$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/34a15df3-ae78-372e-8160-e71d118b8d2e.roa File: 34a15df3-ae78-372e-8160-e71d118b8d2e.roa (raw, json) Hash identifier: O03gEdG93UuTFOpHy0I+GZ3RZiLmlVCAgS/tozqyra4= Subject key identifier: D0:B2:8B:41:D2:DF:5E:4E:B1:6D:4A:1D:F2:46:0B:E9:9C:05:97:73 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F432858456822E8C465D786B3CBA03D00 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/34a15df3-ae78-372e-8160-e71d118b8d2e.roa Signing time: Tue 02 Apr 2024 01:00:26 +0000 ROA not before: Tue 02 Apr 2024 01:00:26 +0000 ROA not after: Mon 01 Jul 2024 01:00:26 +0000 asID: 3356 IP address blocks: 209.224.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:68:22:e8:c4:65:d7:86:b3:cb:a0:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Apr 2 01:00:26 2024 GMT Not After : Jul 1 01:00:26 2024 GMT Subject: CN=be1c05d5-a0d5-4a50-8bb7-527369efd0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bd:22:8d:87:5a:e3:63:fd:40:49:4a:77:cc: ea:c7:0c:71:1a:5b:4c:41:40:9e:b5:ee:93:af:67: 83:24:72:56:08:c2:79:9e:d0:57:55:84:71:9f:46: bf:68:53:2d:29:97:ce:98:81:7e:11:02:88:d4:3f: a3:dd:9e:85:c5:a8:6b:30:ba:31:f8:b3:7e:98:1f: 10:61:92:8d:c8:9a:a1:2d:93:9a:ef:d9:b7:d1:c9: e0:a0:ff:db:6c:21:56:aa:2c:bd:a6:94:29:9d:5c: f5:60:d1:2e:b7:dc:07:cb:7f:a1:07:95:55:69:66: 64:fe:c3:84:98:aa:22:d7:a6:05:13:90:28:29:b0: e2:b8:d6:10:51:e2:a8:77:4c:9c:af:86:26:46:2c: eb:37:7c:af:0f:49:58:c4:2f:a5:aa:57:42:8f:ea: bf:72:95:fa:fe:44:17:72:f0:4e:78:15:6e:7b:74: ef:a4:42:32:ce:5a:d6:69:91:6e:91:b4:63:05:00: 19:38:67:ae:14:7a:7f:ca:a7:62:3f:5f:e7:b9:cc: 1b:24:24:2d:2f:5c:e8:21:fb:8a:91:0a:85:a0:83: d2:23:a1:74:44:63:bc:ff:66:c7:0f:01:26:56:8d: b3:71:5b:69:12:65:7b:b0:f0:bd:6a:12:36:ed:ff: 27:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B2:8B:41:D2:DF:5E:4E:B1:6D:4A:1D:F2:46:0B:E9:9C:05:97:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/34a15df3-ae78-372e-8160-e71d118b8d2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 209.224.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:7e:68:68:d9:cd:8d:e0:fe:4f:62:8a:8c:d0:8a:f7:58:0f: 48:56:fb:b7:c8:97:cd:7e:cd:c4:5e:1e:b9:93:44:e3:dd:03: 84:50:97:f5:0d:d9:da:98:92:b2:c5:04:a0:17:7a:b4:af:9d: ad:1a:ed:86:13:af:b5:52:07:97:de:ba:ec:c6:8f:64:ff:e0: d3:33:f5:fd:db:8f:dd:dd:3d:2f:23:f1:45:84:46:2c:71:28: 9e:f1:75:71:00:22:fb:6c:74:71:47:31:58:5d:12:78:8c:66: 6d:10:29:97:65:00:15:e1:f3:2b:c5:c7:b9:3a:9b:3d:ed:2e: a8:a1:64:41:ac:c1:56:9f:44:ef:3a:75:6c:10:8e:f1:b9:59: d1:a5:bf:62:63:fb:9a:73:2d:55:b0:41:c0:d2:f0:a4:ea:f9: ad:72:1e:4a:9c:a2:90:34:a3:8b:d7:dd:d5:8c:f9:64:08:ff: f4:5f:3c:e4:fa:a7:a9:01:b5:4f:16:e2:35:e8:3b:38:78:ff: b1:95:11:6c:d9:cc:fa:13:30:ad:34:02:b6:42:d1:4b:1d:66: 92:81:6f:f2:02:0f:95:ac:14:d0:84:73:9c:80:32:6f:f0:06: 62:4f:52:9a:f9:41:9a:f9:4e:3e:30:de:d6:9b:de:90:c4:11: 13:17:71:22 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEVoIujEZdeGs8ugPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MDQwMjAxMDAyNloXDTI0MDcwMTAxMDAyNlowLzEtMCsGA1UEAxMk YmUxYzA1ZDUtYTBkNS00YTUwLThiYjctNTI3MzY5ZWZkMGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL0ijYda42P9QElKd8zqxwxxGltMQUCete6T r2eDJHJWCMJ5ntBXVYRxn0a/aFMtKZfOmIF+EQKI1D+j3Z6FxahrMLox+LN+mB8Q YZKNyJqhLZOa79m30cngoP/bbCFWqiy9ppQpnVz1YNEut9wHy3+hB5VVaWZk/sOE mKoi16YFE5AoKbDiuNYQUeKod0ycr4YmRizrN3yvD0lYxC+lqldCj+q/cpX6/kQX cvBOeBVue3TvpEIyzlrWaZFukbRjBQAZOGeuFHp/yqdiP1/nucwbJCQtL1zoIfuK kQqFoIPSI6F0RGO8/2bHDwEmVo2zcVtpEmV7sPC9ahI27f8ndQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNCyi0HS315OsW1KHfJGC+mcBZdzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzRhMTVkZjMtYWU3OC0z NzJlLTgxNjAtZTcxZDExOGI4ZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0eAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAEH5oaNnNjeD+T2KKjNCK91gPSFb7t8iXzX7NxF4euZNE490DhFCX9Q3Z 2piSssUEoBd6tK+drRrthhOvtVIHl9667MaPZP/g0zP1/duP3d09LyPxRYRGLHEo nvF1cQAi+2x0cUcxWF0SeIxmbRApl2UAFeHzK8XHuTqbPe0uqKFkQazBVp9E7zp1 bBCO8blZ0aW/YmP7mnMtVbBBwNLwpOr5rXIeSpyikDSji9fd1Yz5ZAj/9F885Pqn qQG1TxbiNeg7OHj/sZURbNnM+hMwrTQCtkLRSx1mkoFv8gIPlawU0IRznIAyb/AG Yk9SmvlBmvlOPjDe1pvekMQRExdxIg== -----END CERTIFICATE-----Generated at Thu May 2 14:42:26 2024 by rpki-client on console-ams.rpki-client.org