$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09e413b2-0a0c-3583-9188-0aeb8def3355.roa File: 09e413b2-0a0c-3583-9188-0aeb8def3355.roa (raw, json) Hash identifier: /XhVvLzhQeoJZNxoxmVUoMcZ6lh7Y6hYSd23jMYwSH0= Subject key identifier: 85:25:56:55:15:D6:DF:F4:5C:18:B3:8D:9D:E7:7E:6E:82:51:D9:74 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858410096F9AC2C45A15551218580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09e413b2-0a0c-3583-9188-0aeb8def3355.roa Signing time: Wed 22 Feb 2023 12:00:00 +0000 ROA not before: Wed 22 Feb 2023 12:00:00 +0000 ROA not after: Fri 10 Sep 2027 04:00:00 +0000 asID: 13335 IP address blocks: 172.69.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:00:96:f9:ac:2c:45:a1:55:51:21:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 22 12:00:00 2023 GMT Not After : Sep 10 04:00:00 2027 GMT Subject: CN=14e744e7-29d3-41d0-9fc5-314431c0bec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e0:2a:bb:c1:49:fe:31:12:c2:88:14:1f:87: e7:34:3a:34:45:56:0f:bc:4b:e7:84:e0:ee:d5:29: b1:73:06:9d:7b:76:a6:f5:22:f8:23:60:c6:ef:72: 26:24:7e:ff:0a:63:a5:ae:00:ae:d0:4e:61:86:8c: fa:5c:92:84:bb:b1:1c:9a:5a:d9:1e:18:63:6c:51: 4e:8e:c5:74:b4:58:8d:83:36:0e:a3:91:2f:a0:6e: f5:00:60:2d:ff:bb:de:e3:76:87:2d:52:7b:29:38: 15:d1:a0:16:30:00:3f:6a:e4:3d:0f:bc:b2:46:92: 42:16:06:97:ef:29:1e:64:51:55:8b:b3:28:3f:f9: ef:e2:86:1a:4a:f0:55:d0:66:f9:ae:47:a0:3d:cf: 78:ef:c1:b1:94:cf:59:0d:94:44:64:f0:fe:ba:20: 73:00:8c:40:82:28:4f:46:2e:ed:ed:00:53:4d:3a: 58:4d:4a:a8:be:94:fe:e7:51:9f:e2:f9:e1:9b:82: 3a:e7:46:73:c4:d7:6c:b3:a0:36:27:2f:15:be:53: 41:54:cc:61:1d:be:69:8e:17:bd:d4:2c:33:95:29: f0:c2:89:6e:9e:bb:e7:a2:53:6f:1c:12:b6:3b:e7: 7f:c7:dd:2e:3d:50:0b:43:e4:ba:17:f1:0a:df:fc: 2d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:25:56:55:15:D6:DF:F4:5C:18:B3:8D:9D:E7:7E:6E:82:51:D9:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09e413b2-0a0c-3583-9188-0aeb8def3355.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:3a:92:28:32:db:f9:8e:4b:b7:59:04:73:7d:bd:94:d2:71: 95:e7:89:18:9f:7e:4c:bd:08:d7:56:38:cf:fe:fa:79:50:78: 81:5d:68:94:95:59:cf:65:79:c6:27:d6:77:22:ea:47:6c:9a: cf:7c:41:b4:f3:56:d0:db:46:5d:ff:bd:41:3e:8c:5f:6e:0a: 31:b5:1e:78:c3:0e:9f:73:42:1a:29:b7:12:1d:42:26:9a:89: e6:3c:80:d8:83:d5:7a:1a:ae:ce:db:f4:76:75:9d:c0:f4:18: b0:ff:51:a2:ce:82:9c:02:42:5f:f9:63:43:be:20:5e:ad:68: c8:63:3c:8d:52:9c:28:3c:0a:b2:88:53:33:36:82:29:67:1c: 23:87:9f:ca:c0:51:7d:54:70:d2:10:52:db:da:31:63:ce:d2: 59:ea:23:19:fa:15:5a:2f:bc:29:d4:ee:95:96:28:b7:4d:14: 58:a7:26:6f:96:88:a2:81:d9:89:63:bc:6b:f4:0e:a1:92:18: 50:1f:9c:32:c1:77:d4:04:d6:61:f7:9c:63:cc:4f:77:0e:c3: b5:14:f8:68:d5:d3:2b:84:b3:37:a7:21:bd:8f:cb:f7:1d:ad: c8:c9:70:c5:bf:c8:23:92:97:9e:b1:32:f4:af:a7:fb:cc:3e: ac:b7:89:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEEAlvmsLEWhVVEhhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTIzMDIyMjEyMDAwMFoXDTI3MDkxMDA0MDAwMFowLzEtMCsGA1UEAxMk MTRlNzQ0ZTctMjlkMy00MWQwLTlmYzUtMzE0NDMxYzBiZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueAqu8FJ/jESwogUH4fnNDo0RVYPvEvnhODu 1Smxcwade3am9SL4I2DG73ImJH7/CmOlrgCu0E5hhoz6XJKEu7EcmlrZHhhjbFFO jsV0tFiNgzYOo5EvoG71AGAt/7ve43aHLVJ7KTgV0aAWMAA/auQ9D7yyRpJCFgaX 7ykeZFFVi7MoP/nv4oYaSvBV0Gb5rkegPc9478GxlM9ZDZREZPD+uiBzAIxAgihP Ri7t7QBTTTpYTUqovpT+51Gf4vnhm4I650ZzxNdss6A2Jy8VvlNBVMxhHb5pjhe9 1CwzlSnwwolunrvnolNvHBK2O+d/x90uPVALQ+S6F/EK3/wtNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUlVlUV1t/0XBizjZ3nfm6CUdl0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDllNDEzYjItMGEwYy0z NTgzLTkxODgtMGFlYjhkZWYzMzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJs6kigy2/mOS7dZBHN9vZTScZXniRiffky9CNdWOM/++nlQeIFdaJSV Wc9lecYn1nci6kdsms98QbTzVtDbRl3/vUE+jF9uCjG1HnjDDp9zQhoptxIdQiaa ieY8gNiD1Xoars7b9HZ1ncD0GLD/UaLOgpwCQl/5Y0O+IF6taMhjPI1SnCg8CrKI UzM2gilnHCOHn8rAUX1UcNIQUtvaMWPO0lnqIxn6FVovvCnU7pWWKLdNFFinJm+W iKKB2YljvGv0DqGSGFAfnDLBd9QE1mH3nGPMT3cOw7UU+GjV0yuEszenIb2Py/cd rcjJcMW/yCOSl56xMvSvp/vMPqy3idM= -----END CERTIFICATE-----Generated at Sat May 11 15:25:04 2024 by rpki-client on console-ams.rpki-client.org