapN+ YmZ52BRHkgutgQfKfoFlwelrZ3CRJ99EcjdmOv7aSCt4v8uLQ0czMO5IejTSIwVs R0EMQBSTwaBnvXzbKhXk1rbpjKxI/8D58h0Zaa212gY95f57SBLtlcXhkFfDafmv F/sXCgWcg9tJR3xTA5mynZapNXw0OuVI0d1yaKQtppKfD8BnzeaId7oweduWd+oP UL91MQngC17FfZQxiDZ0Qgo+k9g24+E= -----END CERTIFICATE-----Generated at Fri May 17 22:03:00 2024 by rpki-client on console-ams.rpki-client.org