$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4098e103-d04a-3465-a7e1-f3debf7a9e61.roa File: 4098e103-d04a-3465-a7e1-f3debf7a9e61.roa (raw, json) Hash identifier: Uc7zQNGX05S5MuUkQq/UQZ3PFOpHlqcloFJcBFtcwOo= Subject key identifier: A9:13:14:EB:C7:9D:50:6D:AE:C1:47:98:6C:3E:E2:F8:32:4D:F9:5F Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584500F563821EF7F7513D442370 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4098e103-d04a-3465-a7e1-f3debf7a9e61.roa Signing time: Sun 25 Feb 2024 02:00:26 +0000 ROA not before: Sun 25 Feb 2024 02:00:26 +0000 ROA not after: Sat 25 May 2024 01:00:26 +0000 asID: 16509 IP address blocks: 23.239.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:00:f5:63:82:1e:f7:f7:51:3d:44:23:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Feb 25 02:00:26 2024 GMT Not After : May 25 01:00:26 2024 GMT Subject: CN=5356d223-49c9-4e03-a092-a5e3e433fcd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c2:99:b6:c2:bd:4a:5e:4e:eb:6e:da:03:ea: 88:03:0c:78:10:1c:68:01:32:3a:b3:4f:b0:a6:8d: 30:b9:90:4c:78:62:3b:84:1c:61:6a:42:5b:92:a3: c3:17:20:24:b0:67:12:56:e7:28:c4:82:51:e0:dd: 25:81:0c:31:4a:c9:3d:7e:87:6e:f7:3a:41:28:91: 62:21:2d:5d:5e:1b:60:74:8c:94:fa:a9:86:62:f8: 2c:02:fb:b1:b5:cc:36:4e:64:8b:7f:d9:5d:6e:a8: 42:5c:59:99:25:89:d0:85:ca:3e:36:be:05:5d:5a: 03:ce:64:16:26:6f:15:f1:6a:f9:13:cb:4e:26:5d: 38:ce:c1:12:cd:97:5f:b6:6a:70:37:87:eb:eb:88: 8d:40:7f:0a:c8:e8:77:ff:99:2c:be:b5:50:d1:27: 11:54:cd:f4:39:ca:21:8d:c8:11:73:49:ce:af:83: 0c:09:d0:36:6e:bb:41:4c:46:7b:76:2c:e4:7b:05: f0:28:24:f8:2a:5c:7c:13:e6:76:18:28:be:a6:00: a0:13:1e:09:a0:07:0b:74:7c:11:cf:64:20:82:a2: 18:e6:99:3d:6f:92:71:c7:f8:8c:0f:ad:04:5e:d5: 7b:54:a5:46:89:31:eb:c7:99:1e:fb:3e:46:fd:9a: c7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:13:14:EB:C7:9D:50:6D:AE:C1:47:98:6C:3E:E2:F8:32:4D:F9:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4098e103-d04a-3465-a7e1-f3debf7a9e61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:bb:08:aa:1b:81:cc:60:8b:5a:b7:6f:e3:d5:68:65:32:5d: 6e:af:cb:b4:98:11:57:de:30:71:f4:94:40:be:36:cf:7c:85: f8:8c:13:8d:35:c6:84:95:10:e7:58:94:bd:94:6f:dc:05:99: 5c:da:cd:d0:f1:e1:1d:f6:b3:b6:1d:ba:81:09:19:2e:73:23: ac:68:68:27:87:24:dd:f5:f8:86:f4:7e:dd:53:f3:d9:4f:b0: 9d:0c:4f:59:33:38:99:3e:d7:eb:ba:55:b5:2a:66:64:53:31: 28:e2:3a:e3:32:64:17:94:5e:c8:36:45:ad:e0:74:4d:36:cc: 09:4b:ef:b4:e8:37:59:df:c7:fe:21:2f:bf:97:0d:cf:e5:4f: a0:6e:55:cd:64:b2:40:cd:c0:39:71:4b:f8:c2:ab:2a:b5:3a: af:48:95:27:5e:a1:c3:00:3a:6a:60:d9:9a:7e:38:1f:b0:09: f3:33:16:0a:35:0f:22:e1:aa:0b:87:32:4f:21:36:a5:26:3f: b4:70:a6:c8:2d:c1:23:ba:0d:32:a3:d1:ef:9d:3a:85:24:86: ca:9f:7e:39:e3:24:4a:69:18:67:77:62:1c:6c:c1:a9:f0:fc: 0e:d8:0b:a9:3a:dd:7a:37:20:21:12:1e:5f:c3:59:24:1f:cd: 92:72:3b:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUA9WOCHvf3UT1EI3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI0MDIyNTAyMDAyNloXDTI0MDUyNTAxMDAyNlowLzEtMCsGA1UEAxMk NTM1NmQyMjMtNDljOS00ZTAzLWEwOTItYTVlM2U0MzNmY2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMKZtsK9Sl5O627aA+qIAwx4EBxoATI6s0+w po0wuZBMeGI7hBxhakJbkqPDFyAksGcSVucoxIJR4N0lgQwxSsk9fodu9zpBKJFi IS1dXhtgdIyU+qmGYvgsAvuxtcw2TmSLf9ldbqhCXFmZJYnQhco+Nr4FXVoDzmQW Jm8V8Wr5E8tOJl04zsESzZdftmpwN4fr64iNQH8KyOh3/5ksvrVQ0ScRVM30Ocoh jcgRc0nOr4MMCdA2brtBTEZ7dizkewXwKCT4Klx8E+Z2GCi+pgCgEx4JoAcLdHwR z2QggqIY5pk9b5Jxx/iMD60EXtV7VKVGiTHrx5ke+z5G/ZrHswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkTFOvHnVBtrsFHmGw+4vgyTflfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDA5OGUxMDMtZDA0YS0z NDY1LWE3ZTEtZjNkZWJmN2E5ZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM27CKobgcxgi1q3b+PVaGUyXW6vy7SYEVfeMHH0lEC+Ns98hfiME401 xoSVEOdYlL2Ub9wFmVzazdDx4R32s7YduoEJGS5zI6xoaCeHJN31+Ib0ft1T89lP sJ0MT1kzOJk+1+u6VbUqZmRTMSjiOuMyZBeUXsg2Ra3gdE02zAlL77ToN1nfx/4h L7+XDc/lT6BuVc1kskDNwDlxS/jCqyq1Oq9IlSdeocMAOmpg2Zp+OB+wCfMzFgo1 DyLhqguHMk8hNqUmP7RwpsgtwSO6DTKj0e+dOoUkhsqffjnjJEppGGd3Yhxswanw /A7YC6k63Xo3ICESHl/DWSQfzZJyOzw= -----END CERTIFICATE-----Generated at Thu May 2 22:32:01 2024 by rpki-client on console-ams.rpki-client.org