$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/7949338e-45a1-3525-b96e-1f1f879e2b21.roa File: 7949338e-45a1-3525-b96e-1f1f879e2b21.roa (raw, json) Hash identifier: WKmrgFZqV/RPKpJF4QLcOoMgVGL/QFNayLvL8LdrrY0= Subject key identifier: 11:A3:5B:1A:C4:A9:36:FD:61:B9:FE:ED:82:45:BB:C0:C7:89:E2:83 Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Certificate serial: 010D0C9F43285845612869FBE906BBF4BD909200 Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/7949338e-45a1-3525-b96e-1f1f879e2b21.roa Signing time: Sat 30 Mar 2024 13:00:38 +0000 ROA not before: Sat 30 Mar 2024 13:00:38 +0000 ROA not after: Fri 28 Jun 2024 13:00:38 +0000 asID: 1403 IP address blocks: 146.71.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:61:28:69:fb:e9:06:bb:f4:bd:90:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Validity Not Before: Mar 30 13:00:38 2024 GMT Not After : Jun 28 13:00:38 2024 GMT Subject: CN=a22d928e-a02c-416f-b084-1aad2306038a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c2:27:19:98:ba:5c:4c:c1:54:25:84:87:40: 3c:1c:f0:2f:9e:63:b0:75:b3:20:c7:1d:08:f3:45: f1:b7:0d:95:00:52:39:3f:6d:be:0d:e3:76:aa:e5: 40:81:b8:fb:e1:7b:31:72:e6:7d:f8:8b:ae:01:f9: 65:6d:37:1e:29:35:a6:0a:22:da:d4:ff:04:f2:d2: 53:1a:17:1f:12:c9:18:e3:bb:4b:c1:cd:13:f6:bb: 07:9b:e9:fd:b1:9d:b3:b6:15:9d:ac:cf:29:2d:c1: 5d:36:50:2f:8a:8e:2f:b3:e0:b3:e6:a7:0f:8c:8b: 76:62:72:d8:ac:a2:3b:f4:3d:a3:8e:88:12:2f:9a: f4:31:69:eb:fb:8d:a7:04:bb:27:4a:27:22:fb:43: 27:33:6b:71:6a:b3:cc:88:30:d3:df:3f:e8:10:03: c1:b3:e4:86:ea:4a:9a:b2:45:51:ce:80:6b:b3:70: 97:65:4d:00:3c:4e:23:61:2d:a2:51:02:01:c7:ab: ea:51:ef:4c:5b:60:0d:d5:cb:2c:63:e0:a7:53:a5: 64:47:a2:b6:a7:d6:b1:bc:88:1b:0a:d5:97:64:b5: fc:c3:1b:e8:5f:3d:29:3b:81:95:e4:d8:b6:47:91: 40:23:fd:fc:07:dd:a4:bd:02:7b:bd:d1:7d:77:85: 9a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A3:5B:1A:C4:A9:36:FD:61:B9:FE:ED:82:45:BB:C0:C7:89:E2:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/7949338e-45a1-3525-b96e-1f1f879e2b21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl X509v3 Authority Key Identifier: keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer sbgp-ipAddrBlock: critical IPv4: 146.71.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:05:46:b6:ce:b6:b6:7f:5e:fa:e2:fd:44:80:dd:78:1f:d0: 88:be:47:b7:48:e8:8e:b1:3c:cd:11:b8:3c:6d:d3:78:d0:ff: d9:4c:72:63:87:66:d7:1d:7c:20:a1:62:64:26:8e:a2:1d:9c: f5:df:4f:54:10:b1:1d:d0:a1:c3:e1:20:ac:65:89:9f:2b:b6: 38:fa:83:7f:a7:52:23:4f:62:30:23:a3:b6:c2:90:06:ab:68: e8:6a:d7:04:7b:0a:d0:c5:43:7b:43:8a:8f:69:d3:12:1e:22: 89:b5:c1:fa:f3:35:ae:5d:83:1e:ef:2b:9b:a5:4a:6a:3f:37: 4b:a0:56:f6:e6:01:8d:5c:27:76:21:f7:fb:13:e2:90:4b:fd: ab:46:f4:39:0a:82:c7:2c:15:ea:b0:81:71:ab:39:b2:75:2f: 0d:52:23:cc:c7:b3:a4:23:0e:5b:16:bb:aa:a9:62:7d:fb:0d: 56:eb:91:4e:05:d3:ee:a9:f0:f3:3a:4c:8c:28:b7:ba:e7:ca: c0:09:88:26:8a:4c:31:5e:5f:18:66:65:35:bf:c2:e3:83:d2: 64:dd:b4:08:94:83:ff:a5:c7:3f:8d:00:94:4f:d3:96:a5:44: d6:d5:b4:cd:87:bb:be:67:09:18:5a:06:8b:30:ef:53:b7:de: 29:2a:24:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVhKGn76Qa79L2QkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2 Nzk4MB4XDTI0MDMzMDEzMDAzOFoXDTI0MDYyODEzMDAzOFowLzEtMCsGA1UEAxMk YTIyZDkyOGUtYTAyYy00MTZmLWIwODQtMWFhZDIzMDYwMzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsInGZi6XEzBVCWEh0A8HPAvnmOwdbMgxx0I 80Xxtw2VAFI5P22+DeN2quVAgbj74XsxcuZ9+IuuAfllbTceKTWmCiLa1P8E8tJT GhcfEskY47tLwc0T9rsHm+n9sZ2zthWdrM8pLcFdNlAvio4vs+Cz5qcPjIt2YnLY rKI79D2jjogSL5r0MWnr+42nBLsnSici+0MnM2txarPMiDDT3z/oEAPBs+SG6kqa skVRzoBrs3CXZU0APE4jYS2iUQIBx6vqUe9MW2AN1cssY+CnU6VkR6K2p9axvIgb CtWXZLX8wxvoXz0pO4GV5Ni2R5FAI/38B92kvQJ7vdF9d4WagwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGjWxrEqTb9Ybn+7YJFu8DHieKDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvNzk0OTMzOGUtNDVhMS0z NTI1LWI5NmUtMWYxZjg3OWUyYjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl YTQ5YzY3OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkkcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUFRrbOtrZ/Xvri/USA3Xgf0Ii+R7dI6I6xPM0RuDxt03jQ/9lMcmOH ZtcdfCChYmQmjqIdnPXfT1QQsR3QocPhIKxliZ8rtjj6g3+nUiNPYjAjo7bCkAar aOhq1wR7CtDFQ3tDio9p0xIeIom1wfrzNa5dgx7vK5ulSmo/N0ugVvbmAY1cJ3Yh 9/sT4pBL/atG9DkKgscsFeqwgXGrObJ1Lw1SI8zHs6QjDlsWu6qpYn37DVbrkU4F 0+6p8PM6TIwot7rnysAJiCaKTDFeXxhmZTW/wuOD0mTdtAiUg/+lxz+NAJRP05al RNbVtM2Hu75nCRhaBosw71O33ikqJMM= -----END CERTIFICATE-----Generated at Fri May 10 00:39:32 2024 by rpki-client on console-ams.rpki-client.org