$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/456f5414-9356-3c43-bbb8-71d48f19401c.roa File: 456f5414-9356-3c43-bbb8-71d48f19401c.roa (raw, json) Hash identifier: xoDpYyO8Ba0iKQbFvpsG5Hd6TYKl3dCD4DDFACUEpwI= Subject key identifier: 55:70:B4:A2:95:8B:2B:99:53:73:9E:2C:77:54:F6:76:49:BD:23:69 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285845A6752683B0157C422A166EAC Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/456f5414-9356-3c43-bbb8-71d48f19401c.roa Signing time: Wed 24 Apr 2024 08:46:18 +0000 ROA not before: Wed 24 Apr 2024 08:46:18 +0000 ROA not after: Tue 23 Jul 2024 08:46:18 +0000 asID: 20940 IP address blocks: 23.1.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a6:75:26:83:b0:15:7c:42:2a:16:6e:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 24 08:46:18 2024 GMT Not After : Jul 23 08:46:18 2024 GMT Subject: CN=16f8dccb-e978-4548-a78b-d29efbe8aed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b9:7a:a1:4b:af:7a:c0:19:2c:fd:1f:c0:44: 09:b6:43:96:cb:66:de:6a:a1:bc:60:7b:bb:e8:bf: b9:6d:04:1c:a5:ea:ce:f0:68:78:c0:f6:4e:3e:16: fa:4a:80:d1:60:cf:4e:fb:da:d3:55:67:92:3a:65: a4:75:58:dd:ae:95:eb:53:bc:80:df:f3:82:a7:58: 3c:50:15:f8:ad:9d:3a:14:d7:9d:29:34:bc:28:af: c9:1c:ca:9f:c9:dc:05:54:c4:86:b0:27:03:0a:8c: 18:00:9b:87:ba:99:14:7d:28:77:be:c5:69:f1:00: 17:51:33:10:71:fb:f8:6d:6e:44:46:7d:19:4c:2a: bd:3f:02:9f:ee:ba:a0:63:f4:73:d5:b3:0f:1e:b3: 4e:e9:60:dd:f2:5d:99:47:79:f0:71:7c:33:86:57: f5:97:65:7e:d9:fb:06:a9:bc:9d:62:6e:fd:cb:1c: ed:47:60:e6:84:d6:3f:82:fc:85:94:aa:ed:9e:c5: 94:77:23:3b:47:cb:e2:be:3a:72:26:0c:23:09:fb: 58:83:4b:3f:a1:82:16:9e:ad:58:e1:50:dc:da:05: 39:81:88:9c:f5:dd:c8:2c:9c:ee:08:27:f3:37:54: 74:7c:60:1d:cd:84:5e:8e:4f:2f:12:cf:20:bb:dd: 5b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:70:B4:A2:95:8B:2B:99:53:73:9E:2C:77:54:F6:76:49:BD:23:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/456f5414-9356-3c43-bbb8-71d48f19401c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c9:34:13:3c:48:b6:6c:f1:ba:8d:41:ce:23:b1:87:b6:37: 35:8a:4b:99:ff:a1:9c:2a:73:e5:e2:04:e4:ab:74:f6:41:b6: f7:f4:c2:eb:76:d4:9d:c4:0e:18:72:55:e0:7b:7f:c9:33:9e: 07:e2:36:9e:53:41:74:63:d0:ac:91:66:3f:0d:6e:99:d0:38: 4b:f4:a5:f7:12:c3:13:8c:27:dc:99:a9:b7:36:2d:0f:a2:d5: 80:15:ee:ba:ff:02:f6:5c:04:f3:3b:29:b0:63:ac:92:05:a4: 99:ac:69:d3:62:0d:4d:20:b8:4d:1c:d1:06:7f:e8:e9:aa:54: 37:15:d0:5e:c1:33:aa:e8:cf:d7:f0:a8:94:0e:5e:43:cc:55: 8e:b0:2f:e8:53:25:ea:2a:7b:1f:25:a5:59:9c:31:7c:d5:1e: 33:bf:36:8c:67:81:bc:44:94:53:92:14:ae:4d:cb:4a:68:21: 3c:58:8e:d2:53:cd:60:3e:f2:80:85:a0:ee:da:69:3b:17:33: 3f:36:43:01:e3:8b:e7:03:9c:09:c0:cc:bc:02:e1:9e:55:a1: 19:94:e1:7a:e4:fd:f1:f8:71:99:90:5f:54:c3:a6:59:3a:a8: b0:6e:e3:e2:4c:09:4b:51:dc:65:53:4d:bc:51:37:91:50:fd: c8:c3:b7:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWmdSaDsBV8QioWbqwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDQyNDA4NDYxOFoXDTI0MDcyMzA4NDYxOFowLzEtMCsGA1UEAxMk MTZmOGRjY2ItZTk3OC00NTQ4LWE3OGItZDI5ZWZiZThhZWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7l6oUuvesAZLP0fwEQJtkOWy2beaqG8YHu7 6L+5bQQcperO8Gh4wPZOPhb6SoDRYM9O+9rTVWeSOmWkdVjdrpXrU7yA3/OCp1g8 UBX4rZ06FNedKTS8KK/JHMqfydwFVMSGsCcDCowYAJuHupkUfSh3vsVp8QAXUTMQ cfv4bW5ERn0ZTCq9PwKf7rqgY/Rz1bMPHrNO6WDd8l2ZR3nwcXwzhlf1l2V+2fsG qbydYm79yxztR2DmhNY/gvyFlKrtnsWUdyM7R8vivjpyJgwjCftYg0s/oYIWnq1Y 4VDc2gU5gYic9d3ILJzuCCfzN1R0fGAdzYRejk8vEs8gu91bUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVwtKKViyuZU3OeLHdU9nZJvSNpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDU2ZjU0MTQtOTM1Ni0z YzQzLWJiYjgtNzFkNDhmMTk0MDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwFhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/JNBM8SLZs8bqNQc4jsYe2NzWKS5n/oZwqc+XiBOSrdPZBtvf0wut2 1J3EDhhyVeB7f8kzngfiNp5TQXRj0KyRZj8NbpnQOEv0pfcSwxOMJ9yZqbc2LQ+i 1YAV7rr/AvZcBPM7KbBjrJIFpJmsadNiDU0guE0c0QZ/6OmqVDcV0F7BM6roz9fw qJQOXkPMVY6wL+hTJeoqex8lpVmcMXzVHjO/NoxngbxElFOSFK5Ny0poITxYjtJT zWA+8oCFoO7aaTsXMz82QwHji+cDnAnAzLwC4Z5VoRmU4Xrk/fH4cZmQX1TDplk6 qLBu4+JMCUtR3GVTTbxRN5FQ/cjDt5E= -----END CERTIFICATE-----Generated at Fri May 17 02:15:22 2024 by rpki-client on console-ams.rpki-client.org