$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/ee9cb719-4703-3d4c-b166-248996c173b9.roa File: ee9cb719-4703-3d4c-b166-248996c173b9.roa (raw, json) Hash identifier: iVPCt0fcs34/DdS3vklsWUDg2dg3FsKpGAdjWZ1Oxaw= Subject key identifier: 6B:F5:5F:C5:B4:58:E2:28:04:A1:1F:E6:C2:E5:35:15:5A:09:A0:83 Certificate issuer: /CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Certificate serial: 010D0C9F43285845C0138E30B8D31E9F21DDDC80 Authority key identifier: 67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/ee9cb719-4703-3d4c-b166-248996c173b9.roa Signing time: Fri 03 May 2024 13:00:34 +0000 ROA not before: Fri 03 May 2024 13:00:34 +0000 ROA not after: Thu 01 Aug 2024 13:00:34 +0000 asID: 16276 IP address blocks: 23.171.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c0:13:8e:30:b8:d3:1e:9f:21:dd:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Validity Not Before: May 3 13:00:34 2024 GMT Not After : Aug 1 13:00:34 2024 GMT Subject: CN=8f1002aa-1728-47d1-8c43-e548b2bc9912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ff:fb:78:2f:ca:36:f7:13:47:a1:a0:92:13: ab:37:10:78:8b:10:10:c7:23:b3:ee:66:a4:56:e1: c8:c7:0d:f9:e0:c5:c2:97:f3:52:cd:60:9d:75:05: f5:d2:28:c0:9e:a1:53:47:e0:f9:7d:2f:1e:8f:59: 28:3a:e0:ab:9d:fd:1a:72:3f:91:b3:23:e0:be:9a: 8e:6b:44:d9:88:87:20:28:97:bb:22:ae:90:aa:4b: ea:61:71:ab:a7:27:0c:42:de:32:83:44:d5:8a:45: f7:e6:f5:e5:bb:3a:6b:ed:b7:52:fe:5c:f3:13:12: 3b:6b:a6:54:ac:d5:fd:db:cc:98:28:3a:60:7a:70: 6e:32:b0:db:f8:af:e4:a9:43:24:b8:8e:00:7c:c3: af:32:b3:9b:8d:50:fd:4e:d9:9e:86:d7:7f:00:2f: da:75:16:72:aa:52:ec:15:75:c1:26:8c:0c:58:10: 6a:e1:1f:bd:d9:ef:55:9e:b3:8d:58:c1:62:68:98: e5:5f:61:2b:4e:c4:d2:7a:05:95:76:e1:4a:db:93: dd:18:ce:f1:bc:39:2f:01:e5:6a:65:22:96:d9:e3: 23:e4:96:2b:e3:e7:10:07:d8:89:51:91:a6:8a:28: d6:3c:fc:fc:92:88:08:72:dc:da:ae:3e:e0:91:e0: 2d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F5:5F:C5:B4:58:E2:28:04:A1:1F:E6:C2:E5:35:15:5A:09:A0:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/ee9cb719-4703-3d4c-b166-248996c173b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl X509v3 Authority Key Identifier: keyid:67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer sbgp-ipAddrBlock: critical IPv4: 23.171.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:6e:77:d1:ef:10:4a:2b:63:4b:02:57:07:17:63:9a:50:78: 09:4b:77:a4:ff:79:a7:0d:ae:98:dd:a8:f3:26:24:3b:52:eb: f6:33:52:28:12:08:d5:b8:6a:43:4f:05:a7:6f:22:2e:39:4f: d2:e5:9f:ac:3f:ce:5d:82:a0:7e:52:c9:5f:7a:2c:d2:55:b5: e4:76:d8:1f:54:35:6e:ee:a1:2d:9c:15:12:dd:5f:f5:39:da: ba:d2:31:d4:0f:b4:ac:18:f2:16:c3:ef:56:e4:14:7e:5c:33: 32:a4:67:00:da:ae:cf:63:ca:a3:5b:e1:3b:b9:d2:34:95:72: d1:e8:60:06:79:c9:57:a8:8d:b7:85:3c:70:84:de:a5:c5:ed: 18:c2:a2:e7:2d:b7:51:25:ff:11:67:59:67:d1:28:10:f5:9a: d6:b9:7c:5a:7a:9f:8d:4f:a3:dc:88:55:3b:0c:94:45:e0:df: 8a:91:e1:fc:6c:ee:2d:c2:4b:8f:37:44:a3:4a:6f:72:53:d3: ba:00:e2:47:f8:96:75:64:cf:8e:61:d8:7a:9d:1c:fc:d4:12: d0:f6:5d:27:53:0e:c5:d3:bf:60:85:f6:c4:33:77:54:50:c7: d9:d4:2d:3c:f9:1c:4f:9d:75:e3:44:b6:2a:58:49:9b:1b:4c: f7:c0:43:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXAE44wuNMenyHd3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjliODc0MzQtMDBkZS00ZDJmLWE0NWQtYWJlMWVmZTVl Y2ZkMB4XDTI0MDUwMzEzMDAzNFoXDTI0MDgwMTEzMDAzNFowLzEtMCsGA1UEAxMk OGYxMDAyYWEtMTcyOC00N2QxLThjNDMtZTU0OGIyYmM5OTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk//7eC/KNvcTR6GgkhOrNxB4ixAQxyOz7mak VuHIxw354MXCl/NSzWCddQX10ijAnqFTR+D5fS8ej1koOuCrnf0acj+RsyPgvpqO a0TZiIcgKJe7Iq6QqkvqYXGrpycMQt4yg0TVikX35vXluzpr7bdS/lzzExI7a6ZU rNX928yYKDpgenBuMrDb+K/kqUMkuI4AfMOvMrObjVD9Ttmehtd/AC/adRZyqlLs FXXBJowMWBBq4R+92e9VnrONWMFiaJjlX2ErTsTSegWVduFK25PdGM7xvDkvAeVq ZSKW2eMj5JYr4+cQB9iJUZGmiijWPPz8kogIctzarj7gkeAtSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGv1X8W0WOIoBKEf5sLlNRVaCaCDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOWI4 NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUxZWZlNWVjZmQvZWU5Y2I3MTktNDcwMy0z ZDRjLWIxNjYtMjQ4OTk2YzE3M2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjliODc0MzQtMDBkZS00ZDJmLWE0 NWQtYWJlMWVmZTVlY2ZkL2I5Yjg3NDM0LTAwZGUtNGQyZi1hNDVkLWFiZTFlZmU1 ZWNmZC5jcmwwHwYDVR0jBBgwFoAUZ7qrgtUltq3erC7/J+WFnJfOPGswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iOWI4NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUx ZWZlNWVjZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6uoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFud9HvEEorY0sCVwcXY5pQeAlLd6T/eacNrpjdqPMmJDtS6/YzUigS CNW4akNPBadvIi45T9Lln6w/zl2CoH5SyV96LNJVteR22B9UNW7uoS2cFRLdX/U5 2rrSMdQPtKwY8hbD71bkFH5cMzKkZwDars9jyqNb4Tu50jSVctHoYAZ5yVeojbeF PHCE3qXF7RjCouctt1El/xFnWWfRKBD1mta5fFp6n41Po9yIVTsMlEXg34qR4fxs 7i3CS483RKNKb3JT07oA4kf4lnVkz45h2HqdHPzUEtD2XSdTDsXTv2CF9sQzd1RQ x9nULTz5HE+ddeNEtipYSZsbTPfAQyE= -----END CERTIFICATE-----Generated at Mon May 20 15:18:48 2024 by rpki-client on console-fra.rpki-client.org