$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/1fde58cb-1b82-3dee-9119-156933d5f187.roa File: 1fde58cb-1b82-3dee-9119-156933d5f187.roa (raw, json) Hash identifier: PUzqEH6o8dIfQ+c49FXdkCk+leZsK1KJkgf0sXjiOaw= Subject key identifier: 9C:F5:9C:FC:2C:70:58:1D:F5:6C:71:02:85:1A:03:2B:26:1A:7B:89 Certificate issuer: /CN=0c924434-62f4-44d5-b440-476f5c675f3d Certificate serial: 010D0C9F43285845174ADE373CF23D56461A9480 Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/1fde58cb-1b82-3dee-9119-156933d5f187.roa Signing time: Mon 04 Mar 2024 02:00:26 +0000 ROA not before: Mon 04 Mar 2024 02:00:26 +0000 ROA not after: Sun 02 Jun 2024 01:00:26 +0000 asID: 16509 IP address blocks: 208.81.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 Mar 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:17:4a:de:37:3c:f2:3d:56:46:1a:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d Validity Not Before: Mar 4 02:00:26 2024 GMT Not After : Jun 2 01:00:26 2024 GMT Subject: CN=1229d5b3-bb50-4410-8cdd-a438454ad8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:01:1b:50:d0:16:3a:f2:49:ba:6a:4d:48: 97:c2:7c:95:1e:9b:5b:e4:48:3b:ca:3a:27:45:db: e3:49:f1:d0:c4:f9:42:ba:1b:b8:f3:93:4e:82:e5: 69:c7:64:f3:6c:65:ac:54:4a:27:d6:8f:32:97:99: eb:8f:e3:23:82:a0:fa:3f:9e:33:b7:61:7a:1b:74: e5:ef:db:af:9e:08:76:70:d2:5f:51:f6:4f:a2:a4: 8b:35:52:00:59:a5:9f:f7:af:25:7f:e2:7c:b6:2b: 06:13:bb:52:1a:7e:de:17:f5:cf:dc:66:ab:99:f9: f0:68:d4:6e:51:3e:d4:93:91:54:67:32:d4:eb:2a: a5:be:3b:20:85:ed:23:e1:41:fd:95:d0:9a:b4:e7: 51:67:7c:a8:37:07:1e:66:48:43:7a:64:7c:f5:20: 31:af:56:bc:e9:6f:bc:95:8d:f4:56:6f:0f:d6:0b: bc:93:5b:9d:61:fe:c7:b2:d0:90:aa:dc:db:7b:ab: 08:a1:1c:0b:1e:69:85:43:03:70:e7:bb:1c:a6:ca: 91:ed:80:7f:f1:4d:4a:a5:a1:a1:9f:f9:4b:6d:96: 4d:33:cd:5b:d6:da:e6:94:30:ce:b8:0f:e1:ce:20: 66:79:5a:49:16:c3:6a:dc:2d:77:71:73:88:fd:2a: f9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F5:9C:FC:2C:70:58:1D:F5:6C:71:02:85:1A:03:2B:26:1A:7B:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/1fde58cb-1b82-3dee-9119-156933d5f187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl X509v3 Authority Key Identifier: keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer sbgp-ipAddrBlock: critical IPv4: 208.81.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e8:db:31:4c:20:59:5b:3b:f2:1d:39:06:93:99:12:80:37: e2:09:07:39:a7:28:c3:92:07:a4:27:c1:13:84:b7:9e:ae:79: f6:a1:05:38:a3:ce:d1:1f:77:bc:b9:9e:a2:8f:45:18:b5:25: 71:11:18:be:dd:dd:7e:a0:dc:82:90:86:78:7b:a4:90:dc:34: 2f:e3:b7:d0:db:5d:d3:24:df:85:d3:3a:77:ce:8d:55:88:dd: e0:d4:14:51:43:52:b7:db:71:24:54:11:6d:73:16:29:db:db: a1:67:4d:6f:b7:70:a0:50:30:0c:8d:b3:01:c3:b6:37:60:76: ed:66:3f:98:13:e4:50:e4:dc:bc:63:0a:06:36:59:2c:87:db: 00:0f:69:93:1c:a5:cc:b4:b7:01:b1:8c:bf:a2:54:47:19:32: 60:1c:7f:3a:d3:d9:e8:b5:77:ed:ae:6b:9a:1b:2e:5c:06:1f: dd:b9:16:97:5f:8b:ff:86:35:49:bc:17:d2:0a:7e:52:50:4d: 5a:1f:64:5d:93:86:31:f4:d5:de:95:5b:c9:8a:bd:ee:d4:4d: c9:8a:d7:5a:02:21:3b:cc:ca:49:91:4e:73:fb:30:f0:da:e1: 4d:b0:56:8b:7c:9f:31:d5:b7:44:f9:c3:3b:af:d1:8f:15:67: d7:70:d4:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUXSt43PPI9VkYalIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM5MjQ0MzQtNjJmNC00NGQ1LWI0NDAtNDc2ZjVjNjc1 ZjNkMB4XDTI0MDMwNDAyMDAyNloXDTI0MDYwMjAxMDAyNlowLzEtMCsGA1UEAxMk MTIyOWQ1YjMtYmI1MC00NDEwLThjZGQtYTQzODQ1NGFkOGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr0BG1DQFjrySbpqTUiXwnyVHptb5Eg7yjon RdvjSfHQxPlCuhu485NOguVpx2TzbGWsVEon1o8yl5nrj+MjgqD6P54zt2F6G3Tl 79uvngh2cNJfUfZPoqSLNVIAWaWf968lf+J8tisGE7tSGn7eF/XP3GarmfnwaNRu UT7Uk5FUZzLU6yqlvjsghe0j4UH9ldCatOdRZ3yoNwceZkhDemR89SAxr1a86W+8 lY30Vm8P1gu8k1udYf7HstCQqtzbe6sIoRwLHmmFQwNw57scpsqR7YB/8U1KpaGh n/lLbZZNM81b1trmlDDOuA/hziBmeVpJFsNq3C13cXOI/Sr5QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJz1nPwscFgd9WxxAoUaAysmGnuJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzky NDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZmNWM2NzVmM2QvMWZkZTU4Y2ItMWI4Mi0z ZGVlLTkxMTktMTU2OTMzZDVmMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM5MjQ0MzQtNjJmNC00NGQ1LWI0 NDAtNDc2ZjVjNjc1ZjNkLzBjOTI0NDM0LTYyZjQtNDRkNS1iNDQwLTQ3NmY1YzY3 NWYzZC5jcmwwHwYDVR0jBBgwFoAUBa56uKMq0Of7tmKknnU5XIDc11gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzkyNDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZm NWM2NzVmM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FH6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLo2zFMIFlbO/IdOQaTmRKAN+IJBzmnKMOSB6QnwROEt56uefahBTij ztEfd7y5nqKPRRi1JXERGL7d3X6g3IKQhnh7pJDcNC/jt9DbXdMk34XTOnfOjVWI 3eDUFFFDUrfbcSRUEW1zFinb26FnTW+3cKBQMAyNswHDtjdgdu1mP5gT5FDk3Lxj CgY2WSyH2wAPaZMcpcy0twGxjL+iVEcZMmAcfzrT2ei1d+2ua5obLlwGH925Fpdf i/+GNUm8F9IKflJQTVofZF2ThjH01d6VW8mKve7UTcmK11oCITvMykmRTnP7MPDa 4U2wVot8nzHVt0T5wzuv0Y8VZ9dw1Lk= -----END CERTIFICATE-----Generated at Fri Mar 29 06:26:30 2024 by rpki-client on console-ams.rpki-client.org