$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32332e302f32342d3234203d3e203133333335.roa File: 3137322e39392e32332e302f32342d3234203d3e203133333335.roa (raw, json) Hash identifier: jCXNHOQUJHAAq138T40dUMHZ3OyN5jffo9qpk4XxLPk= Subject key identifier: AC:4C:84:E6:F3:AC:4B:ED:75:5D:59:01:47:56:97:2C:A7:AF:8C:7D Certificate issuer: /CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe Certificate serial: 522DF8ABC839AF1A47E9B7156F3A7AE399C0B6CD Authority key identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32332e302f32342d3234203d3e203133333335.roa Signing time: Wed 08 Nov 2023 08:35:14 +0000 ROA not before: Wed 08 Nov 2023 08:30:14 +0000 ROA not after: Wed 06 Nov 2024 08:35:14 +0000 asID: 13335 IP address blocks: 172.99.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 10:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:2d:f8:ab:c8:39:af:1a:47:e9:b7:15:6f:3a:7a:e3:99:c0:b6:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe Validity Not Before: Nov 8 08:30:14 2023 GMT Not After : Nov 6 08:35:14 2024 GMT Subject: CN=AC4C84E6F3AC4BED755D59014756972CA7AF8C7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:23:e5:3e:b6:d9:aa:2b:9a:ce:37:0f:23:bb: d9:39:12:32:24:da:8b:35:57:89:41:cf:1d:7a:b4: 44:88:6b:6d:23:65:97:41:6a:28:83:58:d3:8a:c0: 59:ec:9f:3a:28:d7:ed:7f:c0:00:f9:12:ed:a3:6c: fd:df:fb:d1:54:40:97:36:de:f6:b5:c7:f7:3a:57: cc:b0:bb:be:da:8d:30:94:99:83:0e:2b:76:f1:93: 1c:b3:0e:b5:74:c0:99:bb:48:08:5b:e0:73:51:7f: da:64:5c:56:42:da:03:94:a3:b8:0d:c3:67:3c:b2: 45:19:ae:51:93:2e:7c:62:f1:10:26:2b:a8:46:18: c7:70:2f:d0:79:69:1f:71:a5:81:f8:75:08:01:9f: 5d:a5:e6:71:ad:38:02:c9:a3:9c:eb:80:0c:c4:3e: 91:b1:0b:df:63:bd:87:e5:51:2a:0b:7e:04:90:45: d1:1a:d6:b6:53:d2:71:2f:88:82:b6:1b:2a:7c:63: 12:d1:b2:23:2c:c6:41:37:bc:2e:60:b5:d6:be:74: de:c7:f9:90:92:27:f4:e6:5b:73:ee:f7:a0:1d:40: 36:13:18:64:f4:00:56:40:fc:84:1d:40:5a:2e:e7: e4:70:73:2b:74:aa:fd:aa:99:1e:04:94:c8:9b:f1: 68:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4C:84:E6:F3:AC:4B:ED:75:5D:59:01:47:56:97:2C:A7:AF:8C:7D X509v3 Authority Key Identifier: keyid:4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32332e302f32342d3234203d3e203133333335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.99.23.0/24 Signature Algorithm: sha256WithRSAEncryption ae:17:9c:44:b0:d9:99:4c:ac:24:db:02:52:65:7b:77:3b:b4: 7e:85:36:bf:b6:7a:ce:eb:b5:95:79:63:07:f1:46:9b:aa:4c: 10:67:12:34:b6:37:05:05:af:06:2d:9f:6e:eb:53:c1:4f:6f: 76:58:74:77:a6:f7:03:5c:2c:4b:cd:52:93:98:44:5b:ce:b4: 38:36:c4:06:ff:de:57:b1:73:d4:92:58:16:e6:35:e5:db:a8: e0:db:41:4c:32:4d:f0:d6:bd:85:c9:a5:3c:32:d1:a4:ed:5f: 6a:20:72:e8:65:31:ab:de:67:30:43:fb:f8:fd:0a:45:75:2d: 3b:e3:d4:55:1e:19:fc:02:88:cc:ab:2e:6a:d8:73:9b:b1:57: 34:38:ca:5a:d5:3b:12:bf:4d:47:a1:fb:d4:64:aa:80:45:35: 78:1e:36:9f:c5:46:ec:fe:63:e0:4f:88:ce:3f:1b:91:9a:64: d6:45:11:7a:99:c6:8a:69:e9:97:34:40:4b:7b:4c:06:9e:55: 24:8c:1c:63:9b:f8:34:bd:b7:96:b8:df:57:14:c2:f2:4b:d3: e8:ec:bc:c3:e5:6e:bf:c3:43:f4:c4:be:96:7a:58:4c:64:53: 2c:11:6e:a7:b0:44:d6:50:4b:91:ac:d8:dc:4c:27:fd:5f:cd: 87:35:93:d9 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgIUUi34q8g5rxpH6bcVbzp645nAts0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOGFhODAwYTgxNGFmMGRlYjA2NmE5NWY3OTk2ZjgzY2Q3 MjlhNDhkMDc1YjA5NTJmYmUwHhcNMjMxMTA4MDgzMDE0WhcNMjQxMTA2MDgzNTE0 WjAzMTEwLwYDVQQDEyhBQzRDODRFNkYzQUM0QkVENzU1RDU5MDE0NzU2OTcyQ0E3 QUY4QzdEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCPlPrbZqiua zjcPI7vZORIyJNqLNVeJQc8derREiGttI2WXQWoog1jTisBZ7J86KNftf8AA+RLt o2z93/vRVECXNt72tcf3OlfMsLu+2o0wlJmDDit28ZMcsw61dMCZu0gIW+BzUX/a ZFxWQtoDlKO4DcNnPLJFGa5Rky58YvEQJiuoRhjHcC/QeWkfcaWB+HUIAZ9dpeZx rTgCyaOc64AMxD6RsQvfY72H5VEqC34EkEXRGta2U9JxL4iCthsqfGMS0bIjLMZB N7wuYLXWvnTex/mQkif05ltz7vegHUA2Exhk9ABWQPyEHUBaLufkcHMrdKr9qpke BJTIm/FopQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFKxMhObzrEvtdV1ZAUdWlyyn r4x9MB8GA1UdIwQYMBaAFEplnSvSDXBuifDpyKHoIvLdrr4fMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGJhYTY0YTgwMThiYWUwNTg0MGQwNDNiLzAv NEE2NTlEMkJEMjBENzA2RTg5RjBFOUM4QTFFODIyRjJEREFFQkUxRi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4 MzIxYTA3Lzk0NmFmZDM0LTY5NzEtNDIzZi1iMjJhLTU3NWUyYzczYWIyNy84YWE4 MDBhODE0YWYwZGViMDY2YTk1Zjc5OTZmODNjZDcyOWE0OGQwNzViMDk1MmZiZS5j ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhiYWE2NGE4MDE4YmFl MDU4NDBkMDQzYi8wLzMxMzczMjJlMzkzOTJlMzIzMzJlMzAyZjMyMzQyZDMyMzQy MDNkM2UyMDMxMzMzMzMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACsYxcwDQYJKoZIhvcNAQELBQAD ggEBAK4XnESw2ZlMrCTbAlJle3c7tH6FNr+2es7rtZV5YwfxRpuqTBBnEjS2NwUF rwYtn27rU8FPb3ZYdHem9wNcLEvNUpOYRFvOtDg2xAb/3lexc9SSWBbmNeXbqODb QUwyTfDWvYXJpTwy0aTtX2ogcuhlMaveZzBD+/j9CkV1LTvj1FUeGfwCiMyrLmrY c5uxVzQ4ylrVOxK/TUeh+9RkqoBFNXgeNp/FRuz+Y+BPiM4/G5GaZNZFEXqZxopp 6Zc0QEt7TAaeVSSMHGOb+DS9t5a431cUwvJL0+jsvMPlbr/DQ/TEvpZ6WExkUywR bqewRNZQS5Gs2NxMJ/1fzYc1k9k= -----END CERTIFICATE-----Generated at Sat May 11 11:05:55 2024 by rpki-client on console-ams.rpki-client.org