$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/af0a8e4a-42b9-3667-8ce3-865564983774.roa File: af0a8e4a-42b9-3667-8ce3-865564983774.roa (raw, json) Hash identifier: Ed68rs9I8S1w9OcsD5oE0MmaUJoXWGtqW/F/3z/9V4s= Subject key identifier: 2F:85:8B:E7:E0:4F:45:CF:87:9B:3D:28:C2:6B:CB:DF:6F:79:96:C1 Certificate issuer: /CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Certificate serial: 010D0C9F4328584598FDF87A771F90C0DCA70D00 Authority key identifier: F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/af0a8e4a-42b9-3667-8ce3-865564983774.roa Signing time: Fri 19 Apr 2024 13:00:36 +0000 ROA not before: Fri 19 Apr 2024 13:00:36 +0000 ROA not after: Thu 18 Jul 2024 13:00:36 +0000 asID: 11444 IP address blocks: 161.129.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:98:fd:f8:7a:77:1f:90:c0:dc:a7:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Validity Not Before: Apr 19 13:00:36 2024 GMT Not After : Jul 18 13:00:36 2024 GMT Subject: CN=8ed9002a-e08f-423b-80b2-875218f51e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dd:02:61:7a:b2:8e:c1:22:f2:fc:5d:9b:ad: 72:57:51:20:f1:e7:24:0e:b2:26:e9:af:ae:45:13: 1a:17:1e:bd:8a:91:aa:96:1e:72:9b:94:cf:35:58: bd:d6:b3:a5:3c:a4:2f:cb:74:06:4a:f9:d2:07:39: 15:08:21:43:ac:14:9e:c9:b5:db:9b:6b:dd:fb:d4: 76:3c:c9:34:f6:b9:83:6c:8c:7f:97:73:9e:16:61: ca:1f:0e:96:4d:61:00:92:f2:3f:a7:76:9c:45:82: dd:3e:6a:89:78:fa:87:9e:8d:a4:02:1a:2c:38:bd: cb:aa:b5:72:7f:a4:fd:10:a0:6a:63:c2:1d:91:31: 15:48:57:fe:14:5d:39:e9:7f:25:3a:3b:25:4c:a7: 4d:79:2b:3f:24:46:05:a8:96:1f:40:c0:e6:2d:8b: c8:60:be:10:80:79:52:ba:66:9b:c7:22:5c:f4:8d: 58:db:dc:da:3f:f3:2d:10:3b:38:c6:24:f3:79:b7: 21:64:a2:85:7a:c5:1f:21:fd:3b:d7:fd:9e:a7:fd: 2b:a1:58:4c:7f:58:9b:ac:d1:c7:22:0a:b4:73:01: 2b:f9:ef:6a:00:81:62:08:1a:8e:d8:59:7e:00:96: 43:32:67:fc:b3:f2:dc:bb:43:7a:ce:7a:a4:56:2a: 88:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:85:8B:E7:E0:4F:45:CF:87:9B:3D:28:C2:6B:CB:DF:6F:79:96:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/af0a8e4a-42b9-3667-8ce3-865564983774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl X509v3 Authority Key Identifier: keyid:F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer sbgp-ipAddrBlock: critical IPv4: 161.129.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:d8:73:5c:19:31:d2:93:e5:5a:a6:68:97:26:0d:77:b5:fd: a2:8e:de:91:32:70:50:b0:28:14:48:12:d5:89:94:89:79:b3: 67:7a:59:f3:94:2c:a7:dc:1f:a7:26:29:9b:71:31:14:93:31: de:a8:8f:b1:08:d0:31:c8:e5:0f:3b:81:07:bd:0c:c8:d8:dc: 1e:92:7f:d6:e5:31:30:70:6d:50:8c:d6:7f:f5:d4:73:73:f8: 8c:13:50:f2:a7:41:7b:b6:5c:10:6e:11:8b:44:6c:b3:f4:9a: 7a:86:00:6c:32:c5:6d:d9:20:7e:37:34:08:42:66:35:62:2d: 90:79:7e:4c:d9:ce:ed:8b:fc:65:58:a1:0f:0f:c7:80:9c:cf: d3:fc:ae:d0:ad:ee:39:0e:45:75:4d:4b:47:f0:13:51:75:a7: 35:2e:41:1c:f5:66:25:4d:8a:f8:82:ce:54:21:c3:69:08:a3: d3:6a:65:a7:20:1a:a8:29:15:74:c0:bc:4a:bf:73:45:6e:c9: 5f:04:d2:a1:2e:31:9b:d9:79:b9:77:de:d0:67:b0:95:50:f6: 15:ea:17:8a:8d:49:eb:af:4d:4c:be:53:27:ab:93:d8:c3:66: b7:c8:e6:03:6a:28:c4:45:bd:e7:f5:49:5a:fe:32:b6:8f:23: 81:dd:2f:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWY/fh6dx+QwNynDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRhNjAwOWQtMTJiOC00YjM0LTk1ZjktZDI2MTgwZDhi ZjRjMB4XDTI0MDQxOTEzMDAzNloXDTI0MDcxODEzMDAzNlowLzEtMCsGA1UEAxMk OGVkOTAwMmEtZTA4Zi00MjNiLTgwYjItODc1MjE4ZjUxZTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo90CYXqyjsEi8vxdm61yV1Eg8eckDrIm6a+u RRMaFx69ipGqlh5ym5TPNVi91rOlPKQvy3QGSvnSBzkVCCFDrBSeybXbm2vd+9R2 PMk09rmDbIx/l3OeFmHKHw6WTWEAkvI/p3acRYLdPmqJePqHno2kAhosOL3LqrVy f6T9EKBqY8IdkTEVSFf+FF056X8lOjslTKdNeSs/JEYFqJYfQMDmLYvIYL4QgHlS umabxyJc9I1Y29zaP/MtEDs4xiTzebchZKKFesUfIf071/2ep/0roVhMf1ibrNHH Igq0cwEr+e9qAIFiCBqO2Fl+AJZDMmf8s/Lcu0N6znqkViqIzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+Fi+fgT0XPh5s9KMJry99veZbBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGE2 MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYxODBkOGJmNGMvYWYwYThlNGEtNDJiOS0z NjY3LThjZTMtODY1NTY0OTgzNzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRhNjAwOWQtMTJiOC00YjM0LTk1 ZjktZDI2MTgwZDhiZjRjLzY0YTYwMDlkLTEyYjgtNGIzNC05NWY5LWQyNjE4MGQ4 YmY0Yy5jcmwwHwYDVR0jBBgwFoAU9xheiLqU8dG2wRT/9s/VCcWqX+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGE2MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYx ODBkOGJmNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYFJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbYc1wZMdKT5VqmaJcmDXe1/aKO3pEycFCwKBRIEtWJlIl5s2d6WfOU LKfcH6cmKZtxMRSTMd6oj7EI0DHI5Q87gQe9DMjY3B6Sf9blMTBwbVCM1n/11HNz +IwTUPKnQXu2XBBuEYtEbLP0mnqGAGwyxW3ZIH43NAhCZjViLZB5fkzZzu2L/GVY oQ8Px4Ccz9P8rtCt7jkORXVNS0fwE1F1pzUuQRz1ZiVNiviCzlQhw2kIo9NqZacg GqgpFXTAvEq/c0VuyV8E0qEuMZvZebl33tBnsJVQ9hXqF4qNSeuvTUy+Uyerk9jD ZrfI5gNqKMRFvef1SVr+MraPI4HdL5I= -----END CERTIFICATE-----Generated at Sat May 18 13:31:03 2024 by rpki-client on console-fra.rpki-client.org