$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/70e37e41-10ad-3645-89a6-8e56f0894b2d.roa File: 70e37e41-10ad-3645-89a6-8e56f0894b2d.roa (raw, json) Hash identifier: cZ81t5CKSIzGIehKkuMU+Fi/QZ/fTB2noK617PtMW9k= Subject key identifier: 32:AA:B0:08:38:16:E5:EF:11:32:E1:75:30:9B:85:07:DD:A3:7A:8C Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F432858454597B98DDC9004E967215000 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/70e37e41-10ad-3645-89a6-8e56f0894b2d.roa Signing time: Wed 20 Mar 2024 16:02:33 +0000 ROA not before: Wed 20 Mar 2024 16:02:33 +0000 ROA not after: Tue 18 Jun 2024 16:02:33 +0000 asID: 31898 IP address blocks: 23.239.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:97:b9:8d:dc:90:04:e9:67:21:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 20 16:02:33 2024 GMT Not After : Jun 18 16:02:33 2024 GMT Subject: CN=aae3f9b7-7779-4e91-9958-3f3ea8b8fc23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d4:84:b0:63:e9:e7:4d:b1:ff:6c:ac:7b:f0: bd:3c:e6:a4:bf:5e:d0:9e:13:5d:6b:4a:ab:41:05: 6c:06:41:e4:e8:04:d6:b1:ec:41:62:93:38:4c:69: 15:e6:f8:94:76:61:3e:e9:de:02:85:bd:1d:96:c4: 88:50:58:69:b5:06:3b:09:df:54:c8:65:93:52:3f: 19:df:76:0e:0d:81:54:2e:08:4d:bd:f2:e3:85:4e: 84:d1:c0:31:a8:26:9e:ed:72:94:7d:b0:56:4a:b2: 2f:fd:dc:d6:43:76:75:55:80:b7:45:0b:a1:55:3d: ba:d6:ac:a4:ff:6a:a5:e3:6c:37:dc:24:42:46:b6: d6:d3:18:6a:be:89:91:e5:af:a4:4e:0c:5a:72:d0: c5:43:9f:cc:86:9b:a3:f8:a4:86:37:7d:9a:b3:5e: 2d:43:9d:91:64:c5:09:9e:a7:04:4d:86:ed:27:b0: 13:d3:76:76:83:0e:b4:f2:ad:99:fc:f7:30:c3:6f: 34:f9:98:52:9e:8a:c1:30:50:74:14:87:e6:9c:b3: 11:99:c0:a0:83:45:2d:04:15:67:e0:77:b9:00:20: 88:71:e5:17:dc:b4:f7:86:b7:35:01:60:c1:2c:1c: 71:00:5d:34:5d:40:b1:74:19:e5:27:e7:63:9b:68: 54:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AA:B0:08:38:16:E5:EF:11:32:E1:75:30:9B:85:07:DD:A3:7A:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/70e37e41-10ad-3645-89a6-8e56f0894b2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:21:b4:14:9a:49:ad:5c:2f:1d:5e:d6:78:58:e9:57:12:5b: 91:62:b4:24:e6:69:c0:46:74:da:a2:84:5b:19:84:26:92:58: c8:f9:6b:ca:2b:46:56:31:d1:a7:4b:a5:e0:7c:01:21:9b:a5: c9:09:f4:ca:13:da:6a:87:d8:f7:e2:30:4b:4a:70:53:23:ad: 47:f2:e9:ab:ef:ff:79:c9:81:9f:d4:c3:0f:5c:99:44:20:a2: b3:3d:3b:04:5c:eb:5e:8f:19:df:58:d5:0c:ab:39:ff:46:5d: 36:90:9c:cf:1a:8e:d1:00:1b:fb:97:a6:75:13:8f:b3:7d:6b: 1e:47:77:69:4b:ed:97:a7:c9:69:ba:d8:40:5d:bb:bc:72:3e: ee:c7:f1:a0:6c:e7:46:2c:14:1e:c4:a9:90:c9:9c:cd:ec:67: 98:7f:37:b6:4a:ab:7a:52:ac:ff:e7:9f:94:ad:61:11:51:9e: 1b:47:93:36:00:0d:fc:c0:ee:ec:6b:c9:ce:63:36:6e:89:c2: 4b:e4:2f:2e:8a:7c:85:34:e4:f3:86:cd:d6:43:7e:c3:6b:05: c0:92:fc:be:ab:6c:94:3c:d5:d2:c1:36:8e:b8:5c:e6:0e:60: d0:f6:5f:b8:f0:67:5c:19:03:0f:0d:8c:3d:48:df:7a:d8:49: c2:45:5f:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFl7mN3JAE6WchUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI0MDMyMDE2MDIzM1oXDTI0MDYxODE2MDIzM1owLzEtMCsGA1UEAxMk YWFlM2Y5YjctNzc3OS00ZTkxLTk5NTgtM2YzZWE4YjhmYzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNSEsGPp502x/2yse/C9POakv17QnhNda0qr QQVsBkHk6ATWsexBYpM4TGkV5viUdmE+6d4Chb0dlsSIUFhptQY7Cd9UyGWTUj8Z 33YODYFULghNvfLjhU6E0cAxqCae7XKUfbBWSrIv/dzWQ3Z1VYC3RQuhVT261qyk /2ql42w33CRCRrbW0xhqvomR5a+kTgxactDFQ5/Mhpuj+KSGN32as14tQ52RZMUJ nqcETYbtJ7AT03Z2gw608q2Z/Pcww280+ZhSnorBMFB0FIfmnLMRmcCgg0UtBBVn 4He5ACCIceUX3LT3hrc1AWDBLBxxAF00XUCxdBnlJ+djm2hULQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKqsAg4FuXvETLhdTCbhQfdo3qMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNzBlMzdlNDEtMTBhZC0z NjQ1LTg5YTYtOGU1NmYwODk0YjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMhtBSaSa1cLx1e1nhY6VcSW5FitCTmacBGdNqihFsZhCaSWMj5a8or RlYx0adLpeB8ASGbpckJ9MoT2mqH2PfiMEtKcFMjrUfy6avv/3nJgZ/Uww9cmUQg orM9OwRc616PGd9Y1QyrOf9GXTaQnM8ajtEAG/uXpnUTj7N9ax5Hd2lL7ZenyWm6 2EBdu7xyPu7H8aBs50YsFB7EqZDJnM3sZ5h/N7ZKq3pSrP/nn5StYRFRnhtHkzYA DfzA7uxryc5jNm6JwkvkLy6KfIU05POGzdZDfsNrBcCS/L6rbJQ81dLBNo64XOYO YND2X7jwZ1wZAw8NjD1I33rYScJFX0w= -----END CERTIFICATE-----Generated at Thu May 2 04:29:47 2024 by rpki-client on console-fra.rpki-client.org