$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d929c8a-04cd-3216-aa93-4ba90d33a77e.roa File: 3d929c8a-04cd-3216-aa93-4ba90d33a77e.roa (raw, json) Hash identifier: +LEgb43O3R4QtCBoBGbtH8K0oXM7TbxBOkUWpxCoVrY= Subject key identifier: B1:09:70:EF:CC:C1:58:04:25:7F:19:04:0B:9F:25:16:82:F9:30:54 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584595CA54AFD071710A887BAA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d929c8a-04cd-3216-aa93-4ba90d33a77e.roa Signing time: Thu 18 Apr 2024 09:29:11 +0000 ROA not before: Thu 18 Apr 2024 09:29:11 +0000 ROA not after: Wed 17 Jul 2024 09:29:11 +0000 asID: 35994 IP address blocks: 23.67.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:95:ca:54:af:d0:71:71:0a:88:7b:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 18 09:29:11 2024 GMT Not After : Jul 17 09:29:11 2024 GMT Subject: CN=7acb1321-c01d-401e-ae52-1e40c9e66990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:85:48:26:77:08:40:03:34:2b:cd:93:7a:0b: 6d:3c:8c:de:17:f3:7d:f5:44:42:c2:2f:9c:cc:32: a8:96:04:ff:c4:3e:77:08:11:84:24:fd:53:56:45: 40:8c:61:a2:89:0e:ad:ce:fe:77:3b:d9:2d:7d:28: cf:03:f3:8d:19:bf:39:47:16:d4:3a:6a:e4:28:cd: 02:31:1a:0b:b9:07:1d:3b:dc:d3:0a:5d:63:96:c6: de:11:47:f8:16:56:81:b8:a4:3e:c7:61:f8:e4:b7: a9:00:76:05:ed:61:bf:5a:3a:7c:3b:01:80:cc:cd: 98:5b:dc:bb:5f:71:58:77:de:95:a0:36:0b:cc:b9: 85:c3:6b:6c:94:67:44:2b:29:54:f3:a2:54:99:d4: 66:4b:7a:28:1b:26:2e:8f:a9:9a:22:f1:be:3f:29: 63:78:9c:8d:89:8a:71:42:e7:c9:0f:39:83:8d:03: 57:6a:45:67:9d:4c:52:9c:e9:94:d5:62:0d:69:ee: cb:cb:b8:72:0b:cd:4a:0e:ac:54:a6:bf:9a:b3:ee: 9c:d5:15:5e:5b:a8:78:1a:a4:2d:67:2d:ad:2b:b2: 17:26:a6:57:59:fc:a9:01:38:9c:bc:27:1b:4a:b4: c8:8c:54:bc:32:29:21:8b:2b:15:bb:36:f8:cb:a5: b3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:09:70:EF:CC:C1:58:04:25:7F:19:04:0B:9F:25:16:82:F9:30:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d929c8a-04cd-3216-aa93-4ba90d33a77e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.67.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:3a:49:28:bd:87:bb:e4:5d:b1:f0:f1:9d:7e:46:6c:cf:97: e6:10:3f:1a:87:26:ca:d0:20:47:46:bb:b1:ee:62:27:f7:3a: 9b:95:14:15:8d:96:b1:e8:4e:1d:e1:b8:70:28:bb:26:0d:94: 21:72:92:de:bf:84:fa:ca:63:3a:7c:c5:50:2e:a6:c6:23:11: 3c:bf:ba:3b:67:b4:f7:2b:47:cf:b4:11:4e:22:c6:0c:8b:31: d1:3f:1f:7b:c5:4e:39:13:db:fc:a3:19:3f:7a:c6:4c:d4:8a: e1:dc:23:0d:a2:2e:2c:6b:e6:f2:49:53:71:8a:07:01:60:78: e0:ab:26:2d:df:1b:e0:fa:6c:fd:af:19:f3:42:0f:b4:d3:ed: 69:d4:a8:2f:6b:16:45:01:9f:c3:80:45:cb:c3:60:02:28:94: 43:3a:34:a2:f9:a6:ab:07:d3:ba:9e:1c:69:c6:f4:5b:e8:73: 5e:d3:40:ee:92:16:76:47:56:76:0b:6b:8c:7a:76:88:ec:d2: fd:0a:cb:ec:c5:f5:5a:46:ea:28:eb:72:76:37:20:cb:e3:08: 6b:f8:03:c3:95:54:27:30:a6:fb:74:9d:c8:61:55:67:81:f2: 99:19:88:16:5c:55:29:c2:95:4c:c5:4d:7e:74:c0:68:03:a2: 91:98:49:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWVylSv0HFxCoh7qoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDQxODA5MjkxMVoXDTI0MDcxNzA5MjkxMVowLzEtMCsGA1UEAxMk N2FjYjEzMjEtYzAxZC00MDFlLWFlNTItMWU0MGM5ZTY2OTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YVIJncIQAM0K82TegttPIzeF/N99URCwi+c zDKolgT/xD53CBGEJP1TVkVAjGGiiQ6tzv53O9ktfSjPA/ONGb85RxbUOmrkKM0C MRoLuQcdO9zTCl1jlsbeEUf4FlaBuKQ+x2H45LepAHYF7WG/Wjp8OwGAzM2YW9y7 X3FYd96VoDYLzLmFw2tslGdEKylU86JUmdRmS3ooGyYuj6maIvG+PyljeJyNiYpx QufJDzmDjQNXakVnnUxSnOmU1WINae7Ly7hyC81KDqxUpr+as+6c1RVeW6h4GqQt Zy2tK7IXJqZXWfypATicvCcbSrTIjFS8MikhiysVuzb4y6Wz+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEJcO/MwVgEJX8ZBAufJRaC+TBUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Q5MjljOGEtMDRjZC0z MjE2LWFhOTMtNGJhOTBkMzNhNzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0OYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADk6SSi9h7vkXbHw8Z1+RmzPl+YQPxqHJsrQIEdGu7HuYif3OpuVFBWN lrHoTh3huHAouyYNlCFykt6/hPrKYzp8xVAupsYjETy/ujtntPcrR8+0EU4ixgyL MdE/H3vFTjkT2/yjGT96xkzUiuHcIw2iLixr5vJJU3GKBwFgeOCrJi3fG+D6bP2v GfNCD7TT7WnUqC9rFkUBn8OARcvDYAIolEM6NKL5pqsH07qeHGnG9Fvoc17TQO6S FnZHVnYLa4x6dojs0v0Ky+zF9VpG6ijrcnY3IMvjCGv4A8OVVCcwpvt0nchhVWeB 8pkZiBZcVSnClUzFTX50wGgDopGYSS4= -----END CERTIFICATE-----Generated at Tue May 21 13:18:28 2024 by rpki-client on console-ams.rpki-client.org