$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/86ff9d61-f814-3083-884f-8430979078a9.roa File: 86ff9d61-f814-3083-884f-8430979078a9.roa (raw, json) Hash identifier: APxZeW476M/pQ+aN6F9gSi0sbLzvW/+/6E55PcgpUc8= Subject key identifier: 1D:CE:40:1B:43:C3:C6:4D:4C:EC:91:93:28:CA:BD:C4:A9:74:CD:7C Certificate issuer: /CN=46b96165-9c22-47d1-962f-486840cec7fa Certificate serial: 010D0C9F43285845DD63A442771B246200E1BCC0 Authority key identifier: 7E:68:D8:AA:EB:33:0A:33:7C:88:D9:3E:FA:7D:E1:FC:34:A1:2F:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/86ff9d61-f814-3083-884f-8430979078a9.roa Signing time: Tue 14 May 2024 01:00:24 +0000 ROA not before: Tue 14 May 2024 01:00:24 +0000 ROA not after: Mon 12 Aug 2024 01:00:24 +0000 asID: 11117 IP address blocks: 23.171.8.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:dd:63:a4:42:77:1b:24:62:00:e1:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46b96165-9c22-47d1-962f-486840cec7fa Validity Not Before: May 14 01:00:24 2024 GMT Not After : Aug 12 01:00:24 2024 GMT Subject: CN=95aad84f-b530-4693-8a0b-337760f50a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bc:17:bf:2d:f4:d5:26:a0:c0:8a:a8:2f:63: 14:21:15:84:75:21:77:fd:02:89:0a:4f:76:11:77: f2:d4:e3:c5:69:07:d8:0d:41:31:32:f7:d6:b5:b0: b1:31:b5:1c:27:11:5a:cf:0f:13:76:1f:89:b9:b8: 95:31:fd:26:d4:34:a4:f4:58:ec:e8:5d:f8:9e:53: 95:23:b3:e9:13:87:45:17:1b:d3:af:52:82:31:55: ad:eb:78:27:c9:8b:a6:77:8d:87:99:08:95:6e:6c: 31:a4:67:51:bd:26:9a:6b:17:b2:01:72:24:3c:a8: 07:9d:2c:10:9e:43:18:9d:14:58:e8:d1:09:10:d1: 81:20:9f:77:a7:1e:fd:78:c2:7d:39:55:75:74:11: a5:d1:86:9a:15:7d:c5:2f:fd:3b:fd:21:49:1c:82: 44:03:68:01:f8:a8:69:57:f2:44:a3:0d:9c:9e:42: 71:12:17:ff:1c:1d:5d:92:55:4a:3b:06:ba:61:8c: 14:1f:0c:7b:74:53:01:d0:d6:40:07:23:3d:99:16: 27:87:6d:1f:65:8e:b4:07:68:61:54:42:98:65:6b: 15:d4:e1:3e:24:e6:c1:4a:d9:a4:a7:35:d4:ce:34: 58:37:ab:7e:ee:22:0e:41:c5:28:76:51:23:6d:fd: ec:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:CE:40:1B:43:C3:C6:4D:4C:EC:91:93:28:CA:BD:C4:A9:74:CD:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/86ff9d61-f814-3083-884f-8430979078a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.crl X509v3 Authority Key Identifier: keyid:7E:68:D8:AA:EB:33:0A:33:7C:88:D9:3E:FA:7D:E1:FC:34:A1:2F:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer sbgp-ipAddrBlock: critical IPv4: 23.171.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:f0:67:1a:3d:4c:9f:ff:26:99:15:0b:f6:47:39:8e:e3:1e: 80:bc:8f:7e:0e:f7:4a:f8:3a:fb:0c:db:3d:01:8a:b3:cb:03: 74:18:64:5e:c6:5b:58:21:31:04:48:23:3d:74:c7:45:67:11: 57:80:23:59:ae:ef:ef:fc:70:b9:4e:98:40:a4:9d:5f:65:b0: dd:3a:d3:79:b1:98:24:bd:2e:80:11:9b:96:86:2f:a7:7e:5e: a6:0e:13:d0:3a:98:97:aa:74:42:88:c2:b0:e2:58:74:2e:8f: ee:de:46:22:35:c7:24:6a:bc:f5:9c:f5:66:de:d1:ba:1b:45: 78:cd:51:27:34:aa:71:ed:82:e2:bd:04:07:f3:7b:09:e5:3e: 56:93:00:ae:2e:31:83:0d:70:1c:df:57:1c:60:5c:23:c7:f6: b5:94:89:ea:4f:d4:4c:61:fa:b3:1c:29:a0:a6:fb:6b:06:11: 38:c3:b3:23:18:43:80:31:4f:ab:f5:fd:06:0f:64:0c:28:ee: a4:41:da:f7:99:ba:d3:01:a7:24:e8:79:e5:eb:84:f0:d9:ff: 29:26:3c:f5:3e:02:b3:6a:ca:15:9f:25:bc:b1:1d:1e:05:44: 4f:bd:37:ee:ea:e6:20:7f:bf:2b:f5:0c:2b:c6:23:f4:1f:78: e7:80:05:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXdY6RCdxskYgDhvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDZiOTYxNjUtOWMyMi00N2QxLTk2MmYtNDg2ODQwY2Vj N2ZhMB4XDTI0MDUxNDAxMDAyNFoXDTI0MDgxMjAxMDAyNFowLzEtMCsGA1UEAxMk OTVhYWQ4NGYtYjUzMC00NjkzLThhMGItMzM3NzYwZjUwYTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bwXvy301SagwIqoL2MUIRWEdSF3/QKJCk92 EXfy1OPFaQfYDUExMvfWtbCxMbUcJxFazw8Tdh+JubiVMf0m1DSk9Fjs6F34nlOV I7PpE4dFFxvTr1KCMVWt63gnyYumd42HmQiVbmwxpGdRvSaaaxeyAXIkPKgHnSwQ nkMYnRRY6NEJENGBIJ93px79eMJ9OVV1dBGl0YaaFX3FL/07/SFJHIJEA2gB+Khp V/JEow2cnkJxEhf/HB1dklVKOwa6YYwUHwx7dFMB0NZAByM9mRYnh20fZY60B2hh VEKYZWsV1OE+JObBStmkpzXUzjRYN6t+7iIOQcUodlEjbf3sUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3OQBtDw8ZNTOyRkyjKvcSpdM18MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NmI5 NjE2NS05YzIyLTQ3ZDEtOTYyZi00ODY4NDBjZWM3ZmEvODZmZjlkNjEtZjgxNC0z MDgzLTg4NGYtODQzMDk3OTA3OGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDZiOTYxNjUtOWMyMi00N2QxLTk2 MmYtNDg2ODQwY2VjN2ZhLzQ2Yjk2MTY1LTljMjItNDdkMS05NjJmLTQ4Njg0MGNl YzdmYS5jcmwwHwYDVR0jBBgwFoAUfmjYquszCjN8iNk++n3h/DShL6YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NmI5NjE2NS05YzIyLTQ3ZDEtOTYyZi00ODY4 NDBjZWM3ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6sIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7wZxo9TJ//JpkVC/ZHOY7jHoC8j34O90r4OvsM2z0BirPLA3QYZF7G W1ghMQRIIz10x0VnEVeAI1mu7+/8cLlOmECknV9lsN0603mxmCS9LoARm5aGL6d+ XqYOE9A6mJeqdEKIwrDiWHQuj+7eRiI1xyRqvPWc9Wbe0bobRXjNUSc0qnHtguK9 BAfzewnlPlaTAK4uMYMNcBzfVxxgXCPH9rWUiepP1Exh+rMcKaCm+2sGETjDsyMY Q4AxT6v1/QYPZAwo7qRB2veZutMBpyToeeXrhPDZ/ykmPPU+ArNqyhWfJbyxHR4F RE+9N+7q5iB/vyv1DCvGI/QfeOeABc4= -----END CERTIFICATE-----Generated at Wed May 22 22:42:55 2024 by rpki-client on console-fra.rpki-client.org