$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/97b8c640-fb2c-369e-90d7-90ade1142479.roa File: 97b8c640-fb2c-369e-90d7-90ade1142479.roa (raw, json) Hash identifier: 0NtTLx/syqfIDYW88n8B/Lo1PnuQo0P/7V4m/3l6/uM= Subject key identifier: 22:29:F9:1E:61:E4:33:6D:52:73:5A:B2:F3:86:3B:63:3F:65:19:D1 Certificate issuer: /CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Certificate serial: 010D0C9F43285845095572CAA2C186282BB19180 Authority key identifier: BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/97b8c640-fb2c-369e-90d7-90ade1142479.roa Signing time: Wed 28 Feb 2024 02:00:26 +0000 ROA not before: Wed 28 Feb 2024 02:00:26 +0000 ROA not after: Tue 28 May 2024 01:00:26 +0000 asID: 41458 IP address blocks: 162.210.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:09:55:72:ca:a2:c1:86:28:2b:b1:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Validity Not Before: Feb 28 02:00:26 2024 GMT Not After : May 28 01:00:26 2024 GMT Subject: CN=2124f5d4-ce92-4040-9862-0d662f726734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f4:1b:62:7b:a1:ec:16:8c:5c:6c:a1:f1:6e: 3e:01:d2:51:05:44:b4:39:d2:a4:1e:2f:9b:1c:7a: 0f:00:8e:fa:01:49:36:96:8b:0a:ac:d6:6a:a0:db: 2b:56:96:8a:b4:6c:5d:09:54:5f:da:4a:f4:db:52: 2b:98:97:12:82:eb:e8:6e:71:68:20:79:51:62:5f: f3:98:28:73:2e:40:ab:4e:c6:6c:45:c8:40:2c:3e: df:e2:da:94:d6:e9:ef:e6:5d:d0:f2:1b:61:e6:e8: 8c:87:13:05:24:e7:c6:59:01:b1:56:0d:5c:9b:e4: e2:0d:5f:2c:54:f1:7c:d2:12:1a:49:8f:8a:e7:00: 10:29:a2:4e:26:3d:57:fe:74:66:a5:9c:c3:d0:39: 55:3f:bb:84:b8:a5:ef:e2:9f:33:07:09:7c:b0:56: 3b:22:9d:78:24:3a:c5:ad:bb:a1:40:f7:43:a9:68: e1:41:93:f5:53:d0:e2:15:bb:fb:24:95:8a:68:4b: 0e:ee:11:c5:8c:77:97:90:5c:2a:cb:bf:dd:87:56: 50:fa:42:41:cc:30:42:10:e6:ce:22:be:df:33:4a: 65:fe:5d:60:f2:84:cd:90:80:4b:ce:33:3d:09:5c: 6b:4b:f9:24:f3:d8:11:56:e8:be:b1:1e:2d:fe:dc: 35:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:29:F9:1E:61:E4:33:6D:52:73:5A:B2:F3:86:3B:63:3F:65:19:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/97b8c640-fb2c-369e-90d7-90ade1142479.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl X509v3 Authority Key Identifier: keyid:BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer sbgp-ipAddrBlock: critical IPv4: 162.210.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:f0:6b:4a:ee:d3:2f:12:69:19:20:a8:42:67:57:46:d9:e0: 72:94:be:ef:3b:80:e0:3e:b1:01:8b:46:3e:4f:82:d6:ff:49: f2:94:eb:fe:c4:09:8f:b4:08:33:a1:92:fa:fc:c7:23:c4:66: a0:98:5d:3b:63:01:a5:d6:c0:7c:c8:0d:dd:22:3e:4c:5b:2b: b1:5b:c7:ee:65:17:3c:d1:5d:bf:5d:30:22:db:14:63:20:68: aa:89:1a:ab:ec:0c:9e:91:05:a3:a0:61:a5:5c:a7:81:0d:e3: 62:e4:a3:79:59:a1:a7:92:32:2d:f0:27:15:db:07:c3:1f:39: bf:7f:df:1c:dc:ba:87:d8:ab:a2:11:b9:93:19:74:80:58:c3: dc:e3:06:00:f8:4a:2a:23:31:f0:d3:e7:e1:c0:80:45:cc:62: 01:05:36:e8:23:f6:81:72:27:60:40:86:98:bd:a1:57:ca:10: 63:41:dc:01:f6:ba:09:82:29:c8:46:9f:92:68:7b:fe:1a:e1: da:a7:84:b0:fd:c9:0d:da:6d:bb:2a:d6:f5:18:dd:e5:38:0d: 7c:fa:f2:14:ae:35:5c:9b:a5:67:40:44:f5:10:fb:21:22:1d: ca:fc:51:6c:1d:c3:f1:49:73:dc:5c:46:94:0e:0c:af:45:3d: dc:88:15:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUJVXLKosGGKCuxkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlNTZkNjktNTQ5Yy00ZDkyLTg4NjYtMGM4ZGQxZDll MTcxMB4XDTI0MDIyODAyMDAyNloXDTI0MDUyODAxMDAyNlowLzEtMCsGA1UEAxMk MjEyNGY1ZDQtY2U5Mi00MDQwLTk4NjItMGQ2NjJmNzI2NzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfQbYnuh7BaMXGyh8W4+AdJRBUS0OdKkHi+b HHoPAI76AUk2losKrNZqoNsrVpaKtGxdCVRf2kr021IrmJcSguvobnFoIHlRYl/z mChzLkCrTsZsRchALD7f4tqU1unv5l3Q8hth5uiMhxMFJOfGWQGxVg1cm+TiDV8s VPF80hIaSY+K5wAQKaJOJj1X/nRmpZzD0DlVP7uEuKXv4p8zBwl8sFY7Ip14JDrF rbuhQPdDqWjhQZP1U9DiFbv7JJWKaEsO7hHFjHeXkFwqy7/dh1ZQ+kJBzDBCEObO Ir7fM0pl/l1g8oTNkIBLzjM9CVxrS/kk89gRVui+sR4t/tw1XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIp+R5h5DNtUnNasvOGO2M/ZRnRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1 NmQ2OS01NDljLTRkOTItODg2Ni0wYzhkZDFkOWUxNzEvOTdiOGM2NDAtZmIyYy0z NjllLTkwZDctOTBhZGUxMTQyNDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFlNTZkNjktNTQ5Yy00ZDkyLTg4 NjYtMGM4ZGQxZDllMTcxLzIxZTU2ZDY5LTU0OWMtNGQ5Mi04ODY2LTBjOGRkMWQ5 ZTE3MS5jcmwwHwYDVR0jBBgwFoAUvA+7LjwFNA8k3Ak3ib7cKUshZAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1NmQ2OS01NDljLTRkOTItODg2Ni0wYzhk ZDFkOWUxNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotL8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvwa0ru0y8SaRkgqEJnV0bZ4HKUvu87gOA+sQGLRj5Pgtb/SfKU6/7E CY+0CDOhkvr8xyPEZqCYXTtjAaXWwHzIDd0iPkxbK7Fbx+5lFzzRXb9dMCLbFGMg aKqJGqvsDJ6RBaOgYaVcp4EN42Lko3lZoaeSMi3wJxXbB8MfOb9/3xzcuofYq6IR uZMZdIBYw9zjBgD4SiojMfDT5+HAgEXMYgEFNugj9oFyJ2BAhpi9oVfKEGNB3AH2 ugmCKchGn5Joe/4a4dqnhLD9yQ3abbsq1vUY3eU4DXz68hSuNVybpWdARPUQ+yEi Hcr8UWwdw/FJc9xcRpQODK9FPdyIFXY= -----END CERTIFICATE-----Generated at Wed May 15 16:06:06 2024 by rpki-client on console-ams.rpki-client.org