$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/8286479d-9721-3b8f-8c5e-4a0f33f5360a.roa File: 8286479d-9721-3b8f-8c5e-4a0f33f5360a.roa (raw, json) Hash identifier: XGw4he2FzM3wLdagB82M5dnS+3k6oXn4EIah0NXCU0U= Subject key identifier: 50:1E:A0:D9:E0:FD:69:6A:C2:6A:33:63:61:DA:83:2F:F3:39:28:C7 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F43285845CE090A516642C122D415C100 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/8286479d-9721-3b8f-8c5e-4a0f33f5360a.roa Signing time: Wed 08 May 2024 13:00:34 +0000 ROA not before: Wed 08 May 2024 13:00:34 +0000 ROA not after: Tue 06 Aug 2024 13:00:34 +0000 asID: 396253 IP address blocks: 163.120.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ce:09:0a:51:66:42:c1:22:d4:15:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: May 8 13:00:34 2024 GMT Not After : Aug 6 13:00:34 2024 GMT Subject: CN=0d2e6d26-6878-4f3a-a9cb-09d3473c4d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:74:22:54:ed:69:ca:58:bb:29:7a:21:ee:67: 4b:aa:0a:cf:72:14:af:44:51:14:e7:0c:8e:4d:f6: ce:40:bd:47:d8:7e:70:85:b0:4b:bf:0c:79:fe:85: f0:a6:c7:d2:63:6c:ff:6d:69:5f:de:b1:8d:fa:32: 32:1e:33:70:23:3b:11:c6:83:5a:eb:a4:ed:cf:e6: c3:72:92:0d:34:9d:3e:57:96:47:48:a5:32:c9:ca: c4:e8:dc:cb:5d:ed:ae:e1:81:72:f9:d9:76:db:cb: d2:10:86:c6:5c:28:dc:0c:7e:a9:03:18:5e:47:d5: f9:9d:aa:e4:82:fe:06:12:10:9e:ba:5f:65:23:d7: 8b:2d:cb:6b:4b:01:e9:b5:ed:db:d7:f5:13:58:ce: 6b:da:5e:8c:f9:2c:9e:2b:fa:ba:8d:6a:6a:d3:4b: 44:5d:11:82:5c:ad:1a:c4:78:70:6f:85:cd:63:5e: 1a:74:4a:37:d2:f6:44:02:1a:6f:e2:46:bf:d2:09: 66:fa:92:8d:41:27:84:2f:25:f4:42:94:35:90:9e: 08:e1:fd:9c:07:b2:c4:41:7e:21:e5:6d:41:21:d2: 06:f4:e9:6c:91:3a:e4:fb:22:d2:c3:a0:66:5d:e1: a9:71:86:97:4f:57:8e:a0:05:46:49:f0:f7:27:c2: 5d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1E:A0:D9:E0:FD:69:6A:C2:6A:33:63:61:DA:83:2F:F3:39:28:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/8286479d-9721-3b8f-8c5e-4a0f33f5360a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 163.120.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:bd:0a:45:a6:c2:5e:31:b1:d1:1f:cf:06:3a:44:19:67:d0: da:7a:c5:de:f9:d6:09:7e:be:59:54:6c:48:11:bf:09:d6:39: ed:b3:87:fd:d6:04:ec:5c:e1:ce:52:41:8b:d0:27:a9:3b:3d: a3:cb:2e:80:31:e1:53:30:3a:75:5d:32:dc:97:f6:02:4c:db: f1:36:32:43:cf:7c:3f:49:7d:c0:4f:db:e2:94:fb:ba:1d:f5: b9:45:04:d9:eb:0c:0f:33:ed:a8:41:41:fc:a1:2f:2d:ba:51: 82:d9:ef:92:ef:6e:dd:a6:66:71:1d:a7:92:57:aa:56:dd:d5: 91:2a:d2:90:09:10:cb:7c:74:0b:73:a5:58:db:95:38:36:e1: 57:32:31:fa:2d:0d:15:c2:56:f8:7d:99:12:e3:78:3a:40:b0: 0a:54:62:a3:9a:ad:24:29:2a:6c:cc:d7:de:78:52:f0:99:0d: e1:ea:eb:9e:fd:10:da:8b:4a:f6:c3:2d:dc:6e:2c:6d:24:da: d9:0b:a3:ad:23:a1:34:a2:e1:46:ce:fd:44:18:81:69:84:41: 80:6b:56:ef:14:b9:ff:4d:44:d4:dd:7d:28:f7:08:72:2c:28: 1a:3f:fb:fd:0f:2a:47:c8:12:77:ac:bf:b3:0a:dc:2f:ef:ad: 2f:52:b7:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXOCQpRZkLBItQVwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI0MDUwODEzMDAzNFoXDTI0MDgwNjEzMDAzNFowLzEtMCsGA1UEAxMk MGQyZTZkMjYtNjg3OC00ZjNhLWE5Y2ItMDlkMzQ3M2M0ZDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnQiVO1pyli7KXoh7mdLqgrPchSvRFEU5wyO TfbOQL1H2H5whbBLvwx5/oXwpsfSY2z/bWlf3rGN+jIyHjNwIzsRxoNa66Ttz+bD cpINNJ0+V5ZHSKUyycrE6NzLXe2u4YFy+dl228vSEIbGXCjcDH6pAxheR9X5nark gv4GEhCeul9lI9eLLctrSwHpte3b1/UTWM5r2l6M+SyeK/q6jWpq00tEXRGCXK0a xHhwb4XNY14adEo30vZEAhpv4ka/0glm+pKNQSeELyX0QpQ1kJ4I4f2cB7LEQX4h 5W1BIdIG9OlskTrk+yLSw6BmXeGpcYaXT1eOoAVGSfD3J8JdjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAeoNng/WlqwmozY2Hagy/zOSjHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvODI4NjQ3OWQtOTcyMS0z YjhmLThjNWUtNGEwZjMzZjUzNjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3hGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACO9CkWmwl4xsdEfzwY6RBln0Np6xd751gl+vllUbEgRvwnWOe2zh/3W BOxc4c5SQYvQJ6k7PaPLLoAx4VMwOnVdMtyX9gJM2/E2MkPPfD9JfcBP2+KU+7od 9blFBNnrDA8z7ahBQfyhLy26UYLZ75Lvbt2mZnEdp5JXqlbd1ZEq0pAJEMt8dAtz pVjblTg24VcyMfotDRXCVvh9mRLjeDpAsApUYqOarSQpKmzM1954UvCZDeHq6579 ENqLSvbDLdxuLG0k2tkLo60joTSi4UbO/UQYgWmEQYBrVu8Uuf9NRNTdfSj3CHIs KBo/+/0PKkfIEnesv7MK3C/vrS9St5g= -----END CERTIFICATE-----Generated at Sat May 18 13:39:42 2024 by rpki-client on console-ams.rpki-client.org