$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/af3d535e-1c31-32d1-a6a6-68041d0d7365.roa File: af3d535e-1c31-32d1-a6a6-68041d0d7365.roa (raw, json) Hash identifier: aIAI4Mhcse4grWM0M1mL/S4G2AB1kug7VxedFRHr7X0= Subject key identifier: 24:4A:CC:5E:25:AF:8C:73:F8:4C:DE:AD:23:D3:D0:4B:2E:A5:0C:6E Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F432858456C5310950A35D1639DE86A80 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/af3d535e-1c31-32d1-a6a6-68041d0d7365.roa Signing time: Wed 03 Apr 2024 13:00:37 +0000 ROA not before: Wed 03 Apr 2024 13:00:37 +0000 ROA not after: Tue 02 Jul 2024 13:00:37 +0000 asID: 396961 IP address blocks: 163.253.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6c:53:10:95:0a:35:d1:63:9d:e8:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Apr 3 13:00:37 2024 GMT Not After : Jul 2 13:00:37 2024 GMT Subject: CN=1ddd54c8-f4a6-4c88-9676-e1f5cb8d1a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7e:23:28:15:86:60:f9:26:20:e3:b6:63:61: 01:1e:b6:cf:0e:4f:3b:55:60:36:15:bf:d8:df:61: 23:fe:92:4f:e3:f0:5c:2c:99:c3:3c:b9:3b:43:cc: aa:37:41:aa:80:29:7f:4e:8e:77:0b:1d:f8:28:75: 01:2a:25:a9:1c:34:cb:69:bf:24:fd:e9:5c:47:21: 53:05:a3:cf:03:91:dd:8c:f1:b6:b8:20:1a:d3:50: 54:a8:ac:33:12:af:cb:7c:61:cb:ac:f2:14:78:9b: c3:d5:f3:8d:6f:20:88:41:38:e9:7c:f5:f7:85:7e: dd:80:28:12:b8:4f:35:93:d9:4c:37:28:b7:12:a7: 54:ae:ca:20:6e:fe:2e:2b:ee:fc:91:86:00:77:f6: c2:72:fb:f2:c5:c3:d4:2c:c6:6d:4e:5b:3e:da:3c: ed:b0:d3:0f:39:13:4b:37:5e:2e:d4:6f:a1:d6:fe: 6e:b1:cb:23:89:f9:83:2c:44:cb:b4:87:e8:91:4e: 28:6f:11:51:da:c6:fd:68:54:f9:5e:a3:f7:0b:36: 51:9a:93:c8:ee:11:43:88:a2:2c:9c:72:ea:b7:d7: a6:8e:f6:b4:fb:bb:cd:22:02:a5:1c:df:d8:0c:17: ed:b2:1f:55:f9:cf:3a:95:58:f5:b4:ff:20:1b:55: d8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4A:CC:5E:25:AF:8C:73:F8:4C:DE:AD:23:D3:D0:4B:2E:A5:0C:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/af3d535e-1c31-32d1-a6a6-68041d0d7365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e1:42:2a:cf:56:15:19:8f:c1:1d:92:f5:2f:54:10:4a:b6: 1a:1e:0b:85:6d:9a:7d:00:fd:0b:e0:68:4f:02:91:04:d8:ce: 30:a2:2b:9d:15:a6:ef:38:11:b1:71:8c:56:26:33:e4:32:82: 21:d2:59:32:45:5a:73:cf:12:9d:e2:3a:32:65:8a:fa:cc:45: ad:85:13:e9:b6:5c:5c:15:62:38:fb:98:b3:04:b6:f3:dd:34: e2:af:8c:04:80:35:6c:3a:75:a0:b9:b6:0e:75:d3:21:5a:d4: d9:97:71:78:78:c3:bb:4e:72:97:df:eb:84:1e:0e:00:99:c9: 48:56:ec:70:82:b4:50:88:d1:2a:91:e1:73:a5:af:1b:d4:df: 4e:a3:1a:45:49:56:4c:91:0d:7e:24:e6:03:3f:a0:b4:1e:c8: e5:47:fb:0b:fa:59:25:56:96:3f:e3:7e:1e:d8:38:4c:c1:b5: 33:5c:0c:5b:ca:ca:1f:19:66:0b:0e:44:82:a5:09:6d:9c:d1: cb:ba:43:23:65:55:ed:e5:a1:a8:99:5c:d1:2f:89:c8:3d:c3: c5:2a:c6:bc:35:cc:db:63:8b:ea:36:fe:b7:26:78:e6:bb:a1: cc:0d:55:07:64:3e:55:82:28:24:e5:8c:1a:89:fe:3e:a1:f9: 3c:3c:87:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVsUxCVCjXRY53oaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI0MDQwMzEzMDAzN1oXDTI0MDcwMjEzMDAzN1owLzEtMCsGA1UEAxMk MWRkZDU0YzgtZjRhNi00Yzg4LTk2NzYtZTFmNWNiOGQxYTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn4jKBWGYPkmIOO2Y2EBHrbPDk87VWA2Fb/Y 32Ej/pJP4/BcLJnDPLk7Q8yqN0GqgCl/To53Cx34KHUBKiWpHDTLab8k/elcRyFT BaPPA5HdjPG2uCAa01BUqKwzEq/LfGHLrPIUeJvD1fONbyCIQTjpfPX3hX7dgCgS uE81k9lMNyi3EqdUrsogbv4uK+78kYYAd/bCcvvyxcPULMZtTls+2jztsNMPORNL N14u1G+h1v5uscsjifmDLETLtIfokU4obxFR2sb9aFT5XqP3CzZRmpPI7hFDiKIs nHLqt9emjva0+7vNIgKlHN/YDBftsh9V+c86lVj1tP8gG1XYWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRKzF4lr4xz+EzerSPT0EsupQxuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYWYzZDUzNWUtMWMzMS0z MmQxLWE2YTYtNjgwNDFkMGQ3MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/1JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbhQirPVhUZj8EdkvUvVBBKthoeC4Vtmn0A/QvgaE8CkQTYzjCiK50V pu84EbFxjFYmM+QygiHSWTJFWnPPEp3iOjJlivrMRa2FE+m2XFwVYjj7mLMEtvPd NOKvjASANWw6daC5tg510yFa1NmXcXh4w7tOcpff64QeDgCZyUhW7HCCtFCI0SqR 4XOlrxvU306jGkVJVkyRDX4k5gM/oLQeyOVH+wv6WSVWlj/jfh7YOEzBtTNcDFvK yh8ZZgsORIKlCW2c0cu6QyNlVe3loaiZXNEvicg9w8Uqxrw1zNtji+o2/rcmeOa7 ocwNVQdkPlWCKCTljBqJ/j6h+Tw8hzg= -----END CERTIFICATE-----Generated at Thu May 2 14:52:39 2024 by rpki-client on console-fra.rpki-client.org