$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/a4e3b6e2-c7d0-3434-b7d2-cebca6c2eebb.roa File: a4e3b6e2-c7d0-3434-b7d2-cebca6c2eebb.roa (raw, json) Hash identifier: /G3cR7sxHBhdV6ZiaBUatluWjlJHtX9BT1LhwNlKUE4= Subject key identifier: 49:9C:1B:E8:71:FD:F6:AF:91:89:BD:8E:86:F4:DD:89:FB:87:A4:C5 Certificate issuer: /CN=1e5f8ff8-77a0-47e9-ba79-ccaf147a2071 Certificate serial: 010D0C9F4328584596334045E282750AE6048020 Authority key identifier: 07:9B:4F:44:5B:60:A0:FC:DB:28:42:37:22:6D:6D:18:B4:1C:8E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/a4e3b6e2-c7d0-3434-b7d2-cebca6c2eebb.roa Signing time: Thu 18 Apr 2024 13:00:33 +0000 ROA not before: Thu 18 Apr 2024 13:00:33 +0000 ROA not after: Wed 17 Jul 2024 13:00:33 +0000 asID: 397939 IP address blocks: 23.145.112.0/24 maxlen: 24 2605:7340::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:96:33:40:45:e2:82:75:0a:e6:04:80:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5f8ff8-77a0-47e9-ba79-ccaf147a2071 Validity Not Before: Apr 18 13:00:33 2024 GMT Not After : Jul 17 13:00:33 2024 GMT Subject: CN=545469a4-e5c3-4587-8fe8-d73a72dba994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:89:32:8b:25:63:07:88:b9:06:71:fc:b4:fd: 2b:ea:bd:5f:5b:12:95:87:47:85:b6:ee:6e:8f:05: 37:23:08:30:d6:e7:dc:ba:a7:0c:3d:0a:60:34:24: ae:a5:95:2e:d9:82:3c:52:6e:24:90:a5:e5:d1:5a: 9c:e7:d9:a0:cd:f4:26:b6:6e:cd:ed:f7:be:44:2a: c3:57:f0:50:04:0a:f0:52:25:15:50:54:76:ac:0e: 70:17:45:cb:7a:e7:63:4f:96:70:d4:a1:04:a1:8a: 93:fe:16:29:f4:eb:78:6e:ca:d3:ea:8c:b7:e2:8c: 1a:2d:76:66:43:96:09:4f:ec:8a:54:09:2f:78:24: 27:da:f1:3a:45:9d:5f:e4:b4:de:fc:83:50:8d:e6: 30:26:30:23:47:78:d7:08:c6:1b:f9:69:01:9f:34: 12:eb:a7:8b:23:a6:c4:20:27:56:19:5b:39:bc:ac: c3:5f:b7:c7:53:aa:79:30:50:ba:49:8b:23:c4:d2: 29:89:1b:00:c6:9c:d8:c4:a2:04:27:ad:eb:2b:3d: 25:91:fc:35:dc:55:ba:de:88:22:7e:44:c8:f4:a7: 16:b8:8c:d4:65:b7:21:c9:a3:cb:28:0d:4c:e4:75: 73:a0:7a:6f:aa:b3:bb:3e:ba:c8:b1:40:84:17:5c: 8e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9C:1B:E8:71:FD:F6:AF:91:89:BD:8E:86:F4:DD:89:FB:87:A4:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/a4e3b6e2-c7d0-3434-b7d2-cebca6c2eebb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.crl X509v3 Authority Key Identifier: keyid:07:9B:4F:44:5B:60:A0:FC:DB:28:42:37:22:6D:6D:18:B4:1C:8E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer sbgp-ipAddrBlock: critical IPv4: 23.145.112.0/24 IPv6: 2605:7340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:08:8e:0b:a4:99:e1:80:ba:c4:ba:2b:ab:1a:18:a4:c0:d7: b0:f5:03:e1:b0:d6:10:fe:57:a9:a7:9a:61:6d:00:55:8a:a0: ab:a6:27:79:36:f5:3a:45:0d:20:83:b1:b5:fc:d6:3a:38:f1: c6:38:7d:4b:a8:9f:96:c5:3f:4a:4a:2e:e3:49:54:a8:43:9b: c3:35:e8:1d:03:16:de:55:c8:64:2d:86:5d:59:94:44:92:9f: 31:7c:03:e8:14:ec:34:35:10:f9:76:48:a5:63:89:2e:3b:03: 2a:99:c9:1b:81:08:25:36:df:eb:60:0f:8b:19:d6:92:85:0d: ea:9c:89:9f:23:c5:a1:d2:b0:69:88:55:64:43:51:2d:3a:1d: 49:8b:32:4f:65:63:b5:e7:78:d7:58:69:e4:69:f7:c2:f5:c6: d5:81:26:b8:85:20:74:c1:d4:67:3b:37:02:0c:9e:db:b0:e3: 2b:89:26:e0:cc:e4:bd:d9:a8:c9:a5:49:5d:13:56:0d:40:51: ef:ba:e6:90:08:20:13:d3:a4:4d:9c:2c:03:5c:8f:65:62:bc: 95:a8:02:59:c6:76:fa:b2:7d:a0:b6:22:ff:68:7b:e1:17:40: fa:a1:01:5c:98:9b:b2:4c:50:8a:7c:e2:9f:76:4c:54:1c:84: 8a:6a:43:8c -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEWWM0BF4oJ1CuYEgCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU1ZjhmZjgtNzdhMC00N2U5LWJhNzktY2NhZjE0N2Ey MDcxMB4XDTI0MDQxODEzMDAzM1oXDTI0MDcxNzEzMDAzM1owLzEtMCsGA1UEAxMk NTQ1NDY5YTQtZTVjMy00NTg3LThmZTgtZDczYTcyZGJhOTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YkyiyVjB4i5BnH8tP0r6r1fWxKVh0eFtu5u jwU3Iwgw1ufcuqcMPQpgNCSupZUu2YI8Um4kkKXl0Vqc59mgzfQmtm7N7fe+RCrD V/BQBArwUiUVUFR2rA5wF0XLeudjT5Zw1KEEoYqT/hYp9Ot4bsrT6oy34owaLXZm Q5YJT+yKVAkveCQn2vE6RZ1f5LTe/INQjeYwJjAjR3jXCMYb+WkBnzQS66eLI6bE ICdWGVs5vKzDX7fHU6p5MFC6SYsjxNIpiRsAxpzYxKIEJ63rKz0lkfw13FW63ogi fkTI9KcWuIzUZbchyaPLKA1M5HVzoHpvqrO7PrrIsUCEF1yO6wIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFEmcG+hx/favkYm9job03Yn7h6TFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZTVm OGZmOC03N2EwLTQ3ZTktYmE3OS1jY2FmMTQ3YTIwNzEvYTRlM2I2ZTItYzdkMC0z NDM0LWI3ZDItY2ViY2E2YzJlZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWU1ZjhmZjgtNzdhMC00N2U5LWJh NzktY2NhZjE0N2EyMDcxLzFlNWY4ZmY4LTc3YTAtNDdlOS1iYTc5LWNjYWYxNDdh MjA3MS5jcmwwHwYDVR0jBBgwFoAUB5tPRFtgoPzbKEI3Im1tGLQcjrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZTVmOGZmOC03N2EwLTQ3ZTktYmE3OS1jY2Fm MTQ3YTIwNzEuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5FwMA0E AgACMAcDBQAmBXNAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAGEIjgukmeGAusS6K6saGKTA17D1A+Gw1hD+ V6mnmmFtAFWKoKumJ3k29TpFDSCDsbX81jo48cY4fUuon5bFP0pKLuNJVKhDm8M1 6B0DFt5VyGQthl1ZlESSnzF8A+gU7DQ1EPl2SKVjiS47AyqZyRuBCCU23+tgD4sZ 1pKFDeqciZ8jxaHSsGmIVWRDUS06HUmLMk9lY7XneNdYaeRp98L1xtWBJriFIHTB 1Gc7NwIMntuw4yuJJuDM5L3ZqMmlSV0TVg1AUe+65pAIIBPTpE2cLANcj2VivJWo AlnGdvqyfaC2Iv9oe+EXQPqhAVyYm7JMUIp84p92TFQchIpqQ4w= -----END CERTIFICATE-----Generated at Wed May 1 15:54:22 2024 by rpki-client on console-ams.rpki-client.org