$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa File: dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa (raw, json) Hash identifier: jVCkOM0uJ1KBGPeEBkp2HVof6tcJ3Dw3gzFPH8sI5KY= Subject key identifier: 81:84:C1:F5:9D:27:F9:7F:0F:52:78:1B:42:44:4A:3E:08:F4:11:4C Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c Certificate serial: 010D0C9F43285845DBFE622B5D2222D356F25DC0 Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa Signing time: Mon 13 May 2024 13:00:34 +0000 ROA not before: Mon 13 May 2024 13:00:34 +0000 ROA not after: Sun 11 Aug 2024 13:00:34 +0000 asID: 4755 IP address blocks: 208.78.17.0/24 maxlen: 24 208.78.18.0/24 maxlen: 24 208.78.19.0/24 maxlen: 24 208.78.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:db:fe:62:2b:5d:22:22:d3:56:f2:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c Validity Not Before: May 13 13:00:34 2024 GMT Not After : Aug 11 13:00:34 2024 GMT Subject: CN=9dddea84-16de-4bdd-baa6-32c731993c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4b:94:95:ed:c1:0c:33:bd:9c:33:e2:7a:8a: 28:2b:4d:0a:d4:d1:2f:b9:e3:a0:48:a7:2f:f1:bc: 04:11:b9:a6:c9:d0:90:ea:12:8b:51:dd:9a:c3:3a: ba:4a:f9:90:a0:fc:c2:db:13:bc:a6:f1:9c:e2:eb: ee:10:81:80:d5:9a:c1:7b:2f:10:a1:8c:30:f5:4c: 15:bf:db:f9:aa:e3:9e:22:bd:70:6d:7e:b0:ed:cf: 09:fa:f3:03:a7:6e:45:34:83:fc:9b:10:cd:c5:8f: e6:77:a5:55:cc:3f:4a:53:f2:c8:ba:cf:97:bc:94: 72:01:b6:21:97:28:77:7c:25:7b:dd:ce:1d:25:7d: 2f:33:97:00:48:39:38:2c:63:01:5f:77:82:98:ff: f1:09:59:d8:71:13:2c:c5:e7:8d:bf:84:1c:08:f5: cd:d2:73:42:a6:2b:b2:01:84:a5:3f:26:95:d9:64: 0d:09:e8:c9:ae:4d:c6:9a:c5:f8:82:7d:df:18:8e: fd:0c:bb:11:3e:b7:d4:6c:e1:fd:79:2a:b2:66:a8: 48:ea:9f:e1:3b:6c:a8:5e:bd:a9:5f:47:31:a7:1f: 54:b7:cd:66:ca:a4:e9:25:41:1e:4e:e3:1f:55:6a: c1:81:32:c6:32:43:6a:02:aa:40:83:ce:11:fb:63: 72:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:84:C1:F5:9D:27:F9:7F:0F:52:78:1B:42:44:4A:3E:08:F4:11:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl X509v3 Authority Key Identifier: keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer sbgp-ipAddrBlock: critical IPv4: 208.78.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:a2:f9:cb:ea:28:7c:64:19:11:b7:4a:db:05:bd:2d:60:9e: 3d:97:65:2d:28:70:10:dd:72:cc:aa:2e:b5:83:fb:88:71:45: 59:03:85:32:0d:e4:55:f5:73:4f:60:37:96:5a:9c:8d:46:78: 02:b8:3d:00:65:5d:ff:1e:20:83:82:22:47:c0:bc:b8:69:dd: 1c:0e:5a:c6:ca:e4:3f:9f:55:34:ce:10:90:e9:dc:a6:22:b1: 41:42:d2:33:a4:eb:d4:1e:fa:00:92:69:68:29:b0:02:13:66: 9e:b5:bb:09:55:f8:6b:15:3d:ed:a9:eb:cb:3a:db:5e:85:f8: 76:e7:c3:f2:c0:91:55:66:5d:22:3e:eb:73:62:44:e5:b4:18: 86:3a:7e:c2:a5:75:e9:e2:cf:2a:fe:7c:8e:ef:4f:80:d3:6c: 82:03:5f:8e:91:ca:22:6f:da:8a:1b:ba:98:5b:97:24:67:4c: 08:59:55:15:a6:2a:77:0c:77:78:d9:f1:ff:0b:e3:3d:b1:a8: f5:89:1c:51:25:95:ff:e2:e2:61:ee:a6:f9:19:c2:c1:84:d3: 1a:a8:03:5a:83:e4:94:98:e5:80:61:7f:5e:ca:04:56:37:cb: 26:9f:c0:41:1f:23:07:ec:bb:44:e9:0b:67:71:e8:70:f2:dd: d6:e7:f6:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXb/mIrXSIi01byXcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4 NDJjMB4XDTI0MDUxMzEzMDAzNFoXDTI0MDgxMTEzMDAzNFowLzEtMCsGA1UEAxMk OWRkZGVhODQtMTZkZS00YmRkLWJhYTYtMzJjNzMxOTkzYzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUuUle3BDDO9nDPieoooK00K1NEvueOgSKcv 8bwEEbmmydCQ6hKLUd2awzq6SvmQoPzC2xO8pvGc4uvuEIGA1ZrBey8QoYww9UwV v9v5quOeIr1wbX6w7c8J+vMDp25FNIP8mxDNxY/md6VVzD9KU/LIus+XvJRyAbYh lyh3fCV73c4dJX0vM5cASDk4LGMBX3eCmP/xCVnYcRMsxeeNv4QcCPXN0nNCpiuy AYSlPyaV2WQNCejJrk3GmsX4gn3fGI79DLsRPrfUbOH9eSqyZqhI6p/hO2yoXr2p X0cxpx9Ut81myqTpJUEeTuMfVWrBgTLGMkNqAqpAg84R+2NyzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGEwfWdJ/l/D1J4G0JESj4I9BFMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5 MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvZGQzZmExZmYtYTQwOS0z MmQ5LWJhNGMtZGE4M2MzZTQ3ZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg1OTFiOTUtMzlkNy00ZTU0LTkw ZjMtMTMzOTMzOGI4NDJjLzI4NTkxYjk1LTM5ZDctNGU1NC05MGYzLTEzMzkzMzhi ODQyYy5jcmwwHwYDVR0jBBgwFoAU/hD3fjltydQ3zw/RR1+y/RTGxWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5 MzM4Yjg0MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGi+cvqKHxkGRG3StsFvS1gnj2XZS0ocBDdcsyqLrWD+4hxRVkDhTIN 5FX1c09gN5ZanI1GeAK4PQBlXf8eIIOCIkfAvLhp3RwOWsbK5D+fVTTOEJDp3KYi sUFC0jOk69Qe+gCSaWgpsAITZp61uwlV+GsVPe2p68s6216F+Hbnw/LAkVVmXSI+ 63NiROW0GIY6fsKldenizyr+fI7vT4DTbIIDX46RyiJv2oobuphblyRnTAhZVRWm KncMd3jZ8f8L4z2xqPWJHFEllf/i4mHupvkZwsGE0xqoA1qD5JSY5YBhf17KBFY3 yyafwEEfIwfsu0TpC2dx6HDy3dbn9qA= -----END CERTIFICATE-----Generated at Wed May 22 14:40:11 2024 by rpki-client on console-fra.rpki-client.org