$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3e4c8d5f-275c-38cd-8201-e93b83842be2.roa File: 3e4c8d5f-275c-38cd-8201-e93b83842be2.roa (raw, json) Hash identifier: cI+8jBZ9nXFmqM+6RA8IkmBzoIHcF9vptmUBunTQipo= Subject key identifier: 56:FD:D3:08:04:1C:AA:8B:BD:49:A5:03:FC:0C:8D:BA:8C:C1:5E:B0 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285845D39E62F71101FEA44B60E200 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3e4c8d5f-275c-38cd-8201-e93b83842be2.roa Signing time: Fri 10 May 2024 13:00:36 +0000 ROA not before: Fri 10 May 2024 13:00:36 +0000 ROA not after: Thu 08 Aug 2024 13:00:36 +0000 asID: 54203 IP address blocks: 216.169.132.0/24 maxlen: 24 173.255.176.0/20 maxlen: 20 108.171.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d3:9e:62:f7:11:01:fe:a4:4b:60:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: May 10 13:00:36 2024 GMT Not After : Aug 8 13:00:36 2024 GMT Subject: CN=d36e7587-0898-41ae-9773-6193b49a73a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:14:50:94:10:da:25:cb:ae:28:1c:70:df:82: a6:b5:4a:8b:e3:44:e5:83:e4:60:fc:12:c3:d3:73: 4b:57:d1:55:0b:71:8a:e4:ef:79:71:51:e2:97:6f: 46:29:dd:ae:7d:f1:6b:26:06:60:ee:28:36:33:ba: 2f:d6:71:e1:55:aa:52:40:9e:f4:19:c7:76:fa:59: 7d:e6:ab:e4:80:c1:8f:bc:87:60:ad:c2:38:03:67: 5e:20:5c:ba:f8:2d:13:37:c0:dc:0d:42:55:7f:f6: 77:c3:08:b1:7f:fd:30:db:5f:cd:4f:b2:da:9a:91: e8:9e:40:06:44:8d:07:cd:8e:61:c1:e0:d2:65:7a: 7a:a4:09:ff:e8:4d:f4:7a:e6:cd:fd:a7:5e:c3:27: c3:24:81:14:d9:f7:19:aa:97:62:c2:79:fa:ab:e4: d9:f1:78:47:23:7b:9a:9e:6e:f2:eb:a8:e9:55:c3: a3:fd:14:3a:1d:77:13:76:01:a0:a5:57:d3:6d:07: 53:6a:fd:4e:a7:02:a7:36:e9:bf:47:5e:e4:8c:f4: 63:db:fd:f3:a0:95:64:25:ae:3f:90:09:4a:f8:4d: 05:af:13:ad:43:dc:1a:88:ec:b8:54:44:33:64:da: a4:52:0f:9c:ae:02:0e:8f:40:6c:2e:1d:79:0e:5f: 80:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FD:D3:08:04:1C:AA:8B:BD:49:A5:03:FC:0C:8D:BA:8C:C1:5E:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3e4c8d5f-275c-38cd-8201-e93b83842be2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 108.171.104.0/21 173.255.176.0/20 216.169.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:83:3f:c2:e0:09:51:3c:44:e3:45:f9:8e:55:ea:f8:09:f9: c6:e7:0b:78:dc:99:bc:b6:99:5b:b6:bb:fa:99:c4:f7:ca:23: 8f:05:63:54:86:de:94:cd:cf:f6:88:c2:79:95:be:59:dd:72: 1c:6b:30:b1:d3:90:6d:6c:6c:7d:a3:cf:11:cb:38:29:b4:ef: bb:42:26:f7:5d:9b:8f:36:11:f2:7c:0f:db:e6:45:03:03:b7: 96:6e:de:32:4b:cf:35:06:41:26:d9:eb:71:19:c0:92:f2:bf: 6f:29:9a:27:63:52:a2:df:11:95:03:ee:3c:43:f7:81:1f:f7: 23:3f:ad:ed:13:ba:f4:21:6f:f1:54:e0:77:0a:e3:63:4e:e5: 33:df:f6:78:c9:41:a8:26:70:14:6b:7b:2e:fb:b7:28:91:ea: f4:db:b7:96:84:47:e1:c6:f0:e3:66:05:04:48:bc:0b:7d:99: 23:2f:b3:41:49:87:ad:db:56:f5:0a:b9:be:44:42:f5:bb:aa: bd:3d:ea:4f:0b:68:d0:90:9e:58:3c:fb:c6:03:46:53:a3:2b: 53:21:f4:78:10:cd:67:63:cf:0a:00:38:89:12:88:68:9e:7b: be:76:fd:5c:d0:eb:18:1b:6f:61:30:5f:3a:41:ea:a5:9b:fc: 56:09:68:1e -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEXTnmL3EQH+pEtg4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI0MDUxMDEzMDAzNloXDTI0MDgwODEzMDAzNlowLzEtMCsGA1UEAxMk ZDM2ZTc1ODctMDg5OC00MWFlLTk3NzMtNjE5M2I0OWE3M2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/RRQlBDaJcuuKBxw34KmtUqL40Tlg+Rg/BLD 03NLV9FVC3GK5O95cVHil29GKd2uffFrJgZg7ig2M7ov1nHhVapSQJ70Gcd2+ll9 5qvkgMGPvIdgrcI4A2deIFy6+C0TN8DcDUJVf/Z3wwixf/0w21/NT7LampHonkAG RI0HzY5hweDSZXp6pAn/6E30eubN/adewyfDJIEU2fcZqpdiwnn6q+TZ8XhHI3ua nm7y66jpVcOj/RQ6HXcTdgGgpVfTbQdTav1OpwKnNum/R17kjPRj2/3zoJVkJa4/ kAlK+E0FrxOtQ9waiOy4VEQzZNqkUg+crgIOj0BsLh15Dl+AlwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFFb90wgEHKqLvUmlA/wMjbqMwV6wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvM2U0YzhkNWYtMjc1Yy0z OGNkLTgyMDEtZTkzYjgzODQyYmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDbKtoAwQE rf+wAwQA2KmEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFGDP8LgCVE8RONF+Y5V6vgJ+cbnC3jcmby2mVu2 u/qZxPfKI48FY1SG3pTNz/aIwnmVvlndchxrMLHTkG1sbH2jzxHLOCm077tCJvdd m482EfJ8D9vmRQMDt5Zu3jJLzzUGQSbZ63EZwJLyv28pmidjUqLfEZUD7jxD94Ef 9yM/re0TuvQhb/FU4HcK42NO5TPf9njJQagmcBRrey77tyiR6vTbt5aER+HG8ONm BQRIvAt9mSMvs0FJh63bVvUKub5EQvW7qr096k8LaNCQnlg8+8YDRlOjK1Mh9HgQ zWdjzwoAOIkSiGiee752/VzQ6xgbb2EwXzpB6qWb/FYJaB4= -----END CERTIFICATE-----Generated at Sat May 18 15:35:02 2024 by rpki-client on console-fra.rpki-client.org