$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3e179ec3-f36c-3890-b2e4-0ca7cf98fe41.roa File: 3e179ec3-f36c-3890-b2e4-0ca7cf98fe41.roa (raw, json) Hash identifier: QjVjznrQ8646nFuOkmFTKPq+hIOAe+lfOZEHYaiuLSM= Subject key identifier: EE:8E:5C:B3:C6:9C:5A:5E:7B:99:3B:9B:B7:82:C7:5B:6A:E8:A8:85 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584511B58D70050203BE2765B090 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3e179ec3-f36c-3890-b2e4-0ca7cf98fe41.roa Signing time: Sat 02 Mar 2024 02:00:26 +0000 ROA not before: Sat 02 Mar 2024 02:00:26 +0000 ROA not after: Fri 31 May 2024 01:00:26 +0000 asID: 25871 IP address blocks: 8.36.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:11:b5:8d:70:05:02:03:be:27:65:b0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 2 02:00:26 2024 GMT Not After : May 31 01:00:26 2024 GMT Subject: CN=ea68bd52-2fb2-46a4-b122-ad4c7bad99c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:83:dd:93:3c:23:90:e6:5f:dc:cb:ba:8a:30: 57:14:26:32:d4:bb:c9:8a:b8:1c:63:16:a1:07:1e: 11:2c:86:d8:ae:ff:5d:ab:8a:06:7d:6a:95:78:9e: b5:ef:81:05:ae:e2:3a:54:aa:8e:48:a7:a4:de:de: 08:9d:0d:b4:80:ac:ed:8a:b3:a9:25:79:4d:be:54: 3b:93:37:50:c9:3f:25:dd:6e:c6:52:0e:f9:b5:dc: ee:9d:f6:83:6a:20:00:5b:6d:84:81:d6:6d:45:50: 61:65:fc:61:94:63:87:e8:55:3f:44:2d:04:ae:1a: 0a:6c:78:2e:24:46:01:d1:d9:3c:fe:a0:1e:e1:22: c1:2b:b0:63:41:68:af:35:14:b5:c1:fc:a6:b0:c2: 9f:09:62:59:a4:ac:3a:4b:22:ce:49:47:d7:10:ed: 41:5a:06:b4:2a:58:ae:7e:e9:cb:a7:1e:ef:3a:b3: a3:87:af:bc:55:34:83:2a:c6:f1:60:c5:8e:76:32: 83:8b:7c:10:33:c0:31:af:c9:7f:0b:b2:db:a3:45: a4:56:64:1b:56:15:f3:96:f5:a1:f9:1c:fb:49:18: b3:41:62:53:64:b5:04:df:bc:55:a8:dc:0d:95:88: 08:16:f8:4e:fc:e4:63:88:5d:71:82:25:c2:d9:e0: 9f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8E:5C:B3:C6:9C:5A:5E:7B:99:3B:9B:B7:82:C7:5B:6A:E8:A8:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3e179ec3-f36c-3890-b2e4-0ca7cf98fe41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.36.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:ca:02:da:df:25:a6:8b:91:9a:6f:16:31:5b:a5:c3:fc:dc: f8:02:3e:06:47:46:5b:44:5b:94:e5:e6:88:aa:af:8d:ab:e4: cd:31:53:e4:c9:34:13:dc:8b:93:0f:52:a4:71:f6:03:86:7b: dd:33:b1:64:ef:d9:8d:3b:c9:d1:24:4c:13:25:2f:3f:64:71: 93:84:bd:a7:eb:29:6b:29:5b:a0:0f:17:cd:e4:04:de:f8:3a: 8d:63:79:f7:a4:34:44:be:f7:f7:8a:12:7b:fc:31:cf:24:4c: ac:4b:d3:81:a6:6e:7e:e0:d6:b7:75:8d:f3:08:08:41:bc:e4: 19:57:62:35:76:35:23:72:8d:49:2d:b4:29:32:15:f8:3a:c3: b7:91:cd:6d:ef:43:eb:8e:81:d6:32:cb:97:0d:28:db:4d:10: b3:25:66:7e:45:30:cc:5e:41:07:cb:5b:e6:17:33:c0:76:7d: 13:64:e5:38:fe:43:4b:5c:d1:57:2f:55:60:fe:ad:76:50:f8: 12:64:89:e9:5a:31:21:8d:24:64:72:b9:7c:3f:b5:25:88:a7: 35:40:14:ab:89:c5:ee:e5:e5:fc:ce:29:d8:19:fa:a1:8b:46: e3:54:46:29:7a:3d:d6:45:3e:70:9d:37:e6:0c:d5:95:00:f8: 27:4a:40:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEURtY1wBQIDvidlsJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MDMwMjAyMDAyNloXDTI0MDUzMTAxMDAyNlowLzEtMCsGA1UEAxMk ZWE2OGJkNTItMmZiMi00NmE0LWIxMjItYWQ0YzdiYWQ5OWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9IPdkzwjkOZf3Mu6ijBXFCYy1LvJirgcYxah Bx4RLIbYrv9dq4oGfWqVeJ6174EFruI6VKqOSKek3t4InQ20gKztirOpJXlNvlQ7 kzdQyT8l3W7GUg75tdzunfaDaiAAW22EgdZtRVBhZfxhlGOH6FU/RC0ErhoKbHgu JEYB0dk8/qAe4SLBK7BjQWivNRS1wfymsMKfCWJZpKw6SyLOSUfXEO1BWga0Kliu funLpx7vOrOjh6+8VTSDKsbxYMWOdjKDi3wQM8Axr8l/C7Lbo0WkVmQbVhXzlvWh +Rz7SRizQWJTZLUE37xVqNwNlYgIFvhO/ORjiF1xgiXC2eCfHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6OXLPGnFpee5k7m7eCx1tq6KiFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvM2UxNzllYzMtZjM2Yy0z ODkwLWIyZTQtMGNhN2NmOThmZTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCRSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHKAtrfJaaLkZpvFjFbpcP83PgCPgZHRltEW5Tl5oiqr42r5M0xU+TJ NBPci5MPUqRx9gOGe90zsWTv2Y07ydEkTBMlLz9kcZOEvafrKWspW6APF83kBN74 Oo1jefekNES+9/eKEnv8Mc8kTKxL04Gmbn7g1rd1jfMICEG85BlXYjV2NSNyjUkt tCkyFfg6w7eRzW3vQ+uOgdYyy5cNKNtNELMlZn5FMMxeQQfLW+YXM8B2fRNk5Tj+ Q0tc0VcvVWD+rXZQ+BJkielaMSGNJGRyuXw/tSWIpzVAFKuJxe7l5fzOKdgZ+qGL RuNURil6PdZFPnCdN+YM1ZUA+CdKQMY= -----END CERTIFICATE-----Generated at Tue May 7 02:02:17 2024 by rpki-client on console-ams.rpki-client.org