$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/863dcff2-38a8-3c63-aaa0-3c613db0eb2a.roa File: 863dcff2-38a8-3c63-aaa0-3c613db0eb2a.roa (raw, json) Hash identifier: 5F1e0jBDktX0Ga2ymXAzsYHnfQIzx0ExfCjaYlbuKyU= Subject key identifier: E5:84:A9:ED:D8:A9:9B:2B:D0:42:53:E9:0B:2F:DD:82:5C:6B:11:9D Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285845C5A8EE570445296286F64500 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/863dcff2-38a8-3c63-aaa0-3c613db0eb2a.roa Signing time: Sun 05 May 2024 13:00:34 +0000 ROA not before: Sun 05 May 2024 13:00:34 +0000 ROA not after: Sat 03 Aug 2024 13:00:34 +0000 asID: 394161 IP address blocks: 8.45.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c5:a8:ee:57:04:45:29:62:86:f6:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 5 13:00:34 2024 GMT Not After : Aug 3 13:00:34 2024 GMT Subject: CN=f26f41fd-cb57-478d-8c4f-f11bb1e58471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cb:1a:c8:69:f9:0d:6e:7b:f9:81:10:b4:f3: 6b:f1:4b:7d:5c:f0:6a:a4:2e:9f:f0:4d:ad:d3:b5: dc:b2:27:79:ec:b9:01:35:39:7f:cf:c3:9a:4b:96: 0c:c4:84:ce:da:56:4b:0e:9d:35:83:2f:97:c2:ae: b5:ff:6e:e3:0d:d5:61:cd:3f:42:ef:0c:8d:39:2d: 34:a6:a9:cb:c6:b7:d5:97:72:20:37:e0:1d:d9:59: f0:6d:a7:2e:57:df:b4:83:6b:5c:c7:df:35:30:b4: 17:64:92:6e:62:23:b6:00:e6:8e:fb:72:95:11:b4: 3d:1b:e0:c9:0f:3f:67:d3:b3:15:d5:e6:39:e6:ca: e4:72:74:f4:3f:ff:fc:cf:a8:03:42:3e:77:c7:08: 76:22:ba:f5:d0:56:81:68:1b:ac:ec:21:e0:60:08: 6d:ca:4a:03:39:a6:39:d5:66:cf:3a:cb:50:06:78: 17:f9:97:33:e4:05:99:e9:60:fa:d3:9a:ba:87:77: 42:34:07:46:88:17:67:fa:72:d2:a7:6d:20:3d:8a: e3:ee:33:bf:dc:8d:f2:a0:dc:df:d4:48:75:3b:37: 40:ab:c5:54:d1:f2:40:28:99:63:b0:70:50:d5:3a: 2d:e0:a3:c8:e9:64:cc:4a:80:8b:20:aa:59:73:0c: 60:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:84:A9:ED:D8:A9:9B:2B:D0:42:53:E9:0B:2F:DD:82:5C:6B:11:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/863dcff2-38a8-3c63-aaa0-3c613db0eb2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.45.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:17:d2:40:2f:a4:bc:51:ca:08:6a:27:d3:6e:02:0b:9b:a1: 7a:7f:70:f6:81:c6:bd:5e:c3:b9:fa:7a:14:14:6c:29:63:83: a6:11:2c:dc:30:6e:28:8c:5b:87:87:9c:9e:64:1d:d8:50:d5: 2e:9f:23:1f:39:9e:a2:bc:e2:58:2d:25:52:c9:7e:3e:62:c4: 84:f5:90:11:ef:80:75:26:5c:fc:61:41:a0:e8:98:38:6f:83: ae:e8:65:9d:e5:b6:b5:f3:5e:ed:4d:00:35:45:bf:6d:05:75: 9a:c8:28:26:f6:fa:1a:84:5c:ca:f5:02:51:ad:53:a1:05:0a: 62:3d:11:16:c2:a8:d5:6c:70:20:04:33:49:2f:06:74:ec:3c: 51:bd:1b:32:fe:1b:1a:b5:ef:ee:0f:15:2c:4f:ec:58:f5:a0: 5e:0a:98:94:33:ed:12:11:ce:c4:56:60:5b:d3:97:5b:58:9f: 46:d4:38:6e:d9:a0:9b:c8:24:80:f9:76:f6:72:2a:ee:91:c1: 88:95:44:0c:65:df:35:27:41:ce:81:97:96:81:ab:06:af:48: 74:5e:19:fa:63:f3:8e:1a:50:38:37:5b:5f:dd:fe:dd:32:cb: 06:73:33:d5:f3:a3:4d:54:56:39:66:2f:28:41:98:93:a9:00: d9:12:32:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXFqO5XBEUpYob2RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MDUwNTEzMDAzNFoXDTI0MDgwMzEzMDAzNFowLzEtMCsGA1UEAxMk ZjI2ZjQxZmQtY2I1Ny00NzhkLThjNGYtZjExYmIxZTU4NDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMsayGn5DW57+YEQtPNr8Ut9XPBqpC6f8E2t 07Xcsid57LkBNTl/z8OaS5YMxITO2lZLDp01gy+Xwq61/27jDdVhzT9C7wyNOS00 pqnLxrfVl3IgN+Ad2VnwbacuV9+0g2tcx981MLQXZJJuYiO2AOaO+3KVEbQ9G+DJ Dz9n07MV1eY55srkcnT0P//8z6gDQj53xwh2Irr10FaBaBus7CHgYAhtykoDOaY5 1WbPOstQBngX+Zcz5AWZ6WD605q6h3dCNAdGiBdn+nLSp20gPYrj7jO/3I3yoNzf 1Eh1OzdAq8VU0fJAKJljsHBQ1Tot4KPI6WTMSoCLIKpZcwxgNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWEqe3YqZsr0EJT6Qsv3YJcaxGdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvODYzZGNmZjItMzhhOC0z YzYzLWFhYTAtM2M2MTNkYjBlYjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACC18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIX0kAvpLxRyghqJ9NuAguboXp/cPaBxr1ew7n6ehQUbCljg6YRLNww biiMW4eHnJ5kHdhQ1S6fIx85nqK84lgtJVLJfj5ixIT1kBHvgHUmXPxhQaDomDhv g67oZZ3ltrXzXu1NADVFv20FdZrIKCb2+hqEXMr1AlGtU6EFCmI9ERbCqNVscCAE M0kvBnTsPFG9GzL+Gxq17+4PFSxP7Fj1oF4KmJQz7RIRzsRWYFvTl1tYn0bUOG7Z oJvIJID5dvZyKu6RwYiVRAxl3zUnQc6Bl5aBqwavSHReGfpj844aUDg3W1/d/t0y ywZzM9Xzo01UVjlmLyhBmJOpANkSMlk= -----END CERTIFICATE-----Generated at Mon May 6 14:41:27 2024 by rpki-client on console-fra.rpki-client.org