$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a68150d5-4385-3ac6-a10e-362c2d66a738.roa File: a68150d5-4385-3ac6-a10e-362c2d66a738.roa (raw, json) Hash identifier: eQUeGIvfv2wO0kWN0qo8XWQv2ELdVoax1ZARYxRdA1g= Subject key identifier: 30:D8:51:C5:A0:3E:B4:62:F8:C0:BE:70:96:DE:16:03:0A:11:4B:22 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285841E42AA0840C590493BCFF7300 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a68150d5-4385-3ac6-a10e-362c2d66a738.roa Signing time: Mon 15 May 2023 16:08:10 +0000 ROA not before: Mon 15 May 2023 16:08:10 +0000 ROA not after: Tue 13 Jun 2023 12:33:47 +0000 asID: 20473 IP address blocks: 8.9.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 May 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:2a:a0:84:0c:59:04:93:bc:ff:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 15 16:08:10 2023 GMT Not After : Jun 13 12:33:47 2023 GMT Subject: CN=4aceb656-636d-4020-bb53-e9e6fce0aa40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c4:32:d5:d1:eb:55:1e:68:d2:26:e0:66:25: d0:59:66:e9:ce:ce:3a:8f:31:ed:44:7b:8a:2e:b3: 47:cc:f1:4f:bc:2d:3c:0e:42:6a:39:1e:87:f4:81: 0a:b9:8d:56:e6:77:ef:06:2c:5f:c0:93:11:a2:13: 0c:04:47:89:58:e3:3e:d9:e8:2d:8f:36:44:45:1f: 5e:c1:6d:88:63:8b:0b:e4:f9:2b:a1:9a:fb:56:32: 9c:2d:2d:08:ce:31:bd:4d:a1:f1:79:bc:ac:53:d7: c1:43:30:8a:28:62:b6:32:3b:1f:51:fe:53:9d:a1: ef:aa:05:54:87:f3:f6:00:c6:3c:f7:e0:da:8a:65: 4e:90:8c:1a:b8:84:ac:01:02:45:33:fd:29:57:a5: fd:2a:56:92:74:5b:75:8a:e8:23:23:c6:a5:92:b2: e7:5f:80:59:9e:3a:ba:6e:b0:7b:90:b7:e8:c0:e5: 48:2d:ab:89:cf:39:c9:d4:18:e7:a4:af:5a:01:76: 35:44:af:8c:26:3e:5a:a5:96:4f:5a:69:ed:5c:96: 71:69:d7:9e:b4:0e:f5:71:ef:a3:46:e8:8f:4d:28: a2:b3:aa:22:c5:f2:e2:a9:bb:66:07:fe:8f:a6:08: f6:da:19:5d:65:d3:c7:d0:1b:de:eb:06:5f:10:cd: cf:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D8:51:C5:A0:3E:B4:62:F8:C0:BE:70:96:DE:16:03:0A:11:4B:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a68150d5-4385-3ac6-a10e-362c2d66a738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.9.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:e1:82:4b:d7:f6:cd:e1:54:91:96:02:5d:e6:7b:8c:7a:eb: 1c:bb:42:54:7d:62:63:7f:c4:11:b6:3e:0f:ee:a3:cc:bc:9e: 59:78:6a:6f:38:60:91:e3:2a:22:82:95:cd:72:2e:31:c7:e3: 9f:85:74:15:80:a4:05:4d:0e:48:6c:3e:49:52:3f:cf:97:a9: 08:51:00:dc:07:77:e8:6f:35:98:7e:9a:e3:68:18:a0:6c:cb: 6f:11:cd:a0:e9:21:70:d8:99:26:f5:7a:5d:97:33:00:50:f1: cc:77:5b:28:d0:2e:70:98:3d:64:0a:03:25:33:cd:27:f6:8e: 1c:26:ad:60:50:9f:a9:9d:f4:e7:ac:27:73:74:6c:36:94:a1: 4c:08:44:a8:b6:d5:36:5f:8b:39:18:ac:4b:16:71:28:cc:72: 9b:99:d1:29:c6:20:38:a2:83:03:12:e0:10:84:41:7c:0f:b4: 02:6b:21:8a:1d:1b:bc:f2:a8:24:e2:2d:03:a0:92:6c:0e:ca: 1a:c5:71:8e:66:5d:5a:c9:8c:d8:37:e4:3f:bb:ce:1b:98:55: fa:86:8f:18:53:0b:70:af:f4:4f:61:bb:49:8d:2d:b1:5f:9a: 2c:a3:1e:b2:36:3a:d3:e4:ed:a6:e3:46:89:a9:a9:e7:bd:23: b1:20:2d:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkKqCEDFkEk7z/cwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTIzMDUxNTE2MDgxMFoXDTIzMDYxMzEyMzM0N1owLzEtMCsGA1UEAxMk NGFjZWI2NTYtNjM2ZC00MDIwLWJiNTMtZTllNmZjZTBhYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMQy1dHrVR5o0ibgZiXQWWbpzs46jzHtRHuK LrNHzPFPvC08DkJqOR6H9IEKuY1W5nfvBixfwJMRohMMBEeJWOM+2egtjzZERR9e wW2IY4sL5PkroZr7VjKcLS0IzjG9TaHxebysU9fBQzCKKGK2MjsfUf5TnaHvqgVU h/P2AMY89+DaimVOkIwauISsAQJFM/0pV6X9KlaSdFt1iugjI8alkrLnX4BZnjq6 brB7kLfowOVILauJzznJ1BjnpK9aAXY1RK+MJj5apZZPWmntXJZxadeetA71ce+j RuiPTSiis6oixfLiqbtmB/6Ppgj22hldZdPH0Bve6wZfEM3PAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDYUcWgPrRi+MC+cJbeFgMKEUsiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYTY4MTUwZDUtNDM4NS0z YWM2LWExMGUtMzYyYzJkNjZhNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXhgkvX9s3hVJGWAl3me4x66xy7QlR9YmN/xBG2Pg/uo8y8nll4am84 YJHjKiKClc1yLjHH45+FdBWApAVNDkhsPklSP8+XqQhRANwHd+hvNZh+muNoGKBs y28RzaDpIXDYmSb1el2XMwBQ8cx3WyjQLnCYPWQKAyUzzSf2jhwmrWBQn6md9Oes J3N0bDaUoUwIRKi21TZfizkYrEsWcSjMcpuZ0SnGIDiigwMS4BCEQXwPtAJrIYod G7zyqCTiLQOgkmwOyhrFcY5mXVrJjNg35D+7zhuYVfqGjxhTC3Cv9E9hu0mNLbFf miyjHrI2OtPk7abjRompqee9I7EgLeg= -----END CERTIFICATE-----Generated at Mon May 15 16:46:14 2023 by rpki-client on console-fra.rpki-client.org