$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa File: e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa (raw, json) Hash identifier: 78BmmWwKVueumGvHLLct5ykaRpEcPBqVyA6EjJlnIWY= Subject key identifier: F5:23:C9:02:AB:E6:06:82:F0:FB:20:8D:E1:9A:A0:52:55:A2:27:C9 Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e Certificate serial: 010D0C9F432858450D8587421B7C42125C507320 Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa Signing time: Thu 29 Feb 2024 14:00:31 +0000 ROA not before: Thu 29 Feb 2024 14:00:31 +0000 ROA not after: Wed 29 May 2024 13:00:31 +0000 asID: 21777 IP address blocks: 206.168.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:0d:85:87:42:1b:7c:42:12:5c:50:73:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e Validity Not Before: Feb 29 14:00:31 2024 GMT Not After : May 29 13:00:31 2024 GMT Subject: CN=ea5213d5-2af8-4276-b6c8-d6ff749fe66e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bf:be:f2:fa:51:ec:e5:4c:87:dd:6f:b9:67: 61:b7:57:13:34:17:01:44:fe:8e:a1:89:ef:aa:eb: d8:0e:ff:76:66:5f:18:d9:c7:29:8a:91:5b:41:4f: 9d:17:01:88:41:be:05:05:1a:48:ff:d5:43:aa:70: e4:9e:6b:c5:66:be:35:1f:44:3a:69:ad:ce:c5:1a: 4e:38:0e:80:4b:78:08:29:f7:39:8f:9a:98:12:8c: c3:e9:76:be:96:66:71:31:44:6d:79:f2:9c:f6:93: 80:2d:5c:8d:f7:25:e0:47:ed:11:f3:55:55:a4:22: 1d:fe:e9:82:b0:73:c6:7c:2a:fa:9c:10:5e:52:c4: 78:f1:19:a9:9c:cf:49:8b:0f:8e:09:5c:b7:00:e2: 84:25:e6:fb:0d:cc:b2:09:d0:0d:59:e2:48:9d:4a: 88:07:63:4e:cf:37:84:bf:89:ab:f7:fc:24:6d:50: f5:98:b1:52:30:d0:57:16:5f:ac:16:21:e6:6a:f0: ca:ec:69:da:fa:8a:e5:0f:82:7c:62:68:66:77:68: d0:a4:ec:45:81:11:28:99:5b:78:92:f7:f1:62:bf: 1b:49:94:16:a8:f5:6a:e9:c7:b6:7c:f7:c1:8c:1b: 77:61:0d:08:4c:81:86:ba:06:9d:4c:9e:d8:18:aa: 17:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:23:C9:02:AB:E6:06:82:F0:FB:20:8D:E1:9A:A0:52:55:A2:27:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl X509v3 Authority Key Identifier: keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer sbgp-ipAddrBlock: critical IPv4: 206.168.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:14:88:1c:82:1c:21:a2:a1:62:57:21:6f:60:d1:55:d0:56: a1:fb:67:7f:ae:6a:eb:3d:b4:74:e7:3d:3e:25:14:1b:1c:07: b6:60:51:17:db:37:65:bf:c8:18:52:4c:9a:69:54:74:09:b5: eb:f6:2b:dd:30:4b:63:7c:d9:96:b4:42:c5:d1:c7:e4:06:b7: d2:84:c3:1e:b1:d5:56:db:20:d7:d2:2a:0f:c4:3b:8f:c1:9d: 33:58:0c:fe:3e:78:f8:15:50:a4:f3:d5:33:ed:60:c9:9e:2b: 71:d7:c4:27:6b:7c:da:c9:98:bf:7b:d1:34:6b:60:25:ea:a9: f1:cc:aa:90:8a:b5:a0:33:33:d9:4b:3f:fd:a4:26:33:8a:ce: 7d:7f:1b:d7:56:f4:4e:8c:fa:15:d4:94:a2:4b:f1:ab:e2:9b: 5c:fb:f3:f2:08:0c:75:c6:eb:26:ee:59:a3:67:de:0f:20:ff: 91:39:5a:bd:8f:a3:f1:d2:2f:93:9b:4f:41:5d:10:7f:f8:c4: 2b:eb:8a:d8:d3:87:9c:e3:7b:5a:a5:f4:44:8d:5a:13:fc:dc: 45:c7:99:f4:8c:b3:17:57:95:02:2c:a5:6b:8d:e4:ca:4f:da: c4:d3:1e:bf:8b:8c:77:d5:0b:d7:b1:6e:d7:0b:19:08:6b:c6: 85:29:31:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUNhYdCG3xCElxQcyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNWFmMjAtODM4NS00NGQ0LTgxNWYtYmI4MzQ5N2Q0 YTBlMB4XDTI0MDIyOTE0MDAzMVoXDTI0MDUyOTEzMDAzMVowLzEtMCsGA1UEAxMk ZWE1MjEzZDUtMmFmOC00Mjc2LWI2YzgtZDZmZjc0OWZlNjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7++8vpR7OVMh91vuWdht1cTNBcBRP6OoYnv quvYDv92Zl8Y2ccpipFbQU+dFwGIQb4FBRpI/9VDqnDknmvFZr41H0Q6aa3OxRpO OA6AS3gIKfc5j5qYEozD6Xa+lmZxMURtefKc9pOALVyN9yXgR+0R81VVpCId/umC sHPGfCr6nBBeUsR48RmpnM9Jiw+OCVy3AOKEJeb7DcyyCdANWeJInUqIB2NOzzeE v4mr9/wkbVD1mLFSMNBXFl+sFiHmavDK7Gna+orlD4J8Ymhmd2jQpOxFgREomVt4 kvfxYr8bSZQWqPVq6ce2fPfBjBt3YQ0ITIGGugadTJ7YGKoXPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUjyQKr5gaC8PsgjeGaoFJVoifJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1 YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgzNDk3ZDRhMGUvZTY4ZDdiZDUtOWQzMC0z MGIxLWE3NmItOThlZjlhZWFmOGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFkNWFmMjAtODM4NS00NGQ0LTgx NWYtYmI4MzQ5N2Q0YTBlL2JhZDVhZjIwLTgzODUtNDRkNC04MTVmLWJiODM0OTdk NGEwZS5jcmwwHwYDVR0jBBgwFoAUEapw8wRQo6yCOXMUtq3WNdHdOZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgz NDk3ZDRhMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqhhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcUiByCHCGioWJXIW9g0VXQVqH7Z3+uaus9tHTnPT4lFBscB7ZgURfb N2W/yBhSTJppVHQJtev2K90wS2N82Za0QsXRx+QGt9KEwx6x1VbbINfSKg/EO4/B nTNYDP4+ePgVUKTz1TPtYMmeK3HXxCdrfNrJmL970TRrYCXqqfHMqpCKtaAzM9lL P/2kJjOKzn1/G9dW9E6M+hXUlKJL8avim1z78/IIDHXG6ybuWaNn3g8g/5E5Wr2P o/HSL5ObT0FdEH/4xCvritjTh5zje1ql9ESNWhP83EXHmfSMsxdXlQIspWuN5MpP 2sTTHr+LjHfVC9exbtcLGQhrxoUpMfU= -----END CERTIFICATE-----Generated at Fri May 17 20:57:24 2024 by rpki-client on console-fra.rpki-client.org