$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/012f9e66-a4e9-3688-80aa-0db9b853bdb0.roa File: 012f9e66-a4e9-3688-80aa-0db9b853bdb0.roa (raw, json) Hash identifier: MpFFq03RGvs/bWRgZ0/1D0U1YFfhyXssa2T2nkA0sBg= Subject key identifier: C6:D5:23:3B:70:75:38:03:AC:EC:02:18:6D:5B:20:3D:98:C8:43:55 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F432858459A634C7420CA7FBD4CED2200 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/012f9e66-a4e9-3688-80aa-0db9b853bdb0.roa Signing time: Sat 20 Apr 2024 01:00:26 +0000 ROA not before: Sat 20 Apr 2024 01:00:26 +0000 ROA not after: Fri 19 Jul 2024 01:00:26 +0000 asID: 23467 IP address blocks: 162.247.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:9a:63:4c:74:20:ca:7f:bd:4c:ed:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Apr 20 01:00:26 2024 GMT Not After : Jul 19 01:00:26 2024 GMT Subject: CN=c8009368-5e00-4c67-a350-d052ce543353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:07:39:d4:25:68:2c:56:15:b9:ba:95:ea:d1: 27:8d:b4:57:3d:4c:1f:d8:88:0a:e9:73:76:07:3e: 80:93:78:21:7e:3b:d0:8f:3f:7c:85:1e:26:47:49: c5:0e:f1:fa:73:d2:40:79:ce:5b:e1:ab:a6:88:be: 67:fd:65:d9:a9:0e:c0:2c:2b:18:79:9e:fa:a4:2e: e7:1f:48:51:cc:f5:79:ce:7d:4f:6b:09:f7:e6:40: 87:48:ee:e0:a5:53:ba:e8:ac:81:bf:9d:f4:e2:17: ad:1f:33:19:cd:ce:c4:a0:d8:40:e5:e2:07:3a:88: 35:f0:49:78:9e:3c:96:97:5d:21:41:fa:2d:04:28: 56:be:57:19:9b:8a:0e:7e:39:ef:d1:3e:31:f6:dd: 26:b2:18:8b:f8:a5:37:ba:20:4c:c9:77:b9:73:7a: ff:c6:a0:ad:83:f3:c7:ac:59:d6:dc:95:e0:47:47: 0c:27:cc:16:23:6b:90:53:2d:1a:a1:9c:76:46:99: 99:6e:b4:7b:03:e0:9e:67:0d:ac:88:4a:31:fe:c5: 02:74:42:6b:f6:b4:2c:41:72:1c:cb:7e:f6:5a:cb: 57:f3:2a:a2:c0:12:49:34:f2:2e:37:4d:2d:d8:9a: 7d:80:67:46:ca:8f:ff:16:be:6c:a4:7d:12:1e:62: f3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D5:23:3B:70:75:38:03:AC:EC:02:18:6D:5B:20:3D:98:C8:43:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/012f9e66-a4e9-3688-80aa-0db9b853bdb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 162.247.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:48:71:d4:c7:3f:1a:57:e2:08:c4:8b:23:0c:c9:15:fb:6d: 78:c6:25:c6:2e:c6:df:c6:6d:06:d8:4d:98:3b:2f:72:43:f9: 48:3d:a8:7a:c8:68:4d:47:5c:d2:cb:2b:28:bb:e7:d2:e7:da: e4:ee:80:d9:14:a3:c1:f9:80:4e:e7:b8:76:40:4d:4a:56:74: 95:bf:94:7a:ef:fd:ee:bf:27:d6:20:82:c3:09:c7:c6:ed:76: 68:b8:2c:2e:9b:b1:8e:ab:9b:78:80:18:6f:04:bb:8c:70:ca: 84:e2:ee:35:8f:bb:80:fb:fa:62:4c:da:10:25:3b:5b:c6:6e: d7:d3:e3:f8:80:ad:d4:a0:48:22:7d:50:27:89:f0:68:bd:23: 16:5a:c5:39:54:26:de:bc:9b:75:d8:98:46:6b:4c:e1:24:24: 95:f6:6e:99:ac:29:03:03:7c:a2:ff:37:9b:b6:9b:71:37:bd: 0b:d0:f5:27:86:44:99:00:2e:5b:36:01:2b:11:ac:70:4f:9f: ca:52:fd:91:1b:75:99:e2:b7:54:d1:79:94:8b:dc:f5:b5:62: dc:ef:a4:1a:f6:d8:06:09:0b:c2:22:d5:ce:19:41:10:7b:34: 89:ce:5d:71:8f:5e:c8:9c:bc:02:e0:93:81:07:d0:a4:47:de: 30:41:07:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWaY0x0IMp/vUztIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI0MDQyMDAxMDAyNloXDTI0MDcxOTAxMDAyNlowLzEtMCsGA1UEAxMk YzgwMDkzNjgtNWUwMC00YzY3LWEzNTAtZDA1MmNlNTQzMzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wc51CVoLFYVubqV6tEnjbRXPUwf2IgK6XN2 Bz6Ak3ghfjvQjz98hR4mR0nFDvH6c9JAec5b4aumiL5n/WXZqQ7ALCsYeZ76pC7n H0hRzPV5zn1Pawn35kCHSO7gpVO66KyBv5304hetHzMZzc7EoNhA5eIHOog18El4 njyWl10hQfotBChWvlcZm4oOfjnv0T4x9t0mshiL+KU3uiBMyXe5c3r/xqCtg/PH rFnW3JXgR0cMJ8wWI2uQUy0aoZx2RpmZbrR7A+CeZw2siEox/sUCdEJr9rQsQXIc y372WstX8yqiwBJJNPIuN00t2Jp9gGdGyo//Fr5spH0SHmLzvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbVIztwdTgDrOwCGG1bID2YyENVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMDEyZjllNjYtYTRlOS0z Njg4LTgwYWEtMGRiOWI4NTNiZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxIcdTHPxpX4gjEiyMMyRX7bXjGJcYuxt/GbQbYTZg7L3JD+Ug9qHrI aE1HXNLLKyi759Ln2uTugNkUo8H5gE7nuHZATUpWdJW/lHrv/e6/J9YggsMJx8bt dmi4LC6bsY6rm3iAGG8Eu4xwyoTi7jWPu4D7+mJM2hAlO1vGbtfT4/iArdSgSCJ9 UCeJ8Gi9IxZaxTlUJt68m3XYmEZrTOEkJJX2bpmsKQMDfKL/N5u2m3E3vQvQ9SeG RJkALls2ASsRrHBPn8pS/ZEbdZnit1TReZSL3PW1YtzvpBr22AYJC8Ii1c4ZQRB7 NInOXXGPXsicvALgk4EH0KRH3jBBB4g= -----END CERTIFICATE-----Generated at Sat May 18 13:31:29 2024 by rpki-client on console-fra.rpki-client.org