$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/844a9f17-b00f-3490-8954-09544703c001.roa File: 844a9f17-b00f-3490-8954-09544703c001.roa (raw, json) Hash identifier: Yt1FF3sF85TWCgiLdzZmqGwSzZBLl1/82OQ1tC0r+R4= Subject key identifier: 05:99:30:5D:42:86:D6:B4:8B:4B:44:A4:4F:80:79:6B:08:5A:08:42 Certificate issuer: /CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Certificate serial: 010D0C9F43285845DEC910812E05579EF6661880 Authority key identifier: 16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/844a9f17-b00f-3490-8954-09544703c001.roa Signing time: Tue 14 May 2024 13:00:34 +0000 ROA not before: Tue 14 May 2024 13:00:34 +0000 ROA not after: Mon 12 Aug 2024 13:00:34 +0000 asID: 13629 IP address blocks: 208.94.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:de:c9:10:81:2e:05:57:9e:f6:66:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Validity Not Before: May 14 13:00:34 2024 GMT Not After : Aug 12 13:00:34 2024 GMT Subject: CN=1d2f5b3a-8408-4f38-b330-8e5726fd5874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fe:46:ac:a9:e6:e8:3c:d1:d0:39:bc:fe:f3: 4e:e8:7b:90:42:c7:5e:66:46:ad:f7:51:b4:d6:53: 44:e3:c5:9f:c7:7e:f4:b2:1b:43:35:d4:cc:dd:66: d6:4d:55:ae:94:1b:c9:54:9f:a2:dd:ba:c1:74:f2: fd:fb:1b:9d:72:94:3c:55:29:9f:20:a4:1d:15:20: 73:93:ea:26:a7:b6:da:65:a5:81:3d:e5:1b:7c:4b: 11:90:9e:ee:cc:d1:06:fa:24:e7:93:a7:4d:03:1f: 22:2d:62:23:a0:59:2a:a6:6d:cf:a1:5e:14:a2:ad: f0:9c:00:69:18:30:99:b6:29:e0:1d:3f:80:80:57: 82:82:5f:4a:9c:f6:44:b8:41:26:c8:63:b5:7d:c9: bc:2e:d8:fb:54:0b:cc:a0:12:f4:f8:4a:85:88:c4: ad:24:c2:f7:e5:c5:07:79:6e:7b:50:78:84:d3:95: c1:32:20:cb:83:94:4d:1d:6a:b3:b7:f5:e8:8e:bf: 34:3e:89:cd:d0:4c:07:d4:d7:e7:7c:36:2e:f7:4f: 55:9f:23:39:cd:5a:5c:28:75:82:47:7d:e4:d3:c7: a5:fa:c0:07:11:81:9a:2a:38:30:17:ed:33:09:c9: d6:45:e1:f3:d9:0b:ad:60:dc:64:ca:93:8b:99:ba: fd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:99:30:5D:42:86:D6:B4:8B:4B:44:A4:4F:80:79:6B:08:5A:08:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/844a9f17-b00f-3490-8954-09544703c001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl X509v3 Authority Key Identifier: keyid:16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer sbgp-ipAddrBlock: critical IPv4: 208.94.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:99:89:80:37:77:bf:70:69:02:30:fe:fe:91:36:a0:35:ca: 17:ab:2c:cb:c9:d5:46:b0:8f:23:f9:04:8d:59:b9:29:df:0d: 9e:8b:65:2d:f9:82:56:e6:a4:5c:68:3b:ea:f7:16:79:d8:1a: d6:c6:6c:b6:0d:27:f4:20:34:89:0d:42:b9:22:23:84:13:05: 27:1d:55:66:86:e9:7a:b4:70:69:c9:b2:fd:99:a9:17:ae:2f: d6:0e:23:d3:5f:44:79:2a:b2:eb:a4:95:c3:8e:bd:e0:58:74: 1b:07:61:f7:fb:02:3f:0b:3d:1f:31:7a:85:ca:aa:1c:41:2a: f2:89:08:b2:54:8c:07:40:d5:83:7a:bd:6b:1f:b9:5b:e3:a9: b3:a3:c8:b9:37:2f:1b:7f:cc:39:d7:68:8a:89:8f:33:9d:4d: b7:11:0b:05:8c:69:d0:62:b5:6d:c7:1f:39:72:19:00:f6:e3: aa:0e:62:95:b3:04:01:c5:17:ae:b5:c0:c1:8c:a1:d9:ec:6f: 4d:95:80:51:60:70:43:06:25:d5:15:ff:ff:ea:c8:46:4d:84: 89:c7:74:4d:34:32:ce:5e:c1:f8:21:01:b9:4c:2d:4e:27:22: b6:1a:d3:f1:fe:5a:a0:53:03:16:57:9b:ba:37:e9:b0:84:79: 52:24:a3:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXeyRCBLgVXnvZmGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE2ODQwOGYtN2RlZS00MTViLWExYzEtYjc2ZGYwYTg3 YTkzMB4XDTI0MDUxNDEzMDAzNFoXDTI0MDgxMjEzMDAzNFowLzEtMCsGA1UEAxMk MWQyZjViM2EtODQwOC00ZjM4LWIzMzAtOGU1NzI2ZmQ1ODc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P5GrKnm6DzR0Dm8/vNO6HuQQsdeZkat91G0 1lNE48Wfx370shtDNdTM3WbWTVWulBvJVJ+i3brBdPL9+xudcpQ8VSmfIKQdFSBz k+omp7baZaWBPeUbfEsRkJ7uzNEG+iTnk6dNAx8iLWIjoFkqpm3PoV4Uoq3wnABp GDCZtingHT+AgFeCgl9KnPZEuEEmyGO1fcm8Ltj7VAvMoBL0+EqFiMStJML35cUH eW57UHiE05XBMiDLg5RNHWqzt/Xojr80PonN0EwH1NfnfDYu909VnyM5zVpcKHWC R33k08el+sAHEYGaKjgwF+0zCcnWReHz2QutYNxkypOLmbr9FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWZMF1Chta0i0tEpE+AeWsIWghCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4 NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZkZjBhODdhOTMvODQ0YTlmMTctYjAwZi0z NDkwLTg5NTQtMDk1NDQ3MDNjMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWE2ODQwOGYtN2RlZS00MTViLWEx YzEtYjc2ZGYwYTg3YTkzL2VhNjg0MDhmLTdkZWUtNDE1Yi1hMWMxLWI3NmRmMGE4 N2E5My5jcmwwHwYDVR0jBBgwFoAUFphb3M+6SOUGLSTwgm6NQ0VLLqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZk ZjBhODdhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F7YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiZiYA3d79waQIw/v6RNqA1yherLMvJ1UawjyP5BI1ZuSnfDZ6LZS35 glbmpFxoO+r3FnnYGtbGbLYNJ/QgNIkNQrkiI4QTBScdVWaG6Xq0cGnJsv2ZqReu L9YOI9NfRHkqsuuklcOOveBYdBsHYff7Aj8LPR8xeoXKqhxBKvKJCLJUjAdA1YN6 vWsfuVvjqbOjyLk3Lxt/zDnXaIqJjzOdTbcRCwWMadBitW3HHzlyGQD246oOYpWz BAHFF661wMGModnsb02VgFFgcEMGJdUV///qyEZNhInHdE00Ms5ewfghAblMLU4n IrYa0/H+WqBTAxZXm7o36bCEeVIko30= -----END CERTIFICATE-----Generated at Sat May 18 15:35:48 2024 by rpki-client on console-fra.rpki-client.org