$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ddd46f97-5489-385f-9785-acc2d0d33014.roa File: ddd46f97-5489-385f-9785-acc2d0d33014.roa (raw, json) Hash identifier: najCW0eACrl1l4luS1l8D6vZ13Slbo2QlccA84/S+yg= Subject key identifier: 68:4A:AD:47:A5:AC:9F:B6:8E:8E:EB:39:9B:B4:E6:86:3C:69:4E:23 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584507F02975902AC181EB067C00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ddd46f97-5489-385f-9785-acc2d0d33014.roa Signing time: Tue 27 Feb 2024 14:00:31 +0000 ROA not before: Tue 27 Feb 2024 14:00:31 +0000 ROA not after: Mon 27 May 2024 13:00:31 +0000 asID: 9009 IP address blocks: 206.123.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:07:f0:29:75:90:2a:c1:81:eb:06:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 27 14:00:31 2024 GMT Not After : May 27 13:00:31 2024 GMT Subject: CN=000d85e2-4be3-442a-b465-929dab182203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ff:a9:e7:ce:14:d3:7c:80:da:74:eb:96:ef: 8a:e5:a4:83:27:e9:71:e3:a3:e2:24:bb:57:9b:69: 35:f9:77:d9:dd:23:40:71:8a:8b:b7:3d:78:d5:04: 62:a9:36:42:8e:c6:63:73:06:4d:2a:88:cd:7f:3a: 77:80:4c:08:4a:e4:1e:ed:2d:7a:4d:61:1e:c6:88: 9d:d3:8d:af:14:59:86:90:17:6d:3e:d6:f7:a9:1c: fd:38:4a:b2:e2:b0:f0:4e:7c:8c:b9:97:e8:b0:54: 4c:bd:a5:a6:f2:ba:d3:49:e1:d2:64:76:d4:1b:a7: fe:1c:5a:df:38:20:e6:9d:5e:b8:c7:1c:7b:bc:ca: 2f:e6:dc:b6:cd:86:88:84:f4:75:bb:61:39:21:2e: ec:78:3f:00:a0:ae:f8:98:28:01:6a:17:7a:bc:c3: 0e:33:86:a8:aa:11:2a:85:a9:43:67:e1:49:26:9e: eb:ed:66:fd:8f:60:ac:57:42:bc:b4:85:24:26:89: 66:d0:20:cd:02:39:38:53:17:14:e6:f5:d4:2b:0a: 50:2e:37:59:a0:2c:71:60:6b:e4:ee:35:7c:ed:bb: 19:3e:58:88:8d:94:c0:b4:19:e2:73:99:55:c2:ad: 19:b4:e7:17:32:e8:78:96:7c:c4:5c:46:86:4a:45: 22:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4A:AD:47:A5:AC:9F:B6:8E:8E:EB:39:9B:B4:E6:86:3C:69:4E:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ddd46f97-5489-385f-9785-acc2d0d33014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:c7:87:d1:12:f9:96:3d:8e:ac:bb:39:c0:4b:ef:8d:7d:48: a2:d3:b8:99:28:af:ed:e1:7a:79:18:65:d4:8e:85:19:b2:54: d0:ca:0a:17:cc:e7:35:8f:dc:8f:36:c5:1d:26:f3:f7:35:a1: 23:c4:4a:58:d2:c0:dd:b4:01:62:ef:38:61:ef:35:78:64:e2: d3:5c:8f:7d:77:50:1c:eb:9e:33:5b:25:19:0b:33:61:d4:a5: ed:aa:0a:54:71:cd:85:99:d1:9e:ca:47:cd:d2:4a:ca:b5:15: d8:8a:11:81:c7:d0:65:92:87:bf:7d:79:03:27:43:47:01:69: 00:92:f0:08:60:3a:00:1e:8a:4e:72:d4:bc:a7:9c:a2:cd:c3: 87:c0:c1:d3:21:4e:0d:05:3a:06:57:5b:b0:fd:86:7a:b7:dc: 80:fa:28:76:77:45:6f:34:25:6e:42:92:5d:4e:33:b5:7e:45: bd:f6:89:22:56:5b:5e:e9:9a:c7:77:c8:db:de:6e:45:51:79: 2c:b0:65:77:2b:28:14:1e:45:c5:99:96:d6:77:94:30:f6:f6: db:74:aa:52:e9:13:96:6d:cb:d7:c1:a8:51:f6:5d:a0:e4:56: 72:10:61:f4:58:f6:8c:14:f8:28:9f:63:97:25:e5:12:12:76: 51:ad:7f:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUH8Cl1kCrBgesGfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDIyNzE0MDAzMVoXDTI0MDUyNzEzMDAzMVowLzEtMCsGA1UEAxMk MDAwZDg1ZTItNGJlMy00NDJhLWI0NjUtOTI5ZGFiMTgyMjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv+p584U03yA2nTrlu+K5aSDJ+lx46PiJLtX m2k1+XfZ3SNAcYqLtz141QRiqTZCjsZjcwZNKojNfzp3gEwISuQe7S16TWEexoid 042vFFmGkBdtPtb3qRz9OEqy4rDwTnyMuZfosFRMvaWm8rrTSeHSZHbUG6f+HFrf OCDmnV64xxx7vMov5ty2zYaIhPR1u2E5IS7seD8AoK74mCgBahd6vMMOM4aoqhEq halDZ+FJJp7r7Wb9j2CsV0K8tIUkJolm0CDNAjk4UxcU5vXUKwpQLjdZoCxxYGvk 7jV87bsZPliIjZTAtBnic5lVwq0ZtOcXMuh4lnzEXEaGSkUimwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhKrUelrJ+2jo7rOZu05oY8aU4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGRkNDZmOTctNTQ4OS0z ODVmLTk3ODUtYWNjMmQwZDMzMDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTHh9ES+ZY9jqy7OcBL7419SKLTuJkor+3henkYZdSOhRmyVNDKChfM 5zWP3I82xR0m8/c1oSPESljSwN20AWLvOGHvNXhk4tNcj313UBzrnjNbJRkLM2HU pe2qClRxzYWZ0Z7KR83SSsq1FdiKEYHH0GWSh799eQMnQ0cBaQCS8AhgOgAeik5y 1LynnKLNw4fAwdMhTg0FOgZXW7D9hnq33ID6KHZ3RW80JW5Ckl1OM7V+Rb32iSJW W17pmsd3yNvebkVReSywZXcrKBQeRcWZltZ3lDD29tt0qlLpE5Zty9fBqFH2XaDk VnIQYfRY9owU+CifY5cl5RISdlGtf6g= -----END CERTIFICATE-----Generated at Sat Apr 27 22:32:28 2024 by rpki-client on console-ams.rpki-client.org