$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9771c943-4148-3f5a-bfa6-1361d78e20eb.roa File: 9771c943-4148-3f5a-bfa6-1361d78e20eb.roa (raw, json) Hash identifier: YVkulDmOotHFnEXyicCrx2NofTu9zfnQjpe1emRBZM4= Subject key identifier: 41:AA:17:58:86:33:B2:27:A3:44:5F:27:60:35:AB:CC:11:B3:04:61 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F432858450D858AC9CF2D1583BA207F00 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9771c943-4148-3f5a-bfa6-1361d78e20eb.roa Signing time: Thu 29 Feb 2024 14:00:31 +0000 ROA not before: Thu 29 Feb 2024 14:00:31 +0000 ROA not after: Wed 29 May 2024 13:00:31 +0000 asID: 209 IP address blocks: 204.167.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:0d:85:8a:c9:cf:2d:15:83:ba:20:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Feb 29 14:00:31 2024 GMT Not After : May 29 13:00:31 2024 GMT Subject: CN=5a3f855c-b653-497b-8073-586c0609dc93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d3:78:d4:d9:69:82:7d:27:17:38:70:32:06: ef:ab:f6:e2:e8:b4:5b:07:65:de:7c:5a:09:60:c4: cf:19:75:35:a6:59:8f:01:8c:c9:c4:87:b6:88:b4: de:4a:a6:6c:bb:20:b7:61:ae:c9:49:d0:88:0f:72: b8:8d:83:51:6f:21:15:de:27:81:b6:cf:eb:83:79: 58:4c:c7:e0:96:11:05:57:c6:d4:59:d8:95:1a:7f: 98:79:16:4f:ac:13:22:3c:6c:9a:9d:2c:b3:d1:bf: 78:66:dc:3d:d0:70:52:de:c9:1a:2f:8f:b0:67:22: 3c:c5:a5:af:4f:b2:dd:09:15:5d:ca:e4:3a:de:a5: a2:74:3a:12:1e:ae:2a:d2:58:a9:92:82:93:71:38: 3c:4a:4e:02:a9:bb:40:cb:8b:77:03:c4:71:2f:99: 40:51:dc:fa:34:76:43:f0:99:0a:00:0f:97:dd:0b: ac:d8:7e:1d:9a:45:a5:c2:23:26:23:10:e9:3c:13: 79:59:a3:49:ec:0e:8f:76:e6:91:20:4a:c2:89:89: 0f:b1:ac:63:0f:29:57:4e:a8:41:77:c3:4f:33:69: 12:f7:6d:1c:db:96:24:30:49:b8:37:48:a5:b0:9f: ec:9b:1a:24:5a:8b:10:a9:f8:11:88:4b:a2:81:cb: c6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AA:17:58:86:33:B2:27:A3:44:5F:27:60:35:AB:CC:11:B3:04:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9771c943-4148-3f5a-bfa6-1361d78e20eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 204.167.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:9b:66:98:ad:5e:19:58:0d:36:99:e7:d5:3f:31:b3:89:7a: 2e:92:67:5e:6d:20:72:1d:9e:c7:30:cf:61:e1:49:2f:30:6e: bc:fe:27:44:81:c9:f5:60:61:f8:02:ac:02:00:5d:6d:c3:b2: 56:26:d2:b9:24:b7:45:93:40:4b:6a:29:e6:bb:fd:cc:59:17: 41:d0:80:cc:42:5c:18:d6:c1:07:d1:12:e1:99:33:2d:23:89: 50:8f:09:1c:6d:35:39:21:68:9b:b2:37:5e:dc:29:50:b6:0a: cd:ad:3c:5e:be:31:b5:a4:c9:7e:2c:73:40:66:0f:19:08:a7: 3c:57:ee:d2:c0:ca:39:8d:f0:60:cd:6b:9b:48:3e:e7:21:ef: f8:dc:59:0a:66:17:3e:93:44:62:f3:48:3a:49:0c:f9:6f:98: 64:03:64:04:e7:6b:94:99:b0:86:90:99:6c:49:05:02:1e:cd: 5a:31:ad:06:cb:72:d1:82:c0:40:b8:5c:b2:45:43:42:28:59: 4c:04:24:be:f0:8b:0e:87:8e:ad:6b:bb:62:03:40:84:ac:29: 65:cb:77:16:a0:61:64:b1:ca:b5:1d:47:59:e0:9e:55:9b:3d: e8:8c:df:c7:89:fa:a1:07:61:b6:b1:cc:a5:45:cc:8d:3a:3d: 80:36:c9:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUNhYrJzy0Vg7ogfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MDIyOTE0MDAzMVoXDTI0MDUyOTEzMDAzMVowLzEtMCsGA1UEAxMk NWEzZjg1NWMtYjY1My00OTdiLTgwNzMtNTg2YzA2MDlkYzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNN41Nlpgn0nFzhwMgbvq/bi6LRbB2XefFoJ YMTPGXU1plmPAYzJxIe2iLTeSqZsuyC3Ya7JSdCID3K4jYNRbyEV3ieBts/rg3lY TMfglhEFV8bUWdiVGn+YeRZPrBMiPGyanSyz0b94Ztw90HBS3skaL4+wZyI8xaWv T7LdCRVdyuQ63qWidDoSHq4q0lipkoKTcTg8Sk4CqbtAy4t3A8RxL5lAUdz6NHZD 8JkKAA+X3Qus2H4dmkWlwiMmIxDpPBN5WaNJ7A6PduaRIErCiYkPsaxjDylXTqhB d8NPM2kS920c25YkMEm4N0ilsJ/smxokWosQqfgRiEuigcvGPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGqF1iGM7Ino0RfJ2A1q8wRswRhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOTc3MWM5NDMtNDE0OC0z ZjVhLWJmYTYtMTM2MWQ3OGUyMGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzKfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2bZpitXhlYDTaZ59U/MbOJei6SZ15tIHIdnscwz2HhSS8wbrz+J0SB yfVgYfgCrAIAXW3DslYm0rkkt0WTQEtqKea7/cxZF0HQgMxCXBjWwQfREuGZMy0j iVCPCRxtNTkhaJuyN17cKVC2Cs2tPF6+MbWkyX4sc0BmDxkIpzxX7tLAyjmN8GDN a5tIPuch7/jcWQpmFz6TRGLzSDpJDPlvmGQDZATna5SZsIaQmWxJBQIezVoxrQbL ctGCwEC4XLJFQ0IoWUwEJL7wiw6Hjq1ru2IDQISsKWXLdxagYWSxyrUdR1ngnlWb PeiM38eJ+qEHYbaxzKVFzI06PYA2ySk= -----END CERTIFICATE-----Generated at Mon May 6 15:06:10 2024 by rpki-client on console-ams.rpki-client.org