$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/af0d483b-52bd-3692-a837-5d40708d158b.roa File: af0d483b-52bd-3692-a837-5d40708d158b.roa (raw, json) Hash identifier: 4Q+jXAexBxxfWtn/eRvYA3IGjb5y7g4p62D8R+/0hWw= Subject key identifier: A0:21:91:5D:8B:D3:B1:67:EB:7B:88:26:66:0A:EA:07:7C:E2:B2:5C Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584563F30CBD83ABFD421E0C1DC0 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/af0d483b-52bd-3692-a837-5d40708d158b.roa Signing time: Sun 31 Mar 2024 13:00:36 +0000 ROA not before: Sun 31 Mar 2024 13:00:36 +0000 ROA not after: Sat 29 Jun 2024 13:00:36 +0000 asID: 237 IP address blocks: 163.253.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:63:f3:0c:bd:83:ab:fd:42:1e:0c:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Mar 31 13:00:36 2024 GMT Not After : Jun 29 13:00:36 2024 GMT Subject: CN=b34b2b1d-788c-427b-a046-ba975bc7059f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ae:26:76:d8:9a:64:8c:ab:7d:9f:b3:14:4d: 18:68:03:a0:cb:c7:7a:1d:73:61:7c:ce:e0:25:98: d5:b3:40:ac:dc:1e:a5:29:d3:1a:c3:a2:4e:3b:68: 84:37:aa:f1:aa:b3:35:7d:43:4f:77:29:95:83:db: 9b:34:44:33:69:ee:84:f6:a0:ee:09:b4:c6:2f:8d: 86:21:8c:eb:19:e9:58:f3:d4:7b:8a:a7:b2:b0:e0: 15:14:7e:b0:f5:f5:c4:87:80:cb:dc:d0:cc:20:00: 69:90:7c:d1:91:3a:c6:a1:ed:09:5f:1d:8b:21:14: 4b:97:dd:39:d7:57:40:85:75:30:47:08:50:52:69: 3c:81:c4:77:35:c0:a6:de:db:f8:a6:ac:8b:35:24: 96:9d:d0:49:ba:09:17:93:0e:40:fd:dc:e4:e1:6d: 52:a8:f6:3a:ee:c8:2e:bb:a4:60:30:62:d0:2d:35: 88:2b:96:1a:60:34:07:67:21:cc:b0:bc:0b:fc:16: 79:cb:51:66:57:e7:8f:b3:42:f4:ee:fd:7c:61:78: 40:18:db:96:98:1c:5f:f6:0f:4f:90:69:d7:90:3e: 9f:dd:ed:d8:b8:1b:71:3e:45:c6:30:70:60:72:13: cc:96:cf:4a:50:18:d0:69:85:18:25:c3:2d:e3:42: 81:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:21:91:5D:8B:D3:B1:67:EB:7B:88:26:66:0A:EA:07:7C:E2:B2:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/af0d483b-52bd-3692-a837-5d40708d158b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:d0:52:19:7d:41:27:e6:b2:07:82:b1:19:e4:09:f8:1c:9f: 05:ab:76:3f:a7:14:df:87:33:45:21:d0:f4:15:c3:f3:11:f9: 7b:5d:8e:3b:07:5c:c2:46:23:05:34:85:e7:4c:70:47:9a:8e: 46:16:a4:31:82:de:18:60:e2:66:c5:cb:a4:d7:e4:21:55:38: fe:a2:08:bb:e4:53:2f:95:88:2a:a4:5e:a5:9f:8b:44:40:ce: f9:8d:94:79:cd:49:a9:f0:90:6e:a1:d6:09:7b:30:20:a7:77: 27:b3:42:05:87:29:bf:90:64:07:19:da:bf:fc:9e:5e:dc:e8: 02:7f:2f:3d:4c:db:01:fa:68:bd:15:bc:44:57:f1:c4:b9:e0: b6:f6:3c:2b:a7:e9:e9:20:5f:97:6e:44:66:49:38:d9:58:4e: f6:c0:e8:3d:41:93:5c:84:9b:c8:c3:4d:ba:f7:8a:63:7b:ea: 27:7e:2d:2f:68:ec:99:bb:1c:7d:1c:45:63:c6:12:6d:0d:93: 37:f9:ac:cd:3b:11:2a:5b:90:8a:64:d6:96:f7:e9:85:e2:fd: b6:81:5c:26:f1:bc:57:40:5e:52:e1:14:83:8b:cd:0a:e0:4d: 45:12:99:01:5f:44:c3:90:d2:b2:29:50:2c:77:a1:7f:0c:03: 91:73:8c:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVj8wy9g6v9Qh4MHcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI0MDMzMTEzMDAzNloXDTI0MDYyOTEzMDAzNlowLzEtMCsGA1UEAxMk YjM0YjJiMWQtNzg4Yy00MjdiLWEwNDYtYmE5NzViYzcwNTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk64mdtiaZIyrfZ+zFE0YaAOgy8d6HXNhfM7g JZjVs0Cs3B6lKdMaw6JOO2iEN6rxqrM1fUNPdymVg9ubNEQzae6E9qDuCbTGL42G IYzrGelY89R7iqeysOAVFH6w9fXEh4DL3NDMIABpkHzRkTrGoe0JXx2LIRRLl905 11dAhXUwRwhQUmk8gcR3NcCm3tv4pqyLNSSWndBJugkXkw5A/dzk4W1SqPY67sgu u6RgMGLQLTWIK5YaYDQHZyHMsLwL/BZ5y1FmV+ePs0L07v18YXhAGNuWmBxf9g9P kGnXkD6f3e3YuBtxPkXGMHBgchPMls9KUBjQaYUYJcMt40KBrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAhkV2L07Fn63uIJmYK6gd84rJcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYWYwZDQ4M2ItNTJiZC0z NjkyLWE4MzctNWQ0MDcwOGQxNThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCo/0kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLQUhl9QSfmsgeCsRnkCfgcnwWrdj+nFN+HM0Uh0PQVw/MR+XtdjjsH XMJGIwU0hedMcEeajkYWpDGC3hhg4mbFy6TX5CFVOP6iCLvkUy+ViCqkXqWfi0RA zvmNlHnNSanwkG6h1gl7MCCndyezQgWHKb+QZAcZ2r/8nl7c6AJ/Lz1M2wH6aL0V vERX8cS54Lb2PCun6ekgX5duRGZJONlYTvbA6D1Bk1yEm8jDTbr3imN76id+LS9o 7Jm7HH0cRWPGEm0Nkzf5rM07ESpbkIpk1pb36YXi/baBXCbxvFdAXlLhFIOLzQrg TUUSmQFfRMOQ0rIpUCx3oX8MA5FzjJ0= -----END CERTIFICATE-----Generated at Thu May 2 14:55:09 2024 by rpki-client on console-ams.rpki-client.org