$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/7d789fe7-d176-37a2-ba55-fe1a9a434262.roa File: 7d789fe7-d176-37a2-ba55-fe1a9a434262.roa (raw, json) Hash identifier: qwbcJwVzvJR0UsUR/IV5ZTmzLGWt9hVzatZWN9pxt+Q= Subject key identifier: 4C:26:65:3C:D4:47:81:9F:0F:BD:F0:86:A3:31:0B:7C:AF:99:F5:FA Certificate issuer: /CN=0f521759-b880-4a7d-be8b-3ce70e4aba83 Certificate serial: 010D0C9F43285845A2C344D88848E7690F8A8E00 Authority key identifier: 07:C2:8B:51:71:01:77:8F:B1:D5:C0:66:6F:21:6A:D7:24:B0:E5:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/7d789fe7-d176-37a2-ba55-fe1a9a434262.roa Signing time: Tue 23 Apr 2024 01:00:25 +0000 ROA not before: Tue 23 Apr 2024 01:00:25 +0000 ROA not after: Mon 22 Jul 2024 01:00:25 +0000 asID: 398065 IP address blocks: 23.145.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a2:c3:44:d8:88:48:e7:69:0f:8a:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f521759-b880-4a7d-be8b-3ce70e4aba83 Validity Not Before: Apr 23 01:00:25 2024 GMT Not After : Jul 22 01:00:25 2024 GMT Subject: CN=461c108b-8172-490d-b3ca-6c234cf42f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2f:41:e1:3c:e3:ca:0d:a8:8f:7c:db:0a:95: eb:25:f7:69:f4:4e:2c:e9:0e:39:e3:da:25:de:0b: 0f:45:a7:42:fc:6e:5e:ad:dd:59:b6:b4:9e:db:29: 0f:f5:31:14:4b:96:27:86:6c:b3:23:e9:9f:51:8a: 39:3c:12:45:60:2d:f9:37:87:ad:82:bd:e0:17:68: 47:72:23:ff:88:f9:c6:00:8c:5e:b7:7a:4d:fb:7b: e5:33:44:20:fb:c7:73:c3:cf:36:45:98:59:f9:8f: be:42:c6:7b:37:71:3e:2d:29:89:f9:c4:bf:5f:1e: 49:65:85:8b:ca:d3:20:40:d4:e2:8f:64:2a:7d:31: f1:2d:ed:7b:63:32:73:be:44:49:a4:c6:3e:0f:c3: 91:79:3e:27:d8:38:7e:2f:aa:13:34:32:62:18:5c: b8:05:01:8d:c7:55:69:9b:48:d4:38:76:c6:e0:a5: 2d:0d:a1:9c:81:39:02:51:f6:0d:07:43:6d:e4:5e: 67:ea:16:4e:5c:84:5e:44:1c:82:09:16:12:1c:40: 13:9d:b0:18:05:da:0c:5e:86:42:9b:6c:29:ca:37: a7:0a:ef:8d:cf:39:ee:cc:58:00:d2:6a:3f:f4:ca: 63:4f:d0:b6:a9:55:5d:f3:48:9f:ba:a6:85:5c:bc: 84:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:26:65:3C:D4:47:81:9F:0F:BD:F0:86:A3:31:0B:7C:AF:99:F5:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/7d789fe7-d176-37a2-ba55-fe1a9a434262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.crl X509v3 Authority Key Identifier: keyid:07:C2:8B:51:71:01:77:8F:B1:D5:C0:66:6F:21:6A:D7:24:B0:E5:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer sbgp-ipAddrBlock: critical IPv4: 23.145.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:87:fa:22:01:f4:b3:30:c9:a9:10:61:62:44:18:82:c3:5d: 95:64:f5:84:1c:08:ca:b2:d7:0f:bb:d8:42:43:08:31:07:32: eb:95:fe:00:b8:13:97:77:42:6a:f0:50:34:1b:4a:b1:22:e5: 07:c7:1d:2f:20:c4:d1:09:5d:08:20:08:bd:f2:8a:89:c3:51: f4:fc:52:da:93:0f:f0:2c:dd:7f:b9:72:73:fe:15:36:0d:fd: 86:63:24:2d:66:ba:c8:3a:4b:17:0d:16:c6:b7:ff:b2:9a:28: 3f:37:bc:1a:96:1e:4b:a6:8f:5a:24:74:25:88:3e:5b:d8:6b: e5:01:a7:e4:55:d2:24:96:2e:5e:36:55:29:37:d7:d4:f9:8d: 76:66:62:fc:9a:1f:63:8c:21:bd:02:52:f9:08:88:fd:42:4e: 86:04:a0:17:0e:cc:04:41:5e:17:bc:dc:78:06:21:2b:49:a1: d8:ed:a0:ad:2f:b9:70:84:d5:2a:ce:a4:91:c3:1a:8d:df:58: 16:01:3b:92:a7:8c:b6:9c:2b:0a:c3:a3:11:ef:49:78:32:cb: 59:71:f5:74:31:7f:22:61:f9:48:5e:6d:35:05:fd:11:4e:30: 00:d5:e3:de:7c:7f:b3:44:c1:ef:b5:e1:9e:f3:e5:77:cf:9f: 4d:01:d4:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWiw0TYiEjnaQ+KjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY1MjE3NTktYjg4MC00YTdkLWJlOGItM2NlNzBlNGFi YTgzMB4XDTI0MDQyMzAxMDAyNVoXDTI0MDcyMjAxMDAyNVowLzEtMCsGA1UEAxMk NDYxYzEwOGItODE3Mi00OTBkLWIzY2EtNmMyMzRjZjQyZjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4i9B4Tzjyg2oj3zbCpXrJfdp9E4s6Q4549ol 3gsPRadC/G5erd1ZtrSe2ykP9TEUS5YnhmyzI+mfUYo5PBJFYC35N4etgr3gF2hH ciP/iPnGAIxet3pN+3vlM0Qg+8dzw882RZhZ+Y++QsZ7N3E+LSmJ+cS/Xx5JZYWL ytMgQNTij2QqfTHxLe17YzJzvkRJpMY+D8OReT4n2Dh+L6oTNDJiGFy4BQGNx1Vp m0jUOHbG4KUtDaGcgTkCUfYNB0Nt5F5n6hZOXIReRByCCRYSHEATnbAYBdoMXoZC m2wpyjenCu+NzznuzFgA0mo/9MpjT9C2qVVd80ifuqaFXLyEEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwmZTzUR4GfD73whqMxC3yvmfX6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZjUy MTc1OS1iODgwLTRhN2QtYmU4Yi0zY2U3MGU0YWJhODMvN2Q3ODlmZTctZDE3Ni0z N2EyLWJhNTUtZmUxYTlhNDM0MjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGY1MjE3NTktYjg4MC00YTdkLWJl OGItM2NlNzBlNGFiYTgzLzBmNTIxNzU5LWI4ODAtNGE3ZC1iZThiLTNjZTcwZTRh YmE4My5jcmwwHwYDVR0jBBgwFoAUB8KLUXEBd4+x1cBmbyFq1ySw5VQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZjUyMTc1OS1iODgwLTRhN2QtYmU4Yi0zY2U3 MGU0YWJhODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKH+iIB9LMwyakQYWJEGILDXZVk9YQcCMqy1w+72EJDCDEHMuuV/gC4 E5d3QmrwUDQbSrEi5QfHHS8gxNEJXQggCL3yionDUfT8UtqTD/As3X+5cnP+FTYN /YZjJC1musg6SxcNFsa3/7KaKD83vBqWHkumj1okdCWIPlvYa+UBp+RV0iSWLl42 VSk319T5jXZmYvyaH2OMIb0CUvkIiP1CToYEoBcOzARBXhe83HgGIStJodjtoK0v uXCE1SrOpJHDGo3fWBYBO5KnjLacKwrDoxHvSXgyy1lx9XQxfyJh+UhebTUF/RFO MADV4958f7NEwe+14Z7z5XfPn00B1JA= -----END CERTIFICATE-----Generated at Tue May 14 02:14:16 2024 by rpki-client on console-ams.rpki-client.org