$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/2eb74f13-24dd-32a8-8c5d-9d1f53478499.roa File: 2eb74f13-24dd-32a8-8c5d-9d1f53478499.roa (raw, json) Hash identifier: j1KxXmEL+H8YPd6g7Wud/j+kzbZ4t6F2C+xqYTAuHN4= Subject key identifier: 19:CD:9E:C5:5D:AC:C0:1B:2E:0D:9D:0D:B7:D0:B3:3C:76:6C:DF:01 Certificate issuer: /CN=8252d812-07cd-4870-b413-e08fb8355928 Certificate serial: 010D0C9F4328584525404442E8895889769BEA80 Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/2eb74f13-24dd-32a8-8c5d-9d1f53478499.roa Signing time: Sat 09 Mar 2024 02:00:25 +0000 ROA not before: Sat 09 Mar 2024 02:00:25 +0000 ROA not after: Fri 07 Jun 2024 01:00:25 +0000 asID: 8075 IP address blocks: 170.88.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:25:40:44:42:e8:89:58:89:76:9b:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928 Validity Not Before: Mar 9 02:00:25 2024 GMT Not After : Jun 7 01:00:25 2024 GMT Subject: CN=c3bba50d-1a12-4bea-b7a9-a684d46f3082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b0:61:59:d4:4c:37:55:db:e3:c4:62:43:76: 6c:c6:4c:c2:ef:cf:9f:81:c3:93:0f:84:aa:87:2c: 93:67:f9:78:74:56:8a:ad:76:67:1d:d4:92:ef:4e: 09:7d:d2:3d:49:60:4a:d8:53:85:ca:99:af:b8:2a: 84:44:db:01:12:ee:77:22:97:e0:7d:d5:06:5c:84: 82:1c:67:dd:c0:7c:e4:5a:af:21:e2:f6:13:4d:aa: 69:ba:92:5b:65:5a:87:66:19:60:89:a7:44:1a:bc: 19:dd:13:b7:27:dc:41:4b:20:6d:4e:45:37:2f:ba: ec:be:5d:98:2d:8b:56:06:47:85:04:dd:9f:b5:90: 4c:6f:08:c4:63:22:27:79:4e:c4:42:35:84:f0:f4: 79:69:e7:da:fa:17:cc:f9:0e:13:55:64:e5:91:16: 9e:d0:63:44:27:db:cb:be:fc:ca:54:7e:c6:50:64: 44:ec:ec:32:42:a8:86:13:ef:a1:b4:59:8d:d0:85: 2e:5a:fe:ab:fa:fa:79:f8:85:24:ec:6c:01:fa:1a: 75:46:74:9c:f8:81:f7:20:58:7e:81:1c:78:3c:9a: 33:c9:e3:e9:c0:ec:13:79:b5:50:ea:ea:61:b7:45: 81:ea:5e:1b:6c:16:39:f7:40:c1:f1:66:96:90:11: 27:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:CD:9E:C5:5D:AC:C0:1B:2E:0D:9D:0D:B7:D0:B3:3C:76:6C:DF:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/2eb74f13-24dd-32a8-8c5d-9d1f53478499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl X509v3 Authority Key Identifier: keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer sbgp-ipAddrBlock: critical IPv4: 170.88.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:08:c2:07:ff:90:60:d1:a4:81:d8:27:d8:68:69:b0:df:7d: d8:a5:82:a5:94:5b:76:35:75:11:e3:07:dd:d6:c6:10:89:29: 7e:3f:6a:55:c1:17:43:ed:7f:bc:10:40:20:5c:da:ff:2c:fe: d2:16:19:a7:eb:0d:1e:05:b3:7e:dd:d6:b7:b1:d1:bd:44:06: 4e:a4:c4:c4:98:a7:e9:6a:8a:f1:c7:64:75:f2:b1:52:bd:dc: 68:10:6c:87:e0:a8:8c:f7:f7:d3:ac:aa:82:bf:8e:39:63:9c: 5a:7a:dd:cf:c8:ba:ac:8f:2d:6c:49:a1:1f:32:f4:23:aa:16: 86:58:0d:6d:1c:ec:41:20:6f:97:59:30:0a:73:6e:d0:b6:b6: 67:9e:79:c7:8f:77:16:bb:bc:d7:06:60:c7:ff:05:b8:66:ab: 9a:b1:bd:d3:07:52:98:06:f6:fd:14:f8:35:91:73:ae:dd:a4: 81:fb:8b:97:07:bf:d9:de:ac:e2:46:1b:45:31:e6:8c:ff:6e: 44:c1:6e:b9:60:1c:bb:83:a0:4a:57:17:24:de:88:7e:77:32: 64:3d:75:a7:12:1d:3c:b7:81:97:2f:1a:6c:05:e3:36:5b:9f: c4:52:c8:07:0d:34:22:89:54:90:20:48:7b:e8:61:39:ac:b8: db:46:dc:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUlQERC6IlYiXab6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI1MmQ4MTItMDdjZC00ODcwLWI0MTMtZTA4ZmI4MzU1 OTI4MB4XDTI0MDMwOTAyMDAyNVoXDTI0MDYwNzAxMDAyNVowLzEtMCsGA1UEAxMk YzNiYmE1MGQtMWExMi00YmVhLWI3YTktYTY4NGQ0NmYzMDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7BhWdRMN1Xb48RiQ3ZsxkzC78+fgcOTD4Sq hyyTZ/l4dFaKrXZnHdSS704JfdI9SWBK2FOFypmvuCqERNsBEu53IpfgfdUGXISC HGfdwHzkWq8h4vYTTappupJbZVqHZhlgiadEGrwZ3RO3J9xBSyBtTkU3L7rsvl2Y LYtWBkeFBN2ftZBMbwjEYyIneU7EQjWE8PR5aefa+hfM+Q4TVWTlkRae0GNEJ9vL vvzKVH7GUGRE7OwyQqiGE++htFmN0IUuWv6r+vp5+IUk7GwB+hp1RnSc+IH3IFh+ gRx4PJozyePpwOwTebVQ6upht0WB6l4bbBY590DB8WaWkBEnVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnNnsVdrMAbLg2dDbfQszx2bN8BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjUy ZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhmYjgzNTU5MjgvMmViNzRmMTMtMjRkZC0z MmE4LThjNWQtOWQxZjUzNDc4NDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODI1MmQ4MTItMDdjZC00ODcwLWI0 MTMtZTA4ZmI4MzU1OTI4LzgyNTJkODEyLTA3Y2QtNDg3MC1iNDEzLWUwOGZiODM1 NTkyOC5jcmwwHwYDVR0jBBgwFoAUIva3iYFTKL8g1v/ghuym3G4e9twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjUyZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhm YjgzNTU5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlhVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwIwgf/kGDRpIHYJ9hoabDffdilgqWUW3Y1dRHjB93WxhCJKX4/alXB F0Ptf7wQQCBc2v8s/tIWGafrDR4Fs37d1rex0b1EBk6kxMSYp+lqivHHZHXysVK9 3GgQbIfgqIz399OsqoK/jjljnFp63c/IuqyPLWxJoR8y9COqFoZYDW0c7EEgb5dZ MApzbtC2tmeeecePdxa7vNcGYMf/Bbhmq5qxvdMHUpgG9v0U+DWRc67dpIH7i5cH v9nerOJGG0Ux5oz/bkTBbrlgHLuDoEpXFyTeiH53MmQ9dacSHTy3gZcvGmwF4zZb n8RSyAcNNCKJVJAgSHvoYTmsuNtG3KE= -----END CERTIFICATE-----Generated at Wed May 15 16:06:07 2024 by rpki-client on console-ams.rpki-client.org