$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa File: b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa (raw, json) Hash identifier: c6sb5qg+5xR8YbddYqbW9mYCZQ6mKbQ6uc9WXz5zVuY= Subject key identifier: 02:5F:47:23:95:D7:51:0F:35:CE:A1:92:43:01:4E:60:D3:D9:0C:DC Certificate issuer: /CN=afac962a-1647-4571-99e5-a23db5fd79d7 Certificate serial: 010D0C9F43285845410D4CFFB65AEDA6B4B51700 Authority key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa Signing time: Tue 19 Mar 2024 01:00:24 +0000 ROA not before: Tue 19 Mar 2024 01:00:24 +0000 ROA not after: Mon 17 Jun 2024 01:00:24 +0000 asID: 395700 IP address blocks: 198.137.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:41:0d:4c:ff:b6:5a:ed:a6:b4:b5:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afac962a-1647-4571-99e5-a23db5fd79d7 Validity Not Before: Mar 19 01:00:24 2024 GMT Not After : Jun 17 01:00:24 2024 GMT Subject: CN=47457898-1320-4491-8efd-3346c72b1807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:33:c6:49:24:3d:7a:15:8f:18:af:31:7a:87: 13:9d:10:64:70:ce:f5:36:c4:a4:e7:77:87:56:ed: c9:58:0d:21:ec:0a:a0:bc:87:f8:f6:69:a6:f4:69: 9e:d4:8c:66:b1:12:12:51:71:81:43:b2:51:8f:d5: a6:af:1f:fa:ca:38:3a:c4:06:b5:a9:24:98:db:e8: 41:61:c7:f3:96:0d:f5:75:ee:bf:3c:38:16:fd:05: 52:76:6e:24:56:08:2c:a5:12:95:4a:5f:d1:4d:c2: ed:17:7a:a8:0c:66:69:4c:ff:f0:25:f1:9c:c1:b0: a1:d1:df:08:ce:0d:0f:4b:44:d6:77:9a:c6:fb:f8: a5:f0:ef:48:f9:7a:8c:c6:78:58:ca:47:6c:73:0d: 0e:59:a7:12:a5:d7:14:76:60:5f:b4:34:12:90:17: 26:d2:38:00:8c:cc:c0:eb:4c:2e:c4:f1:67:23:96: c1:09:3f:77:ba:ba:b9:86:c4:1f:4a:9f:a8:f4:05: 5e:f0:d0:ab:c3:15:e2:7b:5e:dd:ac:40:cb:33:c0: a9:41:65:1d:42:ba:e8:b1:75:b2:52:b2:ae:98:f5: 31:3e:07:d4:ed:08:08:5d:9b:d2:58:c1:6f:96:24: 62:79:9b:84:b0:08:82:0e:1b:4f:9b:58:ed:95:c2: fc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5F:47:23:95:D7:51:0F:35:CE:A1:92:43:01:4E:60:D3:D9:0C:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl X509v3 Authority Key Identifier: keyid:D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer sbgp-ipAddrBlock: critical IPv4: 198.137.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:75:69:1f:7b:3b:32:b7:bc:ed:be:ef:50:a4:51:89:dd:d2: 63:25:1c:a7:8c:ad:a3:57:0f:ce:a8:2f:43:9b:27:f1:62:20: 42:00:9a:d7:4b:e2:99:e9:b4:5b:bd:56:3a:95:b5:1a:b6:62: b1:6e:40:ab:91:23:7b:21:b5:4b:63:1a:d8:de:12:b6:ec:bd: c7:d5:ce:e3:81:a0:24:a6:94:c4:dc:ba:ce:9a:e1:45:ba:0f: dd:1a:8e:cb:97:9f:0c:29:05:82:99:89:dd:70:1e:05:ae:f5: 6e:83:53:31:64:82:b4:19:2a:05:37:dd:a5:70:37:ae:6a:34: 2b:b7:06:08:a3:47:8d:dc:30:16:b9:2f:13:6a:7a:04:81:94: 38:bb:9e:8a:2f:43:b0:c0:ef:19:ba:d2:86:16:96:6a:1d:3d: 94:bf:6b:18:d1:16:e6:64:a3:a1:8f:2a:89:09:13:1d:6a:39: ac:e1:c7:65:44:66:eb:18:0b:5d:ae:e4:1c:9f:59:fe:9b:c6: 4c:96:1d:d0:35:01:88:46:7a:a0:1f:5a:0f:02:28:e5:0a:48: 74:7a:23:8d:18:72:b2:8e:c2:e7:35:f4:3b:aa:cb:6f:05:fc: 29:d6:9e:82:18:fb:62:4a:55:ec:e8:f6:af:d4:69:75:08:21: cd:3c:5c:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVBDUz/tlrtprS1FwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhYzk2MmEtMTY0Ny00NTcxLTk5ZTUtYTIzZGI1ZmQ3 OWQ3MB4XDTI0MDMxOTAxMDAyNFoXDTI0MDYxNzAxMDAyNFowLzEtMCsGA1UEAxMk NDc0NTc4OTgtMTMyMC00NDkxLThlZmQtMzM0NmM3MmIxODA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zPGSSQ9ehWPGK8xeocTnRBkcM71NsSk53eH Vu3JWA0h7AqgvIf49mmm9Gme1IxmsRISUXGBQ7JRj9Wmrx/6yjg6xAa1qSSY2+hB Ycfzlg31de6/PDgW/QVSdm4kVggspRKVSl/RTcLtF3qoDGZpTP/wJfGcwbCh0d8I zg0PS0TWd5rG+/il8O9I+XqMxnhYykdscw0OWacSpdcUdmBftDQSkBcm0jgAjMzA 60wuxPFnI5bBCT93urq5hsQfSp+o9AVe8NCrwxXie17drEDLM8CpQWUdQrrosXWy UrKumPUxPgfU7QgIXZvSWMFvliRieZuEsAiCDhtPm1jtlcL8RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJfRyOV11EPNc6hkkMBTmDT2QzcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFj OTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVmZDc5ZDcvYjM5M2QyZTEtZGZjNy0z OTU1LWJhODMtZTZjM2UwYjZiNzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhYzk2MmEtMTY0Ny00NTcxLTk5 ZTUtYTIzZGI1ZmQ3OWQ3L2FmYWM5NjJhLTE2NDctNDU3MS05OWU1LWEyM2RiNWZk NzlkNy5jcmwwHwYDVR0jBBgwFoAU18c9WZSKdZn1WEgubbPNfLkb8i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNk YjVmZDc5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxonwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC91aR97OzK3vO2+71CkUYnd0mMlHKeMraNXD86oL0ObJ/FiIEIAmtdL 4pnptFu9VjqVtRq2YrFuQKuRI3shtUtjGtjeErbsvcfVzuOBoCSmlMTcus6a4UW6 D90ajsuXnwwpBYKZid1wHgWu9W6DUzFkgrQZKgU33aVwN65qNCu3BgijR43cMBa5 LxNqegSBlDi7noovQ7DA7xm60oYWlmodPZS/axjRFuZko6GPKokJEx1qOazhx2VE ZusYC12u5ByfWf6bxkyWHdA1AYhGeqAfWg8CKOUKSHR6I40YcrKOwuc19Duqy28F /CnWnoIY+2JKVezo9q/UaXUIIc08XPw= -----END CERTIFICATE-----Generated at Fri May 17 02:02:37 2024 by rpki-client on console-ams.rpki-client.org