$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/9a9102a6-4651-30ff-b787-501074f8a0ac.roa File: 9a9102a6-4651-30ff-b787-501074f8a0ac.roa (raw, json) Hash identifier: dG51i0cdLW0PipAw7YeXKytIKPukqHk58qJ1h1g2CnA= Subject key identifier: 57:61:29:9B:C5:65:08:54:5D:67:CB:79:B5:67:85:B8:DF:E3:03:62 Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Certificate serial: 010D0C9F432858424E60AD806D7D8144EB374008 Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/9a9102a6-4651-30ff-b787-501074f8a0ac.roa Signing time: Wed 21 Jun 2023 12:00:00 +0000 ROA not before: Wed 21 Jun 2023 12:00:00 +0000 ROA not after: Sat 09 Aug 2025 04:00:00 +0000 asID: 11892 IP address blocks: 159.182.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:4e:60:ad:80:6d:7d:81:44:eb:37:40:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Validity Not Before: Jun 21 12:00:00 2023 GMT Not After : Aug 9 04:00:00 2025 GMT Subject: CN=c24751d6-9878-4fc1-abe2-f5f5b8c95ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f7:54:76:3a:8c:45:8c:32:9f:c2:57:01:22: 4e:06:77:c8:57:cd:b8:1e:a7:31:34:81:da:38:1b: 1f:91:dc:55:31:40:62:76:b0:a9:f3:00:a2:5b:7e: e8:7c:07:70:db:48:4f:cc:4a:c0:a0:3f:05:6e:7a: a9:b1:c0:a8:90:84:95:54:db:c6:fb:33:26:b3:95: 52:6b:27:cc:ae:09:f7:ee:3e:7e:fb:52:12:54:5a: 27:3e:67:7f:ad:21:61:ef:b9:93:77:e0:6e:03:6f: cc:32:cf:09:fd:48:27:81:51:9a:e1:bd:88:a8:9d: 26:66:ac:11:98:9f:2c:c9:f4:d4:30:88:3a:59:bd: 1e:72:a3:0b:b0:92:ab:3f:9e:8e:ae:13:61:96:ec: ac:4c:8d:c2:6b:cc:bc:fe:05:55:87:40:6a:74:dd: b4:67:7a:15:4d:26:bc:1f:30:96:b3:32:25:8f:41: d2:0f:91:4b:9c:fb:0c:00:5a:f3:b6:d1:83:a5:1c: d9:3a:03:94:4f:eb:1f:40:a6:7f:aa:3f:da:8f:43: 42:7f:eb:3d:3b:18:6a:99:a1:d4:33:3c:1d:81:7f: 9f:e7:6a:33:e1:75:38:2c:05:36:45:84:f7:56:1f: 07:58:b1:3f:9c:ea:8e:0a:1a:cc:46:83:4d:cf:bf: a4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:61:29:9B:C5:65:08:54:5D:67:CB:79:B5:67:85:B8:DF:E3:03:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/9a9102a6-4651-30ff-b787-501074f8a0ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl X509v3 Authority Key Identifier: keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer sbgp-ipAddrBlock: critical IPv4: 159.182.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e9:a8:08:35:d0:af:2a:d4:d9:b5:70:74:35:eb:9a:87:2b: 27:b3:66:4e:38:0e:dd:ed:5b:3c:2a:28:5b:83:b8:8d:21:75: e1:80:da:bb:f8:1c:8a:ad:ee:32:6a:bf:8e:31:25:6a:92:c4: 82:29:01:50:50:e5:8d:c7:a2:f8:c5:67:49:ac:91:83:18:96: cb:29:b6:40:3e:e7:41:85:b1:17:af:7a:61:86:07:07:ab:0f: 25:6f:aa:5b:91:6d:d9:e1:82:06:e2:83:c8:74:0e:84:8f:72: 45:65:fb:dd:11:87:b2:33:30:79:d2:a8:d4:b1:43:9c:a0:23: 1a:83:49:df:02:1d:fb:d7:06:95:f7:07:8e:0a:17:cb:7e:31: b0:fa:78:9c:f1:b0:5a:f8:9a:4d:1d:5b:bb:db:d8:a9:bb:fa: 92:76:67:b0:34:3c:7a:02:25:a3:5d:5a:a0:50:c0:f5:eb:c2: a2:df:80:40:26:68:24:dd:b3:08:55:f6:9e:5c:9b:25:1a:ac: e8:5b:05:14:69:54:16:a2:20:d9:48:90:ee:aa:96:02:bb:21: b2:20:88:33:13:96:76:20:5e:87:63:d4:2b:78:ef:e0:d5:6e: 57:34:fb:38:a1:cb:0b:86:aa:11:97:ad:fc:f7:a2:85:7b:02: f5:2a:33:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJOYK2AbX2BROs3QAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw ZDhlMB4XDTIzMDYyMTEyMDAwMFoXDTI1MDgwOTA0MDAwMFowLzEtMCsGA1UEAxMk YzI0NzUxZDYtOTg3OC00ZmMxLWFiZTItZjVmNWI4Yzk1ZmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPdUdjqMRYwyn8JXASJOBnfIV824HqcxNIHa OBsfkdxVMUBidrCp8wCiW37ofAdw20hPzErAoD8FbnqpscCokISVVNvG+zMms5VS ayfMrgn37j5++1ISVFonPmd/rSFh77mTd+BuA2/MMs8J/UgngVGa4b2IqJ0mZqwR mJ8syfTUMIg6Wb0ecqMLsJKrP56OrhNhluysTI3Ca8y8/gVVh0BqdN20Z3oVTSa8 HzCWszIlj0HSD5FLnPsMAFrzttGDpRzZOgOUT+sfQKZ/qj/aj0NCf+s9OxhqmaHU MzwdgX+f52oz4XU4LAU2RYT3Vh8HWLE/nOqOChrMRoNNz7+kvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdhKZvFZQhUXWfLebVnhbjf4wNiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvOWE5MTAyYTYtNDY1MS0z MGZmLWI3ODctNTAxMDc0ZjhhMGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2 MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk NDJmNjBkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn7ZvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDpqAg10K8q1Nm1cHQ165qHKyezZk44Dt3tWzwqKFuDuI0hdeGA2rv4 HIqt7jJqv44xJWqSxIIpAVBQ5Y3HovjFZ0mskYMYlssptkA+50GFsRevemGGBwer DyVvqluRbdnhggbig8h0DoSPckVl+90Rh7IzMHnSqNSxQ5ygIxqDSd8CHfvXBpX3 B44KF8t+MbD6eJzxsFr4mk0dW7vb2Km7+pJ2Z7A0PHoCJaNdWqBQwPXrwqLfgEAm aCTdswhV9p5cmyUarOhbBRRpVBaiINlIkO6qlgK7IbIgiDMTlnYgXodj1Ct47+DV blc0+zihywuGqhGXrfz3ooV7AvUqMxM= -----END CERTIFICATE-----Generated at Sun May 12 15:11:09 2024 by rpki-client on console-ams.rpki-client.org