$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cd09b076-f0a7-39da-92db-1eca7f74e3b8.roa File: cd09b076-f0a7-39da-92db-1eca7f74e3b8.roa (raw, json) Hash identifier: cLXmOwjo9XgMJYvnwQ9ATiyjKlkkHoWWD5CrQClSen8= Subject key identifier: DB:04:58:F7:10:3A:2B:CD:0D:0E:72:11:29:CC:30:BA:F7:27:B7:9E Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F432858449F3F7823631E689350F09440 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cd09b076-f0a7-39da-92db-1eca7f74e3b8.roa Signing time: Sun 21 Jan 2024 02:00:26 +0000 ROA not before: Sun 21 Jan 2024 02:00:26 +0000 ROA not after: Sat 20 Apr 2024 01:00:26 +0000 asID: 14618 IP address blocks: 192.161.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 Mar 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:9f:3f:78:23:63:1e:68:93:50:f0:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: Jan 21 02:00:26 2024 GMT Not After : Apr 20 01:00:26 2024 GMT Subject: CN=11a19f9b-812f-4e3c-aa2e-1aba7681268d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c8:92:89:dd:46:68:28:9d:b9:0e:64:a4:24: ae:0f:eb:de:54:56:2e:75:9b:b4:0c:3c:ae:ce:a7: d3:c2:fe:17:83:8a:93:8e:f6:26:f2:28:cc:98:e3: bb:10:da:d1:03:0c:ae:ea:ab:7d:1b:25:a8:ee:91: f9:d9:67:42:9c:e0:61:e8:a8:3f:00:be:61:c3:5c: 63:f4:1c:d5:cd:7a:ae:97:13:24:ff:e8:9d:53:68: 92:40:f1:43:e2:56:12:38:9c:f8:a0:5c:0e:d7:b4: a6:3d:22:b5:a5:9c:df:0c:35:fc:83:c9:67:25:9f: 20:e9:6b:13:89:aa:87:c3:0f:00:07:0f:b7:87:ba: 3f:50:a8:d7:2d:95:85:77:ea:53:16:c9:b8:d1:c4: e6:de:a0:d0:32:be:06:bc:46:f3:97:81:d4:75:2e: 52:fb:2b:c6:14:25:97:f1:be:13:6f:fc:de:e7:73: 2f:c9:26:30:f1:04:a4:a7:54:3b:8a:71:87:8b:36: ec:c5:6d:b5:2d:fb:d9:e7:ec:8a:69:69:3f:ae:4d: 32:f6:a0:e8:7d:d9:8f:c8:f7:ea:55:78:1b:65:3d: 18:14:5f:37:cd:43:a3:92:bd:47:18:09:da:28:a8: cc:6c:c8:43:2e:56:91:17:12:1e:e3:e7:58:95:6c: dd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:04:58:F7:10:3A:2B:CD:0D:0E:72:11:29:CC:30:BA:F7:27:B7:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cd09b076-f0a7-39da-92db-1eca7f74e3b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv4: 192.161.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:20:bf:f1:8f:30:6c:f6:f8:2a:38:4f:2e:c7:5e:0c:8a:4a: e4:81:41:83:64:66:16:b7:07:78:a5:d9:57:77:03:e7:b0:3e: af:f4:6a:61:5e:19:fd:19:11:dd:e0:01:16:97:65:44:15:e3: 83:88:68:67:eb:d9:ef:c6:0a:2a:0d:64:63:97:b9:12:b8:a3: d6:cf:93:85:e7:d5:85:6e:9b:db:94:fb:35:0a:02:82:de:bf: fc:7f:f6:46:92:73:2f:a2:e9:5f:8f:b3:a4:af:38:c6:20:d6: ea:18:be:c4:5e:b0:a0:0f:db:30:97:5c:71:92:5a:c6:08:e4: 7e:00:42:77:92:2c:6a:44:74:a6:86:d1:ed:08:05:bd:84:16: aa:3a:7a:d7:03:21:3a:c6:b0:1f:29:5b:d4:a6:80:3f:e7:fa: 38:f2:50:a8:59:78:ae:13:35:b3:77:6e:f5:2f:1a:d5:6a:e0: 15:6b:ef:a1:65:78:e4:9d:0f:0b:c0:ef:a6:46:57:84:66:d2: 4d:53:7f:b0:b2:21:f2:e6:4b:60:c8:92:4f:cd:a2:28:f8:01: 78:44:99:ba:dc:d7:fe:90:cd:bd:ac:a2:b3:4d:c9:bb:0e:dc: 11:12:ac:36:5f:1e:34:4d:43:16:e2:45:4e:bc:6f:35:25:44: d8:81:8d:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESfP3gjYx5ok1DwlEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI0MDEyMTAyMDAyNloXDTI0MDQyMDAxMDAyNlowLzEtMCsGA1UEAxMk MTFhMTlmOWItODEyZi00ZTNjLWFhMmUtMWFiYTc2ODEyNjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhciSid1GaCiduQ5kpCSuD+veVFYudZu0DDyu zqfTwv4Xg4qTjvYm8ijMmOO7ENrRAwyu6qt9GyWo7pH52WdCnOBh6Kg/AL5hw1xj 9BzVzXqulxMk/+idU2iSQPFD4lYSOJz4oFwO17SmPSK1pZzfDDX8g8lnJZ8g6WsT iaqHww8ABw+3h7o/UKjXLZWFd+pTFsm40cTm3qDQMr4GvEbzl4HUdS5S+yvGFCWX 8b4Tb/ze53MvySYw8QSkp1Q7inGHizbsxW21LfvZ5+yKaWk/rk0y9qDofdmPyPfq VXgbZT0YFF83zUOjkr1HGAnaKKjMbMhDLlaRFxIe4+dYlWzdVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsEWPcQOivNDQ5yESnMMLr3J7eeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvY2QwOWIwNzYtZjBhNy0z OWRhLTkyZGItMWVjYTdmNzRlM2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJogv/GPMGz2+Co4Ty7HXgyKSuSBQYNkZha3B3il2Vd3A+ewPq/0amFe Gf0ZEd3gARaXZUQV44OIaGfr2e/GCioNZGOXuRK4o9bPk4Xn1YVum9uU+zUKAoLe v/x/9kaScy+i6V+Ps6SvOMYg1uoYvsResKAP2zCXXHGSWsYI5H4AQneSLGpEdKaG 0e0IBb2EFqo6etcDITrGsB8pW9SmgD/n+jjyUKhZeK4TNbN3bvUvGtVq4BVr76Fl eOSdDwvA76ZGV4Rm0k1Tf7CyIfLmS2DIkk/Noij4AXhEmbrc1/6Qzb2sorNNybsO 3BESrDZfHjRNQxbiRU68bzUlRNiBjag= -----END CERTIFICATE-----Generated at Fri Mar 29 03:44:50 2024 by rpki-client on console-fra.rpki-client.org