$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/8213878d-35dd-30b6-ac09-e612e049057a.roa File: 8213878d-35dd-30b6-ac09-e612e049057a.roa (raw, json) Hash identifier: gAY8SyYsUa7d8cx3m1XSmuIkdMgoUCxB813RlH3qSoI= Subject key identifier: EE:F9:F9:C0:7C:07:76:8C:65:53:21:4B:94:5D:02:A0:16:EA:A2:E4 Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Certificate serial: 010D0C9F432858459E93650BA8BC9B4CF9B20F80 Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/8213878d-35dd-30b6-ac09-e612e049057a.roa Signing time: Sun 21 Apr 2024 13:00:35 +0000 ROA not before: Sun 21 Apr 2024 13:00:35 +0000 ROA not after: Sat 20 Jul 2024 13:00:35 +0000 asID: 31875 IP address blocks: 216.21.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:9e:93:65:0b:a8:bc:9b:4c:f9:b2:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Validity Not Before: Apr 21 13:00:35 2024 GMT Not After : Jul 20 13:00:35 2024 GMT Subject: CN=c70fd234-6039-4f9e-a45f-150e957cca7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b1:b2:a6:00:62:67:d4:a0:9a:07:01:ae:b2: d2:59:66:7a:db:6d:80:29:3f:fc:47:5f:e5:47:18: bf:5c:61:3e:49:51:01:56:43:5d:bf:3e:af:81:37: c2:4d:04:7d:df:1d:7a:b6:eb:fe:cf:a9:85:e6:d2: 92:d9:73:58:70:5a:9b:66:f3:09:a2:04:fa:f0:c1: 10:67:cf:ae:00:2e:89:5a:44:b8:f2:f4:27:f3:dd: 1b:f1:61:94:8b:cd:b8:01:77:ac:de:61:68:13:85: c5:e0:14:50:ea:c0:68:1e:b0:63:07:d9:c1:53:c8: 92:00:17:ed:02:c9:bf:44:63:49:90:85:61:22:63: 30:15:a4:c3:54:6a:e0:de:a0:1c:e0:fc:ef:39:e4: e2:c7:b8:02:2a:d6:dd:dd:6d:ac:dc:47:09:2a:c4: 34:75:20:90:f8:8c:63:50:3a:7c:47:a2:e4:31:9c: a9:64:e4:87:36:ef:71:9c:95:36:bb:f0:2c:6e:3b: 14:a4:3a:27:2d:f3:b0:b4:27:be:b9:ef:b5:e0:76: a3:e1:f3:c8:e8:28:02:5c:0a:14:e8:6f:64:b9:ca: 49:44:6c:6e:00:a5:b2:65:22:f0:9a:ad:43:62:e8: bb:47:8f:54:19:04:90:d6:c5:40:88:a3:85:a2:f1: 3e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F9:F9:C0:7C:07:76:8C:65:53:21:4B:94:5D:02:A0:16:EA:A2:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/8213878d-35dd-30b6-ac09-e612e049057a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl X509v3 Authority Key Identifier: keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer sbgp-ipAddrBlock: critical IPv4: 216.21.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:2d:12:c2:fd:2a:d2:b1:b6:c1:9b:82:dc:de:35:f7:2e:a1: d6:0e:38:65:0f:68:bc:a0:f1:1e:ae:4a:d3:41:36:cf:89:38: e7:2a:12:1b:76:f1:5f:a4:2f:06:94:33:c9:ac:24:4d:34:f3: 66:7b:c7:b9:9b:a9:45:76:36:13:3b:91:78:83:74:2c:0d:2b: f2:44:72:88:78:09:3d:97:63:81:cf:4d:2c:e3:65:40:0d:36: 2d:82:71:34:87:e8:b2:94:94:fe:09:a7:40:6c:d1:23:d6:11: 5c:59:80:f4:be:a9:19:a0:8f:bd:bd:9e:e3:44:7d:42:a8:8b: 7d:7c:47:ab:b2:0a:cd:d7:ae:03:0b:0a:7f:77:41:02:4e:76: c7:7e:c0:5f:5a:53:88:90:18:1d:3a:93:41:4b:e1:0c:0a:56: 0a:64:ff:25:dd:4a:6a:d0:c3:7c:26:e7:7c:da:d4:82:29:99: a4:86:79:b4:60:4a:61:ec:cc:73:43:8f:de:dc:e3:ac:43:95: b2:56:ed:2e:5a:0e:9b:9e:7b:b0:96:e4:a9:55:d6:0e:53:61: 1e:bf:ba:ef:a1:7c:e0:93:c7:95:8c:97:a4:af:19:f1:97:84: 02:69:0d:55:5e:e0:38:7c:89:5d:ac:94:97:7b:ff:e4:c8:49: c0:38:e3:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWek2ULqLybTPmyD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZjE5Y2MtMzQ0ZS00OGM1LWExZjEtNDc1OTNhYTU2 YjBkMB4XDTI0MDQyMTEzMDAzNVoXDTI0MDcyMDEzMDAzNVowLzEtMCsGA1UEAxMk YzcwZmQyMzQtNjAzOS00ZjllLWE0NWYtMTUwZTk1N2NjYTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLGypgBiZ9SgmgcBrrLSWWZ6222AKT/8R1/l Rxi/XGE+SVEBVkNdvz6vgTfCTQR93x16tuv+z6mF5tKS2XNYcFqbZvMJogT68MEQ Z8+uAC6JWkS48vQn890b8WGUi824AXes3mFoE4XF4BRQ6sBoHrBjB9nBU8iSABft Asm/RGNJkIVhImMwFaTDVGrg3qAc4PzvOeTix7gCKtbd3W2s3EcJKsQ0dSCQ+Ixj UDp8R6LkMZypZOSHNu9xnJU2u/AsbjsUpDonLfOwtCe+ue+14Haj4fPI6CgCXAoU 6G9kucpJRGxuAKWyZSLwmq1DYui7R49UGQSQ1sVAiKOFovE+LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO75+cB8B3aMZVMhS5RdAqAW6qLkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFm MTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5M2FhNTZiMGQvODIxMzg3OGQtMzVkZC0z MGI2LWFjMDktZTYxMmUwNDkwNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzExZjE5Y2MtMzQ0ZS00OGM1LWEx ZjEtNDc1OTNhYTU2YjBkLzMxMWYxOWNjLTM0NGUtNDhjNS1hMWYxLTQ3NTkzYWE1 NmIwZC5jcmwwHwYDVR0jBBgwFoAUTdZg5uF1ESmUCvKCwba2rQLZYH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFmMTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5 M2FhNTZiMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2BXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYtEsL9KtKxtsGbgtzeNfcuodYOOGUPaLyg8R6uStNBNs+JOOcqEht2 8V+kLwaUM8msJE0082Z7x7mbqUV2NhM7kXiDdCwNK/JEcoh4CT2XY4HPTSzjZUAN Ni2CcTSH6LKUlP4Jp0Bs0SPWEVxZgPS+qRmgj729nuNEfUKoi318R6uyCs3XrgML Cn93QQJOdsd+wF9aU4iQGB06k0FL4QwKVgpk/yXdSmrQw3wm53za1IIpmaSGebRg SmHszHNDj97c46xDlbJW7S5aDpuee7CW5KlV1g5TYR6/uu+hfOCTx5WMl6SvGfGX hAJpDVVe4Dh8iV2slJd7/+TIScA448M= -----END CERTIFICATE-----Generated at Sat May 18 13:39:50 2024 by rpki-client on console-ams.rpki-client.org