$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/cf57be58-bf9f-36ed-8c8d-829a5f932254.roa File: cf57be58-bf9f-36ed-8c8d-829a5f932254.roa (raw, json) Hash identifier: TRA6CvMIKhXbTjEzIYC4pLspXyP+gpHUHRvAzgeONwY= Subject key identifier: 5A:2F:79:0E:79:5C:8F:51:F7:E6:8B:7E:60:89:CD:88:FF:18:0E:3E Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F43285845E88E638575FE65CB3D1A8680 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/cf57be58-bf9f-36ed-8c8d-829a5f932254.roa Signing time: Sat 18 May 2024 01:00:27 +0000 ROA not before: Sat 18 May 2024 01:00:27 +0000 ROA not after: Fri 16 Aug 2024 01:00:27 +0000 asID: 23428 IP address blocks: 23.136.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:e8:8e:63:85:75:fe:65:cb:3d:1a:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: May 18 01:00:27 2024 GMT Not After : Aug 16 01:00:27 2024 GMT Subject: CN=0fa71ceb-89fc-43e0-af8a-5ee188116290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e2:36:33:7b:18:a4:44:59:9f:34:14:cf:3c: ae:52:23:19:9a:61:9a:61:fa:31:26:39:8d:7d:d6: b1:c1:10:e4:1b:a8:ed:43:21:a5:3b:83:e7:89:18: 17:39:a3:61:bb:30:a2:a8:48:85:d8:c5:30:4c:31: a9:b5:01:ab:44:67:bc:1d:c0:25:b3:99:84:cc:4a: f0:8d:ae:0b:c5:eb:fe:62:b0:39:7a:1f:a4:14:24: 84:68:eb:3c:0e:b9:76:9a:82:3e:18:5b:fb:ca:d6: 28:78:48:19:6e:76:96:21:4d:dc:ed:5e:ba:df:fa: e6:82:e9:f5:79:9d:9d:cc:a5:78:bc:e1:0f:b6:ce: 23:3c:9b:84:b4:97:38:5c:49:1a:50:80:e4:c8:bb: 38:ad:bf:99:70:3f:c3:66:2d:b5:4e:a0:78:d9:67: f7:25:ec:ba:23:5c:ed:bb:da:2f:87:aa:aa:6c:ae: 3e:72:d1:6b:75:ba:83:3b:2c:bd:65:a7:83:e4:1e: 67:33:cd:b9:40:6d:c0:a6:a6:36:bf:4a:eb:da:8c: 21:73:1a:eb:80:1f:b2:d6:74:32:e1:56:6e:07:6e: 05:61:a8:39:83:b4:8e:db:76:09:e2:28:b0:12:8d: b3:d0:68:fd:c2:f9:28:3a:ff:b9:a6:53:f9:c9:d2: 58:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2F:79:0E:79:5C:8F:51:F7:E6:8B:7E:60:89:CD:88:FF:18:0E:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/cf57be58-bf9f-36ed-8c8d-829a5f932254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv4: 23.136.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ef:46:5d:06:b8:26:75:49:2b:84:96:f7:ae:60:64:2e:df: a0:8d:b1:e8:3f:36:6c:7b:56:2f:31:76:5f:32:9f:d9:b1:8b: e6:a8:92:7e:d2:70:86:c4:fb:9f:54:9f:90:33:70:02:c8:71: d3:74:19:9a:fa:8c:1e:dd:e0:73:32:12:98:94:3d:64:b6:29: 0a:eb:6d:cc:e7:0f:37:e5:19:7a:c0:95:dd:f6:ba:e1:38:61: da:7d:de:8e:fa:b6:d5:cb:58:60:b8:a7:98:75:51:77:34:eb: 17:cc:40:fb:6d:05:f1:28:7d:77:42:85:0c:fb:a0:90:0f:fa: e6:f0:e8:9f:e3:43:4c:e7:27:1a:f5:49:bc:10:b3:b8:37:ee: c4:5a:1b:40:ec:5d:5a:95:c9:a5:9f:e5:b1:fa:a4:c4:b7:be: 89:85:59:81:58:e5:45:b8:a1:8e:21:61:07:bf:b1:c0:83:a0: 67:37:a3:97:b1:0c:53:8f:32:7c:8a:41:f3:85:d5:cf:bb:c8: bf:d3:a3:bd:4f:95:89:33:7a:36:86:54:09:67:2b:99:04:39: 23:31:5d:0d:89:04:3a:60:89:a2:bb:72:a7:52:93:28:d2:c7: 9d:23:34:21:bb:30:75:85:89:89:0d:e3:8e:ac:70:38:5d:08: 82:0e:7c:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXojmOFdf5lyz0ahoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI0MDUxODAxMDAyN1oXDTI0MDgxNjAxMDAyN1owLzEtMCsGA1UEAxMk MGZhNzFjZWItODlmYy00M2UwLWFmOGEtNWVlMTg4MTE2MjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOI2M3sYpERZnzQUzzyuUiMZmmGaYfoxJjmN fdaxwRDkG6jtQyGlO4PniRgXOaNhuzCiqEiF2MUwTDGptQGrRGe8HcAls5mEzErw ja4Lxev+YrA5eh+kFCSEaOs8Drl2moI+GFv7ytYoeEgZbnaWIU3c7V663/rmgun1 eZ2dzKV4vOEPts4jPJuEtJc4XEkaUIDkyLs4rb+ZcD/DZi21TqB42Wf3Jey6I1zt u9ovh6qqbK4+ctFrdbqDOyy9ZaeD5B5nM825QG3ApqY2v0rr2owhcxrrgB+y1nQy 4VZuB24FYag5g7SO23YJ4iiwEo2z0Gj9wvkoOv+5plP5ydJYNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoveQ55XI9R9+aLfmCJzYj/GA4+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvY2Y1N2JlNTgtYmY5Zi0z NmVkLThjOGQtODI5YTVmOTMyMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4jpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfvRl0GuCZ1SSuElveuYGQu36CNseg/Nmx7Vi8xdl8yn9mxi+aokn7S cIbE+59Un5AzcALIcdN0GZr6jB7d4HMyEpiUPWS2KQrrbcznDzflGXrAld32uuE4 Ydp93o76ttXLWGC4p5h1UXc06xfMQPttBfEofXdChQz7oJAP+ubw6J/jQ0znJxr1 SbwQs7g37sRaG0DsXVqVyaWf5bH6pMS3vomFWYFY5UW4oY4hYQe/scCDoGc3o5ex DFOPMnyKQfOF1c+7yL/To71PlYkzejaGVAlnK5kEOSMxXQ2JBDpgiaK7cqdSkyjS x50jNCG7MHWFiYkN446scDhdCIIOfLU= -----END CERTIFICATE-----Generated at Tue Jun 18 03:37:00 2024 by rpki-client on console-ams.rpki-client.org