$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/a9ef1dd3-971a-352a-8601-5da36a79924f.roa File: a9ef1dd3-971a-352a-8601-5da36a79924f.roa (raw, json) Hash identifier: wd4e3j9X1vvxxtmIl5HXlfaCKdcZrD3ad+XexoQVrgg= Subject key identifier: 33:3A:C5:DD:B7:65:2F:9B:35:57:62:76:64:BD:91:99:5B:AA:60:84 Certificate issuer: /CN=15046f6d-bd92-43fe-aa6b-1c0465361a1b Certificate serial: 010D0C9F43285847EFEF899261C379E8F336F800 Authority key identifier: BF:4E:95:80:80:06:81:21:F2:A1:B4:A6:80:48:D7:75:5B:E7:95:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/a9ef1dd3-971a-352a-8601-5da36a79924f.roa Signing time: Wed 20 Nov 2024 02:00:39 +0000 ROA not before: Wed 20 Nov 2024 02:00:39 +0000 ROA not after: Tue 18 Feb 2025 02:00:39 +0000 asID: 202662 IP address blocks: 23.143.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/15046f6d-bd92-43fe-aa6b-1c0465361a1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/15046f6d-bd92-43fe-aa6b-1c0465361a1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ef:ef:89:92:61:c3:79:e8:f3:36:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15046f6d-bd92-43fe-aa6b-1c0465361a1b Validity Not Before: Nov 20 02:00:39 2024 GMT Not After : Feb 18 02:00:39 2025 GMT Subject: CN=6b88a16b-6d06-4c83-a25e-6c7e6d95d7a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:af:ff:a0:d2:1b:15:aa:a2:45:a8:d7:f5:4d: ab:fd:8c:5d:07:20:0e:f0:d2:54:cd:47:53:18:69: b0:43:d4:c3:f4:e7:8e:8b:5e:49:e6:7a:8a:5f:00: 48:6f:6b:eb:11:b8:39:87:83:49:c6:c6:f0:85:67: 9d:c0:b9:42:ea:50:da:cb:6f:94:f8:84:b1:2e:46: 59:09:e9:84:bc:31:fa:77:73:8a:64:da:ef:64:be: 06:ed:01:4a:bb:28:8e:bc:aa:41:80:cb:f4:53:86: 77:f7:0f:8e:23:25:bf:61:ce:a0:d4:ce:d3:6c:18: 5f:ff:9d:00:d4:98:09:ab:aa:4a:ce:de:c3:61:61: 8e:5e:c3:25:96:4e:b1:e3:56:27:18:e8:b7:f1:d9: 49:73:cf:e6:3a:b5:a8:60:c4:b2:6b:e8:50:68:ab: aa:a4:51:2b:78:3d:84:3a:43:34:a9:a1:16:d8:60: 45:82:5c:28:ff:36:48:b3:24:b5:d4:fc:5c:58:24: 44:ff:39:c0:f7:8c:5a:23:2a:f0:69:bb:28:64:d3: 8a:57:c4:d5:dc:f7:df:68:35:cc:15:b7:a4:bf:6e: 98:f5:0a:9c:07:05:fc:ed:fa:3e:75:c7:89:a0:04: a0:36:a3:d0:57:68:b3:d9:68:16:28:81:22:ae:a0: 20:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3A:C5:DD:B7:65:2F:9B:35:57:62:76:64:BD:91:99:5B:AA:60:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/a9ef1dd3-971a-352a-8601-5da36a79924f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/15046f6d-bd92-43fe-aa6b-1c0465361a1b.crl X509v3 Authority Key Identifier: keyid:BF:4E:95:80:80:06:81:21:F2:A1:B4:A6:80:48:D7:75:5B:E7:95:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b.cer sbgp-ipAddrBlock: critical IPv4: 23.143.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:4a:83:71:57:98:50:31:dc:99:60:05:f0:a6:55:19:76:95: 18:6b:46:53:b6:96:b8:fd:45:25:44:5e:ec:f2:9d:45:7f:96: fa:ee:ac:8d:59:6e:b3:79:21:59:a8:a0:79:e7:c7:ee:3f:60: 95:1a:23:67:95:72:42:41:42:ed:2c:2c:c7:7e:7f:f2:ef:cb: 25:07:41:56:70:53:d1:b0:82:85:95:6e:b5:20:aa:c7:d5:7d: 84:ec:59:22:09:95:77:c8:4a:c0:5a:0c:cc:f1:85:c9:46:12: 4c:27:6f:6c:e9:dd:07:be:aa:42:ad:d0:f4:93:f0:77:94:76: ca:59:4b:2e:03:8a:88:26:28:0b:5d:dc:6a:a9:75:5b:62:0b: ec:34:3d:ac:97:dd:8b:84:65:f0:48:38:a3:2e:c2:e4:86:9c: 7a:49:d6:e7:6f:7f:b8:0a:42:5f:a2:7e:c0:45:9a:f0:05:d6: 69:8f:ac:13:1a:3b:c0:71:04:1e:70:64:cd:ed:53:d0:33:87: 7b:2d:bf:bd:1c:ed:91:bb:16:17:6f:ba:d9:e2:a3:20:30:9b: 53:44:3e:71:49:35:f4:15:4a:51:63:ed:2f:2a:12:90:c1:af: 29:85:83:57:23:b2:3f:e2:d4:17:6d:06:94:6f:25:e7:8c:ae: 97:a8:09:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfv74mSYcN56PM2+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTUwNDZmNmQtYmQ5Mi00M2ZlLWFhNmItMWMwNDY1MzYx YTFiMB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk NmI4OGExNmItNmQwNi00YzgzLWEyNWUtNmM3ZTZkOTVkN2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa//oNIbFaqiRajX9U2r/YxdByAO8NJUzUdT GGmwQ9TD9OeOi15J5nqKXwBIb2vrEbg5h4NJxsbwhWedwLlC6lDay2+U+ISxLkZZ CemEvDH6d3OKZNrvZL4G7QFKuyiOvKpBgMv0U4Z39w+OIyW/Yc6g1M7TbBhf/50A 1JgJq6pKzt7DYWGOXsMllk6x41YnGOi38dlJc8/mOrWoYMSya+hQaKuqpFEreD2E OkM0qaEW2GBFglwo/zZIsyS11PxcWCRE/znA94xaIyrwabsoZNOKV8TV3PffaDXM Fbekv26Y9QqcBwX87fo+dceJoASgNqPQV2iz2WgWKIEirqAgjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDM6xd23ZS+bNVdidmS9kZlbqmCEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xNTA0 NmY2ZC1iZDkyLTQzZmUtYWE2Yi0xYzA0NjUzNjFhMWIvYTllZjFkZDMtOTcxYS0z NTJhLTg2MDEtNWRhMzZhNzk5MjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTUwNDZmNmQtYmQ5Mi00M2ZlLWFh NmItMWMwNDY1MzYxYTFiLzE1MDQ2ZjZkLWJkOTItNDNmZS1hYTZiLTFjMDQ2NTM2 MWExYi5jcmwwHwYDVR0jBBgwFoAUv06VgIAGgSHyobSmgEjXdVvnlTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xNTA0NmY2ZC1iZDkyLTQzZmUtYWE2Yi0xYzA0 NjUzNjFhMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZKg3FXmFAx3JlgBfCmVRl2lRhrRlO2lrj9RSVEXuzynUV/lvrurI1Z brN5IVmooHnnx+4/YJUaI2eVckJBQu0sLMd+f/LvyyUHQVZwU9GwgoWVbrUgqsfV fYTsWSIJlXfISsBaDMzxhclGEkwnb2zp3Qe+qkKt0PST8HeUdspZSy4DiogmKAtd 3GqpdVtiC+w0PayX3YuEZfBIOKMuwuSGnHpJ1udvf7gKQl+ifsBFmvAF1mmPrBMa O8BxBB5wZM3tU9Azh3stv70c7ZG7FhdvutnioyAwm1NEPnFJNfQVSlFj7S8qEpDB rymFg1cjsj/i1BdtBpRvJeeMrpeoCRI= -----END CERTIFICATE-----Generated at Thu Nov 21 21:07:31 2024 by rpki-client on console-fra.rpki-client.org