$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/8572a39e-1930-37cc-8efa-8f982f7e059e.roa File: 8572a39e-1930-37cc-8efa-8f982f7e059e.roa (raw, json) Hash identifier: ij+13w4M0boTgayCYhs4cstDCWwVBbrQsLF7c5E8Ens= Subject key identifier: DA:67:73:91:0D:A5:DB:7B:4E:EC:10:99:BA:C2:9F:FD:8E:54:8F:7F Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Certificate serial: 010D0C9F432858424E605AADC924B98EDC3A9DC0 Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/8572a39e-1930-37cc-8efa-8f982f7e059e.roa Signing time: Wed 21 Jun 2023 12:00:00 +0000 ROA not before: Wed 21 Jun 2023 12:00:00 +0000 ROA not after: Sat 09 Aug 2025 04:00:00 +0000 asID: 29016 IP address blocks: 159.182.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:4e:60:5a:ad:c9:24:b9:8e:dc:3a:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Validity Not Before: Jun 21 12:00:00 2023 GMT Not After : Aug 9 04:00:00 2025 GMT Subject: CN=266d2d64-05f8-45f6-8581-92d5a7024b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:85:fe:24:25:30:8f:37:d0:21:bd:53:5c:3c: 26:cb:2b:cf:7d:d4:a5:73:c5:82:6b:9d:a4:d0:36: f7:a8:84:65:e4:43:3c:58:27:d2:2a:19:ed:6e:b3: 15:93:4b:e3:a8:77:16:69:c1:ab:fa:7f:be:cd:e4: fa:2e:53:50:cd:76:a6:11:aa:c6:24:a6:87:20:e3: f8:11:e2:71:42:63:65:d9:c1:bd:58:b1:ca:55:64: 87:81:4a:3a:b2:cd:f1:3d:17:11:2a:cc:f2:e7:fb: 49:74:69:e6:60:6c:08:10:72:a5:01:0e:7d:f6:14: a1:84:e4:83:4d:35:19:ca:ac:d4:1a:1c:e1:e6:8c: d0:ad:4d:e8:2b:52:ca:6c:af:d4:2a:3c:78:8f:0d: e6:c6:4b:68:5a:7d:8e:59:e3:da:ee:13:e7:3a:87: e7:e9:19:24:43:88:0c:ff:b8:77:bd:c7:31:2c:cf: 23:73:b0:90:bd:eb:fc:36:6c:4a:37:92:85:4e:9a: b9:71:6e:e8:4d:3b:71:5a:ba:d0:94:5c:22:77:9e: 22:80:49:f0:35:56:ea:55:9b:c5:a0:9b:8e:f2:b6: b9:42:12:98:b8:e2:61:c3:6e:94:5c:fe:af:b8:e8: 42:ea:62:59:dd:85:a8:6b:e0:32:07:ed:ee:19:05: 05:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:67:73:91:0D:A5:DB:7B:4E:EC:10:99:BA:C2:9F:FD:8E:54:8F:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/8572a39e-1930-37cc-8efa-8f982f7e059e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl X509v3 Authority Key Identifier: keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer sbgp-ipAddrBlock: critical IPv4: 159.182.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:b3:09:e7:43:7c:16:1f:9d:ff:ec:ed:40:8d:07:8f:9f:98: 41:f7:33:03:41:c5:2e:41:6e:09:36:0d:23:e4:3a:ea:df:0e: ac:20:19:a4:6f:ff:10:95:a9:87:fb:d6:d0:e3:3d:62:72:45: 36:00:8f:e8:53:ca:39:89:b2:ee:08:0f:a1:0a:cc:3f:46:79: 46:f4:79:cc:64:01:ff:9e:34:8d:2e:1d:30:8b:e4:d5:70:db: f0:76:d2:f0:ad:77:4a:ad:cf:f9:e3:f3:56:26:cb:0c:a9:2d: 7b:79:b0:2e:c4:ed:02:1a:7f:c5:e4:c6:51:a6:e6:52:0b:d6: d9:03:df:a9:3b:d9:50:06:4d:4a:07:1b:c7:c0:eb:d5:a6:9e: ac:ea:57:7d:46:13:76:38:c3:a6:33:9e:e3:84:0a:74:64:e5: 8a:e1:68:12:17:a0:17:20:4d:cd:9e:99:82:df:c2:6f:37:74: 28:e2:42:e4:ef:c6:ba:e8:50:86:bd:77:44:cb:22:44:91:cb: 72:9f:b5:0b:b2:8c:f9:ca:3b:87:28:3a:5f:70:ca:f1:0d:31: 2d:54:ce:5c:bc:71:93:ec:16:ef:8d:a3:e1:d4:92:67:1a:a3: 16:e1:b6:9f:13:b2:59:34:50:c2:37:3d:19:0b:09:da:0f:5c: 75:b4:c2:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJOYFqtySS5jtw6ncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw ZDhlMB4XDTIzMDYyMTEyMDAwMFoXDTI1MDgwOTA0MDAwMFowLzEtMCsGA1UEAxMk MjY2ZDJkNjQtMDVmOC00NWY2LTg1ODEtOTJkNWE3MDI0YjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYX+JCUwjzfQIb1TXDwmyyvPfdSlc8WCa52k 0Db3qIRl5EM8WCfSKhntbrMVk0vjqHcWacGr+n++zeT6LlNQzXamEarGJKaHIOP4 EeJxQmNl2cG9WLHKVWSHgUo6ss3xPRcRKszy5/tJdGnmYGwIEHKlAQ599hShhOSD TTUZyqzUGhzh5ozQrU3oK1LKbK/UKjx4jw3mxktoWn2OWePa7hPnOofn6RkkQ4gM /7h3vccxLM8jc7CQvev8NmxKN5KFTpq5cW7oTTtxWrrQlFwid54igEnwNVbqVZvF oJuO8ra5QhKYuOJhw26UXP6vuOhC6mJZ3YWoa+AyB+3uGQUF4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpnc5ENpdt7TuwQmbrCn/2OVI9/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvODU3MmEzOWUtMTkzMC0z N2NjLThlZmEtOGY5ODJmN2UwNTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2 MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk NDJmNjBkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDn7Z4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKzCedDfBYfnf/s7UCNB4+fmEH3MwNBxS5Bbgk2DSPkOurfDqwgGaRv /xCVqYf71tDjPWJyRTYAj+hTyjmJsu4ID6EKzD9GeUb0ecxkAf+eNI0uHTCL5NVw 2/B20vCtd0qtz/nj81YmywypLXt5sC7E7QIaf8XkxlGm5lIL1tkD36k72VAGTUoH G8fA69WmnqzqV31GE3Y4w6YznuOECnRk5YrhaBIXoBcgTc2emYLfwm83dCjiQuTv xrroUIa9d0TLIkSRy3KftQuyjPnKO4coOl9wyvENMS1Uzly8cZPsFu+No+HUkmca oxbhtp8Tslk0UMI3PRkLCdoPXHW0wsk= -----END CERTIFICATE-----Generated at Sun May 12 19:10:25 2024 by rpki-client on console-ams.rpki-client.org