$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa File: a943a62e-8af4-3728-ac21-db958b531f7a.roa (raw, json) Hash identifier: PgiU0A/HWgcQKIYzzKNDT2jq6Qrpk/XNMNFOvm2uRtI= Subject key identifier: F7:9A:C6:D5:2E:2F:34:D4:D4:CD:C7:32:64:63:BE:58:A5:CE:BF:69 Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F43285845D39E5E92343682CD62D31880 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa Signing time: Fri 10 May 2024 13:00:36 +0000 ROA not before: Fri 10 May 2024 13:00:36 +0000 ROA not after: Thu 08 Aug 2024 13:00:36 +0000 asID: 46432 IP address blocks: 208.88.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d3:9e:5e:92:34:36:82:cd:62:d3:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: May 10 13:00:36 2024 GMT Not After : Aug 8 13:00:36 2024 GMT Subject: CN=d74d05b8-6705-4b13-81d4-d378d54e30c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:66:9f:b7:b9:09:ba:09:e6:aa:58:7a:60:65: 18:22:04:a2:89:da:42:5e:f0:4a:23:7c:0c:b7:be: 5c:f4:0e:90:dc:36:49:58:d5:c6:14:f4:02:ae:41: 04:4a:ef:09:60:26:26:b8:8c:11:39:81:e7:68:be: 05:fd:de:bd:8f:6e:ac:2d:a1:2b:ed:8d:b6:13:4d: 0c:a5:c9:19:c8:ed:85:16:b0:e2:83:3c:25:ad:cd: e9:3c:14:27:28:d7:ef:b4:13:34:e2:cf:9f:86:78: 3a:b0:6b:a6:cc:c3:a9:d7:46:d4:f6:c6:e8:61:99: 7e:5b:01:4c:50:8e:82:94:d4:61:b3:ca:f1:38:17: bc:14:a7:cf:86:fd:e8:46:06:ce:c7:6a:b2:76:ca: 4d:ab:55:31:ad:f7:4f:2d:fd:e5:a1:f9:cd:16:8b: 0f:c7:c2:bf:63:f4:9d:3c:6f:0d:c4:c6:00:53:46: a9:c8:31:77:63:d6:42:37:6b:f8:7f:ec:67:98:07: 2a:51:f2:64:03:78:77:8c:8d:ac:0a:6e:1b:ec:49: 4f:65:50:a6:25:50:8a:31:55:7a:99:3e:0a:3b:fe: 97:4f:dc:aa:53:53:88:29:af:19:34:69:0d:30:87: a8:2d:b2:ef:b7:5d:c0:27:cd:a0:b9:40:c9:a3:e4: 2f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:9A:C6:D5:2E:2F:34:D4:D4:CD:C7:32:64:63:BE:58:A5:CE:BF:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv4: 208.88.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:fc:fc:3f:0e:5a:9b:6b:56:1a:e2:6f:20:61:a2:1c:c8:01: 60:ab:8c:60:e2:d7:c4:68:6f:ff:16:54:7f:12:84:d8:35:70: 12:52:25:de:0b:c6:41:ac:8d:ab:00:3d:66:49:32:11:ea:b0: da:36:84:92:4c:d9:4f:7f:95:f1:50:1f:aa:99:53:36:ef:d6: e8:e6:10:b9:85:56:96:20:a8:4b:65:a4:ec:a3:49:cd:ea:77: 23:bb:6c:be:74:ae:30:06:68:b7:30:4c:87:36:47:4a:91:b1: 6f:99:9f:1b:d1:be:35:a7:e6:5f:91:45:85:57:60:0d:c8:bc: 52:07:e0:eb:6c:d9:60:2f:b8:97:05:dd:84:2d:6a:37:82:26: 34:a4:cf:6f:fc:b9:ad:e8:7a:19:46:1e:fb:ee:45:ba:26:30: ae:59:51:05:ed:d7:9c:6e:62:25:10:4a:c2:a1:3b:d6:ac:f9: 18:76:dd:93:f2:84:77:2c:ee:86:fb:89:e8:f0:a9:42:f7:85: c6:42:56:11:ef:7d:45:41:d8:53:a1:f5:d7:2f:87:25:76:e4: 26:a1:86:ff:cd:01:de:cd:fc:c0:56:93:95:3a:94:ac:eb:60: 78:1f:61:fa:f4:84:2f:b0:a6:fe:83:72:fa:75:c3:58:0c:44: 3d:a9:4f:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXTnl6SNDaCzWLTGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI0MDUxMDEzMDAzNloXDTI0MDgwODEzMDAzNlowLzEtMCsGA1UEAxMk ZDc0ZDA1YjgtNjcwNS00YjEzLTgxZDQtZDM3OGQ1NGUzMGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmaft7kJugnmqlh6YGUYIgSiidpCXvBKI3wM t75c9A6Q3DZJWNXGFPQCrkEESu8JYCYmuIwROYHnaL4F/d69j26sLaEr7Y22E00M pckZyO2FFrDigzwlrc3pPBQnKNfvtBM04s+fhng6sGumzMOp10bU9sboYZl+WwFM UI6ClNRhs8rxOBe8FKfPhv3oRgbOx2qydspNq1UxrfdPLf3lofnNFosPx8K/Y/Sd PG8NxMYAU0apyDF3Y9ZCN2v4f+xnmAcqUfJkA3h3jI2sCm4b7ElPZVCmJVCKMVV6 mT4KO/6XT9yqU1OIKa8ZNGkNMIeoLbLvt13AJ82guUDJo+Qv2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeaxtUuLzTU1M3HMmRjvlilzr9pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvYTk0M2E2MmUtOGFmNC0z NzI4LWFjMjEtZGI5NThiNTMxZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABb8/D8OWptrVhribyBhohzIAWCrjGDi18Rob/8WVH8ShNg1cBJSJd4L xkGsjasAPWZJMhHqsNo2hJJM2U9/lfFQH6qZUzbv1ujmELmFVpYgqEtlpOyjSc3q dyO7bL50rjAGaLcwTIc2R0qRsW+ZnxvRvjWn5l+RRYVXYA3IvFIH4Ots2WAvuJcF 3YQtajeCJjSkz2/8ua3oehlGHvvuRbomMK5ZUQXt15xuYiUQSsKhO9as+Rh23ZPy hHcs7ob7iejwqUL3hcZCVhHvfUVB2FOh9dcvhyV25Cahhv/NAd7N/MBWk5U6lKzr YHgfYfr0hC+wpv6Dcvp1w1gMRD2pT58= -----END CERTIFICATE-----Generated at Fri May 17 20:57:16 2024 by rpki-client on console-fra.rpki-client.org