$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a3d6af5-af08-3b1d-9d6b-c9f583c3056b.roa File: 9a3d6af5-af08-3b1d-9d6b-c9f583c3056b.roa (raw, json) Hash identifier: 3nsDDTCDPZzaE7dVCFrtko8ZTIkZbd9ca9/Lwn265Zg= Subject key identifier: 37:67:1C:10:74:7E:66:8C:98:D2:0B:FA:0F:C9:A4:98:1A:8A:F7:FC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858455F059D40E1BA9EF356C16C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a3d6af5-af08-3b1d-9d6b-c9f583c3056b.roa Signing time: Fri 29 Mar 2024 18:39:11 +0000 ROA not before: Fri 29 Mar 2024 18:39:11 +0000 ROA not after: Thu 27 Jun 2024 18:39:11 +0000 asID: 396982 IP address blocks: 108.59.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5f:05:9d:40:e1:ba:9e:f3:56:c1:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 29 18:39:11 2024 GMT Not After : Jun 27 18:39:11 2024 GMT Subject: CN=13c0ad50-78a2-4a0d-bf65-0a4b4a7403d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ce:4f:1b:2b:32:ca:ba:2c:37:e6:67:58:5c: 10:99:85:eb:0e:38:6f:7f:b1:3b:7c:e4:f0:58:63: eb:04:7d:fd:d3:c7:9a:d7:64:da:7a:d0:d1:81:67: ac:d5:41:b8:03:75:80:d8:f6:99:42:ec:30:d6:d2: bd:5e:27:16:fd:1b:95:c7:64:6a:e3:df:d0:7f:11: 0c:d5:11:ef:e1:69:f8:13:b6:cd:da:b2:ee:2d:8c: 39:98:19:ec:35:c9:bc:93:ef:54:43:6c:3e:6c:af: 63:a6:b5:47:fd:55:de:33:ea:53:33:92:36:c8:72: 53:a7:de:ae:40:26:17:69:9f:e9:76:9b:f8:d4:de: 52:74:ca:da:31:1f:da:4c:97:fb:6b:11:6b:ce:66: 16:ed:79:0a:84:b6:7d:cc:ff:3f:2e:5f:b8:79:df: fb:6d:f1:e6:b6:c0:37:dc:83:39:4e:f6:81:65:f6: 12:5a:b3:b6:62:c7:75:62:31:05:7b:44:18:c8:e5: 61:1b:d5:5b:38:fb:53:fb:5b:02:f7:cf:2f:cd:3e: 6d:b7:44:ce:d0:9d:ff:51:62:39:f4:b6:b1:28:e4: 19:a1:07:e5:25:6a:53:64:b1:46:c1:29:be:d9:b9: b0:6d:02:26:50:9b:4e:73:44:06:28:85:5e:f1:22: 71:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:67:1C:10:74:7E:66:8C:98:D2:0B:FA:0F:C9:A4:98:1A:8A:F7:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a3d6af5-af08-3b1d-9d6b-c9f583c3056b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 108.59.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:65:94:a4:bf:a3:49:47:d2:a3:cd:3b:d8:10:62:28:83:de: 73:21:d3:f4:56:d1:dd:c4:f9:9b:8b:6d:65:d5:68:5a:96:93: ae:a7:86:02:74:c7:1f:1c:7a:17:df:b0:47:69:0e:43:a6:79: 63:bb:cc:04:3a:1e:a8:e7:5b:58:79:47:7d:40:6c:68:48:43: 2a:4d:6d:38:d3:d8:b2:68:32:bb:8c:38:6c:41:86:f4:b1:88: 0e:48:e8:ea:18:7d:72:86:3e:d3:96:b7:83:07:09:04:df:c1: a7:e2:a5:44:1d:f4:e6:ef:5c:0e:29:66:07:d2:ce:75:26:63: b8:5e:54:69:6a:0a:69:09:a3:44:da:4b:a6:d5:35:bb:e1:6a: b5:e8:86:3c:2c:cd:6d:c0:d9:4b:d2:bd:30:9c:81:ae:07:ce: 09:96:80:36:0c:43:62:6a:98:a3:2a:9f:24:99:e9:8b:85:1a: 24:21:a2:2b:ff:ec:cd:f4:d4:28:f5:16:51:0a:a5:97:c8:aa: 7b:12:f9:31:1c:98:78:4f:75:ad:8c:1b:8d:af:f9:df:8e:6d: 90:38:04:25:aa:76:d1:8c:ae:1d:08:e7:09:91:08:3d:b5:6e: 06:36:4a:d2:54:d6:f0:ed:a2:d3:bf:77:b4:54:cf:95:d4:1b: 59:ea:cc:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVfBZ1A4bqe81bBbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyOTE4MzkxMVoXDTI0MDYyNzE4MzkxMVowLzEtMCsGA1UEAxMk MTNjMGFkNTAtNzhhMi00YTBkLWJmNjUtMGE0YjRhNzQwM2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs5PGysyyrosN+ZnWFwQmYXrDjhvf7E7fOTw WGPrBH3908ea12TaetDRgWes1UG4A3WA2PaZQuww1tK9XicW/RuVx2Rq49/QfxEM 1RHv4Wn4E7bN2rLuLYw5mBnsNcm8k+9UQ2w+bK9jprVH/VXeM+pTM5I2yHJTp96u QCYXaZ/pdpv41N5SdMraMR/aTJf7axFrzmYW7XkKhLZ9zP8/Ll+4ed/7bfHmtsA3 3IM5TvaBZfYSWrO2Ysd1YjEFe0QYyOVhG9VbOPtT+1sC988vzT5tt0TO0J3/UWI5 9LaxKOQZoQflJWpTZLFGwSm+2bmwbQImUJtOc0QGKIVe8SJxnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdnHBB0fmaMmNIL+g/JpJgaivf8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWEzZDZhZjUtYWYwOC0z YjFkLTlkNmItYzlmNTgzYzMwNTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbDtYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZllKS/o0lH0qPNO9gQYiiD3nMh0/RW0d3E+ZuLbWXVaFqWk66nhgJ0 xx8cehffsEdpDkOmeWO7zAQ6HqjnW1h5R31AbGhIQypNbTjT2LJoMruMOGxBhvSx iA5I6OoYfXKGPtOWt4MHCQTfwafipUQd9ObvXA4pZgfSznUmY7heVGlqCmkJo0Ta S6bVNbvharXohjwszW3A2UvSvTCcga4HzgmWgDYMQ2JqmKMqnySZ6YuFGiQhoiv/ 7M301Cj1FlEKpZfIqnsS+TEcmHhPda2MG42v+d+ObZA4BCWqdtGMrh0I5wmRCD21 bgY2StJU1vDtotO/d7RUz5XUG1nqzCY= -----END CERTIFICATE-----Generated at Sun May 5 15:49:40 2024 by rpki-client on console-ams.rpki-client.org