$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/35c067f0-3efd-3363-93e0-a8537ed06e64.roa File: 35c067f0-3efd-3363-93e0-a8537ed06e64.roa (raw, json) Hash identifier: vS5mr1gT/bM+dBN3GiEEsjEUaa+z32RmlZM+18DxFz8= Subject key identifier: D8:F6:48:CB:E5:54:34:3E:E2:8E:CE:B1:98:75:72:D4:80:E6:F0:1D Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584500F56153C7BAF185B76E1000 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/35c067f0-3efd-3363-93e0-a8537ed06e64.roa Signing time: Sun 25 Feb 2024 02:00:26 +0000 ROA not before: Sun 25 Feb 2024 02:00:26 +0000 ROA not after: Sat 25 May 2024 01:00:26 +0000 asID: 989 IP address blocks: 8.18.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:00:f5:61:53:c7:ba:f1:85:b7:6e:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Feb 25 02:00:26 2024 GMT Not After : May 25 01:00:26 2024 GMT Subject: CN=1ff5b807-0112-4dfb-bd76-090883da60f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9d:09:66:5a:21:ee:09:11:d2:aa:d9:83:1d: b8:b1:e6:97:51:16:74:ec:f4:38:6b:23:14:a5:5b: 8c:ec:c9:8b:0e:22:ab:eb:99:04:5f:6b:13:14:5f: 0b:24:61:13:28:f3:ba:76:d4:76:72:57:92:9f:32: c4:7e:17:1d:ca:f0:ce:54:e1:41:3e:96:e5:a8:74: 01:19:de:dc:08:77:a8:40:44:32:0b:2f:d1:ea:f4: 2e:aa:ba:ff:32:43:39:3b:04:b7:3f:1c:e1:d3:60: ff:03:f0:dd:55:c6:32:07:8f:ee:9b:f4:c9:af:53: f9:1c:df:fb:63:a3:a3:d6:2b:8e:a1:ee:3d:5d:f8: aa:ed:f5:d7:71:ea:7a:b1:1c:77:89:1a:da:7b:37: 6e:2b:d1:c6:b4:ef:46:e3:c2:90:56:2e:ce:be:99: da:98:6f:4f:77:d6:94:29:5d:87:f7:da:4e:ee:85: 9a:77:53:2c:89:81:92:55:c0:1e:5e:39:a9:3f:3a: 80:2b:2a:56:5e:63:e7:7b:46:92:37:58:01:8f:2b: 2c:48:dc:4c:ba:4c:d5:62:45:30:88:69:ad:ac:8f: 40:4e:9c:b0:18:5b:09:b7:5a:81:23:1c:8a:12:4d: 2d:62:26:e5:7f:70:98:55:29:7d:6e:3e:84:c0:c6: f6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F6:48:CB:E5:54:34:3E:E2:8E:CE:B1:98:75:72:D4:80:E6:F0:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/35c067f0-3efd-3363-93e0-a8537ed06e64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.18.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:81:e2:f5:0c:bf:b3:f8:e7:d9:70:57:c9:27:06:f1:5b:11: 50:22:80:f1:7b:a4:b9:ea:eb:83:82:4a:ab:58:a7:d0:56:2e: 31:96:ea:06:78:fb:4e:a4:43:74:8c:c8:9c:c6:6a:ce:89:db: 83:b1:09:ca:bd:98:32:e0:eb:4e:87:72:a9:ae:78:40:eb:ab: 24:63:70:d9:f8:77:5e:07:8f:69:14:c4:bb:f0:f8:ec:0e:d0: 65:e3:ec:a7:06:36:96:2b:0a:d2:c2:1b:85:3a:03:61:00:59: 12:9c:e9:be:f6:36:97:b3:dc:5c:e5:6f:03:19:e9:68:83:1a: 32:86:93:ea:80:54:b8:42:a5:9e:87:cf:25:77:ae:e7:d7:ec: 30:85:5c:b9:aa:54:e3:d1:0a:97:73:22:b8:a4:a4:03:6a:01: c7:2d:23:e0:1f:2f:af:29:8b:ca:18:b5:17:45:99:fa:db:c2: 39:66:ce:f8:9b:af:66:2b:6b:20:c6:56:2d:b5:45:6d:61:67: d1:f5:dd:14:be:27:f3:37:7a:9b:d0:c9:11:65:f8:bd:bb:34: b8:0a:81:fb:06:dd:98:cb:1c:70:0b:61:a4:d0:36:38:31:3b: 32:ac:bf:2f:74:48:b1:e4:a7:12:6f:c2:ae:ba:87:d3:54:25: 35:64:fc:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUA9WFTx7rxhbduEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MDIyNTAyMDAyNloXDTI0MDUyNTAxMDAyNlowLzEtMCsGA1UEAxMk MWZmNWI4MDctMDExMi00ZGZiLWJkNzYtMDkwODgzZGE2MGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ0JZloh7gkR0qrZgx24seaXURZ07PQ4ayMU pVuM7MmLDiKr65kEX2sTFF8LJGETKPO6dtR2cleSnzLEfhcdyvDOVOFBPpblqHQB Gd7cCHeoQEQyCy/R6vQuqrr/MkM5OwS3Pxzh02D/A/DdVcYyB4/um/TJr1P5HN/7 Y6Oj1iuOoe49Xfiq7fXXcep6sRx3iRraezduK9HGtO9G48KQVi7OvpnamG9Pd9aU KV2H99pO7oWad1MsiYGSVcAeXjmpPzqAKypWXmPne0aSN1gBjyssSNxMukzVYkUw iGmtrI9ATpywGFsJt1qBIxyKEk0tYiblf3CYVSl9bj6EwMb2dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNj2SMvlVDQ+4o7OsZh1ctSA5vAdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzVjMDY3ZjAtM2VmZC0z MzYzLTkzZTAtYTg1MzdlZDA2ZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBCBJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+B4vUMv7P459lwV8knBvFbEVAigPF7pLnq64OCSqtYp9BWLjGW6gZ4 +06kQ3SMyJzGas6J24OxCcq9mDLg606HcqmueEDrqyRjcNn4d14Hj2kUxLvw+OwO 0GXj7KcGNpYrCtLCG4U6A2EAWRKc6b72Npez3FzlbwMZ6WiDGjKGk+qAVLhCpZ6H zyV3rufX7DCFXLmqVOPRCpdzIrikpANqAcctI+AfL68pi8oYtRdFmfrbwjlmzvib r2YrayDGVi21RW1hZ9H13RS+J/M3epvQyRFl+L27NLgKgfsG3ZjLHHALYaTQNjgx OzKsvy90SLHkpxJvwq66h9NUJTVk/LY= -----END CERTIFICATE-----Generated at Mon May 6 14:41:27 2024 by rpki-client on console-fra.rpki-client.org