$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca198e4a-51e7-3809-82fe-f71cc26e2591.roa File: ca198e4a-51e7-3809-82fe-f71cc26e2591.roa (raw, json) Hash identifier: saJn1q4yyhY1zh3jKaC9VCqQf1pKN0L5OB/EJqJ3qn4= Subject key identifier: 8D:37:89:3A:B4:82:B6:12:02:70:BF:F2:42:F3:EE:FD:1D:E9:36:C7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285845840DC4AFE275979353D03AAC Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca198e4a-51e7-3809-82fe-f71cc26e2591.roa Signing time: Fri 12 Apr 2024 01:00:26 +0000 ROA not before: Fri 12 Apr 2024 01:00:26 +0000 ROA not after: Thu 11 Jul 2024 01:00:26 +0000 asID: 24319 IP address blocks: 23.61.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:84:0d:c4:af:e2:75:97:93:53:d0:3a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 12 01:00:26 2024 GMT Not After : Jul 11 01:00:26 2024 GMT Subject: CN=2a41f699-d2f7-4e0d-aed5-daaa27827b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:81:5b:7f:9f:15:3b:36:f8:cc:49:69:95:37: 18:ea:32:05:4b:71:76:89:45:01:7f:18:b7:8f:62: 1d:93:fd:88:0a:4e:24:d2:00:c9:e0:e4:9d:da:59: b4:d5:c8:1e:69:f2:72:2d:bc:bb:1a:db:54:31:8b: 79:c7:08:6c:2f:40:be:95:b3:50:d4:09:b2:45:fc: 10:1d:2e:52:54:fc:ae:43:55:7c:62:32:f4:0b:76: 79:e5:d2:57:da:0a:48:b7:dd:f6:4e:74:fe:1d:31: fb:4a:70:10:99:67:67:30:9b:4e:aa:be:77:a2:16: 8d:c9:10:9c:2d:9a:f3:81:b8:51:66:7e:69:a7:b9: 14:1a:f6:0b:24:1c:55:c8:95:16:5b:6b:41:28:ef: 43:21:54:67:a5:ac:78:69:1b:2a:37:eb:2f:97:2e: b4:ad:4d:86:e4:61:3b:13:dd:53:0e:f4:30:b9:f4: 15:ab:51:42:88:e7:94:99:87:07:81:26:ea:a4:34: a6:b0:c5:f3:d4:39:d2:59:63:ba:c0:84:97:42:d8: 81:0e:70:5f:ad:aa:98:26:89:46:95:89:bc:79:56: e5:c1:85:04:0f:4e:b0:c3:7c:dc:d0:d9:d1:ed:16: ba:72:f4:43:26:aa:e3:c0:d5:da:56:b9:2b:48:1e: 8b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:37:89:3A:B4:82:B6:12:02:70:BF:F2:42:F3:EE:FD:1D:E9:36:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca198e4a-51e7-3809-82fe-f71cc26e2591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.61.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:ae:72:cf:cf:bd:3a:17:71:6d:05:99:10:8b:c5:f5:96:3c: 2a:89:e3:d2:42:8c:2a:bd:c3:63:29:fc:59:10:97:a8:52:87: ae:3e:1b:33:05:85:fb:c4:e1:2d:b6:56:73:bd:26:53:55:49: b3:9b:97:15:b0:12:38:bd:cb:8a:7f:32:9c:d1:b0:a0:bd:a2: 0c:f3:59:77:b5:9f:9e:61:d5:49:b9:6c:33:ac:ea:47:8d:e2: 95:32:53:cd:dd:46:c9:38:69:d1:fa:de:d2:a0:f7:5c:27:76: 6e:bd:8b:ba:fa:72:45:cd:0d:6e:be:d9:a9:c8:00:86:20:4c: df:1f:08:29:92:f8:9a:d2:95:2f:60:f7:b2:9d:25:86:7c:ae: 8f:95:13:7b:a9:1d:64:54:8e:06:00:21:7d:73:48:78:a9:a9: 2f:69:bc:7e:fa:74:bd:f6:0d:50:bb:c2:bb:25:43:53:c5:0c: d5:af:1b:87:a1:3e:20:c1:04:02:98:1c:d1:69:c8:f7:27:c2: 6e:61:2f:95:8b:63:69:55:89:46:57:1e:23:e8:84:0e:7b:93: ba:2e:8e:f1:18:b5:4c:1f:f2:69:08:4c:97:64:53:34:0a:c1: 6b:9e:d5:0a:10:3d:b0:8d:e5:1f:d0:ab:4b:9c:09:8a:0e:47: 52:83:20:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWEDcSv4nWXk1PQOqwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDQxMjAxMDAyNloXDTI0MDcxMTAxMDAyNlowLzEtMCsGA1UEAxMk MmE0MWY2OTktZDJmNy00ZTBkLWFlZDUtZGFhYTI3ODI3YjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4Fbf58VOzb4zElplTcY6jIFS3F2iUUBfxi3 j2Idk/2ICk4k0gDJ4OSd2lm01cgeafJyLby7GttUMYt5xwhsL0C+lbNQ1AmyRfwQ HS5SVPyuQ1V8YjL0C3Z55dJX2gpIt932TnT+HTH7SnAQmWdnMJtOqr53ohaNyRCc LZrzgbhRZn5pp7kUGvYLJBxVyJUWW2tBKO9DIVRnpax4aRsqN+svly60rU2G5GE7 E91TDvQwufQVq1FCiOeUmYcHgSbqpDSmsMXz1DnSWWO6wISXQtiBDnBfraqYJolG lYm8eVblwYUED06ww3zc0NnR7Ra6cvRDJqrjwNXaVrkrSB6L5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI03iTq0grYSAnC/8kLz7v0d6TbHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2ExOThlNGEtNTFlNy0z ODA5LTgyZmUtZjcxY2MyNmUyNTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz0BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeucs/PvToXcW0FmRCLxfWWPCqJ49JCjCq9w2Mp/FkQl6hSh64+GzMF hfvE4S22VnO9JlNVSbOblxWwEji9y4p/MpzRsKC9ogzzWXe1n55h1Um5bDOs6keN 4pUyU83dRsk4adH63tKg91wndm69i7r6ckXNDW6+2anIAIYgTN8fCCmS+JrSlS9g 97KdJYZ8ro+VE3upHWRUjgYAIX1zSHipqS9pvH76dL32DVC7wrslQ1PFDNWvG4eh PiDBBAKYHNFpyPcnwm5hL5WLY2lViUZXHiPohA57k7oujvEYtUwf8mkITJdkUzQK wWue1QoQPbCN5R/Qq0ucCYoOR1KDIGg= -----END CERTIFICATE-----Generated at Fri May 17 01:58:02 2024 by rpki-client on console-fra.rpki-client.org