$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d5c5e304-938b-3145-b72c-bc916e50e0c5.roa File: d5c5e304-938b-3145-b72c-bc916e50e0c5.roa (raw, json) Hash identifier: rdKfJIF9oFLlIY5dJoUu+Cpqj0KHLOOzYDptJvtVnCY= Subject key identifier: 50:7E:54:F8:2D:C4:10:35:F1:F3:EA:2D:96:8C:D0:9D:C5:A4:97:92 Certificate issuer: /CN=8d499d1b-9023-4410-8b4a-909ca6a083df Certificate serial: 010D0C9F432858456CA48446162F80C30580CC09 Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d5c5e304-938b-3145-b72c-bc916e50e0c5.roa Signing time: Wed 03 Apr 2024 15:44:51 +0000 ROA not before: Wed 03 Apr 2024 15:44:51 +0000 ROA not after: Tue 02 Jul 2024 15:44:51 +0000 asID: 397666 IP address blocks: 167.253.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6c:a4:84:46:16:2f:80:c3:05:80:cc:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df Validity Not Before: Apr 3 15:44:51 2024 GMT Not After : Jul 2 15:44:51 2024 GMT Subject: CN=1a84805a-fc53-46f7-9635-790eeff664d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b6:31:63:fd:14:2f:57:a9:29:1a:3f:c2:a7: 3d:37:62:ab:de:89:a6:75:34:e8:a4:3c:ae:01:04: cf:46:d1:b3:2c:17:19:bc:7e:3c:fe:aa:7f:15:93: 51:bc:37:4d:ef:87:5c:12:8d:c3:52:db:28:cf:6c: 19:dc:a7:9f:9f:7a:5c:7d:7d:cc:db:f8:2a:49:40: 8a:df:aa:f1:50:65:09:c0:1d:ed:dd:ac:e8:99:23: c0:50:0a:02:eb:3a:5d:07:e7:d8:1f:5f:6e:72:39: 01:52:62:20:f3:23:a0:1a:2b:27:3c:28:57:4e:31: 7f:96:15:60:b4:8e:10:fb:45:fc:28:62:96:61:f8: bc:37:7e:34:5a:d0:bc:e3:9a:80:68:e4:9d:d4:01: 29:5d:1e:37:b0:d4:bb:9d:a2:64:c7:4e:17:64:75: 43:ec:dd:66:74:7d:33:80:14:40:dd:d0:86:08:c4: e6:a2:db:71:8f:c9:c2:f9:52:60:b1:06:d2:f2:21: 07:f4:be:be:de:02:75:6d:12:0a:3a:43:cf:b5:08: 8f:35:e5:79:f4:6f:cf:12:7a:36:03:1e:4e:00:64: 43:9e:72:b2:03:4e:2d:d9:95:e5:88:0a:59:53:ab: 42:28:71:77:bf:f6:cf:12:6b:d1:12:99:72:8a:ae: 66:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7E:54:F8:2D:C4:10:35:F1:F3:EA:2D:96:8C:D0:9D:C5:A4:97:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d5c5e304-938b-3145-b72c-bc916e50e0c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl X509v3 Authority Key Identifier: keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer sbgp-ipAddrBlock: critical IPv4: 167.253.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:04:38:e6:50:a7:fa:6e:30:64:5b:dd:d3:41:b7:85:12:a6: 33:00:0c:da:ac:5f:00:92:d3:7e:22:70:66:76:f3:98:81:e8: f4:c4:0a:9a:42:20:8e:02:a9:6a:03:3a:ba:97:37:45:db:8f: 9e:26:2b:a3:0c:cd:23:65:83:29:1e:a5:34:d3:ba:01:76:c5: af:45:00:1f:a3:89:4d:a4:55:0f:6c:68:a4:94:52:f2:48:3e: 2f:ee:0e:8c:ae:8e:58:94:91:82:86:4c:22:25:0b:74:9d:f2: a6:b6:67:4c:f6:be:d8:05:25:8e:2b:e8:f6:24:45:4d:0f:ae: 90:53:54:29:d6:22:c2:77:67:27:91:8d:4f:26:1d:14:47:dd: 34:ea:95:09:64:5a:58:f8:8f:33:6d:6b:21:34:22:78:4a:87: 25:de:7a:ee:c6:21:de:79:1b:0d:31:a8:fd:5f:aa:ae:2d:5d: be:3b:7e:f9:b2:40:33:8d:43:c7:54:2f:73:05:2c:7e:47:70: e5:b6:dd:40:d7:64:f1:68:f0:66:4b:39:3e:82:2d:18:76:60: 04:8f:53:d3:c3:37:7a:d7:f4:00:9b:59:9a:61:1c:a9:99:52: 01:e3:47:ab:2a:fb:f5:9d:3b:b2:40:80:74:b6:03:09:b0:38: a3:5d:45:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVspIRGFi+AwwWAzAkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ0OTlkMWItOTAyMy00NDEwLThiNGEtOTA5Y2E2YTA4 M2RmMB4XDTI0MDQwMzE1NDQ1MVoXDTI0MDcwMjE1NDQ1MVowLzEtMCsGA1UEAxMk MWE4NDgwNWEtZmM1My00NmY3LTk2MzUtNzkwZWVmZjY2NGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbYxY/0UL1epKRo/wqc9N2Kr3ommdTTopDyu AQTPRtGzLBcZvH48/qp/FZNRvDdN74dcEo3DUtsoz2wZ3Kefn3pcfX3M2/gqSUCK 36rxUGUJwB3t3azomSPAUAoC6zpdB+fYH19ucjkBUmIg8yOgGisnPChXTjF/lhVg tI4Q+0X8KGKWYfi8N340WtC845qAaOSd1AEpXR43sNS7naJkx04XZHVD7N1mdH0z gBRA3dCGCMTmottxj8nC+VJgsQbS8iEH9L6+3gJ1bRIKOkPPtQiPNeV59G/PEno2 Ax5OAGRDnnKyA04t2ZXliApZU6tCKHF3v/bPEmvREplyiq5mUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFB+VPgtxBA18fPqLZaM0J3FpJeSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5 OWQxYi05MDIzLTQ0MTAtOGI0YS05MDljYTZhMDgzZGYvZDVjNWUzMDQtOTM4Yi0z MTQ1LWI3MmMtYmM5MTZlNTBlMGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGQ0OTlkMWItOTAyMy00NDEwLThi NGEtOTA5Y2E2YTA4M2RmLzhkNDk5ZDFiLTkwMjMtNDQxMC04YjRhLTkwOWNhNmEw ODNkZi5jcmwwHwYDVR0jBBgwFoAUsY1jfe1i4KPgZDojmWSSbSG5P9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5OWQxYi05MDIzLTQ0MTAtOGI0YS05MDlj YTZhMDgzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAEOOZQp/puMGRb3dNBt4USpjMADNqsXwCS034icGZ285iB6PTECppC II4CqWoDOrqXN0Xbj54mK6MMzSNlgykepTTTugF2xa9FAB+jiU2kVQ9saKSUUvJI Pi/uDoyujliUkYKGTCIlC3Sd8qa2Z0z2vtgFJY4r6PYkRU0PrpBTVCnWIsJ3ZyeR jU8mHRRH3TTqlQlkWlj4jzNtayE0InhKhyXeeu7GId55Gw0xqP1fqq4tXb47fvmy QDONQ8dUL3MFLH5HcOW23UDXZPFo8GZLOT6CLRh2YASPU9PDN3rX9ACbWZphHKmZ UgHjR6sq+/WdO7JAgHS2AwmwOKNdRVM= -----END CERTIFICATE-----Generated at Thu May 9 02:25:16 2024 by rpki-client on console-ams.rpki-client.org