$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/644ba320-53cb-3343-a8c8-84fea857ab0e.roa File: 644ba320-53cb-3343-a8c8-84fea857ab0e.roa (raw, json) Hash identifier: IpIY89ZRCFcv8siG0sc20Fo+sHGmUPL/aAn8Ssh2lMM= Subject key identifier: DC:DD:C6:F4:EF:FA:E5:23:14:76:E0:16:86:DD:0D:61:BC:E1:F1:0D Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285845C5A8EE4490010D6BB48436B0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/644ba320-53cb-3343-a8c8-84fea857ab0e.roa Signing time: Sun 05 May 2024 13:00:34 +0000 ROA not before: Sun 05 May 2024 13:00:34 +0000 ROA not after: Sat 03 Aug 2024 13:00:34 +0000 asID: 394161 IP address blocks: 8.21.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c5:a8:ee:44:90:01:0d:6b:b4:84:36:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 5 13:00:34 2024 GMT Not After : Aug 3 13:00:34 2024 GMT Subject: CN=9903d0a8-2333-410d-a411-83f8a987ed57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c0:ce:a0:59:a4:da:43:ed:cc:dd:78:4e:b5: 93:52:f0:19:79:31:ef:99:84:85:d7:44:06:e2:53: b8:cb:1e:c6:c7:55:c4:9c:5a:44:46:67:01:29:e9: 0e:cc:74:6b:f8:6e:3b:4b:9b:75:0c:09:28:04:68: f5:92:40:b0:ec:61:8a:26:94:ea:6c:e7:23:61:b1: ee:cd:3c:55:ac:77:d4:60:47:d2:c2:d3:29:fb:32: 4b:5b:ce:4f:45:01:a1:80:79:b5:bf:fa:86:26:3f: cf:b2:4f:c5:41:be:a1:24:a4:ef:16:94:c4:63:87: 2b:2c:bd:a8:ec:d9:60:98:d4:3a:34:fe:cf:d8:a7: e4:89:97:96:b4:19:87:cd:8a:16:f0:b0:69:90:1c: ef:e4:75:83:9e:62:b2:f6:d8:03:59:18:f7:b7:66: 4a:ea:fb:1b:87:06:5e:0f:b0:67:0e:d4:4a:70:0e: 82:ed:7c:c5:ea:dd:06:8b:d7:f7:0e:ff:11:da:46: 06:c6:f5:b7:fe:d2:bf:86:d1:43:8a:97:53:8a:14: af:6d:dd:ac:61:2e:eb:46:fa:ff:c1:d5:2a:61:b1: c9:22:84:a6:c4:20:1c:d4:14:49:d1:2d:05:dd:b0: 1c:4f:cc:6a:f8:59:9d:02:e7:26:d5:43:41:1a:03: 9b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DD:C6:F4:EF:FA:E5:23:14:76:E0:16:86:DD:0D:61:BC:E1:F1:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/644ba320-53cb-3343-a8c8-84fea857ab0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.21.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:00:41:8d:20:49:e2:42:ab:bd:d7:aa:f4:7f:fe:c7:1f:de: c9:31:f0:7d:c5:43:99:0e:93:8e:25:3d:80:2b:37:97:fc:2c: ed:25:c4:00:55:d7:bd:6f:8c:e3:6b:ff:76:d5:6c:86:24:88: 90:bd:a8:2d:83:31:4a:d4:1d:66:17:9f:ad:af:fb:19:33:dd: d2:0e:4e:98:16:f9:26:2b:de:17:a6:03:4b:bb:67:00:95:09: c7:d5:8a:9c:1e:de:a5:63:b6:27:43:ce:dd:35:51:65:44:26: e5:56:30:55:48:69:a7:59:9a:d0:d7:25:cd:0e:84:f9:4d:5a: 34:9d:75:b2:f2:5a:8a:61:25:c9:77:14:8e:83:5e:e9:34:2a: 2b:56:fc:4b:a7:f7:17:f4:91:39:b4:0b:cf:13:36:b6:3e:1c: 27:b1:9a:f0:ec:01:dd:0c:95:2f:c2:0d:c1:91:b7:df:05:23: c5:ce:87:13:e9:b4:55:83:9d:bd:7e:2a:6d:c5:36:80:37:3c: 34:35:20:38:c7:3d:83:ee:30:93:c8:eb:f2:a3:50:da:85:32: cf:61:5b:28:cd:c2:8d:73:9c:cd:f5:ed:a5:43:ff:a9:c1:40: b6:5d:b6:42:1d:11:fd:c3:9a:d8:94:28:34:86:e5:3d:48:d1: 8a:1b:6f:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXFqO5EkAENa7SENrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MDUwNTEzMDAzNFoXDTI0MDgwMzEzMDAzNFowLzEtMCsGA1UEAxMk OTkwM2QwYTgtMjMzMy00MTBkLWE0MTEtODNmOGE5ODdlZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8DOoFmk2kPtzN14TrWTUvAZeTHvmYSF10QG 4lO4yx7Gx1XEnFpERmcBKekOzHRr+G47S5t1DAkoBGj1kkCw7GGKJpTqbOcjYbHu zTxVrHfUYEfSwtMp+zJLW85PRQGhgHm1v/qGJj/Psk/FQb6hJKTvFpTEY4crLL2o 7NlgmNQ6NP7P2KfkiZeWtBmHzYoW8LBpkBzv5HWDnmKy9tgDWRj3t2ZK6vsbhwZe D7BnDtRKcA6C7XzF6t0Gi9f3Dv8R2kYGxvW3/tK/htFDipdTihSvbd2sYS7rRvr/ wdUqYbHJIoSmxCAc1BRJ0S0F3bAcT8xq+FmdAucm1UNBGgOb0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzdxvTv+uUjFHbgFobdDWG84fENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNjQ0YmEzMjAtNTNjYi0z MzQzLWE4YzgtODRmZWE4NTdhYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBUOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUAQY0gSeJCq73XqvR//scf3skx8H3FQ5kOk44lPYArN5f8LO0lxABV 171vjONr/3bVbIYkiJC9qC2DMUrUHWYXn62v+xkz3dIOTpgW+SYr3hemA0u7ZwCV CcfVipwe3qVjtidDzt01UWVEJuVWMFVIaadZmtDXJc0OhPlNWjSddbLyWophJcl3 FI6DXuk0KitW/Eun9xf0kTm0C88TNrY+HCexmvDsAd0MlS/CDcGRt98FI8XOhxPp tFWDnb1+Km3FNoA3PDQ1IDjHPYPuMJPI6/KjUNqFMs9hWyjNwo1znM317aVD/6nB QLZdtkIdEf3DmtiUKDSG5T1I0Yobb+A= -----END CERTIFICATE-----Generated at Mon May 6 12:37:37 2024 by rpki-client on console-ams.rpki-client.org