$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/032d723a-5ec8-37e0-8261-2d1f8659b178.roa File: 032d723a-5ec8-37e0-8261-2d1f8659b178.roa (raw, json) Hash identifier: OHS0hnuU+wl5qP22Vu6wJ2ypYui1bVA2tu5T1LQxk4o= Subject key identifier: 91:4E:64:08:45:2A:E8:95:31:0D:7D:65:F6:E2:F4:A6:C3:A2:4A:A1 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285845D503CAB428FC13C69A211240 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/032d723a-5ec8-37e0-8261-2d1f8659b178.roa Signing time: Sat 11 May 2024 01:00:27 +0000 ROA not before: Sat 11 May 2024 01:00:27 +0000 ROA not after: Fri 09 Aug 2024 01:00:27 +0000 asID: 54203 IP address blocks: 216.131.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d5:03:ca:b4:28:fc:13:c6:9a:21:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: May 11 01:00:27 2024 GMT Not After : Aug 9 01:00:27 2024 GMT Subject: CN=71c2f379-ff27-4743-9289-aa0b33985b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c9:db:f9:6a:b1:b5:8a:da:98:f0:73:0b:99: ae:d0:5d:30:89:84:04:29:46:1e:a8:0b:ed:96:9b: 0d:28:85:a1:04:17:ba:32:73:27:32:34:96:f5:2b: 49:01:94:66:17:20:b0:9f:e7:a0:e0:d9:fb:f0:18: de:77:68:b7:98:6d:42:6f:4c:fa:f2:73:2a:f0:22: 06:16:23:a0:41:4f:04:3e:f7:08:de:c3:8b:91:39: 8e:e7:76:05:53:c8:76:9f:83:98:4b:7b:fa:f7:c8: 7d:ff:15:f7:40:e4:df:f9:50:18:1c:7d:92:c2:68: 5a:62:86:91:d3:9f:4c:74:29:f2:3f:3f:2e:24:f4: 13:12:e6:88:b1:a1:e2:e4:f9:31:b3:58:6a:8a:8a: bd:d9:6c:75:0c:8b:2a:81:ee:52:78:fc:a9:53:a7: 91:8e:93:ad:3a:4b:de:13:51:ab:01:b9:49:1c:d5: 4e:10:68:d7:07:9f:b5:e4:c4:cc:6b:01:7f:97:0f: c9:ec:2b:de:dd:36:d8:c1:9a:78:0e:fd:c4:d3:a3: f2:3f:fe:18:3a:9f:c7:df:8a:93:76:0e:76:0e:c8: 03:7f:25:d3:17:0d:55:56:29:28:bb:ec:95:20:10: 46:a5:15:3f:91:10:08:b6:83:3f:4c:19:ba:25:1e: c0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4E:64:08:45:2A:E8:95:31:0D:7D:65:F6:E2:F4:A6:C3:A2:4A:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/032d723a-5ec8-37e0-8261-2d1f8659b178.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ba:b4:a0:25:c5:09:54:d7:d8:d7:d0:46:c2:c0:f2:2c:8b: 10:31:36:31:c8:dc:fe:2d:b5:d9:73:36:bd:bd:d6:1f:91:3b: bf:6a:4c:ac:e6:84:d9:70:f4:2b:56:39:16:e0:03:b2:42:db: 48:14:62:ab:b7:b2:7b:19:3c:a3:0e:97:4f:69:fd:25:27:4d: f7:53:9b:30:3f:4d:86:00:78:f9:13:27:60:0f:c4:4d:2e:6f: 42:51:7f:cd:29:cb:47:41:3f:a7:cb:71:ef:97:9d:ed:8d:25: 84:f6:f8:ad:f2:35:ce:7e:75:c0:4a:61:9b:b4:69:2f:66:c1: 03:2f:96:b2:b5:05:32:0a:34:ed:05:01:76:d7:31:a3:81:e7: 92:ed:11:15:b4:9f:c8:e6:57:ba:76:5a:c1:04:da:48:d6:2a: 15:f1:dc:75:39:60:43:b8:46:5c:b1:8f:80:80:07:05:8a:fa: 76:7b:60:8d:9d:64:55:da:92:c6:f6:ef:58:b8:2f:33:3a:4f: 5b:db:14:6a:58:bf:a6:c0:29:9b:d0:81:f2:1a:48:fd:9b:9a: 54:4f:55:38:2a:48:14:3c:27:96:ed:71:dc:54:79:b5:f3:a9: 4a:08:86:53:a4:2f:97:e5:ac:b3:74:00:8d:8f:1a:93:b1:46: 23:39:3a:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXVA8q0KPwTxpohEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI0MDUxMTAxMDAyN1oXDTI0MDgwOTAxMDAyN1owLzEtMCsGA1UEAxMk NzFjMmYzNzktZmYyNy00NzQzLTkyODktYWEwYjMzOTg1YjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsnb+WqxtYramPBzC5mu0F0wiYQEKUYeqAvt lpsNKIWhBBe6MnMnMjSW9StJAZRmFyCwn+eg4Nn78Bjed2i3mG1Cb0z68nMq8CIG FiOgQU8EPvcI3sOLkTmO53YFU8h2n4OYS3v698h9/xX3QOTf+VAYHH2SwmhaYoaR 059MdCnyPz8uJPQTEuaIsaHi5Pkxs1hqioq92Wx1DIsqge5SePypU6eRjpOtOkve E1GrAblJHNVOEGjXB5+15MTMawF/lw/J7Cve3TbYwZp4Dv3E06PyP/4YOp/H34qT dg52DsgDfyXTFw1VVikou+yVIBBGpRU/kRAItoM/TBm6JR7A/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFOZAhFKuiVMQ19Zfbi9KbDokqhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMDMyZDcyM2EtNWVjOC0z N2UwLTgyNjEtMmQxZjg2NTliMTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2INYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHW6tKAlxQlU19jX0EbCwPIsixAxNjHI3P4ttdlzNr291h+RO79qTKzm hNlw9CtWORbgA7JC20gUYqu3snsZPKMOl09p/SUnTfdTmzA/TYYAePkTJ2APxE0u b0JRf80py0dBP6fLce+Xne2NJYT2+K3yNc5+dcBKYZu0aS9mwQMvlrK1BTIKNO0F AXbXMaOB55LtERW0n8jmV7p2WsEE2kjWKhXx3HU5YEO4Rlyxj4CABwWK+nZ7YI2d ZFXaksb271i4LzM6T1vbFGpYv6bAKZvQgfIaSP2bmlRPVTgqSBQ8J5btcdxUebXz qUoIhlOkL5flrLN0AI2PGpOxRiM5Ogo= -----END CERTIFICATE-----Generated at Sat May 18 13:30:34 2024 by rpki-client on console-fra.rpki-client.org