$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/a2071ca8-8a30-3fa1-95c3-b1274082e1f9.roa File: a2071ca8-8a30-3fa1-95c3-b1274082e1f9.roa (raw, json) Hash identifier: n1uKMYTS/qVfLMdFlu/XNxJdlOaRKmSuNOGAv+QYLqQ= Subject key identifier: 9C:49:4E:5C:A2:31:A3:CD:5C:93:CA:78:96:82:44:91:53:64:05:39 Certificate issuer: /CN=2d448124-6e45-40ca-b551-28ef364c99c7 Certificate serial: 010D0C9F43285845ADEE186926C97AC0F3D21780 Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/a2071ca8-8a30-3fa1-95c3-b1274082e1f9.roa Signing time: Sat 27 Apr 2024 01:00:26 +0000 ROA not before: Sat 27 Apr 2024 01:00:26 +0000 ROA not after: Fri 26 Jul 2024 01:00:26 +0000 asID: 4755 IP address blocks: 23.136.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ad:ee:18:69:26:c9:7a:c0:f3:d2:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7 Validity Not Before: Apr 27 01:00:26 2024 GMT Not After : Jul 26 01:00:26 2024 GMT Subject: CN=f6e7ac80-a1df-4fd9-80ae-8e9bc3340d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:37:e9:07:be:2a:4a:f6:8c:22:cd:4d:b4:7f: 16:46:90:d4:8e:bf:07:df:1f:d8:b5:58:ca:5b:6c: 6d:be:ee:bc:0b:3e:d1:33:63:3d:6e:ac:0f:63:6b: 57:41:df:dd:b3:1d:b3:16:c7:8a:14:75:26:a3:a6: 7e:fa:51:5f:41:0a:03:60:ce:f0:f4:c5:ea:e6:e8: 67:4d:c5:65:44:77:db:4d:a0:b9:2e:dd:8f:a5:b8: bc:79:4f:5f:20:7c:af:8e:13:36:87:57:90:18:33: d5:e1:22:f5:1d:1f:64:54:ca:6a:09:2a:ba:42:fe: 54:86:ac:90:26:84:2e:78:c9:e4:ca:0b:48:17:81: 3e:1d:da:0b:ac:86:13:df:e0:ff:1d:47:9f:5a:a5: 9a:80:29:71:47:9c:32:f4:1b:4d:6c:83:43:7a:2a: 60:70:64:55:c8:22:ba:47:3b:d4:25:eb:97:7d:e4: 4d:73:f5:e4:bf:af:21:2b:d1:1c:11:76:86:99:f3: e1:a0:0d:f4:aa:4c:d2:c7:db:bd:31:cc:aa:ac:0f: aa:94:d0:06:a7:09:51:fc:80:b1:33:1c:60:8e:09: 77:93:f8:ad:25:11:dc:7b:a3:03:cd:bd:27:a1:20: ac:f9:35:24:c2:d1:aa:69:ac:61:d0:c1:df:c2:89: e1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:49:4E:5C:A2:31:A3:CD:5C:93:CA:78:96:82:44:91:53:64:05:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/a2071ca8-8a30-3fa1-95c3-b1274082e1f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl X509v3 Authority Key Identifier: keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer sbgp-ipAddrBlock: critical IPv4: 23.136.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:4d:91:90:e9:b4:ef:0a:51:78:6c:8e:8f:60:f4:0b:8b:fd: 9e:f8:c2:45:f0:45:d3:cb:2d:fc:6b:f7:62:e2:77:29:2b:e6: f9:29:08:c4:ea:20:8e:a6:56:c7:d5:93:10:6b:32:8c:77:13: 09:dc:57:a2:dd:c4:4c:0e:d9:39:34:a6:7f:26:4a:91:65:f0: 7f:9f:7d:8d:a7:d1:bd:cb:d8:14:cb:76:d4:2e:5b:b0:09:28: 45:36:fc:b3:c3:0b:21:b0:71:91:f4:9b:3f:a7:ef:de:07:32: c2:d5:12:3f:46:89:cf:57:53:a2:0e:25:1e:b8:70:06:32:53: 36:67:dd:49:55:70:00:28:0d:85:8b:5d:f9:47:07:50:54:de: 55:76:0b:65:78:46:91:9d:7e:da:4c:37:41:eb:2e:03:9e:3b: d7:93:52:26:30:74:ed:91:d3:03:cb:33:dc:00:cf:b8:d5:c6: b2:30:78:f0:0c:62:3e:d3:41:2d:f5:a7:53:e5:e5:6c:63:b9: 57:b3:4d:0d:ee:62:81:6b:12:9b:52:8f:46:01:3d:fc:10:bd: ff:9c:9d:38:8a:5d:d0:f4:81:5c:7f:c8:a9:27:13:7a:8e:1d: ba:48:bb:80:95:7c:80:9e:a6:cc:3f:a4:02:b0:cd:53:e7:18: 67:48:2f:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWt7hhpJsl6wPPSF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ0NDgxMjQtNmU0NS00MGNhLWI1NTEtMjhlZjM2NGM5 OWM3MB4XDTI0MDQyNzAxMDAyNloXDTI0MDcyNjAxMDAyNlowLzEtMCsGA1UEAxMk ZjZlN2FjODAtYTFkZi00ZmQ5LTgwYWUtOGU5YmMzMzQwZDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jfpB74qSvaMIs1NtH8WRpDUjr8H3x/YtVjK W2xtvu68Cz7RM2M9bqwPY2tXQd/dsx2zFseKFHUmo6Z++lFfQQoDYM7w9MXq5uhn TcVlRHfbTaC5Lt2Ppbi8eU9fIHyvjhM2h1eQGDPV4SL1HR9kVMpqCSq6Qv5UhqyQ JoQueMnkygtIF4E+HdoLrIYT3+D/HUefWqWagClxR5wy9BtNbINDeipgcGRVyCK6 RzvUJeuXfeRNc/Xkv68hK9EcEXaGmfPhoA30qkzSx9u9McyqrA+qlNAGpwlR/ICx Mxxgjgl3k/itJRHce6MDzb0noSCs+TUkwtGqaaxh0MHfwonhMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxJTlyiMaPNXJPKeJaCRJFTZAU5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0 ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVmMzY0Yzk5YzcvYTIwNzFjYTgtOGEzMC0z ZmExLTk1YzMtYjEyNzQwODJlMWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmQ0NDgxMjQtNmU0NS00MGNhLWI1 NTEtMjhlZjM2NGM5OWM3LzJkNDQ4MTI0LTZlNDUtNDBjYS1iNTUxLTI4ZWYzNjRj OTljNy5jcmwwHwYDVR0jBBgwFoAUJX0bU4WU/K2RPsORNHt3eV5Y9aYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVm MzY0Yzk5YzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4gIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9NkZDptO8KUXhsjo9g9AuL/Z74wkXwRdPLLfxr92Lidykr5vkpCMTq II6mVsfVkxBrMox3EwncV6LdxEwO2Tk0pn8mSpFl8H+ffY2n0b3L2BTLdtQuW7AJ KEU2/LPDCyGwcZH0mz+n794HMsLVEj9Gic9XU6IOJR64cAYyUzZn3UlVcAAoDYWL XflHB1BU3lV2C2V4RpGdftpMN0HrLgOeO9eTUiYwdO2R0wPLM9wAz7jVxrIwePAM Yj7TQS31p1Pl5WxjuVezTQ3uYoFrEptSj0YBPfwQvf+cnTiKXdD0gVx/yKknE3qO HbpIu4CVfICepsw/pAKwzVPnGGdIL7A= -----END CERTIFICATE-----Generated at Mon May 20 14:55:19 2024 by rpki-client on console-ams.rpki-client.org