$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6a6ccff4-1b49-35c3-9faf-4959e796aedc.roa File: 6a6ccff4-1b49-35c3-9faf-4959e796aedc.roa (raw, json) Hash identifier: fmJkggFslYUdLdFxoiiUrZ+OhbDDe9oOAJ3AtbGPO30= Subject key identifier: 4A:34:06:57:6A:DE:6D:11:46:86:C0:B3:0C:B5:01:F9:6D:97:7B:50 Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c Certificate serial: 010D0C9F43285844D9DFCF3BF8963565042B6580 Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6a6ccff4-1b49-35c3-9faf-4959e796aedc.roa Signing time: Sun 11 Feb 2024 02:00:25 +0000 ROA not before: Sun 11 Feb 2024 02:00:25 +0000 ROA not after: Sat 11 May 2024 01:00:25 +0000 asID: 8100 IP address blocks: 23.226.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:d9:df:cf:3b:f8:96:35:65:04:2b:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c Validity Not Before: Feb 11 02:00:25 2024 GMT Not After : May 11 01:00:25 2024 GMT Subject: CN=128a3350-2504-4e45-a7a1-134ab3ca03de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:db:67:f7:db:fa:5e:d7:54:6e:e1:ed:fb:b1: 19:5b:55:70:b6:c9:a3:7a:23:c9:ae:80:76:36:9a: b8:41:09:da:6b:c8:d2:cd:b2:cc:d3:32:91:b8:ae: 62:7b:66:8a:c5:bf:fe:05:47:2f:bd:c0:d3:6b:1f: 4f:87:56:6d:da:d0:0b:32:99:37:c8:de:1f:89:32: ee:eb:c9:95:6c:64:03:cf:e3:3b:4f:9b:f5:17:83: 56:90:72:a9:d6:2f:77:e2:4f:a7:fd:a5:6e:71:ee: c1:55:3e:39:fc:5e:5a:9f:3f:fb:90:fd:7a:f2:71: 0a:69:90:2e:a0:8c:79:44:26:6d:e3:aa:6a:67:67: c6:d2:69:aa:3b:21:74:7e:f8:b9:59:f7:31:15:8b: e8:d8:80:37:e1:58:e8:c1:e5:f5:f3:7c:ca:9f:cd: d5:da:9d:df:7c:67:a2:3c:a7:6e:77:f2:58:d2:a5: 83:07:2a:c4:8a:c9:71:76:81:d1:7e:91:36:e2:f7: 64:73:4c:0d:4b:89:f1:30:fb:a6:48:4f:e2:dc:10: b3:92:bc:2f:86:f5:a2:71:b0:af:c5:e7:09:28:10: 18:26:89:7f:5c:a6:68:61:79:28:be:00:3a:f7:f1: fe:cb:d4:e2:02:e2:5e:7d:17:ce:17:72:c7:da:1c: 67:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:34:06:57:6A:DE:6D:11:46:86:C0:B3:0C:B5:01:F9:6D:97:7B:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6a6ccff4-1b49-35c3-9faf-4959e796aedc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl X509v3 Authority Key Identifier: keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer sbgp-ipAddrBlock: critical IPv4: 23.226.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:91:c1:9b:de:0d:ef:83:46:91:19:6b:35:8b:4a:f0:34:31: f7:c4:73:7f:14:f0:1c:5c:ee:b7:e5:4f:c1:db:59:05:2f:08: 0a:96:e0:fa:fd:0e:2f:61:90:1c:ef:06:9f:52:85:f5:53:81: 4e:54:dd:42:11:6f:05:a1:7e:59:77:19:94:ab:d7:1c:f6:78: 59:3b:11:79:d1:55:03:18:ea:64:ea:a7:d5:17:32:3f:cf:18: 41:e9:62:61:7e:18:ca:c9:03:b8:f4:a6:bf:b5:80:69:f2:b2: 89:95:0e:92:da:f6:79:74:bc:61:d1:bc:d0:38:cd:4c:10:d6: 88:b9:f3:32:2a:60:60:b4:97:d0:06:06:b8:a0:84:83:2f:1a: 5b:86:05:5d:ed:6d:03:4a:36:28:02:a7:3d:94:25:27:1c:6a: c7:94:60:ad:9c:4b:2f:8a:81:c5:77:d9:b1:68:1c:b9:0c:a6: a0:78:29:34:7d:83:1c:e6:a9:89:b7:95:7e:fb:23:b9:56:19: 34:ca:77:67:1d:01:50:c5:5b:9e:8a:90:d0:34:55:5d:3d:e9: b8:9e:2a:b5:9c:7e:15:c1:0f:ed:10:e6:f5:d3:b7:f0:5f:11: 09:51:d9:f6:ab:d8:63:b5:0c:26:3e:85:28:11:4d:aa:e2:d2: fa:c2:44:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETZ3887+JY1ZQQrZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg3NmQ1YTgtNWRkNi00NDBhLTk3ZTItNWUyMGI5ZTAw ZjVjMB4XDTI0MDIxMTAyMDAyNVoXDTI0MDUxMTAxMDAyNVowLzEtMCsGA1UEAxMk MTI4YTMzNTAtMjUwNC00ZTQ1LWE3YTEtMTM0YWIzY2EwM2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNtn99v6XtdUbuHt+7EZW1VwtsmjeiPJroB2 Npq4QQnaa8jSzbLM0zKRuK5ie2aKxb/+BUcvvcDTax9Ph1Zt2tALMpk3yN4fiTLu 68mVbGQDz+M7T5v1F4NWkHKp1i934k+n/aVuce7BVT45/F5anz/7kP168nEKaZAu oIx5RCZt46pqZ2fG0mmqOyF0fvi5WfcxFYvo2IA34VjoweX183zKn83V2p3ffGei PKdud/JY0qWDByrEislxdoHRfpE24vdkc0wNS4nxMPumSE/i3BCzkrwvhvWicbCv xecJKBAYJol/XKZoYXkovgA69/H+y9TiAuJefRfOF3LH2hxnpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEo0Bldq3m0RRobAswy1Afltl3tQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2 ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIwYjllMDBmNWMvNmE2Y2NmZjQtMWI0OS0z NWMzLTlmYWYtNDk1OWU3OTZhZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg3NmQ1YTgtNWRkNi00NDBhLTk3 ZTItNWUyMGI5ZTAwZjVjLzY4NzZkNWE4LTVkZDYtNDQwYS05N2UyLTVlMjBiOWUw MGY1Yy5jcmwwHwYDVR0jBBgwFoAUoSduxM+Q6aeKON2MubjRHPAXmrMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIw YjllMDBmNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+KIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCRwZveDe+DRpEZazWLSvA0MffEc38U8Bxc7rflT8HbWQUvCAqW4Pr9 Di9hkBzvBp9ShfVTgU5U3UIRbwWhfll3GZSr1xz2eFk7EXnRVQMY6mTqp9UXMj/P GEHpYmF+GMrJA7j0pr+1gGnysomVDpLa9nl0vGHRvNA4zUwQ1oi58zIqYGC0l9AG BrighIMvGluGBV3tbQNKNigCpz2UJSccaseUYK2cSy+KgcV32bFoHLkMpqB4KTR9 gxzmqYm3lX77I7lWGTTKd2cdAVDFW56KkNA0VV096bieKrWcfhXBD+0Q5vXTt/Bf EQlR2far2GO1DCY+hSgRTari0vrCRKI= -----END CERTIFICATE-----Generated at Fri Apr 19 16:26:56 2024 by rpki-client on console-ams.rpki-client.org