$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dad23327-5e5b-313e-b5e6-3f33f800f9df.roa File: dad23327-5e5b-313e-b5e6-3f33f800f9df.roa (raw, json) Hash identifier: CUR/XWj2xy0qnXTUxLohuGiju5gUN1z1kcsc4RJ1yfk= Subject key identifier: 90:D7:CA:5B:9A:74:1D:7E:D4:DA:43:29:22:BC:D7:BE:19:98:74:97 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285845A3B938BB9E251DC1578F8680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dad23327-5e5b-313e-b5e6-3f33f800f9df.roa Signing time: Tue 23 Apr 2024 09:16:02 +0000 ROA not before: Tue 23 Apr 2024 09:16:02 +0000 ROA not after: Mon 22 Jul 2024 09:16:02 +0000 asID: 20940 IP address blocks: 23.72.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a3:b9:38:bb:9e:25:1d:c1:57:8f:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 09:16:02 2024 GMT Not After : Jul 22 09:16:02 2024 GMT Subject: CN=87cda6ac-718c-46e0-a792-10ff1763f4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:74:6f:4a:dd:d2:f3:da:06:95:36:42:fc:68: e9:cf:3e:50:f3:50:12:05:df:53:1e:03:fa:a7:3f: e5:4b:42:8c:0b:ab:e4:c4:69:08:d1:31:2f:bd:72: f3:92:5b:ea:6d:99:73:61:44:65:b0:fc:58:d4:8f: 98:d2:2c:6c:5b:fd:59:0e:89:ab:b5:2f:ff:1c:c6: 1a:87:10:3e:fa:46:54:e9:a8:d6:08:c4:87:42:42: 62:f4:98:21:55:e2:61:e7:4e:49:4b:12:e4:74:5c: 38:f3:57:c6:72:a3:8b:0a:33:df:30:a9:df:88:bc: 93:15:05:a5:ae:c6:0a:6d:62:49:44:e6:f1:95:7e: 83:27:c1:ea:c4:c5:e0:4a:ed:41:21:2c:69:f2:b2: 84:25:ea:33:b9:cd:ed:28:dc:62:fa:a9:dd:25:83: d0:32:cd:ab:48:95:e7:1a:13:26:0a:5f:21:ef:f7: 5c:07:1f:20:2e:d3:78:30:10:a4:51:95:7b:ab:3c: f7:ef:83:6e:e8:62:18:22:67:f9:f4:92:21:53:d1: d7:73:56:33:1e:56:da:ba:a0:81:d0:71:75:19:ab: 92:96:f3:27:62:f3:af:98:3e:db:86:ce:0a:af:71: a7:da:1d:2d:94:06:75:a0:b7:7f:e8:07:11:6d:2a: c5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D7:CA:5B:9A:74:1D:7E:D4:DA:43:29:22:BC:D7:BE:19:98:74:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dad23327-5e5b-313e-b5e6-3f33f800f9df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.72.0.0/13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:9c:eb:fc:65:b2:e6:24:b0:a9:7c:c4:5c:1b:c2:06:94:38: f1:26:af:ad:64:db:40:ca:7a:2e:e6:8c:39:0f:a9:dc:c6:40: f7:de:6e:8a:78:a4:18:fd:ba:4e:d3:06:03:0b:84:69:ee:62: 90:13:3c:80:65:49:b4:2c:15:86:e1:e7:d3:c9:5d:98:80:05: 26:07:a4:65:ce:03:a2:c1:25:90:d5:bd:2c:29:b7:8b:c1:62: 63:aa:44:09:19:5e:22:9d:c7:28:ae:3d:bd:ec:50:45:ec:a5: ec:76:03:c9:4d:02:f3:f2:b2:6d:e1:b9:83:9c:29:1e:d7:95: fd:bc:d2:70:45:92:f0:18:b6:7b:f7:7b:99:9b:92:e5:af:2b: 27:7d:08:0c:a6:3a:44:aa:21:bc:2e:c7:69:c8:e7:c1:16:f0: d0:85:d5:23:91:8b:a3:1c:da:f2:cf:be:a9:cf:93:97:97:95: ef:b3:e2:8f:c9:f2:8c:28:c2:06:19:3b:4e:30:66:bd:e3:45: d9:f3:02:60:8f:2e:ed:03:4e:82:fd:0d:a5:8d:70:8c:83:e0: 8b:40:b5:84:16:1c:bd:bd:45:16:5b:ce:46:16:99:1e:73:55: 97:e9:03:ab:71:cc:52:3e:f0:ff:0e:05:30:7f:d0:ca:73:a2: d1:7f:d8:12 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEWjuTi7niUdwVePhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDQyMzA5MTYwMloXDTI0MDcyMjA5MTYwMlowLzEtMCsGA1UEAxMk ODdjZGE2YWMtNzE4Yy00NmUwLWE3OTItMTBmZjE3NjNmNGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3RvSt3S89oGlTZC/Gjpzz5Q81ASBd9THgP6 pz/lS0KMC6vkxGkI0TEvvXLzklvqbZlzYURlsPxY1I+Y0ixsW/1ZDomrtS//HMYa hxA++kZU6ajWCMSHQkJi9JghVeJh505JSxLkdFw481fGcqOLCjPfMKnfiLyTFQWl rsYKbWJJRObxlX6DJ8HqxMXgSu1BISxp8rKEJeozuc3tKNxi+qndJYPQMs2rSJXn GhMmCl8h7/dcBx8gLtN4MBCkUZV7qzz374Nu6GIYImf59JIhU9HXc1YzHlbauqCB 0HF1GauSlvMnYvOvmD7bhs4Kr3Gn2h0tlAZ1oLd/6AcRbSrFXwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJDXyluadB1+1NpDKSK8174ZmHSXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGFkMjMzMjctNWU1Yi0z MTNlLWI1ZTYtM2YzM2Y4MDBmOWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDF0gwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAd5zr/GWy5iSwqXzEXBvCBpQ48SavrWTbQMp6LuaMOQ+p3MZA995uinik GP26TtMGAwuEae5ikBM8gGVJtCwVhuHn08ldmIAFJgekZc4DosElkNW9LCm3i8Fi Y6pECRleIp3HKK49vexQReyl7HYDyU0C8/KybeG5g5wpHteV/bzScEWS8Bi2e/d7 mZuS5a8rJ30IDKY6RKohvC7HacjnwRbw0IXVI5GLoxza8s++qc+Tl5eV77Pij8ny jCjCBhk7TjBmveNF2fMCYI8u7QNOgv0NpY1wjIPgi0C1hBYcvb1FFlvORhaZHnNV l+kDq3HMUj7w/w4FMH/QynOi0X/YEg== -----END CERTIFICATE-----Generated at Fri May 17 16:16:55 2024 by rpki-client on console-fra.rpki-client.org