$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1aa972f3-aa07-3939-b538-d992fbf89f5e.roa File: 1aa972f3-aa07-3939-b538-d992fbf89f5e.roa (raw, json) Hash identifier: 4tkuewAe/fZlv88UKNBTF3tZEQT85aQ4LOJFUCxSJJ4= Subject key identifier: EB:30:78:04:0E:C9:28:42:1D:BB:BF:8E:26:80:61:75:15:07:85:39 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584598FE0D6CE64B4ABE91DB35C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1aa972f3-aa07-3939-b538-d992fbf89f5e.roa Signing time: Fri 19 Apr 2024 13:00:36 +0000 ROA not before: Fri 19 Apr 2024 13:00:36 +0000 ROA not after: Thu 18 Jul 2024 13:00:36 +0000 asID: 1225 IP address blocks: 192.102.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:98:fe:0d:6c:e6:4b:4a:be:91:db:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 19 13:00:36 2024 GMT Not After : Jul 18 13:00:36 2024 GMT Subject: CN=84b70774-021d-4eca-89cb-489546656aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:cb:31:9b:6e:0f:1a:15:74:3d:6e:3c:af: a2:89:40:4e:da:f1:df:3c:7f:34:ea:de:b6:80:cb: 4d:79:c1:86:33:94:c3:4a:b2:c6:ac:39:a5:8d:2d: 24:21:0c:16:77:02:cb:13:ef:3b:c9:b2:70:e0:5d: 19:8a:43:9f:ad:3c:2d:f6:88:fa:e9:3d:98:5f:cf: 7f:b7:0b:a9:00:ec:5e:cd:6f:a4:e3:73:ce:93:dc: 9b:f7:06:6e:1d:bf:cb:80:24:a4:91:03:50:b0:72: 17:03:59:f2:a4:3e:87:c5:c3:bc:46:ad:f8:44:5b: 22:ea:b3:48:29:2f:e1:42:a4:80:90:20:87:09:ec: fc:c2:cc:d3:61:86:ba:c8:a4:aa:18:1b:19:6c:70: 15:48:17:2e:f4:df:54:4e:65:69:87:9e:b6:75:1a: 39:f4:74:ba:7c:2b:14:1a:1e:c2:52:75:a3:68:8e: 79:95:93:23:e2:bd:bb:00:e5:8c:44:9b:27:93:96: e4:e3:b0:c7:98:87:d6:e7:b0:0e:b0:e7:26:ea:9a: 00:b3:2b:1c:29:00:0e:6f:de:08:3e:6b:93:aa:31: 92:c6:c1:51:05:0c:05:da:84:11:80:63:22:51:08: b6:71:71:20:f4:70:13:6f:6b:35:ee:d1:08:73:7a: fa:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:30:78:04:0E:C9:28:42:1D:BB:BF:8E:26:80:61:75:15:07:85:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1aa972f3-aa07-3939-b538-d992fbf89f5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 192.102.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:06:31:c8:72:f6:d5:50:a7:99:b5:5f:bf:3d:21:55:5b:22: 85:4c:c6:61:0b:e8:3b:25:88:57:e6:15:d9:9e:0d:ca:39:2e: 57:cd:5d:5e:cf:07:4b:d2:d5:c4:96:fe:e2:f2:a7:a9:b7:e0: d4:64:28:34:86:a1:4f:52:d3:34:1c:07:20:f2:e0:4f:61:ff: fb:23:16:92:33:8b:de:07:43:db:ef:16:58:ff:5a:56:6f:74: 1f:a1:be:e6:b4:04:34:6b:8a:9b:1d:9d:3b:92:33:ef:36:3c: b4:17:ea:22:08:52:4e:ef:1f:7b:38:2f:51:3e:fc:53:cd:65: 24:00:7d:ae:eb:04:4a:48:ed:29:da:60:00:1e:69:7d:d5:38: 0d:cb:60:25:42:8d:09:10:4a:c6:e2:f6:52:05:79:cd:54:22: 64:53:d6:8c:9c:83:e5:24:46:e3:9e:2a:da:53:df:12:08:ce: 7f:5a:56:96:9c:1e:51:7d:2e:a8:ca:66:ee:66:50:06:b9:bc: 98:ee:e0:76:aa:3d:36:76:9c:65:78:5e:ed:5f:4f:53:de:21: b5:f1:cf:5e:ab:6e:5b:e8:ca:7e:27:9d:58:ed:a6:82:d5:b6: b3:c2:e9:2f:c1:02:98:10:78:ab:58:e9:59:68:14:6c:24:b2: da:08:3b:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWY/g1s5ktKvpHbNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI0MDQxOTEzMDAzNloXDTI0MDcxODEzMDAzNlowLzEtMCsGA1UEAxMk ODRiNzA3NzQtMDIxZC00ZWNhLTg5Y2ItNDg5NTQ2NjU2YWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttnLMZtuDxoVdD1uPK+iiUBO2vHfPH806t62 gMtNecGGM5TDSrLGrDmljS0kIQwWdwLLE+87ybJw4F0ZikOfrTwt9oj66T2YX89/ twupAOxezW+k43POk9yb9wZuHb/LgCSkkQNQsHIXA1nypD6HxcO8Rq34RFsi6rNI KS/hQqSAkCCHCez8wszTYYa6yKSqGBsZbHAVSBcu9N9UTmVph562dRo59HS6fCsU Gh7CUnWjaI55lZMj4r27AOWMRJsnk5bk47DHmIfW57AOsOcm6poAsyscKQAOb94I PmuTqjGSxsFRBQwF2oQRgGMiUQi2cXEg9HATb2s17tEIc3r6/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsweAQOyShCHbu/jiaAYXUVB4U5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMWFhOTcyZjMtYWEwNy0z OTM5LWI1MzgtZDk5MmZiZjg5ZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUGMchy9tVQp5m1X789IVVbIoVMxmEL6DsliFfmFdmeDco5LlfNXV7P B0vS1cSW/uLyp6m34NRkKDSGoU9S0zQcByDy4E9h//sjFpIzi94HQ9vvFlj/WlZv dB+hvua0BDRripsdnTuSM+82PLQX6iIIUk7vH3s4L1E+/FPNZSQAfa7rBEpI7Sna YAAeaX3VOA3LYCVCjQkQSsbi9lIFec1UImRT1oycg+UkRuOeKtpT3xIIzn9aVpac HlF9LqjKZu5mUAa5vJju4HaqPTZ2nGV4Xu1fT1PeIbXxz16rblvoyn4nnVjtpoLV trPC6S/BApgQeKtY6VloFGwkstoIOxY= -----END CERTIFICATE-----Generated at Mon May 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org