$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/ed656f57-c876-3393-937a-7eabe0e6e42a.roa File: ed656f57-c876-3393-937a-7eabe0e6e42a.roa (raw, json) Hash identifier: 3nHwQPrQBF5h7ie9nRuOgwMfx00roEmbEyGXGqVR8qM= Subject key identifier: 4F:F4:A4:50:F1:84:42:97:62:8B:FC:00:7F:AB:D8:80:B7:81:3A:97 Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F432858477660F922FA1DE7246C29D9E0 Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/ed656f57-c876-3393-937a-7eabe0e6e42a.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 400564 IP address blocks: 23.134.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:60:f9:22:fa:1d:e7:24:6c:29:d9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=e7b85fea-b30f-46b5-8741-418bbd75f96b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:21:2b:5c:52:48:85:ac:88:53:b3:22:62:61: 54:5e:48:29:13:62:f4:ce:49:a9:4b:0f:e9:60:4e: 4c:07:7c:b1:4e:58:58:4d:41:ef:94:04:11:e2:d7: 28:9f:f9:c1:7e:86:3a:61:83:0a:fa:61:4c:69:51: 21:2b:58:1f:3d:be:31:b4:18:25:c2:c3:45:5f:4c: 8c:ba:f9:a1:43:5e:ab:9f:27:bb:d3:e1:0b:3f:7a: 55:2f:27:ab:e7:39:84:87:35:a3:a9:2e:97:d0:ef: 46:f4:c6:62:1f:1c:77:6a:fb:3c:bd:df:24:73:ef: 05:ee:18:39:1a:36:2d:55:17:0f:17:7f:f1:72:3c: db:5c:5e:71:c4:b1:f3:fa:5a:9f:d1:fe:4a:86:43: de:97:f7:69:9e:4a:e0:e8:67:a9:d6:c0:ba:d1:65: 92:86:52:ed:98:9f:ff:70:a3:e4:ff:32:2d:6f:81: cb:77:72:ff:e0:30:d9:3d:97:f5:f1:a2:f4:dd:d4: 9b:0e:3b:a2:82:62:cb:85:e6:9d:3e:3c:32:95:a8: d1:8b:4f:86:7d:98:ac:13:63:44:54:e3:05:bc:a8: b3:72:50:a2:91:26:e1:56:c4:a6:2a:c7:83:68:f8: 39:6e:a8:19:69:70:01:fa:bb:82:bd:22:8c:14:03: ab:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F4:A4:50:F1:84:42:97:62:8B:FC:00:7F:AB:D8:80:B7:81:3A:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/ed656f57-c876-3393-937a-7eabe0e6e42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: 23.134.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ae:6a:10:bb:4b:12:7b:80:1c:c7:3e:b0:0d:44:31:f6:c2: 03:24:d2:42:26:2a:94:7a:b1:b2:ba:1c:d3:6e:3e:8c:c5:b5: 32:ff:b8:bf:64:c5:f8:4d:6a:e0:4d:10:13:81:76:a2:e7:96: 38:c9:86:01:1d:eb:78:da:35:62:13:86:78:34:b7:9a:0c:43: ed:8b:c7:85:89:1e:c5:33:8e:26:09:85:e5:c7:11:3a:7a:4c: 34:a0:c8:0a:89:bc:53:92:4e:5b:a3:24:db:bf:08:a2:a2:29: f7:58:50:f2:20:61:57:97:61:24:61:ef:f2:e8:3a:f6:75:90: 6d:d2:4b:3e:06:d3:1b:64:26:71:e0:5b:d9:c3:bf:cc:35:28: 01:e8:cf:21:68:2b:a1:e9:d4:6c:47:75:cd:b5:ae:9b:f9:a7: d2:07:1a:9e:6d:e8:80:20:42:38:2e:b9:f3:31:52:62:2a:33: f0:ac:fb:7a:51:ee:70:9d:2b:9c:d5:ab:8a:81:3c:90:f4:56: 66:dc:55:25:a1:38:64:00:d8:a1:db:92:7e:2c:f9:f6:f1:fc: c0:7a:35:e4:e6:6a:17:91:6d:0c:cc:29:06:e9:e9:fd:b6:07: e4:f7:ac:86:b3:6a:55:99:e0:ee:99:18:6d:a2:30:78:4a:23: ae:c5:b2:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2YPki+h3nJGwp2eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk ZTdiODVmZWEtYjMwZi00NmI1LTg3NDEtNDE4YmJkNzVmOTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CErXFJIhayIU7MiYmFUXkgpE2L0zkmpSw/p YE5MB3yxTlhYTUHvlAQR4tcon/nBfoY6YYMK+mFMaVEhK1gfPb4xtBglwsNFX0yM uvmhQ16rnye70+ELP3pVLyer5zmEhzWjqS6X0O9G9MZiHxx3avs8vd8kc+8F7hg5 GjYtVRcPF3/xcjzbXF5xxLHz+lqf0f5KhkPel/dpnkrg6Gep1sC60WWShlLtmJ// cKPk/zItb4HLd3L/4DDZPZf18aL03dSbDjuigmLLheadPjwylajRi0+GfZisE2NE VOMFvKizclCikSbhVsSmKseDaPg5bqgZaXAB+ruCvSKMFAOrUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/0pFDxhEKXYov8AH+r2IC3gTqXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvZWQ2NTZmNTctYzg3Ni0z MzkzLTkzN2EtN2VhYmUwZTZlNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4aIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2uahC7SxJ7gBzHPrANRDH2wgMk0kImKpR6sbK6HNNuPozFtTL/uL9k xfhNauBNEBOBdqLnljjJhgEd63jaNWIThng0t5oMQ+2Lx4WJHsUzjiYJheXHETp6 TDSgyAqJvFOSTlujJNu/CKKiKfdYUPIgYVeXYSRh7/LoOvZ1kG3SSz4G0xtkJnHg W9nDv8w1KAHozyFoK6Hp1GxHdc21rpv5p9IHGp5t6IAgQjguufMxUmIqM/Cs+3pR 7nCdK5zVq4qBPJD0VmbcVSWhOGQA2KHbkn4s+fbx/MB6NeTmaheRbQzMKQbp6f22 B+T3rIazalWZ4O6ZGG2iMHhKI67FsvQ= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:24 2024 by rpki-client on console-ams.rpki-client.org