$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/dd431272-55e1-31f9-9f87-a1425a7991e6.roa File: dd431272-55e1-31f9-9f87-a1425a7991e6.roa (raw, json) Hash identifier: nWPAfaBSxXyT7nrukVGvGrhxasZYPpPnfbYtSY2gm3U= Subject key identifier: BE:06:EE:FF:CA:8B:B7:2A:04:87:77:A8:F0:16:D2:16:EB:9C:46:26 Certificate issuer: /CN=0bed6185-186c-4da8-9253-7f61731aef25 Certificate serial: 010D0C9F4328584529528C748D295EE2D24E5380 Authority key identifier: 40:22:1A:A4:8A:C4:F7:AA:67:A5:3B:18:62:7B:7A:B9:8C:A8:24:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/dd431272-55e1-31f9-9f87-a1425a7991e6.roa Signing time: Sun 10 Mar 2024 13:00:31 +0000 ROA not before: Sun 10 Mar 2024 13:00:31 +0000 ROA not after: Sat 08 Jun 2024 13:00:31 +0000 asID: 11613 IP address blocks: 66.33.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/0bed6185-186c-4da8-9253-7f61731aef25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/0bed6185-186c-4da8-9253-7f61731aef25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:29:52:8c:74:8d:29:5e:e2:d2:4e:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bed6185-186c-4da8-9253-7f61731aef25 Validity Not Before: Mar 10 13:00:31 2024 GMT Not After : Jun 8 13:00:31 2024 GMT Subject: CN=b6fdf9d7-15a5-46b6-8748-38ebb85b7e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cb:f0:8a:a8:ec:20:24:05:61:02:8b:38:d3: fe:e4:3d:d8:1d:be:f8:d6:a7:b7:5f:57:ea:4b:f6: 28:2a:b5:b3:68:e8:ed:20:93:1d:71:10:9b:5b:b8: 8d:22:1e:bc:ac:f1:b1:fe:69:e6:84:45:88:15:8a: 26:06:f6:68:ad:f9:f0:5f:64:51:15:a2:74:a6:68: f2:8c:3c:09:3c:51:0f:41:77:b1:a2:19:f2:a4:e0: 10:58:50:a2:79:f2:a0:3d:01:38:31:1e:8e:18:0b: 64:c0:92:f9:4c:24:f3:80:36:03:77:ce:0e:c3:f5: 36:e5:c3:17:3e:ec:f7:2e:73:49:1f:d4:84:11:80: ac:a6:59:4b:9b:86:9f:69:73:ee:8d:dc:95:2d:d8: 5b:51:58:65:cd:a6:3b:44:2b:16:3c:60:48:c1:ed: f9:20:04:db:65:25:20:af:fa:16:26:33:d5:16:ae: 7e:31:0b:7b:8a:27:e1:f1:65:6a:4c:28:68:44:26: cd:71:97:a5:91:10:cb:43:c3:0f:63:1b:70:ef:38: 75:33:f6:3f:91:f1:cd:cb:9a:96:67:82:c1:b9:56: e8:33:ce:a4:70:81:9f:29:fb:a4:76:27:4d:57:d0: cf:aa:8a:a8:0c:65:91:a1:46:75:a9:ef:24:61:7d: e2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:06:EE:FF:CA:8B:B7:2A:04:87:77:A8:F0:16:D2:16:EB:9C:46:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/dd431272-55e1-31f9-9f87-a1425a7991e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/0bed6185-186c-4da8-9253-7f61731aef25.crl X509v3 Authority Key Identifier: keyid:40:22:1A:A4:8A:C4:F7:AA:67:A5:3B:18:62:7B:7A:B9:8C:A8:24:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25.cer sbgp-ipAddrBlock: critical IPv4: 66.33.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:f1:a2:38:26:95:3d:ad:29:35:77:ca:50:15:c0:4f:d9:f3: 19:1c:38:dc:47:13:35:09:26:f0:a8:49:2f:f9:a4:fd:c1:a1: 11:0d:60:1a:44:1a:69:6f:5d:47:be:ee:17:99:9b:6c:c0:0a: 06:28:15:da:c9:c3:9c:80:4f:2f:4e:db:68:0b:2b:4c:43:35: 14:4f:bb:e8:8c:5a:36:20:30:eb:2d:cd:1c:50:51:d2:f5:7e: 75:66:c7:ba:c0:d4:18:8d:7e:6c:ad:11:0b:e1:af:8b:0c:e7: 00:16:b9:e6:9c:a9:ff:5b:1d:6d:3d:cd:ab:58:50:e5:86:58: 70:3c:68:87:18:15:bd:b4:61:07:ae:c1:4f:94:16:2b:e0:81: 7d:d5:87:cc:55:e9:e7:41:2e:2d:d8:28:1d:50:1f:77:02:86: 96:e9:62:7c:6f:01:0c:8c:6f:01:95:e3:d3:01:ce:96:3b:fc: 51:fc:53:94:e1:60:0f:f7:24:03:e5:b0:a8:88:49:35:e0:f6: e4:f4:f7:9a:57:2f:7f:7b:36:76:98:0f:ce:97:2f:67:02:e3: 5b:0f:28:20:eb:20:81:7e:23:f4:86:43:fd:de:88:c6:53:bf: e4:e7:8a:86:4e:8f:73:e2:19:68:bd:a7:e3:35:54:02:b9:11: 63:7f:bb:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUpUox0jSle4tJOU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGJlZDYxODUtMTg2Yy00ZGE4LTkyNTMtN2Y2MTczMWFl ZjI1MB4XDTI0MDMxMDEzMDAzMVoXDTI0MDYwODEzMDAzMVowLzEtMCsGA1UEAxMk YjZmZGY5ZDctMTVhNS00NmI2LTg3NDgtMzhlYmI4NWI3ZTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cvwiqjsICQFYQKLONP+5D3YHb741qe3X1fq S/YoKrWzaOjtIJMdcRCbW7iNIh68rPGx/mnmhEWIFYomBvZorfnwX2RRFaJ0pmjy jDwJPFEPQXexohnypOAQWFCiefKgPQE4MR6OGAtkwJL5TCTzgDYDd84Ow/U25cMX Puz3LnNJH9SEEYCspllLm4afaXPujdyVLdhbUVhlzaY7RCsWPGBIwe35IATbZSUg r/oWJjPVFq5+MQt7iifh8WVqTChoRCbNcZelkRDLQ8MPYxtw7zh1M/Y/kfHNy5qW Z4LBuVboM86kcIGfKfukdidNV9DPqoqoDGWRoUZ1qe8kYX3ihwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4G7v/Ki7cqBId3qPAW0hbrnEYmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYmVk NjE4NS0xODZjLTRkYTgtOTI1My03ZjYxNzMxYWVmMjUvZGQ0MzEyNzItNTVlMS0z MWY5LTlmODctYTE0MjVhNzk5MWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGJlZDYxODUtMTg2Yy00ZGE4LTky NTMtN2Y2MTczMWFlZjI1LzBiZWQ2MTg1LTE4NmMtNGRhOC05MjUzLTdmNjE3MzFh ZWYyNS5jcmwwHwYDVR0jBBgwFoAUQCIapIrE96pnpTsYYnt6uYyoJH8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYmVkNjE4NS0xODZjLTRkYTgtOTI1My03ZjYx NzMxYWVmMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiEhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7xojgmlT2tKTV3ylAVwE/Z8xkcONxHEzUJJvCoSS/5pP3BoRENYBpE GmlvXUe+7heZm2zACgYoFdrJw5yATy9O22gLK0xDNRRPu+iMWjYgMOstzRxQUdL1 fnVmx7rA1BiNfmytEQvhr4sM5wAWueacqf9bHW09zatYUOWGWHA8aIcYFb20YQeu wU+UFivggX3Vh8xV6edBLi3YKB1QH3cChpbpYnxvAQyMbwGV49MBzpY7/FH8U5Th YA/3JAPlsKiISTXg9uT095pXL397NnaYD86XL2cC41sPKCDrIIF+I/SGQ/3eiMZT v+TnioZOj3PiGWi9p+M1VAK5EWN/u3Y= -----END CERTIFICATE-----Generated at Wed May 15 15:08:59 2024 by rpki-client on console-fra.rpki-client.org