$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a04d8a83-93e5-3aec-805e-bfecb3fc50a6.roa File: a04d8a83-93e5-3aec-805e-bfecb3fc50a6.roa (raw, json) Hash identifier: ZVfsX5FvkoialYIUczDUq9JXnhlCAbouPTAzD8ijJhA= Subject key identifier: 55:A6:06:85:C5:ED:89:E7:33:5E:96:DB:DF:B2:10:D2:76:78:46:22 Certificate issuer: /CN=a6206bd0-e97f-4bc4-9e06-e1bb9b383624 Certificate serial: 010D0C9F43285847B5314E521B6FC594A66DA0E0 Authority key identifier: 03:14:81:13:BC:3C:4E:71:F2:9D:DD:63:06:82:F4:78:1F:61:EF:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a04d8a83-93e5-3aec-805e-bfecb3fc50a6.roa Signing time: Wed 30 Oct 2024 01:00:32 +0000 ROA not before: Wed 30 Oct 2024 01:00:32 +0000 ROA not after: Tue 28 Jan 2025 02:00:32 +0000 asID: 6145 IP address blocks: 23.157.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b5:31:4e:52:1b:6f:c5:94:a6:6d:a0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6206bd0-e97f-4bc4-9e06-e1bb9b383624 Validity Not Before: Oct 30 01:00:32 2024 GMT Not After : Jan 28 02:00:32 2025 GMT Subject: CN=68e5cca4-152a-4af2-ad35-4ffe8aec2384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d9:de:de:d5:63:5f:df:32:9f:34:b7:fb:e2: 3a:4c:40:3c:9b:d8:96:ac:0c:0f:21:1b:a6:ca:a9: f6:4d:6a:98:f2:2b:5f:b6:d1:59:be:1a:f1:e9:fd: b6:52:49:3b:5a:00:20:75:61:41:10:04:7b:21:dc: f8:a6:20:70:de:92:88:ff:ea:4a:a9:78:07:42:de: 4d:c2:95:6f:9f:47:2f:a5:b7:15:60:fa:ac:b3:8e: c9:c0:5f:c0:f1:aa:fa:15:ce:19:43:fd:51:21:b1: 82:f5:d7:96:75:c0:05:8c:9a:7c:95:98:3c:76:8e: aa:b0:e2:f3:10:26:93:2b:0f:1d:d2:f8:3c:ea:a0: ce:a4:8e:45:4c:3f:3b:39:ac:9a:a8:f9:1b:09:29: 27:65:f1:6f:69:7b:cb:a2:37:a1:04:4f:60:6e:1c: 90:50:ca:12:5a:d1:ae:65:07:fe:8f:34:60:8e:ad: 8b:9a:b8:74:79:c7:86:41:71:26:e9:79:26:66:71: 93:ae:e7:4c:f5:40:cd:3c:cb:db:e2:9e:85:fe:25: 42:0a:bc:82:f5:15:f2:3b:e1:df:e2:0a:2f:a7:2a: 18:79:f8:c6:e6:14:c1:d4:f9:2d:84:6c:93:e6:b9: d5:93:c2:d8:65:e1:40:be:33:ca:fa:82:eb:ab:3a: f3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A6:06:85:C5:ED:89:E7:33:5E:96:DB:DF:B2:10:D2:76:78:46:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a04d8a83-93e5-3aec-805e-bfecb3fc50a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.crl X509v3 Authority Key Identifier: keyid:03:14:81:13:BC:3C:4E:71:F2:9D:DD:63:06:82:F4:78:1F:61:EF:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer sbgp-ipAddrBlock: critical IPv4: 23.157.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:66:6e:8e:af:6c:9e:13:d1:75:b3:24:4b:8d:11:ef:f9:37: df:09:a0:1c:a8:34:cb:f8:ee:f9:94:8e:e0:6b:ff:8f:87:fd: 7b:d5:39:97:92:cd:5e:fd:39:7a:2a:86:52:1a:7d:c8:4b:4a: 4f:a0:12:0a:18:c2:f4:f9:5d:21:02:d6:6c:e1:c7:13:63:33: c6:1c:b0:5f:63:28:2d:01:38:e0:dc:40:b5:67:8d:ca:2a:af: 5b:f8:76:45:3c:e6:71:db:dc:c8:7f:6f:e7:44:da:c8:7a:ae: 98:9f:fe:43:f6:50:79:c0:c2:fc:98:20:36:e3:f8:f9:de:a8: 8e:fd:a2:9b:7d:81:7d:83:b3:2a:86:84:dc:b1:8e:f6:7c:64: 26:5a:cc:20:5a:ca:35:1f:e2:2e:e2:54:91:c0:45:66:51:63: f0:f4:05:e5:22:a0:6d:0a:b3:bf:f2:de:4e:ab:d8:5d:a2:7f: fc:f9:50:68:ca:e1:43:fc:04:29:2e:2d:db:4a:a1:d2:75:8d: 00:7f:2d:d9:06:21:d8:93:f3:5e:e1:e0:02:de:34:f5:97:85: 82:fa:1c:5a:b0:77:8d:68:94:a0:2e:ea:bd:e6:3f:cb:26:6f: 4c:49:e7:4e:22:3b:81:03:c9:e8:38:70:42:7d:91:7d:f2:89: b8:67:b8:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe1MU5SG2/FlKZtoOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYyMDZiZDAtZTk3Zi00YmM0LTllMDYtZTFiYjliMzgz NjI0MB4XDTI0MTAzMDAxMDAzMloXDTI1MDEyODAyMDAzMlowLzEtMCsGA1UEAxMk NjhlNWNjYTQtMTUyYS00YWYyLWFkMzUtNGZmZThhZWMyMzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNne3tVjX98ynzS3++I6TEA8m9iWrAwPIRum yqn2TWqY8itfttFZvhrx6f22Ukk7WgAgdWFBEAR7Idz4piBw3pKI/+pKqXgHQt5N wpVvn0cvpbcVYPqss47JwF/A8ar6Fc4ZQ/1RIbGC9deWdcAFjJp8lZg8do6qsOLz ECaTKw8d0vg86qDOpI5FTD87OayaqPkbCSknZfFvaXvLojehBE9gbhyQUMoSWtGu ZQf+jzRgjq2Lmrh0eceGQXEm6XkmZnGTrudM9UDNPMvb4p6F/iVCCryC9RXyO+Hf 4govpyoYefjG5hTB1PkthGyT5rnVk8LYZeFAvjPK+oLrqzrziQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWmBoXF7YnnM16W29+yENJ2eEYiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNjIw NmJkMC1lOTdmLTRiYzQtOWUwNi1lMWJiOWIzODM2MjQvYTA0ZDhhODMtOTNlNS0z YWVjLTgwNWUtYmZlY2IzZmM1MGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTYyMDZiZDAtZTk3Zi00YmM0LTll MDYtZTFiYjliMzgzNjI0L2E2MjA2YmQwLWU5N2YtNGJjNC05ZTA2LWUxYmI5YjM4 MzYyNC5jcmwwHwYDVR0jBBgwFoAUAxSBE7w8TnHynd1jBoL0eB9h75swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNjIwNmJkMC1lOTdmLTRiYzQtOWUwNi1lMWJi OWIzODM2MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF52IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVmbo6vbJ4T0XWzJEuNEe/5N98JoByoNMv47vmUjuBr/4+H/XvVOZeS zV79OXoqhlIafchLSk+gEgoYwvT5XSEC1mzhxxNjM8YcsF9jKC0BOODcQLVnjcoq r1v4dkU85nHb3Mh/b+dE2sh6rpif/kP2UHnAwvyYIDbj+PneqI79opt9gX2DsyqG hNyxjvZ8ZCZazCBayjUf4i7iVJHARWZRY/D0BeUioG0Ks7/y3k6r2F2if/z5UGjK 4UP8BCkuLdtKodJ1jQB/LdkGIdiT817h4ALeNPWXhYL6HFqwd41olKAu6r3mP8sm b0xJ504iO4EDyeg4cEJ9kX3yibhnuE0= -----END CERTIFICATE-----Generated at Tue Nov 26 05:29:40 2024 by rpki-client on console-ams.rpki-client.org