$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/db1ec6f1-6951-3aad-bd1e-5659bf43829b.roa File: db1ec6f1-6951-3aad-bd1e-5659bf43829b.roa (raw, json) Hash identifier: sJ/TXlhdgXATBbvIy8wJ3h5neciYmJ1z4BEjYBoIIIE= Subject key identifier: D2:00:2D:D1:1A:1B:3A:F3:7F:E0:40:1E:23:65:D1:D9:63:DD:F3:68 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584529528D6D6207CCC28641DB00 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/db1ec6f1-6951-3aad-bd1e-5659bf43829b.roa Signing time: Sun 10 Mar 2024 13:00:31 +0000 ROA not before: Sun 10 Mar 2024 13:00:31 +0000 ROA not after: Sat 08 Jun 2024 13:00:31 +0000 asID: 11537 IP address blocks: 163.253.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:29:52:8d:6d:62:07:cc:c2:86:41:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Mar 10 13:00:31 2024 GMT Not After : Jun 8 13:00:31 2024 GMT Subject: CN=ed736232-7a1c-4499-9810-2b8e442a5be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0f:c9:a7:85:16:20:11:67:31:5d:f1:b0:3a: e1:22:21:31:b9:d8:e5:9c:8d:aa:f7:e4:21:38:58: 37:d1:be:03:0d:e2:28:98:d3:f9:e2:1e:3e:d0:ae: c9:64:d9:da:87:33:9c:eb:2f:e7:59:b1:4b:d9:98: 7d:7d:86:36:8f:e0:ef:f5:f0:25:71:d3:ff:e7:13: 2f:da:2b:33:ba:38:b8:9e:ef:8f:92:fd:4d:ba:78: a0:db:a2:ef:f9:f1:6c:2b:e6:57:4b:68:79:69:fa: 70:ed:0f:82:c7:44:0f:6a:ff:e3:d9:dc:f0:f8:57: 36:5e:52:9a:a0:90:ae:b9:d6:fe:0f:26:8d:90:bd: e3:aa:af:e9:ac:04:53:b2:93:14:ef:1e:97:ff:e3: 0e:10:57:6d:f3:e2:44:cb:f2:5e:f7:ed:c2:52:5c: 07:ab:5c:ee:50:61:3c:73:17:8d:41:59:fb:41:36: 7b:65:d8:df:54:3a:be:00:d4:33:ec:20:ce:59:63: 38:df:45:6c:0f:9d:3e:8e:77:35:2e:58:09:44:c9: e1:a2:c2:95:92:bf:34:60:11:cb:90:cf:04:93:e0: 40:3a:eb:97:fb:84:5c:94:1b:c8:3b:24:a0:72:4c: 25:92:b5:e0:73:70:db:a4:0a:25:d4:d1:6f:86:96: 6e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:00:2D:D1:1A:1B:3A:F3:7F:E0:40:1E:23:65:D1:D9:63:DD:F3:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/db1ec6f1-6951-3aad-bd1e-5659bf43829b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:0d:04:ad:26:02:47:33:5a:80:98:04:10:3f:0a:66:c1:aa: 17:93:9f:08:54:72:77:21:cb:b1:57:3b:de:7d:69:00:b6:6f: 50:15:0d:d1:60:1d:e2:31:37:e2:b7:5d:3c:ee:9c:a4:30:fc: 7a:ef:f6:9a:e1:3a:cc:d4:4e:2e:7d:c2:52:b2:51:af:0c:b8: 21:d6:05:95:fd:d6:8f:0b:64:be:b8:3f:61:e0:e5:7a:ef:53: 5d:18:a9:e0:89:c3:09:0f:6e:d9:72:90:bf:d3:8a:b3:a6:e6: 82:6d:9d:9b:e7:99:1f:6c:7d:c5:a7:38:60:2e:ec:96:e6:13: df:14:69:58:eb:a6:31:a7:0c:87:30:3f:b3:a6:4f:fd:4d:78: 08:71:99:c0:55:e2:08:c1:f1:74:52:81:89:e7:80:72:ab:ad: 73:90:d2:41:de:d4:bd:91:81:ef:0c:bb:0b:2d:c6:da:37:f6: c7:32:8d:c5:87:20:1a:7b:f6:a9:3b:7d:58:a4:ae:95:ea:79: 55:e4:4e:83:57:a8:c7:f0:4b:0b:4f:1a:10:70:44:db:ec:a8: 72:b1:bc:af:2f:d5:6c:5c:f9:dc:8d:39:8c:51:0c:57:a8:58: 8e:a7:c5:a9:67:b7:0e:60:73:82:70:e4:6d:90:bd:1c:b6:cf: 8d:f5:7d:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUpUo1tYgfMwoZB2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI0MDMxMDEzMDAzMVoXDTI0MDYwODEzMDAzMVowLzEtMCsGA1UEAxMk ZWQ3MzYyMzItN2ExYy00NDk5LTk4MTAtMmI4ZTQ0MmE1YmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA/Jp4UWIBFnMV3xsDrhIiExudjlnI2q9+Qh OFg30b4DDeIomNP54h4+0K7JZNnahzOc6y/nWbFL2Zh9fYY2j+Dv9fAlcdP/5xMv 2iszuji4nu+Pkv1Nunig26Lv+fFsK+ZXS2h5afpw7Q+Cx0QPav/j2dzw+Fc2XlKa oJCuudb+DyaNkL3jqq/prARTspMU7x6X/+MOEFdt8+JEy/Je9+3CUlwHq1zuUGE8 cxeNQVn7QTZ7ZdjfVDq+ANQz7CDOWWM430VsD50+jnc1LlgJRMnhosKVkr80YBHL kM8Ek+BAOuuX+4RclBvIOySgckwlkrXgc3DbpAol1NFvhpZuRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIALdEaGzrzf+BAHiNl0dlj3fNoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvZGIxZWM2ZjEtNjk1MS0z YWFkLWJkMWUtNTY1OWJmNDM4MjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCo/0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkNBK0mAkczWoCYBBA/CmbBqheTnwhUcnchy7FXO959aQC2b1AVDdFg HeIxN+K3XTzunKQw/Hrv9prhOszUTi59wlKyUa8MuCHWBZX91o8LZL64P2Hg5Xrv U10YqeCJwwkPbtlykL/TirOm5oJtnZvnmR9sfcWnOGAu7JbmE98UaVjrpjGnDIcw P7OmT/1NeAhxmcBV4gjB8XRSgYnngHKrrXOQ0kHe1L2Rge8Muwstxto39scyjcWH IBp79qk7fVikrpXqeVXkToNXqMfwSwtPGhBwRNvsqHKxvK8v1Wxc+dyNOYxRDFeo WI6nxalntw5gc4Jw5G2QvRy2z431fRY= -----END CERTIFICATE-----Generated at Thu May 2 18:02:55 2024 by rpki-client on console-fra.rpki-client.org