$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/3cf3bbd8-f13c-3210-a31f-e62a2917eab7.roa File: 3cf3bbd8-f13c-3210-a31f-e62a2917eab7.roa (raw, json) Hash identifier: BsacTR4Mr4qJf1EqUW/Ob2obRrApYoM+FvnR4abhNQI= Subject key identifier: 44:10:7E:BF:28:93:34:83:97:1A:61:19:B7:A5:05:33:CA:03:A3:41 Certificate issuer: /CN=8d499d1b-9023-4410-8b4a-909ca6a083df Certificate serial: 010D0C9F432858456CA53840633EE4547A4EA580 Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/3cf3bbd8-f13c-3210-a31f-e62a2917eab7.roa Signing time: Wed 03 Apr 2024 15:46:16 +0000 ROA not before: Wed 03 Apr 2024 15:46:16 +0000 ROA not after: Tue 02 Jul 2024 15:46:16 +0000 asID: 397666 IP address blocks: 167.253.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6c:a5:38:40:63:3e:e4:54:7a:4e:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df Validity Not Before: Apr 3 15:46:16 2024 GMT Not After : Jul 2 15:46:16 2024 GMT Subject: CN=8c4c659f-f69e-4521-a7f9-5f3eefccb4b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e0:13:f3:33:b4:3f:c1:93:eb:f3:04:34:08: b6:30:dd:51:21:dd:a9:2f:ad:06:91:ea:93:a6:eb: 05:1e:f0:94:4e:41:f1:d2:d2:34:5c:83:13:53:fd: 11:27:25:82:ea:a7:41:a4:c2:5b:95:20:ae:2d:80: 85:dc:ea:3b:f3:ab:db:de:de:ad:e6:ab:50:7b:58: 1a:28:cb:fc:ed:3d:6b:a0:af:c1:18:38:24:21:40: 51:94:f1:95:f8:d2:e4:78:8a:43:ef:bd:c3:0b:4a: a3:ed:53:65:03:c3:e6:c5:4b:df:4a:72:ed:4b:f4: 8b:ce:1d:fb:f0:ba:6e:36:30:81:4d:52:be:85:83: 50:51:d7:fb:7b:9d:63:58:7c:d1:a6:ec:da:ef:8e: 08:df:b9:c6:e0:92:2c:15:f7:49:e6:c9:b6:ef:87: 85:91:d2:e9:af:39:5b:44:7a:89:f3:f4:b4:06:a7: c1:0b:fb:64:07:ef:5c:20:58:03:ef:6c:2c:26:4c: 87:ed:71:0b:40:0f:87:bf:01:d6:41:2f:34:28:ad: ac:7e:06:71:14:76:e9:12:b0:65:1a:f9:9d:19:7b: 98:19:ad:1f:73:05:fa:cd:9d:54:c8:66:32:30:d9: 65:43:9c:3e:79:43:97:45:b7:ec:58:06:7c:a7:27: 42:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:10:7E:BF:28:93:34:83:97:1A:61:19:B7:A5:05:33:CA:03:A3:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/3cf3bbd8-f13c-3210-a31f-e62a2917eab7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl X509v3 Authority Key Identifier: keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer sbgp-ipAddrBlock: critical IPv4: 167.253.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:00:60:6c:ae:0e:46:31:e9:5d:0a:da:0a:a1:3c:5d:e8:80: cc:7c:d6:73:cb:91:e0:16:33:32:15:06:44:b6:6b:0a:5e:e8: 03:f7:3f:37:31:ea:0f:13:58:4a:17:52:27:15:a9:c1:60:8e: c6:ff:70:2e:06:65:9e:2d:de:14:45:c3:c3:b3:0d:e6:9b:53: c4:b7:41:bb:2f:82:cc:b3:93:90:ac:35:80:e4:69:01:6c:d8: 3e:af:46:39:7d:55:5f:30:da:c5:58:9d:f0:20:39:15:13:c3: 1a:bc:db:0c:a2:cd:67:a2:34:c5:cc:68:d3:13:c0:14:b1:19: b2:34:0d:df:d6:cb:13:0f:13:7f:0f:aa:dd:11:b5:20:74:87: d7:35:08:74:b8:f0:5b:ed:b5:ff:2f:dd:0c:d8:0c:48:95:29: ba:3e:f2:e1:df:17:4f:f7:e5:4e:d4:c3:01:8b:b6:b7:80:72: 31:fc:03:4d:14:8e:5b:b0:85:d3:50:5a:f3:f8:06:04:35:b4: 9d:17:ea:e5:ea:94:91:b0:18:ed:a5:d2:53:6b:76:60:a9:e8: e4:55:84:c4:9a:0a:ca:58:79:f7:98:68:6e:19:27:f9:25:5c: a2:ce:c4:3f:e9:1c:65:67:6e:c8:55:6a:11:7f:2c:6e:5a:df: 77:60:ea:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVspThAYz7kVHpOpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ0OTlkMWItOTAyMy00NDEwLThiNGEtOTA5Y2E2YTA4 M2RmMB4XDTI0MDQwMzE1NDYxNloXDTI0MDcwMjE1NDYxNlowLzEtMCsGA1UEAxMk OGM0YzY1OWYtZjY5ZS00NTIxLWE3ZjktNWYzZWVmY2NiNGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeAT8zO0P8GT6/MENAi2MN1RId2pL60GkeqT pusFHvCUTkHx0tI0XIMTU/0RJyWC6qdBpMJblSCuLYCF3Oo786vb3t6t5qtQe1ga KMv87T1roK/BGDgkIUBRlPGV+NLkeIpD773DC0qj7VNlA8PmxUvfSnLtS/SLzh37 8LpuNjCBTVK+hYNQUdf7e51jWHzRpuza744I37nG4JIsFfdJ5sm274eFkdLprzlb RHqJ8/S0BqfBC/tkB+9cIFgD72wsJkyH7XELQA+HvwHWQS80KK2sfgZxFHbpErBl GvmdGXuYGa0fcwX6zZ1UyGYyMNllQ5w+eUOXRbfsWAZ8pydCXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQQfr8okzSDlxphGbelBTPKA6NBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5 OWQxYi05MDIzLTQ0MTAtOGI0YS05MDljYTZhMDgzZGYvM2NmM2JiZDgtZjEzYy0z MjEwLWEzMWYtZTYyYTI5MTdlYWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGQ0OTlkMWItOTAyMy00NDEwLThi NGEtOTA5Y2E2YTA4M2RmLzhkNDk5ZDFiLTkwMjMtNDQxMC04YjRhLTkwOWNhNmEw ODNkZi5jcmwwHwYDVR0jBBgwFoAUsY1jfe1i4KPgZDojmWSSbSG5P9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5OWQxYi05MDIzLTQ0MTAtOGI0YS05MDlj YTZhMDgzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoAYGyuDkYx6V0K2gqhPF3ogMx81nPLkeAWMzIVBkS2awpe6AP3Pzcx 6g8TWEoXUicVqcFgjsb/cC4GZZ4t3hRFw8OzDeabU8S3Qbsvgsyzk5CsNYDkaQFs 2D6vRjl9VV8w2sVYnfAgORUTwxq82wyizWeiNMXMaNMTwBSxGbI0Dd/WyxMPE38P qt0RtSB0h9c1CHS48Fvttf8v3QzYDEiVKbo+8uHfF0/35U7UwwGLtreAcjH8A00U jluwhdNQWvP4BgQ1tJ0X6uXqlJGwGO2l0lNrdmCp6ORVhMSaCspYefeYaG4ZJ/kl XKLOxD/pHGVnbshVahF/LG5a33dg6g0= -----END CERTIFICATE-----Generated at Thu May 9 15:10:20 2024 by rpki-client on console-ams.rpki-client.org