$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/4b394ad3-feab-3d68-855a-82c3eb623e83.roa File: 4b394ad3-feab-3d68-855a-82c3eb623e83.roa (raw, json) Hash identifier: mTLSWkUSal+8WnlzYxgAlvw+qv3GPzmPx5tehxKonyA= Subject key identifier: F1:A9:CE:76:93:52:6A:95:CB:F2:D4:EC:50:D1:52:28:C2:E7:FF:33 Certificate issuer: /CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Certificate serial: 010D0C9F43285847D99A0A27A8A8005998747B00 Authority key identifier: 67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/4b394ad3-feab-3d68-855a-82c3eb623e83.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 46824 IP address blocks: 23.172.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:9a:0a:27:a8:a8:00:59:98:74:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=b143ba89-f3b2-4561-85fd-f55db72e7f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bd:e4:a3:4b:ca:2d:e2:30:d9:a8:b5:be:e8: d5:6e:cb:31:db:01:ef:64:66:14:34:70:1f:1c:ff: 98:8f:e9:b5:93:f0:00:db:e1:0d:a3:c4:33:d6:ce: a8:f8:e7:76:cd:cb:92:f5:5c:37:3f:39:46:db:3f: 85:53:da:ed:f7:3a:6a:fd:a7:d9:af:4d:bb:f6:3e: d9:18:f1:cc:01:9c:86:31:c2:4e:aa:66:b9:70:7e: 0a:c3:75:91:0e:f7:42:03:06:cf:96:8b:e4:2d:d6: 43:bc:eb:b0:cd:77:4e:51:b8:09:e9:b1:96:c7:f9: ac:00:31:0e:2b:cd:f1:c8:7c:ce:88:01:86:ea:c3: 10:3f:05:2e:90:a8:36:88:98:2a:17:ff:c5:c2:79: 75:94:94:d9:73:ba:56:99:b8:9b:c5:65:b5:4a:b5: 14:6b:0b:a6:22:f2:8c:7f:c4:99:d7:ae:68:23:3d: 24:a8:fa:df:d9:de:5a:5e:60:46:3b:64:52:49:35: a0:10:2a:52:15:cf:27:b8:bb:35:46:4d:85:cd:57: 75:6e:43:5a:11:33:f6:af:a8:7d:a3:7e:32:c9:f4: 63:39:f5:35:fc:f2:33:19:5b:c2:c3:dd:26:2a:44: 3b:7e:da:85:9f:80:2a:57:aa:10:07:11:79:f9:88: 37:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A9:CE:76:93:52:6A:95:CB:F2:D4:EC:50:D1:52:28:C2:E7:FF:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/4b394ad3-feab-3d68-855a-82c3eb623e83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl X509v3 Authority Key Identifier: keyid:67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer sbgp-ipAddrBlock: critical IPv4: 23.172.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:5c:01:37:41:87:9e:1b:ae:28:37:42:de:b1:ea:6b:a9:60: 41:f0:52:c1:86:5a:51:d9:26:d3:17:74:cf:a3:ca:28:47:c4: f5:a2:1d:5e:46:bc:b8:3c:cc:72:35:13:c2:b3:77:d4:89:fa: 41:8c:73:83:b1:78:19:9e:c5:3f:97:bb:64:b5:a1:f8:82:48: 40:c1:d1:66:28:35:be:eb:f8:09:d6:81:1a:c6:c0:26:3b:b1: b5:70:19:5c:21:0a:44:fa:8f:67:d3:18:ea:6b:3d:b4:c5:0e: ad:31:0c:50:37:0c:33:ac:39:74:8a:39:ae:87:df:b0:5e:ca: f3:58:8e:eb:a7:8f:f5:0d:89:eb:6d:c7:6e:67:96:79:fa:92: f5:fb:27:2c:cd:93:b9:ee:d4:c6:cf:69:e6:ec:22:f0:ba:79: c2:85:68:d0:48:c9:4b:ff:cd:7d:77:a0:41:4c:d2:3c:c2:34: 2c:64:fe:ff:d6:54:41:c0:9a:f2:5c:b0:58:99:a7:b2:ba:c0: a1:8c:ed:9a:99:b4:c6:8e:91:3f:f6:11:13:87:87:c0:17:b3: 60:df:9b:cb:f7:37:ad:7b:e9:16:fe:c9:8f:e2:d8:ea:da:9f: 36:89:93:78:d2:aa:99:6e:9e:06:a7:22:b0:9c:fc:83:f3:bd: 4d:39:42:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmgonqKgAWZh0ewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQzZTYwMzItYTZhZi00NjYyLThiMDctODQ4ZWVlY2Mz OTk1MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk YjE0M2JhODktZjNiMi00NTYxLTg1ZmQtZjU1ZGI3MmU3ZjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL3ko0vKLeIw2ai1vujVbssx2wHvZGYUNHAf HP+Yj+m1k/AA2+ENo8Qz1s6o+Od2zcuS9Vw3PzlG2z+FU9rt9zpq/afZr0279j7Z GPHMAZyGMcJOqma5cH4Kw3WRDvdCAwbPlovkLdZDvOuwzXdOUbgJ6bGWx/msADEO K83xyHzOiAGG6sMQPwUukKg2iJgqF//Fwnl1lJTZc7pWmbibxWW1SrUUawumIvKM f8SZ165oIz0kqPrf2d5aXmBGO2RSSTWgECpSFc8nuLs1Rk2FzVd1bkNaETP2r6h9 o34yyfRjOfU1/PIzGVvCw90mKkQ7ftqFn4AqV6oQBxF5+Yg3vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGpznaTUmqVy/LU7FDRUijC5/8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZDNl NjAzMi1hNmFmLTQ2NjItOGIwNy04NDhlZWVjYzM5OTUvNGIzOTRhZDMtZmVhYi0z ZDY4LTg1NWEtODJjM2ViNjIzZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGQzZTYwMzItYTZhZi00NjYyLThi MDctODQ4ZWVlY2MzOTk1L2RkM2U2MDMyLWE2YWYtNDY2Mi04YjA3LTg0OGVlZWNj Mzk5NS5jcmwwHwYDVR0jBBgwFoAUZwW65gzm7LpptisX60L/L29OAi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZDNlNjAzMi1hNmFmLTQ2NjItOGIwNy04NDhl ZWVjYzM5OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF6yIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFcATdBh54brig3Qt6x6mupYEHwUsGGWlHZJtMXdM+jyihHxPWiHV5G vLg8zHI1E8Kzd9SJ+kGMc4OxeBmexT+Xu2S1ofiCSEDB0WYoNb7r+AnWgRrGwCY7 sbVwGVwhCkT6j2fTGOprPbTFDq0xDFA3DDOsOXSKOa6H37BeyvNYjuunj/UNiett x25nlnn6kvX7JyzNk7nu1MbPaebsIvC6ecKFaNBIyUv/zX13oEFM0jzCNCxk/v/W VEHAmvJcsFiZp7K6wKGM7ZqZtMaOkT/2EROHh8AXs2Dfm8v3N6176Rb+yY/i2Ora nzaJk3jSqplunganIrCc/IPzvU05Ql8= -----END CERTIFICATE-----Generated at Sat Nov 23 03:08:23 2024 by rpki-client on console-fra.rpki-client.org