$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf31cae4-6293-38b8-ab84-725a6bd7bc95.roa File: bf31cae4-6293-38b8-ab84-725a6bd7bc95.roa (raw, json) Hash identifier: erQEcOZxJLsHjpmFDiza6JVgf3N0yMFHGAGXDxijJCc= Subject key identifier: 0E:21:77:DC:8D:DA:58:56:1C:C6:8B:81:BB:ED:B5:D9:D2:0E:AF:D9 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584598FE0C6712A4AA2B768C5D40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf31cae4-6293-38b8-ab84-725a6bd7bc95.roa Signing time: Fri 19 Apr 2024 13:00:36 +0000 ROA not before: Fri 19 Apr 2024 13:00:36 +0000 ROA not after: Thu 18 Jul 2024 13:00:36 +0000 asID: 20940 IP address blocks: 168.143.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:98:fe:0c:67:12:a4:aa:2b:76:8c:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 19 13:00:36 2024 GMT Not After : Jul 18 13:00:36 2024 GMT Subject: CN=61ed957f-371b-45ae-884a-b56c89ec8bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c5:b1:13:ee:b2:ad:b0:da:ce:dd:6b:cc:63: 57:0b:71:04:e7:f0:2b:b8:b5:23:a8:d1:1d:87:9b: 4d:34:62:a2:ff:d1:27:d6:1c:71:2f:1d:75:92:00: b0:65:49:c3:b6:dd:f0:63:34:92:c4:2e:92:a4:86: db:02:4f:70:02:3b:c8:ff:ac:56:3f:f9:47:e0:fd: 38:95:02:cd:0a:bd:d0:ea:82:a4:e3:8b:14:55:7d: b4:73:aa:27:d2:76:12:63:11:2e:3d:bb:44:37:51: 40:58:c0:3a:6d:91:a5:8f:25:27:86:eb:c4:ca:66: b0:f6:81:af:c9:05:9a:e3:27:3b:25:7a:17:3c:37: 02:21:25:1e:f7:45:96:16:4d:31:ed:a2:22:c2:ee: 01:43:5b:26:72:73:ea:4e:86:aa:08:88:bc:7c:27: 38:f3:77:e0:35:40:79:a2:e8:14:26:09:27:3c:98: 3b:ff:fe:2d:9c:c4:9f:13:ef:40:dc:4e:1b:27:a2: e1:50:c8:e3:3a:86:c4:72:88:60:74:b7:a1:47:1c: 1d:dd:07:00:8e:b1:88:67:34:28:ba:c9:8c:ed:c6: 43:16:c2:3a:ff:94:29:29:f6:b4:13:60:01:0c:fd: 25:9b:b1:f3:86:f1:59:26:f2:a7:76:f1:fd:60:8a: ae:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:21:77:DC:8D:DA:58:56:1C:C6:8B:81:BB:ED:B5:D9:D2:0E:AF:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf31cae4-6293-38b8-ab84-725a6bd7bc95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 168.143.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:dd:a2:d4:36:1d:07:e4:32:84:e3:27:59:56:80:56:4a:7b: a1:14:24:3d:e0:c6:2d:4f:52:31:d7:08:3a:04:cd:58:5f:27: c0:9d:2e:72:37:6c:81:4f:77:99:77:7b:a6:51:25:4b:d3:3e: af:75:86:50:4a:3a:a1:d4:00:4c:0a:88:93:db:e1:94:48:80: 2c:9a:ad:44:6c:a5:36:6a:6b:10:c4:24:f8:3c:11:90:00:c4: 2d:08:a9:2c:e6:5c:3f:38:4d:3e:79:3c:1c:9a:7c:16:78:11: e7:cf:d3:8a:d1:eb:72:f8:0a:b0:87:7a:a2:64:7a:01:8f:90: 3d:7b:a8:a5:fc:a0:91:88:fe:8d:b0:47:e5:16:86:7f:ec:60: 00:cc:ff:5f:db:6c:ca:db:21:db:8d:bd:57:ff:bb:88:1d:72: 97:02:81:c9:ac:8e:10:2e:c3:49:84:ab:55:05:64:ff:0b:a5: 56:28:96:3d:a3:6b:ce:ca:c2:95:50:3f:a0:c2:52:79:8f:be: 7b:7c:2d:9e:11:6d:40:83:34:f0:0e:a4:b8:28:45:86:a2:23: b0:de:6b:c2:5f:ad:6e:a8:cd:a1:1b:f5:eb:b5:2e:01:f3:90: dc:12:1a:2e:65:4d:15:69:ac:fe:03:43:14:9e:69:63:eb:97: 5b:81:d3:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWY/gxnEqSqK3aMXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI0MDQxOTEzMDAzNloXDTI0MDcxODEzMDAzNlowLzEtMCsGA1UEAxMk NjFlZDk1N2YtMzcxYi00NWFlLTg4NGEtYjU2Yzg5ZWM4YmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsWxE+6yrbDazt1rzGNXC3EE5/AruLUjqNEd h5tNNGKi/9En1hxxLx11kgCwZUnDtt3wYzSSxC6SpIbbAk9wAjvI/6xWP/lH4P04 lQLNCr3Q6oKk44sUVX20c6on0nYSYxEuPbtEN1FAWMA6bZGljyUnhuvEymaw9oGv yQWa4yc7JXoXPDcCISUe90WWFk0x7aIiwu4BQ1smcnPqToaqCIi8fCc483fgNUB5 ougUJgknPJg7//4tnMSfE+9A3E4bJ6LhUMjjOobEcohgdLehRxwd3QcAjrGIZzQo usmM7cZDFsI6/5QpKfa0E2ABDP0lm7HzhvFZJvKndvH9YIqu5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4hd9yN2lhWHMaLgbvttdnSDq/ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmYzMWNhZTQtNjI5My0z OGI4LWFiODQtNzI1YTZiZDdiYzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqI/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALndotQ2HQfkMoTjJ1lWgFZKe6EUJD3gxi1PUjHXCDoEzVhfJ8CdLnI3 bIFPd5l3e6ZRJUvTPq91hlBKOqHUAEwKiJPb4ZRIgCyarURspTZqaxDEJPg8EZAA xC0IqSzmXD84TT55PByafBZ4EefP04rR63L4CrCHeqJkegGPkD17qKX8oJGI/o2w R+UWhn/sYADM/1/bbMrbIduNvVf/u4gdcpcCgcmsjhAuw0mEq1UFZP8LpVYolj2j a87KwpVQP6DCUnmPvnt8LZ4RbUCDNPAOpLgoRYaiI7Dea8JfrW6ozaEb9eu1LgHz kNwSGi5lTRVprP4DQxSeaWPrl1uB094= -----END CERTIFICATE-----Generated at Mon May 6 23:13:57 2024 by rpki-client on console-fra.rpki-client.org