$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/c86a5fd5-f02f-382a-b563-73a588f7427d.roa File: c86a5fd5-f02f-382a-b563-73a588f7427d.roa (raw, json) Hash identifier: lEwEA2ss+8HNWR0J7XJI/wonlK5mVglnTrOWSJ0kuxU= Subject key identifier: 79:FE:FA:CB:A2:0D:CE:6F:C2:B1:E2:A7:C5:40:63:AE:A3:01:04:C2 Certificate issuer: /CN=d3237408-0888-4b1f-bed5-a45886656401 Certificate serial: 010D0C9F43285845A15E1C1B71B5985B4445DDC0 Authority key identifier: E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/c86a5fd5-f02f-382a-b563-73a588f7427d.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 212271 IP address blocks: 208.65.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 02 Jul 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5e:1c:1b:71:b5:98:5b:44:45:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3237408-0888-4b1f-bed5-a45886656401 Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=191db39d-4b8c-43f3-acab-03ed79a301f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2a:b4:05:b8:0b:e8:bb:e2:1c:e4:95:14:bf: 81:f1:ad:e5:54:29:d5:67:44:4e:d9:5d:aa:d6:02: 9b:7c:97:df:73:50:66:d7:d7:13:0d:2e:80:a8:14: 3f:c1:42:3a:e3:26:04:b8:2f:e2:c7:ca:b7:49:55: c8:ad:c9:50:f1:a7:b8:e7:be:7b:81:19:f4:fb:e7: 2e:b3:d0:be:67:ef:5f:02:d8:52:49:52:25:50:ca: 71:d7:bb:f2:2e:1a:f1:85:fd:a3:a5:d0:58:83:4f: 2f:f8:b6:5b:7c:78:6e:50:16:84:29:2b:3c:6f:e2: c9:16:0d:23:97:f4:19:53:38:29:22:d4:87:13:cc: 2e:0e:d9:92:58:d5:e2:62:85:56:78:80:a9:dd:e1: 43:21:52:d3:03:3b:dd:bf:d4:9d:08:9e:0c:b4:d5: bf:28:76:97:2c:65:c3:3b:36:79:17:96:f1:61:4e: 38:2f:81:7e:bf:21:ea:53:6a:b0:36:c3:72:d0:ec: fb:28:9c:31:31:7a:af:34:27:57:a5:5f:9e:3f:d4: 24:e9:cc:75:62:79:ad:33:59:90:c5:73:25:9b:c5: 63:d1:1c:79:0f:7b:43:17:6a:a2:2b:5f:34:29:de: cd:e8:6d:b4:72:72:b2:76:f5:8a:b1:79:53:c7:56: 64:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FE:FA:CB:A2:0D:CE:6F:C2:B1:E2:A7:C5:40:63:AE:A3:01:04:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/c86a5fd5-f02f-382a-b563-73a588f7427d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl X509v3 Authority Key Identifier: keyid:E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer sbgp-ipAddrBlock: critical IPv4: 208.65.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:4a:8c:fd:e9:51:09:42:9e:06:ef:46:eb:f6:f3:80:a3:9f: c7:b4:35:de:08:63:c1:cb:63:0c:26:ac:fe:b7:6c:13:7f:55: fe:02:a7:ec:fa:d6:f4:e1:ab:ce:aa:09:eb:54:7f:09:6b:d4: 10:39:62:25:9a:fd:02:64:59:78:c9:83:a1:3f:af:20:a3:1e: eb:9d:07:35:c1:1a:a0:41:25:ce:10:96:df:f7:b1:48:94:0c: 22:75:b2:be:53:5f:a6:6f:98:ad:10:43:ca:91:e8:06:c7:a5: 85:39:25:ba:3c:2b:d9:e5:90:77:78:a8:1f:b1:93:76:05:ca: 5c:96:71:4b:ae:22:0c:88:45:eb:19:08:1d:19:df:5d:a1:a6: 5b:ef:38:6b:15:a5:96:70:8c:98:4b:06:48:9b:84:aa:16:25: 60:bf:17:50:87:ea:d3:26:33:0a:b3:20:7f:1e:d0:b7:2b:12: 0a:80:07:5e:c7:43:81:1c:ea:a9:3b:f4:bd:e3:89:12:32:e6: f7:50:6f:14:ae:59:59:f9:9c:f8:0e:54:66:df:fe:5f:a6:8b: 2a:b7:9d:6c:73:fd:1e:bb:da:e8:95:31:40:af:a4:b3:bb:bb: f4:7a:3c:52:6c:cf:28:25:5f:8a:35:bc:c3:5d:30:47:a9:70: c5:a3:f8:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXhwbcbWYW0RF3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDMyMzc0MDgtMDg4OC00YjFmLWJlZDUtYTQ1ODg2NjU2 NDAxMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk MTkxZGIzOWQtNGI4Yy00M2YzLWFjYWItMDNlZDc5YTMwMWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyq0BbgL6LviHOSVFL+B8a3lVCnVZ0RO2V2q 1gKbfJffc1Bm19cTDS6AqBQ/wUI64yYEuC/ix8q3SVXIrclQ8ae45757gRn0++cu s9C+Z+9fAthSSVIlUMpx17vyLhrxhf2jpdBYg08v+LZbfHhuUBaEKSs8b+LJFg0j l/QZUzgpItSHE8wuDtmSWNXiYoVWeICp3eFDIVLTAzvdv9SdCJ4MtNW/KHaXLGXD OzZ5F5bxYU44L4F+vyHqU2qwNsNy0Oz7KJwxMXqvNCdXpV+eP9Qk6cx1YnmtM1mQ xXMlm8Vj0Rx5D3tDF2qiK180Kd7N6G20cnKydvWKsXlTx1ZkvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHn++suiDc5vwrHip8VAY66jAQTCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMzIz NzQwOC0wODg4LTRiMWYtYmVkNS1hNDU4ODY2NTY0MDEvYzg2YTVmZDUtZjAyZi0z ODJhLWI1NjMtNzNhNTg4Zjc0MjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDMyMzc0MDgtMDg4OC00YjFmLWJl ZDUtYTQ1ODg2NjU2NDAxL2QzMjM3NDA4LTA4ODgtNGIxZi1iZWQ1LWE0NTg4NjY1 NjQwMS5jcmwwHwYDVR0jBBgwFoAU6NdV2XoY+vnTrgS31DEuvEX9JEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMzIzNzQwOC0wODg4LTRiMWYtYmVkNS1hNDU4 ODY2NTY0MDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EFVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM5KjP3pUQlCngbvRuv284Cjn8e0Nd4IY8HLYwwmrP63bBN/Vf4Cp+z6 1vThq86qCetUfwlr1BA5YiWa/QJkWXjJg6E/ryCjHuudBzXBGqBBJc4Qlt/3sUiU DCJ1sr5TX6ZvmK0QQ8qR6AbHpYU5Jbo8K9nlkHd4qB+xk3YFylyWcUuuIgyIResZ CB0Z312hplvvOGsVpZZwjJhLBkibhKoWJWC/F1CH6tMmMwqzIH8e0LcrEgqAB17H Q4Ec6qk79L3jiRIy5vdQbxSuWVn5nPgOVGbf/l+miyq3nWxz/R672uiVMUCvpLO7 u/R6PFJszyglX4o1vMNdMEepcMWj+FY= -----END CERTIFICATE-----Generated at Sun Jun 30 23:05:59 2024 by rpki-client on console-ams.rpki-client.org