$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/10192187-defa-3548-b6c6-237adcf28f84.roa File: 10192187-defa-3548-b6c6-237adcf28f84.roa (raw, json) Hash identifier: Go6cYHOLRPMPhx0o/eUV5FnjBhw9EsxVXK8FG1FlYV0= Subject key identifier: 12:B6:CF:AD:66:0A:37:C4:B5:EA:6F:15:28:5D:74:C4:48:AD:FB:08 Certificate issuer: /CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Certificate serial: 010D0C9F4328584550682AC6FF0F52526D50C400 Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/10192187-defa-3548-b6c6-237adcf28f84.roa Signing time: Sun 24 Mar 2024 13:00:33 +0000 ROA not before: Sun 24 Mar 2024 13:00:33 +0000 ROA not after: Sat 22 Jun 2024 13:00:33 +0000 asID: 205627 IP address blocks: 170.2.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:50:68:2a:c6:ff:0f:52:52:6d:50:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Validity Not Before: Mar 24 13:00:33 2024 GMT Not After : Jun 22 13:00:33 2024 GMT Subject: CN=65740fbf-386c-4085-86c4-9f7dba5a8f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6b:b9:b5:aa:93:35:62:e5:5e:32:66:67:a9: 84:67:05:a0:44:f8:34:af:1a:ff:57:1b:84:2c:dc: 7e:ea:7e:18:b9:df:8a:90:0a:07:1b:3a:d1:18:33: 26:86:3d:18:ab:60:b6:ec:34:c8:f6:40:e7:a4:81: 04:1c:d9:dd:34:24:57:0f:e9:85:46:c9:d1:42:09: ad:cd:4d:41:a2:64:96:60:3e:aa:ac:07:f1:db:56: 44:fd:3f:0b:b5:42:a7:41:9f:25:a3:6c:f4:40:79: 30:fa:dc:01:b3:3f:8e:41:9e:1d:51:ec:83:07:09: b8:82:75:21:42:1a:30:2b:9b:99:09:73:1c:3b:3e: 0f:ac:25:7c:00:85:7f:c3:55:ee:6d:17:f8:07:69: 6e:0b:05:93:ee:48:96:45:b0:52:ff:0f:cf:2a:06: 3e:3e:8d:95:62:60:5e:f6:e6:cb:af:71:5f:f4:02: 1c:dd:35:e8:6a:48:06:63:5d:e4:ce:95:df:e4:74: 63:cb:8f:9e:2f:21:06:49:0c:ed:24:bc:dc:ce:5e: f2:2a:08:0d:49:71:c3:23:68:45:02:6e:ff:ec:f6: 22:80:30:e8:6a:68:55:50:e3:06:de:22:53:31:23: 81:88:84:aa:6c:f4:5a:f5:ac:70:7d:11:3c:42:e6: b5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B6:CF:AD:66:0A:37:C4:B5:EA:6F:15:28:5D:74:C4:48:AD:FB:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/10192187-defa-3548-b6c6-237adcf28f84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl X509v3 Authority Key Identifier: keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer sbgp-ipAddrBlock: critical IPv4: 170.2.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:3c:e4:f2:64:83:1e:c8:a2:7a:21:d1:6c:a7:aa:d5:a9:90: f6:8e:09:81:ba:b7:10:38:b2:e2:ca:3d:09:f1:a4:46:c8:88: 80:a3:33:70:e9:52:ec:01:72:25:5a:3a:be:46:55:28:d0:27: 2c:0f:35:5d:f3:71:4b:46:5e:a1:b3:c2:09:07:83:14:ab:a4: f4:5c:2c:02:12:b2:ed:94:f6:1c:97:79:97:90:7f:81:a9:63: ec:0c:ec:78:70:ab:96:c4:65:a2:6e:ab:9e:c2:ff:13:15:ee: a4:13:19:c8:66:f5:d1:a1:28:79:2b:90:0d:cf:19:1d:2e:ac: 01:fd:d2:f7:5e:4c:72:f9:e7:a2:00:96:08:42:43:77:f7:c3: 1e:f2:ee:44:ec:45:29:d3:e6:ae:bf:77:5e:16:36:e2:c4:85: 92:f7:0d:1b:08:da:60:8e:5a:17:5a:8d:c4:49:fe:10:d6:25: 33:6e:a0:4e:d4:2f:e8:69:61:d1:db:49:c1:43:a0:ae:b6:6e: c4:b3:ce:d9:49:db:43:de:68:4e:1b:e2:be:a8:9d:52:05:37: b7:a4:12:10:2d:17:b2:e5:c9:9a:d8:3a:a2:4c:1d:9a:85:93: a3:51:5a:2b:7f:c7:5b:d1:79:3a:aa:e0:9f:07:fb:da:0c:3d: 76:32:47:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVQaCrG/w9SUm1QxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhhMjljNDYtZTBmMS00ZWRjLTk4OGEtOTQyMGFmZmJj MzM5MB4XDTI0MDMyNDEzMDAzM1oXDTI0MDYyMjEzMDAzM1owLzEtMCsGA1UEAxMk NjU3NDBmYmYtMzg2Yy00MDg1LTg2YzQtOWY3ZGJhNWE4ZjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWu5taqTNWLlXjJmZ6mEZwWgRPg0rxr/VxuE LNx+6n4Yud+KkAoHGzrRGDMmhj0Yq2C27DTI9kDnpIEEHNndNCRXD+mFRsnRQgmt zU1BomSWYD6qrAfx21ZE/T8LtUKnQZ8lo2z0QHkw+twBsz+OQZ4dUeyDBwm4gnUh QhowK5uZCXMcOz4PrCV8AIV/w1XubRf4B2luCwWT7kiWRbBS/w/PKgY+Po2VYmBe 9ubLr3Ff9AIc3TXoakgGY13kzpXf5HRjy4+eLyEGSQztJLzczl7yKggNSXHDI2hF Am7/7PYigDDoamhVUOMG3iJTMSOBiISqbPRa9axwfRE8Qua1qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBK2z61mCjfEtepvFShddMRIrfsIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOGEy OWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIwYWZmYmMzMzkvMTAxOTIxODctZGVmYS0z NTQ4LWI2YzYtMjM3YWRjZjI4Zjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjhhMjljNDYtZTBmMS00ZWRjLTk4 OGEtOTQyMGFmZmJjMzM5L2I4YTI5YzQ2LWUwZjEtNGVkYy05ODhhLTk0MjBhZmZi YzMzOS5jcmwwHwYDVR0jBBgwFoAUrluRChr3agr5yGG6uSyArkHgeRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iOGEyOWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIw YWZmYmMzMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqgKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHo85PJkgx7Ionoh0WynqtWpkPaOCYG6txA4suLKPQnxpEbIiICjM3Dp UuwBciVaOr5GVSjQJywPNV3zcUtGXqGzwgkHgxSrpPRcLAISsu2U9hyXeZeQf4Gp Y+wM7Hhwq5bEZaJuq57C/xMV7qQTGchm9dGhKHkrkA3PGR0urAH90vdeTHL556IA lghCQ3f3wx7y7kTsRSnT5q6/d14WNuLEhZL3DRsI2mCOWhdajcRJ/hDWJTNuoE7U L+hpYdHbScFDoK62bsSzztlJ20PeaE4b4r6onVIFN7ekEhAtF7LlyZrYOqJMHZqF k6NRWit/x1vReTqq4J8H+9oMPXYyR4Y= -----END CERTIFICATE-----Generated at Wed May 15 18:21:57 2024 by rpki-client on console-ams.rpki-client.org