$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/67f904de-0911-32b9-bf9c-27f543b6f323.roa File: 67f904de-0911-32b9-bf9c-27f543b6f323.roa (raw, json) Hash identifier: bxYuCjibSJU6r14pH9cBtvHAIf5V9KyrGsrvMs3gMcM= Subject key identifier: F7:4A:36:B0:3A:A9:0E:0D:85:60:52:CA:D4:6F:64:54:F7:D0:48:B3 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F43285845E45E69A973970B384F472F60 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/67f904de-0911-32b9-bf9c-27f543b6f323.roa Signing time: Thu 16 May 2024 13:00:35 +0000 ROA not before: Thu 16 May 2024 13:00:35 +0000 ROA not after: Wed 14 Aug 2024 13:00:35 +0000 asID: 54113 IP address blocks: 162.247.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:e4:5e:69:a9:73:97:0b:38:4f:47:2f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: May 16 13:00:35 2024 GMT Not After : Aug 14 13:00:35 2024 GMT Subject: CN=c00ad299-0631-4ac1-ab6f-fdcb5d5dd298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:72:91:94:ae:4a:50:5f:a8:ee:29:d1:52:27: 8a:45:51:9b:9e:43:eb:e8:53:39:ac:db:f8:77:3e: 55:3c:55:58:d1:74:e5:d3:bb:89:be:73:db:32:c7: f9:c5:91:54:76:f7:0d:16:28:6a:06:84:59:b0:bf: 6f:6b:d4:73:c5:81:1d:c1:b7:af:1f:4a:dc:10:dd: 9e:40:61:1d:07:f1:89:5a:d8:2b:ff:f8:dd:21:5e: 12:02:8e:28:22:e0:41:a9:80:fd:c2:d7:71:4f:7f: a1:df:ef:bf:5b:c8:3c:d3:2d:da:86:7c:92:bf:4a: e5:69:6e:04:85:75:2d:a1:98:5f:10:3b:a5:67:f9: 53:f2:57:e4:ec:a8:49:ae:8b:0a:ae:a7:c9:09:75: ec:a4:f8:d7:3f:08:a0:28:05:66:30:6e:29:44:44: a8:7e:bc:63:7f:32:6b:b0:fb:0b:7b:41:02:96:fa: 81:53:6a:b4:1c:56:bc:12:1c:db:94:07:17:15:a7: e7:b2:ec:83:40:47:05:61:c6:af:53:a2:38:ac:81: 5a:2d:4d:19:7e:c2:b6:38:a5:3e:11:8b:00:69:e1: 5c:4b:8d:5a:31:1c:fc:ca:43:d6:a1:91:22:7d:0e: 8a:4d:f5:55:16:21:41:8d:41:ad:12:69:c0:1b:94: 85:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:4A:36:B0:3A:A9:0E:0D:85:60:52:CA:D4:6F:64:54:F7:D0:48:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/67f904de-0911-32b9-bf9c-27f543b6f323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 162.247.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f4:85:8d:80:b4:66:48:0a:2f:e6:e4:db:71:8b:5d:88:7a: b2:d6:09:ab:50:f9:b5:74:cb:b6:ef:52:34:5e:31:a6:e5:f0: cc:a2:9b:c0:49:e3:dc:7f:78:5f:01:e1:3f:e6:f2:71:33:d3: a0:51:3f:0f:07:95:d1:3c:c2:b3:8d:6e:e5:3e:6c:b6:e9:0f: ef:a1:13:79:8a:b9:b3:01:ee:5f:da:4f:e5:74:64:7f:c5:a4: ce:78:a8:08:af:5b:c0:59:dc:1f:94:63:50:8a:5b:7f:9b:27: 4c:87:85:3b:ec:e1:4c:fa:c4:62:97:22:03:fa:a5:dd:10:4a: c4:b1:54:44:a5:89:00:67:56:d0:9e:c4:e0:73:b7:f5:44:6d: a0:a6:b2:50:f4:15:1b:13:18:5c:fa:31:ea:61:c0:f1:fe:29: 72:b3:30:86:de:a9:44:cd:18:46:81:a7:c4:90:ed:e1:cd:f9: 8b:ab:d7:05:d1:ff:fd:bd:ed:03:1b:94:da:98:08:f8:0e:fe: 54:a3:85:0c:ac:aa:3f:28:ca:52:80:c3:b4:be:61:95:97:42: 11:3e:64:0e:b1:31:ce:9a:af:34:cf:8e:55:94:c1:32:a5:2d: 60:b3:f3:68:f9:11:5a:eb:11:b8:a8:11:07:86:7b:d7:26:0a: ff:e3:41:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXkXmmpc5cLOE9HL2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI0MDUxNjEzMDAzNVoXDTI0MDgxNDEzMDAzNVowLzEtMCsGA1UEAxMk YzAwYWQyOTktMDYzMS00YWMxLWFiNmYtZmRjYjVkNWRkMjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynKRlK5KUF+o7inRUieKRVGbnkPr6FM5rNv4 dz5VPFVY0XTl07uJvnPbMsf5xZFUdvcNFihqBoRZsL9va9RzxYEdwbevH0rcEN2e QGEdB/GJWtgr//jdIV4SAo4oIuBBqYD9wtdxT3+h3++/W8g80y3ahnySv0rlaW4E hXUtoZhfEDulZ/lT8lfk7KhJrosKrqfJCXXspPjXPwigKAVmMG4pRESofrxjfzJr sPsLe0EClvqBU2q0HFa8EhzblAcXFafnsuyDQEcFYcavU6I4rIFaLU0ZfsK2OKU+ EYsAaeFcS41aMRz8ykPWoZEifQ6KTfVVFiFBjUGtEmnAG5SFOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdKNrA6qQ4NhWBSytRvZFT30EizMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvNjdmOTA0ZGUtMDkxMS0z MmI5LWJmOWMtMjdmNTQzYjZmMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovfzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADn0hY2AtGZICi/m5Ntxi12IerLWCatQ+bV0y7bvUjReMabl8Myim8BJ 49x/eF8B4T/m8nEz06BRPw8HldE8wrONbuU+bLbpD++hE3mKubMB7l/aT+V0ZH/F pM54qAivW8BZ3B+UY1CKW3+bJ0yHhTvs4Uz6xGKXIgP6pd0QSsSxVESliQBnVtCe xOBzt/VEbaCmslD0FRsTGFz6MephwPH+KXKzMIbeqUTNGEaBp8SQ7eHN+Yur1wXR //297QMblNqYCPgO/lSjhQysqj8oylKAw7S+YZWXQhE+ZA6xMc6arzTPjlWUwTKl LWCz82j5EVrrEbioEQeGe9cmCv/jQU8= -----END CERTIFICATE-----Generated at Sat May 18 16:10:17 2024 by rpki-client on console-ams.rpki-client.org