$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae/bc2f3a3b-3d1a-3dd9-81bd-aec04c7d5937.roa File: bc2f3a3b-3d1a-3dd9-81bd-aec04c7d5937.roa (raw, json) Hash identifier: wAvZttqlJRrFq1jKWfMqMRUTfI5IS9SmQM5brguz4Ms= Subject key identifier: 21:46:2B:1E:AE:51:AD:DC:F9:38:3D:44:CC:05:C1:6B:83:F3:7C:0D Certificate issuer: /CN=8cd8b5a8-2c0e-4d74-ac62-73293f8780ae Certificate serial: 010D0C9F4328584515E590C336F5395F804AE900 Authority key identifier: FB:1D:9E:DB:74:4B:13:B7:D6:F5:66:25:0D:85:09:12:8D:22:70:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae/bc2f3a3b-3d1a-3dd9-81bd-aec04c7d5937.roa Signing time: Sun 03 Mar 2024 14:00:31 +0000 ROA not before: Sun 03 Mar 2024 14:00:31 +0000 ROA not after: Sat 01 Jun 2024 13:00:31 +0000 asID: 14660 IP address blocks: 192.0.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:15:e5:90:c3:36:f5:39:5f:80:4a:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cd8b5a8-2c0e-4d74-ac62-73293f8780ae Validity Not Before: Mar 3 14:00:31 2024 GMT Not After : Jun 1 13:00:31 2024 GMT Subject: CN=3591c08f-3920-4438-83a9-75ed7ee30f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:55:b8:d4:4a:b9:3b:85:93:e6:7c:c9:7c:f3: a9:99:a9:4c:26:14:d3:19:7b:4f:4a:57:b3:01:a9: bd:3a:bb:78:c9:a4:14:a4:fa:d8:db:ab:aa:ca:4d: 17:3b:6c:f4:e6:f7:3d:87:69:23:9d:39:5c:24:11: a6:48:3c:29:68:f5:2b:97:a3:0c:c8:b8:e1:07:4d: ea:e2:56:2e:44:0e:b4:2c:80:ec:3e:f8:a3:8b:a9: d8:a5:2b:3a:b8:1a:2a:3c:8c:e2:31:ff:4f:4a:5e: 66:4c:88:74:fc:71:67:5c:b9:cb:e9:75:38:61:f6: 78:0d:03:05:cf:8f:ea:8c:8b:2d:f4:92:03:2b:22: 8a:c3:46:d8:d8:d5:72:00:2a:13:89:00:01:06:a9: 31:12:5b:61:8d:90:b8:7a:b1:58:7d:5c:eb:69:ed: bd:a4:b4:22:ab:d7:d1:cb:68:0c:ea:eb:e4:85:b7: f2:9b:9e:92:b7:2e:e4:b2:cf:3f:55:76:14:1c:5a: 05:cc:f8:54:32:f7:06:4a:1c:c8:6a:b6:25:7e:5d: e3:b7:f9:f4:72:33:15:83:6f:f8:5e:a2:27:87:11: 64:2a:3e:3d:ab:89:10:e3:3b:b2:97:16:30:59:65: 00:11:e6:54:87:c4:7b:85:43:18:44:45:54:85:1c: 8d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:46:2B:1E:AE:51:AD:DC:F9:38:3D:44:CC:05:C1:6B:83:F3:7C:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae/bc2f3a3b-3d1a-3dd9-81bd-aec04c7d5937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae.crl X509v3 Authority Key Identifier: keyid:FB:1D:9E:DB:74:4B:13:B7:D6:F5:66:25:0D:85:09:12:8D:22:70:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae.cer sbgp-ipAddrBlock: critical IPv4: 192.0.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:2a:15:12:47:e5:bf:27:4c:88:be:46:17:3b:66:6d:2a:fb: 3a:8d:d5:8b:b9:d0:8f:8e:4f:f8:60:35:d8:98:35:66:a6:02: a9:96:27:ec:58:e2:0a:7e:02:fb:18:15:fe:6f:f7:12:c7:7a: bd:d7:d2:67:e8:45:fc:22:48:ef:14:78:c0:88:71:f3:71:2f: 0b:e3:38:08:fe:2f:ab:75:f2:39:bd:65:30:84:b6:4b:5e:2f: e8:c0:9a:83:86:02:89:e9:04:84:62:4d:37:c1:73:fe:05:c7: b7:b6:e1:19:31:cf:8a:65:09:71:ad:a5:0e:b5:dd:bb:4e:66: 5f:5a:74:40:93:84:ff:eb:57:bc:ce:50:41:04:a1:06:ca:38: e7:90:4b:25:51:48:d1:ec:9e:d6:2a:e3:ed:e0:0a:63:de:dc: d8:38:4e:f4:05:53:f0:d5:62:94:3e:62:44:28:9b:6a:ca:d9: 7e:07:9c:95:f2:53:37:c0:33:af:06:10:77:51:90:ee:52:95: 63:c7:fe:eb:2e:66:e0:4b:b6:59:fc:c3:06:4e:0b:8f:8c:c9: 82:ff:f1:81:6f:8e:29:15:66:6a:27:bd:3b:3d:2b:ef:34:ce: f6:4f:dd:76:2d:24:b5:63:80:3f:0a:85:97:23:e5:80:0f:c4: ed:8a:cc:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUV5ZDDNvU5X4BK6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNkOGI1YTgtMmMwZS00ZDc0LWFjNjItNzMyOTNmODc4 MGFlMB4XDTI0MDMwMzE0MDAzMVoXDTI0MDYwMTEzMDAzMVowLzEtMCsGA1UEAxMk MzU5MWMwOGYtMzkyMC00NDM4LTgzYTktNzVlZDdlZTMwZjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVW41Eq5O4WT5nzJfPOpmalMJhTTGXtPSlez Aam9Ort4yaQUpPrY26uqyk0XO2z05vc9h2kjnTlcJBGmSDwpaPUrl6MMyLjhB03q 4lYuRA60LIDsPviji6nYpSs6uBoqPIziMf9PSl5mTIh0/HFnXLnL6XU4YfZ4DQMF z4/qjIst9JIDKyKKw0bY2NVyACoTiQABBqkxElthjZC4erFYfVzrae29pLQiq9fR y2gM6uvkhbfym56Sty7kss8/VXYUHFoFzPhUMvcGShzIarYlfl3jt/n0cjMVg2/4 XqInhxFkKj49q4kQ4zuylxYwWWUAEeZUh8R7hUMYREVUhRyNDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFGKx6uUa3c+Tg9RMwFwWuD83wNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84Y2Q4 YjVhOC0yYzBlLTRkNzQtYWM2Mi03MzI5M2Y4NzgwYWUvYmMyZjNhM2ItM2QxYS0z ZGQ5LTgxYmQtYWVjMDRjN2Q1OTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGNkOGI1YTgtMmMwZS00ZDc0LWFj NjItNzMyOTNmODc4MGFlLzhjZDhiNWE4LTJjMGUtNGQ3NC1hYzYyLTczMjkzZjg3 ODBhZS5jcmwwHwYDVR0jBBgwFoAU+x2e23RLE7fW9WYlDYUJEo0icDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84Y2Q4YjVhOC0yYzBlLTRkNzQtYWM2Mi03MzI5 M2Y4NzgwYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAADMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoqFRJH5b8nTIi+Rhc7Zm0q+zqN1Yu50I+OT/hgNdiYNWamAqmWJ+xY 4gp+AvsYFf5v9xLHer3X0mfoRfwiSO8UeMCIcfNxLwvjOAj+L6t18jm9ZTCEtkte L+jAmoOGAonpBIRiTTfBc/4Fx7e24Rkxz4plCXGtpQ613btOZl9adECThP/rV7zO UEEEoQbKOOeQSyVRSNHsntYq4+3gCmPe3Ng4TvQFU/DVYpQ+YkQom2rK2X4HnJXy UzfAM68GEHdRkO5SlWPH/usuZuBLtln8wwZOC4+MyYL/8YFvjikVZmonvTs9K+80 zvZP3XYtJLVjgD8KhZcj5YAPxO2KzGY= -----END CERTIFICATE-----Generated at Fri May 17 02:02:33 2024 by rpki-client on console-ams.rpki-client.org