$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/bfb03a9d-6724-3257-b89f-a663facf63ac.roa File: bfb03a9d-6724-3257-b89f-a663facf63ac.roa (raw, json) Hash identifier: l+TX/oHDn9bDEPiXRlN+KnXwKAReX0OHFmhypOm8I+Q= Subject key identifier: B9:20:61:47:0E:C5:8E:C3:2D:DC:05:E0:1A:2F:C2:AF:03:07:C5:1A Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Certificate serial: 010D0C9F432858453D517031A5038BC7DC711D00 Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/bfb03a9d-6724-3257-b89f-a663facf63ac.roa Signing time: Sun 17 Mar 2024 16:54:28 +0000 ROA not before: Sun 17 Mar 2024 16:54:28 +0000 ROA not after: Sat 15 Jun 2024 16:54:28 +0000 asID: 50304 IP address blocks: 172.84.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:3d:51:70:31:a5:03:8b:c7:dc:71:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Validity Not Before: Mar 17 16:54:28 2024 GMT Not After : Jun 15 16:54:28 2024 GMT Subject: CN=bae8fd8f-f3f9-45e1-be57-e9fe951875c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fb:8f:b0:72:2a:c9:49:15:fb:cb:a9:21:e5: a2:a7:55:b5:27:af:f9:66:ad:67:21:1d:ea:89:a2: 33:0c:cc:69:19:3c:3b:1e:58:6c:d4:29:a6:1b:62: 87:2b:f6:eb:d4:3c:17:f6:fb:fd:37:00:ef:f4:89: a8:4e:73:c8:53:df:57:7e:6c:22:f8:17:af:1f:15: 02:34:b5:57:a6:69:e9:96:ad:56:e4:8d:60:93:e5: 56:92:be:b0:7b:d6:a8:a0:e2:48:78:47:a4:53:59: 9f:83:aa:de:e3:25:f6:72:86:72:15:d0:b4:bc:ff: ab:3c:5a:20:93:df:2f:18:25:79:6e:dd:28:85:a7: 85:78:b7:ca:25:7d:48:99:e8:ee:10:16:9f:89:34: bf:53:ab:72:5f:06:66:0a:d7:db:c5:ea:a0:31:ba: 11:0a:b7:db:af:4e:6b:32:21:5f:75:a2:df:41:23: 15:ca:99:36:93:ba:1c:57:a4:89:2b:65:d4:e9:ed: 25:9d:58:50:00:02:27:07:d3:5e:8a:cd:5f:71:7b: c7:23:a8:eb:11:76:28:c6:cd:6d:28:78:26:e7:9d: 11:0b:6e:f3:98:ed:2c:a9:9a:2e:25:15:df:04:22: 6b:f2:09:6b:d2:99:8e:05:14:f1:e6:bc:28:bc:dd: d6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:20:61:47:0E:C5:8E:C3:2D:DC:05:E0:1A:2F:C2:AF:03:07:C5:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/bfb03a9d-6724-3257-b89f-a663facf63ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl X509v3 Authority Key Identifier: keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer sbgp-ipAddrBlock: critical IPv4: 172.84.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:77:1a:30:37:29:85:b9:a7:7b:5c:c6:8b:ba:7e:a4:2d:4e: 36:51:d2:55:ef:d6:f6:7e:45:a7:a2:25:e5:e3:57:ac:24:f5: 00:b4:fc:54:b7:7b:0e:db:4d:da:bb:d8:98:a3:3c:9b:57:93: f5:ba:23:55:78:b9:d4:ba:1a:5d:15:93:bb:fe:23:34:36:b7: ea:13:64:e1:21:bf:4d:60:cb:f2:42:ad:f8:a1:64:e3:65:6e: d2:63:64:3e:8e:d1:3b:d9:2b:d0:08:4e:98:24:e4:ba:a4:2c: 30:75:30:47:43:e1:0b:0c:11:82:29:29:8a:20:f8:9c:76:15: 28:7b:89:4a:f0:eb:0e:d1:bc:10:da:42:99:e4:d5:10:93:ad: eb:63:9f:93:87:95:1b:09:72:af:53:89:9d:07:25:75:3a:67: 93:6d:8d:b9:86:eb:fb:6c:4e:4e:c5:42:71:e4:34:52:cd:99: fa:a5:2e:1c:08:1b:e2:0a:e7:93:44:97:3b:4c:ac:95:b1:27: 2f:14:e6:e4:93:2a:eb:9a:35:6d:04:36:f0:51:61:a9:e1:41: c3:85:75:14:3c:a6:a0:d9:67:d1:52:e2:aa:a4:6c:81:2b:57: b4:38:68:ab:e3:43:74:b0:aa:97:52:01:1c:01:55:df:cc:c1: 58:ce:31:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU9UXAxpQOLx9xxHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw ZDcwMB4XDTI0MDMxNzE2NTQyOFoXDTI0MDYxNTE2NTQyOFowLzEtMCsGA1UEAxMk YmFlOGZkOGYtZjNmOS00NWUxLWJlNTctZTlmZTk1MTg3NWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifuPsHIqyUkV+8upIeWip1W1J6/5Zq1nIR3q iaIzDMxpGTw7Hlhs1CmmG2KHK/br1DwX9vv9NwDv9ImoTnPIU99Xfmwi+BevHxUC NLVXpmnplq1W5I1gk+VWkr6we9aooOJIeEekU1mfg6re4yX2coZyFdC0vP+rPFog k98vGCV5bt0ohaeFeLfKJX1ImejuEBafiTS/U6tyXwZmCtfbxeqgMboRCrfbr05r MiFfdaLfQSMVypk2k7ocV6SJK2XU6e0lnVhQAAInB9Neis1fcXvHI6jrEXYoxs1t KHgm550RC27zmO0sqZouJRXfBCJr8glr0pmOBRTx5rwovN3W+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkgYUcOxY7DLdwF4Bovwq8DB8UaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0 OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvYmZiMDNhOWQtNjcyNC0z MjU3LWI4OWYtYTY2M2ZhY2Y2M2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1 MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrFS2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZ3GjA3KYW5p3tcxou6fqQtTjZR0lXv1vZ+RaeiJeXjV6wk9QC0/FS3 ew7bTdq72JijPJtXk/W6I1V4udS6Gl0Vk7v+IzQ2t+oTZOEhv01gy/JCrfihZONl btJjZD6O0TvZK9AITpgk5LqkLDB1MEdD4QsMEYIpKYog+Jx2FSh7iUrw6w7RvBDa Qpnk1RCTretjn5OHlRsJcq9TiZ0HJXU6Z5NtjbmG6/tsTk7FQnHkNFLNmfqlLhwI G+IK55NElztMrJWxJy8U5uSTKuuaNW0ENvBRYanhQcOFdRQ8pqDZZ9FS4qqkbIEr V7Q4aKvjQ3SwqpdSARwBVd/MwVjOMRc= -----END CERTIFICATE-----Generated at Sat May 4 14:46:07 2024 by rpki-client on console-ams.rpki-client.org