$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/1b31f61a-098e-37a7-8531-9a5ab36e5749.roa File: 1b31f61a-098e-37a7-8531-9a5ab36e5749.roa (raw, json) Hash identifier: Rt49Yu+8iS7Ru2/3A3SRcZyeBXPrp7GtnlUMT9lZzIs= Subject key identifier: 22:8C:B9:AE:45:E2:0E:65:74:59:01:72:78:B0:42:FC:A2:CB:ED:02 Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Certificate serial: 010D0C9F432858455668D554ECF440507F52D660 Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/1b31f61a-098e-37a7-8531-9a5ab36e5749.roa Signing time: Tue 26 Mar 2024 16:36:49 +0000 ROA not before: Tue 26 Mar 2024 16:36:49 +0000 ROA not after: Mon 24 Jun 2024 16:36:49 +0000 asID: 204928 IP address blocks: 128.254.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:56:68:d5:54:ec:f4:40:50:7f:52:d6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Validity Not Before: Mar 26 16:36:49 2024 GMT Not After : Jun 24 16:36:49 2024 GMT Subject: CN=29f847e0-5d59-416c-9c52-51f38dea5efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:36:0f:d1:70:34:19:9d:70:d3:5a:1d:0f:af: 48:41:9e:34:a0:95:9b:9a:a2:4d:fc:1d:cf:4e:5c: 2b:5b:cb:4d:f7:fd:a5:f2:de:63:cb:64:25:b9:82: 75:a8:31:f6:12:60:39:11:22:6c:bb:5e:2f:8b:d7: e2:d7:fc:ec:29:5f:2c:d3:74:84:a1:80:aa:bb:8f: fa:c2:20:54:6e:2f:44:0b:5f:29:33:ba:74:f9:0e: d6:b1:a9:e3:ca:2b:8b:57:95:80:26:f8:0f:0e:1f: dc:92:d7:ba:e7:b0:57:d7:52:84:86:3d:71:64:e5: 97:3b:ca:de:91:a8:44:23:0e:1f:57:8e:76:b2:c3: 06:63:50:d2:3f:24:90:20:29:4a:f6:81:f4:d4:e5: bf:c6:d5:3a:d3:e1:d1:7f:31:4c:84:8e:c7:bd:0a: f7:72:83:1c:1f:f8:bd:45:66:b4:d0:0f:98:3c:4d: 9f:05:24:65:12:df:d1:2a:1e:fd:70:f5:25:7b:6f: f7:92:41:ef:8b:02:19:98:2b:09:f1:21:95:c3:c2: af:68:7e:95:f8:f4:c1:64:3e:a5:7f:68:19:af:76: 89:89:97:54:b1:8d:a6:ba:2b:9b:44:bf:be:73:09: 51:a0:40:d1:d6:08:87:dd:33:7c:dc:d1:a5:56:1b: 06:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8C:B9:AE:45:E2:0E:65:74:59:01:72:78:B0:42:FC:A2:CB:ED:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/1b31f61a-098e-37a7-8531-9a5ab36e5749.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl X509v3 Authority Key Identifier: keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer sbgp-ipAddrBlock: critical IPv4: 128.254.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:5d:e6:e2:87:1b:ed:b1:16:1c:71:a0:2d:4c:b4:68:f8:bf: 9a:2d:29:d2:50:bf:a9:6e:c9:11:98:ae:c1:dc:a3:99:fa:fa: 67:10:ce:c9:fb:f3:9c:81:77:b1:6e:da:6b:64:37:a4:32:65: a9:38:51:c4:14:85:00:64:ca:40:e5:43:10:15:f0:3c:2c:a6: 07:da:61:63:3b:10:a8:73:23:59:3a:b0:a5:b8:d5:3d:b0:e6: 1c:db:29:aa:bf:1d:6e:3a:2f:89:96:0e:ac:f9:68:43:e7:de: 36:30:84:95:fb:8c:18:52:3b:66:65:b5:26:03:60:32:1b:53: 25:05:78:54:4f:f1:03:fc:af:60:63:75:1d:0e:76:85:23:e5: ce:82:99:4a:f6:40:50:f0:c2:ef:8c:cd:59:3f:2c:65:d9:5a: 44:58:bd:75:bc:05:40:44:0b:22:f4:22:82:5e:10:48:3a:87: f0:80:a6:91:06:3a:94:27:35:c8:87:97:97:36:41:57:ba:a2: a2:10:22:71:19:6d:ec:72:dc:e2:ce:5b:eb:5a:84:47:1c:2d: a8:9f:97:0a:e0:89:7b:65:cb:02:10:8c:99:71:d9:28:30:88: f1:61:dc:34:3e:3e:57:2c:76:67:7a:fa:8c:8a:09:78:3e:e5: b3:ae:90:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVWaNVU7PRAUH9S1mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz Y2ZlMB4XDTI0MDMyNjE2MzY0OVoXDTI0MDYyNDE2MzY0OVowLzEtMCsGA1UEAxMk MjlmODQ3ZTAtNWQ1OS00MTZjLTljNTItNTFmMzhkZWE1ZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzYP0XA0GZ1w01odD69IQZ40oJWbmqJN/B3P TlwrW8tN9/2l8t5jy2QluYJ1qDH2EmA5ESJsu14vi9fi1/zsKV8s03SEoYCqu4/6 wiBUbi9EC18pM7p0+Q7WsanjyiuLV5WAJvgPDh/ckte657BX11KEhj1xZOWXO8re kahEIw4fV452ssMGY1DSPySQIClK9oH01OW/xtU60+HRfzFMhI7HvQr3coMcH/i9 RWa00A+YPE2fBSRlEt/RKh79cPUle2/3kkHviwIZmCsJ8SGVw8KvaH6V+PTBZD6l f2gZr3aJiZdUsY2muiubRL++cwlRoEDR1giH3TN83NGlVhsG2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKMua5F4g5ldFkBcniwQvyiy+0CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4 ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvMWIzMWY2MWEtMDk4ZS0z N2E3LTg1MzEtOWE1YWIzNmU1NzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5 M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4 MDlmOTNjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP64MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANhd5uKHG+2xFhxxoC1MtGj4v5otKdJQv6luyRGYrsHco5n6+mcQzsn7 85yBd7Fu2mtkN6QyZak4UcQUhQBkykDlQxAV8DwspgfaYWM7EKhzI1k6sKW41T2w 5hzbKaq/HW46L4mWDqz5aEPn3jYwhJX7jBhSO2ZltSYDYDIbUyUFeFRP8QP8r2Bj dR0OdoUj5c6CmUr2QFDwwu+MzVk/LGXZWkRYvXW8BUBECyL0IoJeEEg6h/CAppEG OpQnNciHl5c2QVe6oqIQInEZbexy3OLOW+tahEccLaiflwrgiXtlywIQjJlx2Sgw iPFh3DQ+Plcsdmd6+oyKCXg+5bOukEM= -----END CERTIFICATE-----Generated at Wed May 15 16:06:02 2024 by rpki-client on console-ams.rpki-client.org