$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/5b7505ae-0f34-3626-bc11-49f8ec61daa1.roa File: 5b7505ae-0f34-3626-bc11-49f8ec61daa1.roa (raw, json) Hash identifier: 1NEJ4WKZ8WWeDbKgDFKNSiiKYC4YaKNSCx11vrEQtqo= Subject key identifier: C2:EA:BF:C7:1F:4C:73:A9:63:24:F7:5B:37:97:41:E0:0C:6A:AB:73 Certificate issuer: /CN=0c82e125-4df5-4912-a714-101a1caa5b99 Certificate serial: 010D0C9F4328584555FD8BB9AB628002F21B6700 Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/5b7505ae-0f34-3626-bc11-49f8ec61daa1.roa Signing time: Tue 26 Mar 2024 13:00:35 +0000 ROA not before: Tue 26 Mar 2024 13:00:35 +0000 ROA not after: Mon 24 Jun 2024 13:00:35 +0000 asID: 54054 IP address blocks: 192.48.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:55:fd:8b:b9:ab:62:80:02:f2:1b:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99 Validity Not Before: Mar 26 13:00:35 2024 GMT Not After : Jun 24 13:00:35 2024 GMT Subject: CN=f4bb4b46-a3b9-48a9-9a9f-f752f367f2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:54:46:26:b0:11:bd:ef:af:14:3c:16:e2:ce: b3:8a:ca:fc:70:ee:0b:d7:bd:f3:11:20:1f:f5:f0: ba:91:8c:45:2a:e6:b3:5b:79:22:3b:35:9f:00:65: 3a:3d:f7:7b:83:d5:97:c2:15:eb:1c:74:34:54:7e: c8:f8:a2:5a:7f:da:36:a2:7c:8e:55:c0:58:e4:29: 03:e5:66:13:65:3e:bd:ae:fe:bf:0c:14:25:75:47: 4c:f0:2c:04:1b:83:85:14:f7:71:88:1d:98:4c:95: 23:30:2e:3a:51:84:4f:08:11:df:9a:40:dd:77:56: 76:68:a9:c9:9b:1b:ab:d5:c4:f0:d7:97:88:89:05: d7:5f:12:4f:5b:cd:73:99:d6:f6:52:d1:0e:c6:9a: 5e:50:d0:df:52:fe:71:9c:0e:51:a1:1f:3a:36:f9: 58:67:77:a5:b9:10:4b:7c:9d:95:83:c5:50:7d:e3: b0:14:f2:5b:55:1e:f5:05:df:05:cd:42:c4:74:40: 80:3c:57:a5:19:fc:b8:4c:3b:f1:a3:7f:53:40:6a: 86:d3:cd:83:a6:6e:43:6a:69:6e:a9:81:4d:82:6a: 4d:f5:73:68:a9:fe:62:69:38:87:ce:93:28:f0:60: 11:6f:82:06:45:f2:2b:ba:f8:1b:02:e3:65:c2:26: 1f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EA:BF:C7:1F:4C:73:A9:63:24:F7:5B:37:97:41:E0:0C:6A:AB:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/5b7505ae-0f34-3626-bc11-49f8ec61daa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl X509v3 Authority Key Identifier: keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer sbgp-ipAddrBlock: critical IPv4: 192.48.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:0a:b2:9a:cd:fb:28:3a:ff:5a:2a:b9:a3:17:2a:69:e6:be: 00:db:23:e2:a2:e4:02:2d:65:72:b7:fd:35:be:b9:10:5b:41: b1:0f:d4:d3:3c:21:20:73:c7:59:b2:83:bc:c9:7c:8e:53:a4: de:2c:91:b9:25:35:82:f4:d4:cf:a7:09:1d:88:f7:51:12:c4: e0:d1:0c:cf:27:0e:72:af:9d:3c:c9:ab:25:d2:15:96:76:57: a9:0a:76:f0:be:ea:fd:48:4a:d9:6e:e1:8c:07:f3:10:dd:54: 3b:57:85:46:0f:98:99:ab:69:dd:98:fb:3e:e5:14:02:fc:17: ce:59:d8:bf:d4:5c:a8:19:d0:37:35:e6:52:51:ed:78:97:c1: 61:60:e4:a2:b2:f6:06:f3:81:cd:4b:a8:3a:23:e6:a1:54:1d: 90:99:01:4f:d7:82:b8:44:ac:ee:88:93:64:56:a4:3f:7c:f1: 73:47:70:11:42:fb:a9:58:cb:e2:81:a2:6a:6c:e4:69:9a:33: 19:6a:09:b3:19:33:1e:a0:53:29:fd:ab:6a:32:fa:39:9e:1b: 82:c3:54:8b:a1:e4:6c:ac:03:8f:d0:30:ea:89:53:7b:85:3f: a7:59:56:c9:f5:18:54:9b:83:db:9a:aa:07:28:f3:02:93:91: 61:54:d8:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVV/Yu5q2KAAvIbZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM4MmUxMjUtNGRmNS00OTEyLWE3MTQtMTAxYTFjYWE1 Yjk5MB4XDTI0MDMyNjEzMDAzNVoXDTI0MDYyNDEzMDAzNVowLzEtMCsGA1UEAxMk ZjRiYjRiNDYtYTNiOS00OGE5LTlhOWYtZjc1MmYzNjdmMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolRGJrARve+vFDwW4s6zisr8cO4L173zESAf 9fC6kYxFKuazW3kiOzWfAGU6Pfd7g9WXwhXrHHQ0VH7I+KJaf9o2onyOVcBY5CkD 5WYTZT69rv6/DBQldUdM8CwEG4OFFPdxiB2YTJUjMC46UYRPCBHfmkDdd1Z2aKnJ mxur1cTw15eIiQXXXxJPW81zmdb2UtEOxppeUNDfUv5xnA5RoR86NvlYZ3eluRBL fJ2Vg8VQfeOwFPJbVR71Bd8FzULEdECAPFelGfy4TDvxo39TQGqG082Dpm5Damlu qYFNgmpN9XNoqf5iaTiHzpMo8GARb4IGRfIruvgbAuNlwiYflwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLqv8cfTHOpYyT3WzeXQeAMaqtzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzgy ZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFhMWNhYTViOTkvNWI3NTA1YWUtMGYzNC0z NjI2LWJjMTEtNDlmOGVjNjFkYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGM4MmUxMjUtNGRmNS00OTEyLWE3 MTQtMTAxYTFjYWE1Yjk5LzBjODJlMTI1LTRkZjUtNDkxMi1hNzE0LTEwMWExY2Fh NWI5OS5jcmwwHwYDVR0jBBgwFoAUyDy4ggA7MgjtxRD3UBDgaNSWRPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzgyZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFh MWNhYTViOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDDfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwKsprN+yg6/1oquaMXKmnmvgDbI+Ki5AItZXK3/TW+uRBbQbEP1NM8 ISBzx1myg7zJfI5TpN4skbklNYL01M+nCR2I91ESxODRDM8nDnKvnTzJqyXSFZZ2 V6kKdvC+6v1IStlu4YwH8xDdVDtXhUYPmJmrad2Y+z7lFAL8F85Z2L/UXKgZ0Dc1 5lJR7XiXwWFg5KKy9gbzgc1LqDoj5qFUHZCZAU/XgrhErO6Ik2RWpD988XNHcBFC +6lYy+KBomps5GmaMxlqCbMZMx6gUyn9q2oy+jmeG4LDVIuh5GysA4/QMOqJU3uF P6dZVsn1GFSbg9uaqgco8wKTkWFU2Ag= -----END CERTIFICATE-----Generated at Wed May 15 15:08:59 2024 by rpki-client on console-fra.rpki-client.org