$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfb6dc10-216d-32cc-a264-9ac44feb02be.roa File: cfb6dc10-216d-32cc-a264-9ac44feb02be.roa (raw, json) Hash identifier: JCq7zuwJoJZIIhYKiFmzaUwUV5CKNXEsmMLaUZLAu5U= Subject key identifier: A7:05:AD:E5:C6:1F:D6:0E:F7:F9:0E:E5:66:E6:50:C2:AF:44:71:27 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285845A675034D22EC442311755780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfb6dc10-216d-32cc-a264-9ac44feb02be.roa Signing time: Wed 24 Apr 2024 08:46:02 +0000 ROA not before: Wed 24 Apr 2024 08:46:02 +0000 ROA not after: Tue 23 Jul 2024 08:46:02 +0000 asID: 20940 IP address blocks: 23.0.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a6:75:03:4d:22:ec:44:23:11:75:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 24 08:46:02 2024 GMT Not After : Jul 23 08:46:02 2024 GMT Subject: CN=28ef0001-c90e-45e7-a910-7726edde8e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b1:33:c3:ec:61:69:16:7f:da:37:30:96:86: 98:a5:16:8b:e3:96:87:23:82:e4:aa:d2:08:21:aa: 3b:7b:60:28:44:e5:44:20:eb:62:d8:2c:27:35:6f: d3:d7:18:7e:06:a1:41:f6:4c:da:d2:0a:d5:7a:43: 4a:ab:5d:d7:03:22:50:4e:a2:22:69:0a:f7:7a:0d: 4f:bd:b9:c4:de:02:e7:e7:74:00:92:dc:21:f9:59: 4b:3f:29:21:91:b6:5b:bc:a7:30:32:95:b5:33:5d: 0b:29:4f:99:b0:c3:43:8d:45:c1:12:9d:ee:97:ae: 5a:31:c5:c9:55:af:95:df:a4:68:fa:57:06:f6:47: dd:d0:8a:28:3f:67:39:84:59:91:26:d6:b9:ee:02: db:04:bc:ba:75:b0:6d:8f:f5:d0:58:ac:96:b4:0b: dd:c4:6b:93:56:9f:4a:c3:55:cb:3f:e6:7a:29:88: 97:eb:27:fb:3c:43:3b:45:38:4a:b4:91:a7:6d:8e: bf:88:49:21:fe:07:8d:f6:76:ce:78:3b:33:1c:e2: 60:f4:9d:95:18:69:04:a6:fa:04:a8:ac:14:c2:9c: 97:a5:0c:c3:f2:3b:ed:a5:a1:40:7f:9c:7d:c6:fc: f6:4d:ba:b1:b0:2b:9c:eb:54:04:c0:81:b1:2a:fe: 56:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:05:AD:E5:C6:1F:D6:0E:F7:F9:0E:E5:66:E6:50:C2:AF:44:71:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfb6dc10-216d-32cc-a264-9ac44feb02be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.0.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:23:b9:5f:75:39:4f:09:79:ca:98:6e:5a:dc:01:ea:c3:cd: f9:e7:9f:4b:22:24:5a:a7:95:f4:b9:9c:d1:6b:51:63:f2:04: ba:db:9a:af:f9:8f:49:5a:0c:d4:f9:6a:39:e8:70:c8:e6:41: 06:81:be:38:82:38:cc:08:47:1a:fd:36:9e:8b:da:b8:26:a2: 43:ae:87:19:5c:4b:04:b5:88:8d:33:b7:dc:17:3d:f5:ca:95: 79:ed:87:9f:23:21:bf:36:53:5a:c1:58:8e:28:e3:dd:f8:40: 0b:09:28:19:e2:b0:75:db:1d:21:cb:7b:9a:39:7e:2c:e2:16: 1a:85:5c:f8:d0:e9:c4:59:24:bd:f2:4c:bd:8c:cb:a1:eb:83: b2:2e:3d:d1:8f:1c:32:21:8e:3c:08:2f:81:b7:47:91:e6:ab: b8:38:c4:ea:c1:85:95:77:51:aa:3d:b6:5d:74:83:c4:36:e9: 3a:a0:c0:13:a1:6a:91:6b:4f:0b:57:58:7c:d9:eb:38:97:c3: 44:ba:2e:59:fd:c6:17:b7:0f:16:bd:bc:6c:04:03:d5:02:ba: a6:d8:a5:2c:dd:4b:af:6d:0b:45:7c:6a:69:ab:9f:6d:22:64: c5:be:41:87:6d:fc:23:51:1e:e8:9b:79:ea:02:7b:0d:b0:59: 09:6e:07:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWmdQNNIuxEIxF1V4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDQyNDA4NDYwMloXDTI0MDcyMzA4NDYwMlowLzEtMCsGA1UEAxMk MjhlZjAwMDEtYzkwZS00NWU3LWE5MTAtNzcyNmVkZGU4ZTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLEzw+xhaRZ/2jcwloaYpRaL45aHI4LkqtII Iao7e2AoROVEIOti2CwnNW/T1xh+BqFB9kza0grVekNKq13XAyJQTqIiaQr3eg1P vbnE3gLn53QAktwh+VlLPykhkbZbvKcwMpW1M10LKU+ZsMNDjUXBEp3ul65aMcXJ Va+V36Ro+lcG9kfd0IooP2c5hFmRJta57gLbBLy6dbBtj/XQWKyWtAvdxGuTVp9K w1XLP+Z6KYiX6yf7PEM7RThKtJGnbY6/iEkh/geN9nbOeDszHOJg9J2VGGkEpvoE qKwUwpyXpQzD8jvtpaFAf5x9xvz2TbqxsCuc61QEwIGxKv5WLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcFreXGH9YO9/kO5WbmUMKvRHEnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2ZiNmRjMTAtMjE2ZC0z MmNjLWEyNjQtOWFjNDRmZWIwMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgjuV91OU8JecqYblrcAerDzfnnn0siJFqnlfS5nNFrUWPyBLrbmq/5 j0laDNT5ajnocMjmQQaBvjiCOMwIRxr9Np6L2rgmokOuhxlcSwS1iI0zt9wXPfXK lXnth58jIb82U1rBWI4o4934QAsJKBnisHXbHSHLe5o5fiziFhqFXPjQ6cRZJL3y TL2My6Hrg7IuPdGPHDIhjjwIL4G3R5Hmq7g4xOrBhZV3Uao9tl10g8Q26TqgwBOh apFrTwtXWHzZ6ziXw0S6Lln9xhe3Dxa9vGwEA9UCuqbYpSzdS69tC0V8ammrn20i ZMW+QYdt/CNRHuibeeoCew2wWQluB00= -----END CERTIFICATE-----Generated at Fri May 17 11:07:56 2024 by rpki-client on console-ams.rpki-client.org