$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/a4fced69-675a-3abb-8afe-bf1ecb044604.roa File: a4fced69-675a-3abb-8afe-bf1ecb044604.roa (raw, json) Hash identifier: 681KEejIkZPVb/apxnfxedJPcIdQt1KMUISxkxtigcc= Subject key identifier: 32:37:81:0F:CE:9E:7E:5C:D9:42:80:32:4F:62:AC:F2:B8:A5:46:BE Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F43285845C179156FC10D3FC5BABD3500 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/a4fced69-675a-3abb-8afe-bf1ecb044604.roa Signing time: Sat 04 May 2024 01:00:25 +0000 ROA not before: Sat 04 May 2024 01:00:25 +0000 ROA not after: Fri 02 Aug 2024 01:00:25 +0000 asID: 3257 IP address blocks: 23.234.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c1:79:15:6f:c1:0d:3f:c5:ba:bd:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: May 4 01:00:25 2024 GMT Not After : Aug 2 01:00:25 2024 GMT Subject: CN=ee2540db-9f03-49a8-9db1-edfd1346a20e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c9:2f:01:ff:55:39:4b:fe:4f:fe:d1:34:7f: b4:42:98:c1:ab:07:70:a1:6d:b4:59:75:5f:41:30: 1f:8d:74:35:7a:04:f9:6b:34:cd:66:c7:ed:6f:20: 4a:a7:d7:c8:e5:69:46:99:c0:7f:8e:f8:03:07:b0: d0:cb:f2:32:18:d7:fc:7f:fb:a9:61:82:42:3b:ba: 42:f7:e5:fd:30:f4:bc:34:3d:d2:6a:29:01:ed:81: a0:22:c7:24:29:57:45:52:58:e4:5b:21:ae:29:44: 49:18:46:15:b6:44:b4:3c:6f:cc:ac:1d:36:c2:e9: 7c:bb:b9:b6:0b:d3:e6:c2:ce:29:c7:f8:54:33:9e: e9:46:a2:ce:85:3a:3c:0a:41:03:40:a0:f2:32:2f: 17:5b:bc:82:eb:77:7e:a3:fd:6a:b0:af:69:2e:1d: 2e:4e:63:81:66:24:33:a2:83:1e:ee:0c:67:01:b7: 47:03:51:fc:51:a0:84:41:3d:5c:58:f7:fa:d2:a7: 70:37:64:2d:aa:05:14:f9:f4:e9:5c:02:a9:4a:53: da:ed:90:ba:23:e6:d3:66:89:dc:e4:81:08:b4:5d: 84:a8:03:b8:92:88:6b:d2:a3:6b:54:6f:e6:d0:b3: 52:ee:0d:a4:ad:48:39:5d:4e:20:3a:d5:65:80:60: 44:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:37:81:0F:CE:9E:7E:5C:D9:42:80:32:4F:62:AC:F2:B8:A5:46:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/a4fced69-675a-3abb-8afe-bf1ecb044604.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 23.234.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:0c:c6:e1:4a:0e:91:9c:bb:72:ef:a2:ae:b8:27:41:54:f1: 71:8e:13:ff:b2:f6:91:1e:0b:52:b3:4e:0a:df:f7:08:76:62: 68:7c:95:1e:1a:ae:16:3d:03:ee:15:c6:86:cc:a6:02:bb:27: 09:24:72:46:18:8b:82:eb:2d:13:5f:26:45:5b:6a:83:2f:97: 1f:fe:a4:f4:b4:ff:45:15:79:9a:21:cf:28:0e:5f:d8:66:e2: 36:af:4f:e2:ba:51:12:ad:d0:81:c6:0f:c6:95:c8:6e:da:1b: 61:11:14:51:14:2f:bb:7c:c7:32:e1:91:11:70:b0:5d:68:60: e8:3f:bf:ff:89:85:dd:c3:67:1e:7f:62:a1:66:d7:99:53:ae: 8e:d6:26:da:89:6b:0a:8e:3e:2b:69:1a:80:06:7b:4e:aa:3a: 60:de:99:66:fb:0c:19:c0:f0:c1:87:c6:68:92:6b:25:74:f8: 78:ec:bc:73:5b:7c:0a:3d:0e:9a:04:f2:3a:fb:7d:93:03:d1: 4e:e8:9e:91:fa:fd:a0:18:a4:56:a2:8c:b4:0e:e2:03:78:4f: 48:79:81:0c:06:61:87:ff:11:22:07:1b:16:88:b3:da:e9:e1: d7:91:9a:05:94:04:66:08:cf:02:a7:16:4a:e1:bd:0d:e3:2b: 96:13:97:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXBeRVvwQ0/xbq9NQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI0MDUwNDAxMDAyNVoXDTI0MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk ZWUyNTQwZGItOWYwMy00OWE4LTlkYjEtZWRmZDEzNDZhMjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhskvAf9VOUv+T/7RNH+0QpjBqwdwoW20WXVf QTAfjXQ1egT5azTNZsftbyBKp9fI5WlGmcB/jvgDB7DQy/IyGNf8f/upYYJCO7pC 9+X9MPS8ND3SaikB7YGgIsckKVdFUljkWyGuKURJGEYVtkS0PG/MrB02wul8u7m2 C9Pmws4px/hUM57pRqLOhTo8CkEDQKDyMi8XW7yC63d+o/1qsK9pLh0uTmOBZiQz ooMe7gxnAbdHA1H8UaCEQT1cWPf60qdwN2QtqgUU+fTpXAKpSlPa7ZC6I+bTZonc 5IEItF2EqAO4kohr0qNrVG/m0LNS7g2krUg5XU4gOtVlgGBEQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDI3gQ/Onn5c2UKAMk9irPK4pUa+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvYTRmY2VkNjktNjc1YS0z YWJiLThhZmUtYmYxZWNiMDQ0NjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+qIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0MxuFKDpGcu3Lvoq64J0FU8XGOE/+y9pEeC1KzTgrf9wh2Ymh8lR4a rhY9A+4VxobMpgK7JwkkckYYi4LrLRNfJkVbaoMvlx/+pPS0/0UVeZohzygOX9hm 4javT+K6URKt0IHGD8aVyG7aG2ERFFEUL7t8xzLhkRFwsF1oYOg/v/+Jhd3DZx5/ YqFm15lTro7WJtqJawqOPitpGoAGe06qOmDemWb7DBnA8MGHxmiSayV0+HjsvHNb fAo9DpoE8jr7fZMD0U7onpH6/aAYpFaijLQO4gN4T0h5gQwGYYf/ESIHGxaIs9rp 4deRmgWUBGYIzwKnFkrhvQ3jK5YTl4A= -----END CERTIFICATE-----Generated at Sat May 4 15:04:47 2024 by rpki-client on console-fra.rpki-client.org