$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/46773a05-ae39-36bd-a950-0d64b5b7e334.roa File: 46773a05-ae39-36bd-a950-0d64b5b7e334.roa (raw, json) Hash identifier: 9CmvMwSdn8IPpHQ6UqW+1z3Jri5lYfYOuz9izZU5S+I= Subject key identifier: C0:E2:E9:0E:DA:3B:C0:74:D0:84:3E:F1:25:96:A5:9C:F3:4C:CC:97 Certificate issuer: /CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Certificate serial: 010D0C9F43285845AC88BFE4A5D9B87370F62120 Authority key identifier: 1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/46773a05-ae39-36bd-a950-0d64b5b7e334.roa Signing time: Fri 26 Apr 2024 13:00:35 +0000 ROA not before: Fri 26 Apr 2024 13:00:35 +0000 ROA not after: Thu 25 Jul 2024 13:00:35 +0000 asID: 17017 IP address blocks: 23.247.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ac:88:bf:e4:a5:d9:b8:73:70:f6:21:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Validity Not Before: Apr 26 13:00:35 2024 GMT Not After : Jul 25 13:00:35 2024 GMT Subject: CN=30eac6c9-4f0d-4685-b822-f937ae29f5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:19:2f:bd:fb:66:cf:81:a4:8a:6f:57:e8:47: cc:62:99:ef:fc:b3:ef:c7:d6:1a:1f:7c:53:f8:6f: 58:3d:87:b4:9a:da:be:ac:fc:c4:84:e1:c4:44:4b: 4b:ae:61:a1:c6:5d:5d:df:33:c7:27:40:19:5a:8b: 86:61:58:91:ad:73:a3:f9:65:92:09:7d:c9:a1:a3: 0f:87:54:e0:53:2a:cc:77:dd:4a:98:ee:71:37:4d: 0e:10:81:d3:b1:39:46:ee:dd:d8:9c:d8:59:41:e6: bc:0e:16:a8:85:06:9b:94:73:2c:2b:63:48:c6:7b: 28:7a:d8:c3:d1:4b:59:30:d3:88:75:81:2d:df:4a: d0:02:9f:da:26:9a:b4:98:d4:a4:cf:af:2e:e0:7f: e0:28:23:8a:38:8e:59:4b:31:48:cc:2b:a8:7c:9a: 26:7b:98:a6:c0:ba:9d:ab:27:66:78:76:2c:9b:66: 0d:d0:e5:59:fc:61:42:24:3c:d2:26:a7:1a:3c:ed: 8e:49:f9:9b:e5:fb:a2:49:03:02:28:fb:95:bf:b1: 4b:32:ad:50:fa:38:8c:69:4d:be:56:53:d4:6d:b1: 25:dd:38:0d:fd:ad:e6:9c:fc:68:01:7b:40:c7:58: de:d2:74:07:fc:33:13:00:58:87:5d:b8:3b:8d:cc: 90:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E2:E9:0E:DA:3B:C0:74:D0:84:3E:F1:25:96:A5:9C:F3:4C:CC:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/46773a05-ae39-36bd-a950-0d64b5b7e334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl X509v3 Authority Key Identifier: keyid:1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer sbgp-ipAddrBlock: critical IPv4: 23.247.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:e5:9b:05:62:21:1f:3f:1b:0f:68:f2:82:e6:9e:15:4c:a3: 13:aa:ad:60:62:3f:3c:9a:15:ab:54:a4:64:50:f1:cd:88:fd: 09:61:23:69:6e:cb:f4:f0:c9:0a:bd:a5:73:45:99:d3:e5:71: 84:f6:c1:b0:c4:52:c4:f1:75:91:2f:da:10:35:f3:ba:60:1b: f3:af:44:d2:d9:70:46:b0:52:9d:fb:a9:38:fc:44:16:79:47: 0b:28:ff:a7:35:3b:fe:03:cb:c8:2e:78:5c:d2:7d:34:be:06: 8f:51:49:5e:44:e4:2b:bd:3f:d4:24:21:fd:ab:ef:04:78:90: 29:ab:70:75:f3:b5:f2:ee:13:ae:75:4c:73:d0:65:7c:eb:38: 7a:41:ae:6d:3a:83:67:8f:06:55:08:2f:f5:05:9b:94:7e:8a: 14:09:fd:38:01:47:8a:b5:6f:84:26:7d:35:ec:cf:17:dc:45: 77:0a:80:57:52:d1:a1:c0:21:ea:37:21:e9:2a:5f:77:5c:85: 8d:e4:6d:6f:a8:fe:11:7b:aa:dc:fe:e5:2c:89:da:ec:68:d4: 4b:08:3f:0c:62:4a:14:27:24:85:83:a3:79:83:c2:a9:a1:41: e7:60:7c:28:1a:ae:06:fb:50:4e:14:0b:a3:16:36:2c:71:6d: 66:30:65:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsiL/kpdm4c3D2ISAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0M2FkZmQtZjZlNC00NTA0LTg2ZjAtMmVmYWRmOWQ0 ZDIxMB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk MzBlYWM2YzktNGYwZC00Njg1LWI4MjItZjkzN2FlMjlmNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxkvvftmz4Gkim9X6EfMYpnv/LPvx9YaH3xT +G9YPYe0mtq+rPzEhOHEREtLrmGhxl1d3zPHJ0AZWouGYViRrXOj+WWSCX3JoaMP h1TgUyrMd91KmO5xN00OEIHTsTlG7t3YnNhZQea8DhaohQablHMsK2NIxnsoetjD 0UtZMNOIdYEt30rQAp/aJpq0mNSkz68u4H/gKCOKOI5ZSzFIzCuofJome5imwLqd qydmeHYsm2YN0OVZ/GFCJDzSJqcaPO2OSfmb5fuiSQMCKPuVv7FLMq1Q+jiMaU2+ VlPUbbEl3TgN/a3mnPxoAXtAx1je0nQH/DMTAFiHXbg7jcyQqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDi6Q7aO8B00IQ+8SWWpZzzTMyXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQz YWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZhZGY5ZDRkMjEvNDY3NzNhMDUtYWUzOS0z NmJkLWE5NTAtMGQ2NGI1YjdlMzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGQ0M2FkZmQtZjZlNC00NTA0LTg2 ZjAtMmVmYWRmOWQ0ZDIxLzRkNDNhZGZkLWY2ZTQtNDUwNC04NmYwLTJlZmFkZjlk NGQyMS5jcmwwHwYDVR0jBBgwFoAUHLPKVHX2AJyrqb/kFUAJQKHvOZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQzYWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZh ZGY5ZDRkMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/fsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXlmwViIR8/Gw9o8oLmnhVMoxOqrWBiPzyaFatUpGRQ8c2I/QlhI2lu y/TwyQq9pXNFmdPlcYT2wbDEUsTxdZEv2hA187pgG/OvRNLZcEawUp37qTj8RBZ5 Rwso/6c1O/4Dy8gueFzSfTS+Bo9RSV5E5Cu9P9QkIf2r7wR4kCmrcHXztfLuE651 THPQZXzrOHpBrm06g2ePBlUIL/UFm5R+ihQJ/TgBR4q1b4QmfTXszxfcRXcKgFdS 0aHAIeo3IekqX3dchY3kbW+o/hF7qtz+5SyJ2uxo1EsIPwxiShQnJIWDo3mDwqmh QedgfCgargb7UE4UC6MWNixxbWYwZXI= -----END CERTIFICATE-----Generated at Thu May 2 10:20:41 2024 by rpki-client on console-ams.rpki-client.org