$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a11f1390-4a3a-3337-984f-82efa4c4297e.roa File: a11f1390-4a3a-3337-984f-82efa4c4297e.roa (raw, json) Hash identifier: ctSePXRCKpCfzrXj/aqNW+vepOxpbG0Iiszga5NPfmg= Subject key identifier: 20:F2:31:39:FD:B0:54:D8:B0:29:0D:D0:19:85:69:61:95:F2:C4:C0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285845DC0AF36A12970F041D91EAC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a11f1390-4a3a-3337-984f-82efa4c4297e.roa Signing time: Mon 13 May 2024 13:25:59 +0000 ROA not before: Mon 13 May 2024 13:25:59 +0000 ROA not after: Sun 11 Aug 2024 13:25:59 +0000 asID: 20940 IP address blocks: 23.41.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:dc:0a:f3:6a:12:97:0f:04:1d:91:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 13 13:25:59 2024 GMT Not After : Aug 11 13:25:59 2024 GMT Subject: CN=63da26e1-18dd-47ff-954e-818ddfef3d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:86:f4:87:63:39:5c:18:47:3d:65:29:4e:9e: b3:f8:44:8f:61:25:50:bb:fb:b0:03:e9:5e:e0:74: 86:6b:f5:de:01:cc:37:e2:42:14:8b:b5:d9:6c:3e: 69:3c:fd:97:18:d8:f9:1d:da:5c:f5:ff:01:d0:3d: 73:a4:97:be:db:b2:38:b9:8b:49:50:c3:06:7c:96: 07:e5:92:25:89:29:ce:bd:76:c3:3e:21:f5:5f:a6: 71:77:cb:2a:c5:90:d6:2b:ea:21:55:b4:05:11:b4: 33:a8:41:63:19:cd:b0:01:3f:01:09:f1:c6:e3:27: f5:9e:ef:95:02:12:c5:56:0a:0d:6d:f3:b3:58:d5: 31:79:e6:47:04:fa:4e:28:68:15:98:52:b2:ae:a6: 4b:d7:a9:7f:33:6a:68:31:16:4c:f4:63:f8:7f:35: 10:25:b3:ac:f1:b9:38:ce:fd:01:22:d3:14:cd:45: 8f:8c:8a:73:bb:8c:3a:56:fd:24:9d:7c:7f:39:7a: ed:d3:5d:80:ea:9c:e6:82:71:85:32:5b:33:9a:f4: b6:be:6f:ad:74:5b:d1:6a:4f:64:1e:2a:54:ee:97: 44:b4:a0:8e:8c:93:87:d2:dc:e9:59:fd:02:43:d1: 3e:c9:fb:e9:e0:01:88:24:c5:f9:ee:25:2c:82:b1: 6f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F2:31:39:FD:B0:54:D8:B0:29:0D:D0:19:85:69:61:95:F2:C4:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a11f1390-4a3a-3337-984f-82efa4c4297e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ab:5b:69:1b:25:24:8b:47:14:91:64:2f:5b:39:ea:d7:a9: 53:2f:58:63:15:96:19:41:50:d7:c6:9a:da:3d:cc:6f:7c:75: 7e:ea:c6:bd:10:d4:c2:be:1d:bd:fd:b7:c7:d6:e9:04:6a:5b: 26:27:aa:35:0d:06:20:4f:55:2f:62:c3:c2:1a:18:8b:7a:7e: 7c:2e:54:d6:02:a5:b6:70:b6:0d:b2:31:e1:de:44:bf:d2:30: db:7d:67:78:d3:17:64:e8:0b:55:0e:14:ad:99:a9:e3:4c:b5: 66:2a:d5:71:66:c1:79:77:f6:9c:41:b6:8c:3d:fa:00:64:25: 69:4d:54:56:35:77:fd:a3:9c:a7:d8:19:0b:ca:a6:b5:ca:a6: 82:03:92:f1:e7:33:83:20:f3:b7:a7:4c:30:91:71:ee:d6:67: 77:f8:55:80:b2:19:14:f8:5f:62:e9:8a:c2:0d:98:fe:f2:7f: 0e:c5:f8:6d:db:03:64:f8:19:e5:36:11:ba:68:87:a8:40:d4: d1:1e:a3:b3:74:02:f8:d7:e2:d8:e8:f4:aa:41:2a:ff:19:78: 90:34:60:14:bb:50:75:b6:34:1a:6a:4c:64:61:fa:07:d4:2c: 59:19:dd:42:29:95:59:f5:4f:e7:58:b6:0d:f9:e2:11:4f:2b: e1:b7:e0:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXcCvNqEpcPBB2R6sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDUxMzEzMjU1OVoXDTI0MDgxMTEzMjU1OVowLzEtMCsGA1UEAxMk NjNkYTI2ZTEtMThkZC00N2ZmLTk1NGUtODE4ZGRmZWYzZDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4b0h2M5XBhHPWUpTp6z+ESPYSVQu/uwA+le 4HSGa/XeAcw34kIUi7XZbD5pPP2XGNj5Hdpc9f8B0D1zpJe+27I4uYtJUMMGfJYH 5ZIliSnOvXbDPiH1X6Zxd8sqxZDWK+ohVbQFEbQzqEFjGc2wAT8BCfHG4yf1nu+V AhLFVgoNbfOzWNUxeeZHBPpOKGgVmFKyrqZL16l/M2poMRZM9GP4fzUQJbOs8bk4 zv0BItMUzUWPjIpzu4w6Vv0knXx/OXrt012A6pzmgnGFMlszmvS2vm+tdFvRak9k HipU7pdEtKCOjJOH0tzpWf0CQ9E+yfvp4AGIJMX57iUsgrFvrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDyMTn9sFTYsCkN0BmFaWGV8sTAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTExZjEzOTAtNGEzYS0z MzM3LTk4NGYtODJlZmE0YzQyOTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFykKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEurW2kbJSSLRxSRZC9bOerXqVMvWGMVlhlBUNfGmto9zG98dX7qxr0Q 1MK+Hb39t8fW6QRqWyYnqjUNBiBPVS9iw8IaGIt6fnwuVNYCpbZwtg2yMeHeRL/S MNt9Z3jTF2ToC1UOFK2ZqeNMtWYq1XFmwXl39pxBtow9+gBkJWlNVFY1d/2jnKfY GQvKprXKpoIDkvHnM4Mg87enTDCRce7WZ3f4VYCyGRT4X2LpisINmP7yfw7F+G3b A2T4GeU2Ebpoh6hA1NEeo7N0AvjX4tjo9KpBKv8ZeJA0YBS7UHW2NBpqTGRh+gfU LFkZ3UIplVn1T+dYtg354hFPK+G34EM= -----END CERTIFICATE-----Generated at Wed May 29 03:15:40 2024 by rpki-client on console-fra.rpki-client.org