$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/51f23690-2c9e-3571-8cfe-0e89c650c651.roa File: 51f23690-2c9e-3571-8cfe-0e89c650c651.roa (raw, json) Hash identifier: BPQgxt0sbVP/x/wbghC/xotM7Iy4yxyhKpvo3sp/mPg= Subject key identifier: 43:0C:9D:F7:B1:97:89:C2:D0:C0:89:E3:75:60:05:8F:4D:AB:D0:12 Certificate issuer: /CN=e7f205fa-32db-476e-9815-f418a58479c3 Certificate serial: 010D0C9F43285845628D8EABEDE5A10E1CFFD9A0 Authority key identifier: 2A:4D:D2:2E:FE:CD:53:2B:93:98:39:B2:5E:B6:95:5E:1D:23:C0:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/51f23690-2c9e-3571-8cfe-0e89c650c651.roa Signing time: Sun 31 Mar 2024 01:00:26 +0000 ROA not before: Sun 31 Mar 2024 01:00:26 +0000 ROA not after: Sat 29 Jun 2024 01:00:26 +0000 asID: 398041 IP address blocks: 23.146.136.0/24 maxlen: 24 2607:20c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/e7f205fa-32db-476e-9815-f418a58479c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/e7f205fa-32db-476e-9815-f418a58479c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:62:8d:8e:ab:ed:e5:a1:0e:1c:ff:d9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f205fa-32db-476e-9815-f418a58479c3 Validity Not Before: Mar 31 01:00:26 2024 GMT Not After : Jun 29 01:00:26 2024 GMT Subject: CN=2d04376d-641b-458e-bcb4-f26adae938c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:be:85:3d:50:5d:70:a3:1a:cb:1b:1d:cc:51: 1a:ed:eb:d9:f7:26:e7:5f:f4:29:50:02:51:06:82: 48:70:7d:97:9c:f4:62:72:2c:95:33:a0:cd:8e:32: 02:db:79:89:17:41:8d:aa:72:a2:94:9c:40:be:f9: 3c:78:a0:4f:56:f5:4d:44:8f:6c:b8:c8:0e:73:85: 07:32:56:8a:4a:bd:33:b6:77:2b:4d:2d:6f:fd:31: d7:cb:d4:e1:25:eb:f7:da:1b:e5:17:3f:90:71:f4: ae:99:1e:d6:d1:03:99:eb:12:d1:ee:9b:e5:2b:3c: 1b:10:46:4c:a3:56:4b:8c:2a:99:09:3d:eb:fa:ab: be:24:03:96:b8:3d:c9:a2:23:38:af:37:88:88:bb: 9c:1d:aa:c4:32:d3:db:29:8a:a4:3f:f5:bb:20:46: e4:44:8b:6a:a3:85:87:97:79:e1:5f:cb:e7:97:95: bf:f0:bb:0d:c9:07:fa:2f:2b:31:91:f2:2c:cd:1d: 9d:57:de:38:4c:3e:f5:3f:88:1d:10:5e:e0:ca:74: 13:09:06:ca:7a:04:6a:90:15:df:b3:25:02:3f:77: 50:15:95:1e:20:21:2e:5d:11:fb:e7:d8:d5:77:da: 48:11:a2:3e:ed:26:55:41:aa:28:94:7f:77:ee:04: a8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0C:9D:F7:B1:97:89:C2:D0:C0:89:E3:75:60:05:8F:4D:AB:D0:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/51f23690-2c9e-3571-8cfe-0e89c650c651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/e7f205fa-32db-476e-9815-f418a58479c3.crl X509v3 Authority Key Identifier: keyid:2A:4D:D2:2E:FE:CD:53:2B:93:98:39:B2:5E:B6:95:5E:1D:23:C0:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3.cer sbgp-ipAddrBlock: critical IPv4: 23.146.136.0/24 IPv6: 2607:20c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:1a:03:e2:49:73:3d:71:92:2e:4f:39:9c:91:62:4a:1b:d6: 5b:68:6b:2e:29:cf:5e:a0:d2:f4:e3:8c:fa:bf:f1:f3:09:f7: e7:0c:d4:77:9c:1d:82:4d:77:01:5b:8b:c8:31:f3:99:1c:d6: 82:cb:d9:1a:8d:83:aa:ac:d7:75:1f:90:da:1d:aa:b7:d9:c7: 69:10:25:74:61:87:0f:c2:90:e9:7b:70:c9:21:23:a1:05:d6: 65:1c:f1:00:84:e2:3f:45:00:47:90:fe:0b:6e:d4:9e:72:88: b4:a2:99:78:9c:d0:cc:2e:65:2b:d1:47:81:5b:dc:44:c3:81: 3d:49:68:89:78:e7:8e:d6:7b:c4:6a:6d:79:9e:72:3d:1c:47: a7:db:00:8d:be:22:61:48:7c:d2:e4:cb:38:58:33:87:4b:d7: 71:a2:e7:9d:5c:58:d5:ac:1d:fb:c9:bf:5e:9a:5e:2b:ac:7a: f3:22:6b:5d:e4:81:8f:12:be:93:ba:21:7b:10:2b:49:0a:4d: cd:e5:1c:1b:43:e8:b5:2f:0a:ef:f2:2e:c5:69:c4:a6:44:31: cd:d2:da:4d:dd:0b:5b:3a:29:7d:2a:98:e8:5a:e9:02:e5:93: 5a:08:82:c4:06:82:91:80:34:9f:16:67:f3:0b:e4:66:96:29: 74:7f:16:99 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEVijY6r7eWhDhz/2aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdmMjA1ZmEtMzJkYi00NzZlLTk4MTUtZjQxOGE1ODQ3 OWMzMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk MmQwNDM3NmQtNjQxYi00NThlLWJjYjQtZjI2YWRhZTkzOGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L6FPVBdcKMayxsdzFEa7evZ9ybnX/QpUAJR BoJIcH2XnPRiciyVM6DNjjIC23mJF0GNqnKilJxAvvk8eKBPVvVNRI9suMgOc4UH MlaKSr0ztncrTS1v/THXy9ThJev32hvlFz+QcfSumR7W0QOZ6xLR7pvlKzwbEEZM o1ZLjCqZCT3r+qu+JAOWuD3JoiM4rzeIiLucHarEMtPbKYqkP/W7IEbkRItqo4WH l3nhX8vnl5W/8LsNyQf6LysxkfIszR2dV944TD71P4gdEF7gynQTCQbKegRqkBXf syUCP3dQFZUeICEuXRH759jVd9pIEaI+7SZVQaoolH937gSo7wIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFEMMnfexl4nC0MCJ43VgBY9Nq9ASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lN2Yy MDVmYS0zMmRiLTQ3NmUtOTgxNS1mNDE4YTU4NDc5YzMvNTFmMjM2OTAtMmM5ZS0z NTcxLThjZmUtMGU4OWM2NTBjNjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTdmMjA1ZmEtMzJkYi00NzZlLTk4 MTUtZjQxOGE1ODQ3OWMzL2U3ZjIwNWZhLTMyZGItNDc2ZS05ODE1LWY0MThhNTg0 NzljMy5jcmwwHwYDVR0jBBgwFoAUKk3SLv7NUyuTmDmyXraVXh0jwB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lN2YyMDVmYS0zMmRiLTQ3NmUtOTgxNS1mNDE4 YTU4NDc5YzMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5KIMA0E AgACMAcDBQAmByDAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAAEaA+JJcz1xki5POZyRYkob1ltoay4pz16g 0vTjjPq/8fMJ9+cM1HecHYJNdwFbi8gx85kc1oLL2RqNg6qs13UfkNodqrfZx2kQ JXRhhw/CkOl7cMkhI6EF1mUc8QCE4j9FAEeQ/gtu1J5yiLSimXic0MwuZSvRR4Fb 3ETDgT1JaIl4547We8RqbXmecj0cR6fbAI2+ImFIfNLkyzhYM4dL13Gi551cWNWs HfvJv16aXiusevMia13kgY8SvpO6IXsQK0kKTc3lHBtD6LUvCu/yLsVpxKZEMc3S 2k3dC1s6KX0qmOha6QLlk1oIgsQGgpGANJ8WZ/ML5GaWKXR/Fpk= -----END CERTIFICATE-----Generated at Wed May 8 17:58:00 2024 by rpki-client on console-ams.rpki-client.org