$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa File: 12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa (raw, json) Hash identifier: qwA+0xNHZY7tv0lJ3Gmy2VkmMqUJ36b+gBlG50z0L+A= Subject key identifier: F8:C7:55:31:94:A7:F6:D9:33:7F:63:4E:09:97:9D:D1:9F:38:67:AE Certificate issuer: /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Certificate serial: 010D0C9F432858454C380DA8777E51CB163E67C0 Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa Signing time: Sat 23 Mar 2024 01:00:24 +0000 ROA not before: Sat 23 Mar 2024 01:00:24 +0000 ROA not after: Fri 21 Jun 2024 01:00:24 +0000 asID: 40805 IP address blocks: 208.96.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:4c:38:0d:a8:77:7e:51:cb:16:3e:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Validity Not Before: Mar 23 01:00:24 2024 GMT Not After : Jun 21 01:00:24 2024 GMT Subject: CN=5a3699f3-371d-4238-8506-3ca259bcd62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ea:2c:f4:2d:fa:53:31:2a:ed:16:eb:68:09: f9:90:f5:e3:ed:ff:81:5d:3e:ff:51:c1:69:24:63: 35:a1:89:1d:cc:e5:7e:7c:c4:af:9f:3d:1a:45:7d: dc:2b:02:05:1c:a7:ce:9c:62:aa:80:d5:84:b6:40: 42:ca:1e:6c:e2:92:d9:d6:6f:3c:46:79:04:e5:ee: 70:77:f5:49:70:15:2c:2f:1c:9e:b8:03:09:43:d9: 62:ac:03:a9:22:90:e1:b0:c5:3c:66:24:9a:61:35: 4e:a7:73:34:d8:3f:67:4f:df:09:d8:a4:5e:30:05: 03:74:09:bb:e3:c1:6c:31:58:30:2e:e4:5c:b7:26: 4c:e7:e6:98:c8:4f:2f:06:7d:ae:d5:22:df:8b:2f: d2:86:10:05:99:35:67:6f:3b:a7:eb:b3:13:28:86: 9f:73:a6:90:4a:81:99:34:8c:f6:ab:f4:9c:f5:cb: 51:c6:5c:48:df:6c:0c:c0:8b:b9:d6:02:86:50:63: a8:f3:27:80:9c:c7:90:96:c4:50:7c:67:e1:1f:b3: 1c:e8:76:eb:51:dd:74:78:d9:d7:b2:ab:39:b6:71: 3c:1e:73:1f:39:dd:b1:ab:22:18:55:4d:ae:01:c4: e9:fa:57:6e:dc:2f:bc:09:14:d7:ca:e8:e5:ce:52: 5f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C7:55:31:94:A7:F6:D9:33:7F:63:4E:09:97:9D:D1:9F:38:67:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl X509v3 Authority Key Identifier: keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer sbgp-ipAddrBlock: critical IPv4: 208.96.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:3e:b0:4e:eb:5a:ca:28:69:30:92:00:b6:df:15:d7:9d:c6: 1c:75:64:09:d9:68:a8:c3:45:18:59:ea:f4:07:01:3c:fc:29: 66:2d:d1:53:31:18:e6:3f:f5:b4:3b:88:8b:4a:af:26:b7:da: 5c:96:ec:56:9b:3e:29:8b:7c:29:db:e4:85:fd:78:17:47:26: 8a:ae:87:0f:de:66:e1:46:5a:04:1c:c2:72:35:58:3d:82:5f: fb:cb:d7:d7:75:50:a7:8a:e8:a6:92:29:e6:7d:b2:f6:68:28: ba:10:29:7b:6c:e8:dc:0c:8e:51:b2:a0:62:25:b0:54:22:dc: 6d:cb:25:70:be:93:a7:10:cf:92:cd:03:6a:6d:36:c3:6d:a8: 1c:54:ed:31:f3:66:89:62:ad:21:39:73:f4:7c:22:20:de:7e: ee:c3:e9:e0:82:9c:f4:87:a1:f7:a0:04:7c:59:9b:5b:90:22: 2c:6a:ec:f5:61:0e:91:34:0c:97:de:a6:bd:89:c5:d0:07:f4: 0b:ed:26:9b:1d:96:71:e1:6f:da:b8:8f:f2:77:15:ea:b8:fb: c0:90:66:52:82:e7:03:be:d1:eb:fb:22:ad:ad:f6:6a:d5:d8: dc:6c:32:66:d4:7f:36:ea:72:b7:f8:65:b2:6e:82:a1:be:75: 9f:a1:d0:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVMOA2od35RyxY+Z8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU2ZDJhMmUtOWFjNy00ZDI5LWJkMTUtNzU4NzRkNDlk ZjY2MB4XDTI0MDMyMzAxMDAyNFoXDTI0MDYyMTAxMDAyNFowLzEtMCsGA1UEAxMk NWEzNjk5ZjMtMzcxZC00MjM4LTg1MDYtM2NhMjU5YmNkNjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOos9C36UzEq7RbraAn5kPXj7f+BXT7/UcFp JGM1oYkdzOV+fMSvnz0aRX3cKwIFHKfOnGKqgNWEtkBCyh5s4pLZ1m88RnkE5e5w d/VJcBUsLxyeuAMJQ9lirAOpIpDhsMU8ZiSaYTVOp3M02D9nT98J2KReMAUDdAm7 48FsMVgwLuRctyZM5+aYyE8vBn2u1SLfiy/ShhAFmTVnbzun67MTKIafc6aQSoGZ NIz2q/Sc9ctRxlxI32wMwIu51gKGUGOo8yeAnMeQlsRQfGfhH7Mc6HbrUd10eNnX sqs5tnE8HnMfOd2xqyIYVU2uAcTp+ldu3C+8CRTXyujlzlJfIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjHVTGUp/bZM39jTgmXndGfOGeuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNTZk MmEyZS05YWM3LTRkMjktYmQxNS03NTg3NGQ0OWRmNjYvMTJkOGUyZWUtYWY4OS0z Yjg0LTg3MDUtZjM2ZjdmOGM5N2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjU2ZDJhMmUtOWFjNy00ZDI5LWJk MTUtNzU4NzRkNDlkZjY2LzI1NmQyYTJlLTlhYzctNGQyOS1iZDE1LTc1ODc0ZDQ5 ZGY2Ni5jcmwwHwYDVR0jBBgwFoAU50wJluiEUMDP1YbVRi9w7tJXlQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNTZkMmEyZS05YWM3LTRkMjktYmQxNS03NTg3 NGQ0OWRmNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0GCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM+sE7rWsooaTCSALbfFdedxhx1ZAnZaKjDRRhZ6vQHATz8KWYt0VMx GOY/9bQ7iItKrya32lyW7FabPimLfCnb5IX9eBdHJoquhw/eZuFGWgQcwnI1WD2C X/vL19d1UKeK6KaSKeZ9svZoKLoQKXts6NwMjlGyoGIlsFQi3G3LJXC+k6cQz5LN A2ptNsNtqBxU7THzZolirSE5c/R8IiDefu7D6eCCnPSHofegBHxZm1uQIixq7PVh DpE0DJfepr2JxdAH9AvtJpsdlnHhb9q4j/J3Feq4+8CQZlKC5wO+0ev7Iq2t9mrV 2NxsMmbUfzbqcrf4ZbJugqG+dZ+h0Do= -----END CERTIFICATE-----Generated at Wed May 15 15:09:00 2024 by rpki-client on console-fra.rpki-client.org