$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5d178c2b-a9ac-33ef-8e68-4d654595430b.roa File: 5d178c2b-a9ac-33ef-8e68-4d654595430b.roa (raw, json) Hash identifier: /fx4ca55yVJse2GUPtZbmB+nkXpsNcnLUjKtp2D19F0= Subject key identifier: D1:70:7D:D2:99:71:0D:60:20:B1:00:D4:16:48:D6:31:21:E1:6D:61 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285845B7B38D09AA23FCCC989A8A00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5d178c2b-a9ac-33ef-8e68-4d654595430b.roa Signing time: Tue 30 Apr 2024 13:00:34 +0000 ROA not before: Tue 30 Apr 2024 13:00:34 +0000 ROA not after: Mon 29 Jul 2024 13:00:34 +0000 asID: 20940 IP address blocks: 165.254.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b7:b3:8d:09:aa:23:fc:cc:98:9a:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 30 13:00:34 2024 GMT Not After : Jul 29 13:00:34 2024 GMT Subject: CN=9de5dcfc-d02f-4807-bff9-8750f64810f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9b:47:d9:45:82:77:7e:9c:2c:e2:98:f8:fa: 26:c8:a6:30:c9:7c:51:2c:3d:63:45:19:43:89:8f: ef:8c:76:7e:99:e0:40:67:db:4c:9a:e5:a3:24:81: 37:fa:54:0d:2f:43:c1:91:56:5d:73:88:7d:8a:ed: ba:1b:2c:b4:6d:07:99:1a:e9:1f:59:8d:ba:a8:b2: 76:ce:40:ff:9b:18:98:00:2e:88:10:8b:f5:a4:d6: f9:d5:c1:64:29:ef:d8:43:bc:76:c1:7e:10:20:b1: 9b:13:3d:b6:0e:f7:f2:7d:50:60:17:50:5d:1d:d6: b1:b2:88:ef:b1:00:73:e0:8c:50:e3:07:e1:70:11: b9:87:09:22:a0:34:83:f8:1f:44:90:f4:eb:c4:f1: 1a:2e:c6:22:6a:ee:9b:29:46:c2:89:a1:41:c2:bd: eb:84:c6:d5:00:9b:b7:35:4c:5c:e3:40:0b:ad:52: 84:47:11:0d:0c:5c:15:2e:80:e4:0a:bd:a3:89:96: 0c:31:40:c6:08:ec:35:4a:05:87:62:b8:37:c5:ef: c9:cc:60:38:c9:ba:87:c2:d1:e1:06:da:9d:cb:c9: fd:da:e2:30:fc:be:4f:81:6e:ae:c6:5c:d4:78:7a: 44:d1:35:6e:ca:f3:c8:a3:e0:f2:3b:99:b3:fa:fa: d8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:70:7D:D2:99:71:0D:60:20:B1:00:D4:16:48:D6:31:21:E1:6D:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5d178c2b-a9ac-33ef-8e68-4d654595430b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:35:4c:e7:ed:a5:db:94:cb:ee:cd:49:a6:a9:4c:c4:7b:0f: b1:86:18:29:e0:39:79:8d:6d:1c:11:98:a2:5d:46:27:2c:59: 6d:c8:03:61:da:f0:55:d5:e4:5a:15:10:ff:d3:fe:6f:ec:0e: f7:49:af:bd:33:a1:c7:07:53:8b:fb:55:de:a5:af:46:32:8c: 75:11:62:3d:25:d5:33:a3:c4:ab:8a:49:06:21:e4:7f:03:fe: df:b8:83:11:3c:8e:8f:c5:d8:c6:0d:15:f3:2f:39:8e:1c:75: 0f:95:02:b6:d9:8e:71:82:41:08:b2:8d:b5:a6:f1:16:8b:5b: d0:e6:7f:e1:50:6f:98:2d:40:b4:01:79:1b:36:b4:a6:c7:40: e7:54:6e:84:0e:71:7d:fa:e4:fe:4c:2c:4b:e9:dc:05:56:46: 13:7e:e9:dd:09:a9:b6:e5:11:9e:33:ba:12:6f:47:da:c5:5e: a4:77:e2:d7:cf:ea:2a:50:dc:49:4f:92:81:ca:25:2f:74:70: cc:84:73:c5:45:8c:8d:98:2d:22:a3:aa:c0:d1:0a:30:1f:f4: 34:26:ba:57:5b:70:3a:00:18:c2:a3:a8:e8:0c:89:81:62:aa: 58:3f:9a:31:66:b1:f2:fa:76:97:b7:4a:04:38:db:fb:96:26: ac:31:7f:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW3s40JqiP8zJiaigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI0MDQzMDEzMDAzNFoXDTI0MDcyOTEzMDAzNFowLzEtMCsGA1UEAxMk OWRlNWRjZmMtZDAyZi00ODA3LWJmZjktODc1MGY2NDgxMGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZtH2UWCd36cLOKY+PomyKYwyXxRLD1jRRlD iY/vjHZ+meBAZ9tMmuWjJIE3+lQNL0PBkVZdc4h9iu26Gyy0bQeZGukfWY26qLJ2 zkD/mxiYAC6IEIv1pNb51cFkKe/YQ7x2wX4QILGbEz22DvfyfVBgF1BdHdaxsojv sQBz4IxQ4wfhcBG5hwkioDSD+B9EkPTrxPEaLsYiau6bKUbCiaFBwr3rhMbVAJu3 NUxc40ALrVKERxENDFwVLoDkCr2jiZYMMUDGCOw1SgWHYrg3xe/JzGA4ybqHwtHh Btqdy8n92uIw/L5PgW6uxlzUeHpE0TVuyvPIo+DyO5mz+vrYuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFwfdKZcQ1gILEA1BZI1jEh4W1hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNWQxNzhjMmItYTlhYy0z M2VmLThlNjgtNGQ2NTQ1OTU0MzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf6WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQ1TOftpduUy+7NSaapTMR7D7GGGCngOXmNbRwRmKJdRicsWW3IA2Ha 8FXV5FoVEP/T/m/sDvdJr70zoccHU4v7Vd6lr0YyjHURYj0l1TOjxKuKSQYh5H8D /t+4gxE8jo/F2MYNFfMvOY4cdQ+VArbZjnGCQQiyjbWm8RaLW9Dmf+FQb5gtQLQB eRs2tKbHQOdUboQOcX365P5MLEvp3AVWRhN+6d0JqbblEZ4zuhJvR9rFXqR34tfP 6ipQ3ElPkoHKJS90cMyEc8VFjI2YLSKjqsDRCjAf9DQmuldbcDoAGMKjqOgMiYFi qlg/mjFmsfL6dpe3SgQ42/uWJqwxf0o= -----END CERTIFICATE-----Generated at Mon May 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org