$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/222d817b-9938-3162-8df4-25a3ea8129d4.roa File: 222d817b-9938-3162-8df4-25a3ea8129d4.roa (raw, json) Hash identifier: +CfC9XLV4LWaRbDiu03Uhfk9em8DzBT5LTCiY1IAYA4= Subject key identifier: 9A:C6:7D:97:31:15:92:34:93:A9:02:33:43:DC:57:A6:0A:34:91:63 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285844F5CAACA0D0F7C18D29C39E80 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/222d817b-9938-3162-8df4-25a3ea8129d4.roa Signing time: Wed 21 Feb 2024 02:00:25 +0000 ROA not before: Wed 21 Feb 2024 02:00:25 +0000 ROA not after: Tue 21 May 2024 01:00:25 +0000 asID: 209 IP address blocks: 8.17.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f5:ca:ac:a0:d0:f7:c1:8d:29:c3:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Feb 21 02:00:25 2024 GMT Not After : May 21 01:00:25 2024 GMT Subject: CN=2c23dcd2-961e-416e-a2e8-d13c3edfdbbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e1:43:cf:00:6d:aa:a0:25:bc:da:7d:1a:5d: 7a:31:3b:e2:d0:9e:21:c7:fd:4d:64:5d:4f:78:a4: 01:be:38:c1:d4:cd:9b:88:a7:cd:33:5b:d3:68:c9: cb:0c:c0:39:10:e9:1c:51:35:37:3b:d6:eb:9f:94: aa:39:51:cb:cb:be:4a:56:17:f4:86:23:51:94:ad: 3d:58:27:e9:d0:d2:f9:1c:34:a3:b5:28:c5:e2:a1: b2:08:56:6e:0a:b2:b5:7f:37:5d:82:9a:85:db:2f: 0c:be:f2:14:e4:44:67:6d:e8:ba:d4:d0:76:9f:1b: c6:bd:62:1c:dd:08:e4:51:d9:51:1a:b6:fd:6f:de: 4a:5f:f3:c6:ed:da:7f:32:97:eb:29:68:1f:ba:72: 0f:a2:e8:13:3c:83:41:2c:eb:38:1a:9f:35:64:1e: 2f:d5:a8:21:b5:6c:88:d5:2a:d9:3b:d2:5a:d7:b2: 55:8e:99:c9:9a:8e:7c:b6:ff:49:bf:eb:07:48:9b: d1:bf:29:e8:88:5a:b2:1d:31:59:18:9d:3f:47:1c: f3:5f:5a:1f:5d:29:0a:f2:7f:e4:de:90:4c:c6:3b: 93:26:99:7c:1b:75:37:35:9a:4a:dd:d6:9b:83:1c: 2f:6d:dd:d1:ad:46:cd:93:d1:d5:1c:bf:eb:e8:9e: 54:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C6:7D:97:31:15:92:34:93:A9:02:33:43:DC:57:A6:0A:34:91:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/222d817b-9938-3162-8df4-25a3ea8129d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.17.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:14:aa:6b:da:fc:a0:1c:67:42:1a:63:c4:d8:ce:2a:d1:14: bc:07:15:72:eb:35:48:73:72:bb:5c:91:b1:84:58:3b:d3:2d: 99:81:91:97:17:d3:d2:9a:94:9f:7e:9c:04:37:61:64:f6:63: 30:ab:1d:66:2f:93:c2:51:10:a8:d2:23:57:96:c4:86:f0:5a: c0:fe:18:1b:a2:af:4b:c3:09:a7:32:18:97:71:1b:5c:11:61: 63:c2:6f:ec:82:da:5f:bc:33:d9:1b:d0:98:90:f3:0e:d5:17: cf:f4:b1:33:46:ae:35:01:04:8f:6a:47:aa:f0:21:90:51:f6: f5:e3:12:15:80:6b:db:9b:8c:39:68:54:61:d8:44:54:c3:2a: 4e:8a:2c:1a:47:7c:2d:e3:85:8d:d1:4f:ff:2e:1f:a7:33:0c: d0:9b:a8:5e:f0:da:22:db:65:0e:a8:bb:43:67:8f:ad:a9:59: 8a:c6:4d:67:65:a7:35:31:e1:b3:9a:e0:70:1b:18:6b:8f:4c: 3e:67:8c:66:3e:67:94:5c:ac:12:2a:fb:01:35:72:15:7e:80: 18:77:71:fc:26:21:ac:6c:06:90:57:93:a6:d1:38:76:6b:85: 82:02:25:c7:6c:8a:de:4d:04:e0:00:b1:22:de:55:c5:3a:53: 72:0f:59:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET1yqyg0PfBjSnDnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MDIyMTAyMDAyNVoXDTI0MDUyMTAxMDAyNVowLzEtMCsGA1UEAxMk MmMyM2RjZDItOTYxZS00MTZlLWEyZTgtZDEzYzNlZGZkYmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeFDzwBtqqAlvNp9Gl16MTvi0J4hx/1NZF1P eKQBvjjB1M2biKfNM1vTaMnLDMA5EOkcUTU3O9brn5SqOVHLy75KVhf0hiNRlK09 WCfp0NL5HDSjtSjF4qGyCFZuCrK1fzddgpqF2y8MvvIU5ERnbei61NB2nxvGvWIc 3QjkUdlRGrb9b95KX/PG7dp/MpfrKWgfunIPougTPINBLOs4Gp81ZB4v1aghtWyI 1SrZO9Ja17JVjpnJmo58tv9Jv+sHSJvRvynoiFqyHTFZGJ0/RxzzX1ofXSkK8n/k 3pBMxjuTJpl8G3U3NZpK3dabgxwvbd3RrUbNk9HVHL/r6J5UhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrGfZcxFZI0k6kCM0PcV6YKNJFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMjIyZDgxN2ItOTkzOC0z MTYyLThkZjQtMjVhM2VhODEyOWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQUqmva/KAcZ0IaY8TYzirRFLwHFXLrNUhzcrtckbGEWDvTLZmBkZcX 09KalJ9+nAQ3YWT2YzCrHWYvk8JREKjSI1eWxIbwWsD+GBuir0vDCacyGJdxG1wR YWPCb+yC2l+8M9kb0JiQ8w7VF8/0sTNGrjUBBI9qR6rwIZBR9vXjEhWAa9ubjDlo VGHYRFTDKk6KLBpHfC3jhY3RT/8uH6czDNCbqF7w2iLbZQ6ou0Nnj62pWYrGTWdl pzUx4bOa4HAbGGuPTD5njGY+Z5RcrBIq+wE1chV+gBh3cfwmIaxsBpBXk6bROHZr hYICJcdsit5NBOAAsSLeVcU6U3IPWaA= -----END CERTIFICATE-----Generated at Mon May 6 14:41:27 2024 by rpki-client on console-fra.rpki-client.org