$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a449e21c-e175-312e-9ebb-201a80d6b99a.roa File: a449e21c-e175-312e-9ebb-201a80d6b99a.roa (raw, json) Hash identifier: dZIY9sKI0ULJ1pIDG7lOFSI5t2VYA44HTAB+ezAw7mw= Subject key identifier: 43:6A:6C:29:6E:10:CE:95:DB:8E:4F:FB:95:58:9D:05:1D:30:80:69 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285845DC0AEFA5B09E4D0DB984CE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a449e21c-e175-312e-9ebb-201a80d6b99a.roa Signing time: Mon 13 May 2024 13:25:57 +0000 ROA not before: Mon 13 May 2024 13:25:57 +0000 ROA not after: Sun 11 Aug 2024 13:25:57 +0000 asID: 20940 IP address blocks: 23.41.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:dc:0a:ef:a5:b0:9e:4d:0d:b9:84:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 13 13:25:57 2024 GMT Not After : Aug 11 13:25:57 2024 GMT Subject: CN=cbf51aa4-b672-4095-a18f-2ac86867fb03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6c:e7:fc:84:93:ba:0a:ed:99:45:d7:e5:db: 4c:8c:2f:4a:a8:20:6a:f2:42:6f:1c:6e:ee:53:6b: 54:80:13:5f:50:d9:ca:21:f9:e9:32:e0:3a:a1:a5: 6a:8f:53:ff:90:5e:ec:e6:9a:c3:e5:c9:30:c3:7b: cd:67:57:11:32:be:ba:ce:bd:d9:41:5b:9c:ad:61: 94:54:ed:bf:c8:4d:9e:be:17:d9:df:c6:d6:51:dc: bb:b6:53:15:35:11:49:66:c1:c0:62:2a:dd:53:de: 06:9a:03:2c:3d:f6:f1:37:eb:9a:1e:17:91:5a:39: 53:1e:85:08:60:c2:25:97:a0:8c:52:12:a0:18:5b: 95:30:91:b2:81:61:24:2e:b7:e3:3d:a5:0b:0b:c4: 8c:7c:2f:f2:8f:27:55:18:f4:19:e0:0a:a1:01:b2: 00:d8:1f:d9:ca:21:d7:ad:bb:13:1e:7a:2b:a2:16: 07:38:e8:3b:a3:95:6d:76:83:ef:41:00:7b:58:fc: d8:06:d7:15:3b:00:63:3c:06:5c:9b:32:56:97:24: c0:95:62:96:71:e5:55:f3:27:29:f2:89:b7:d9:20: b2:ba:41:8b:b4:fd:58:7e:0e:6e:79:5d:e6:b8:97: 22:9f:11:98:1c:0c:0d:15:79:8f:08:18:86:10:2c: f8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6A:6C:29:6E:10:CE:95:DB:8E:4F:FB:95:58:9D:05:1D:30:80:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a449e21c-e175-312e-9ebb-201a80d6b99a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c3:30:55:5a:75:79:88:7b:ac:64:e6:8f:39:93:77:e0:d8: eb:23:23:ba:18:94:1e:9f:65:49:33:bf:d1:64:e3:c9:1f:1e: b3:9a:e8:bb:8a:f2:40:1e:16:cc:03:da:65:39:86:97:d2:a4: f4:26:c3:21:21:ba:5c:ce:5c:fa:4b:1c:b7:5a:0d:e9:48:fe: c4:29:83:69:f1:57:ae:ce:68:7b:20:f2:a4:18:d9:18:4c:33: b5:4e:ac:33:ef:d2:fd:f8:cc:9d:d5:d8:2d:53:48:01:71:fd: 70:1e:f1:c8:41:9e:46:4c:d4:8b:36:32:cd:fb:9d:bc:35:03: 2e:15:9c:0f:03:d5:78:d5:9e:90:e5:8f:e2:c7:db:98:0e:32: d8:18:06:2a:47:90:01:b3:a9:51:39:e8:29:47:95:f7:45:f0: 1d:3b:cd:2d:42:cc:57:53:6c:56:1d:c8:2c:f1:d9:dd:d9:70: e7:1d:a5:d3:41:01:6a:b9:0a:bc:c0:0e:d9:3c:20:c2:73:62: 69:5f:f0:1b:de:7d:49:3d:15:b7:ee:30:68:c9:a5:b5:7d:b0: 4d:ea:60:99:5f:31:f6:fa:d2:42:c8:54:a3:d0:be:fb:dd:a2: a8:24:94:50:a4:45:3d:76:7d:86:65:c4:fa:21:79:c9:31:84: d3:42:92:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXcCu+lsJ5NDbmEzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDUxMzEzMjU1N1oXDTI0MDgxMTEzMjU1N1owLzEtMCsGA1UEAxMk Y2JmNTFhYTQtYjY3Mi00MDk1LWExOGYtMmFjODY4NjdmYjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGzn/ISTugrtmUXX5dtMjC9KqCBq8kJvHG7u U2tUgBNfUNnKIfnpMuA6oaVqj1P/kF7s5prD5ckww3vNZ1cRMr66zr3ZQVucrWGU VO2/yE2evhfZ38bWUdy7tlMVNRFJZsHAYirdU94GmgMsPfbxN+uaHheRWjlTHoUI YMIll6CMUhKgGFuVMJGygWEkLrfjPaULC8SMfC/yjydVGPQZ4AqhAbIA2B/ZyiHX rbsTHnorohYHOOg7o5VtdoPvQQB7WPzYBtcVOwBjPAZcmzJWlyTAlWKWceVV8ycp 8om32SCyukGLtP1Yfg5ueV3muJcinxGYHAwNFXmPCBiGECz4NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENqbCluEM6V245P+5VYnQUdMIBpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTQ0OWUyMWMtZTE3NS0z MTJlLTllYmItMjAxYTgwZDZiOTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFykFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETDMFVadXmIe6xk5o85k3fg2OsjI7oYlB6fZUkzv9Fk48kfHrOa6LuK 8kAeFswD2mU5hpfSpPQmwyEhulzOXPpLHLdaDelI/sQpg2nxV67OaHsg8qQY2RhM M7VOrDPv0v34zJ3V2C1TSAFx/XAe8chBnkZM1Is2Ms37nbw1Ay4VnA8D1XjVnpDl j+LH25gOMtgYBipHkAGzqVE56ClHlfdF8B07zS1CzFdTbFYdyCzx2d3ZcOcdpdNB AWq5CrzADtk8IMJzYmlf8BvefUk9FbfuMGjJpbV9sE3qYJlfMfb60kLIVKPQvvvd oqgklFCkRT12fYZlxPoheckxhNNCkjE= -----END CERTIFICATE-----Generated at Wed May 29 03:15:40 2024 by rpki-client on console-fra.rpki-client.org