$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21d04289-2f11-33da-91ed-4e1e5b825ad1.roa File: 21d04289-2f11-33da-91ed-4e1e5b825ad1.roa (raw, json) Hash identifier: qsnP59p19iX+rEXeu1+fS/w/bIzaLINoV8IWh/Ksg1A= Subject key identifier: 1A:2A:61:FE:F6:66:43:58:60:4C:5D:BE:53:10:DC:4B:AC:6A:CE:05 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285844A5E6F9CF77C1D180B151AA00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21d04289-2f11-33da-91ed-4e1e5b825ad1.roa Signing time: Mon 22 Jan 2024 12:00:00 +0000 ROA not before: Mon 22 Jan 2024 12:00:00 +0000 ROA not after: Mon 16 Sep 2024 04:00:00 +0000 asID: 13335 IP address blocks: 162.158.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:a5:e6:f9:cf:77:c1:d1:80:b1:51:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 22 12:00:00 2024 GMT Not After : Sep 16 04:00:00 2024 GMT Subject: CN=4b872178-176f-4560-8184-989ca8b12bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:82:05:40:c5:70:c4:cd:6d:86:c6:d6:c9:57: 03:a3:da:08:23:29:62:ed:c6:37:38:b3:09:50:71: ee:a3:7f:5a:89:77:e5:58:fa:3b:48:9c:90:62:a4: 2c:5d:2b:db:5c:1f:73:28:f9:11:b2:08:28:d0:97: 12:d4:05:32:11:2f:4b:ea:ae:7c:6b:5c:68:e8:21: d1:00:e2:cc:4b:e8:71:24:f4:8e:df:aa:b6:5b:85: 4d:69:3b:ee:44:03:b1:5e:a0:a3:f2:63:13:00:ad: 47:b6:6a:aa:b8:18:67:be:ff:62:43:fc:08:68:1a: e2:3a:ae:95:46:4d:00:51:88:2a:08:f2:41:53:77: cb:f9:97:e8:f3:0a:f4:9d:89:6e:de:4e:f0:ba:cc: 9b:8e:6a:b4:bb:4d:c1:09:ac:b7:e2:08:c5:75:87: 43:18:bb:55:26:1e:39:22:e1:8f:9e:44:e8:70:d8: 13:36:47:e4:9e:b5:b0:52:50:1f:43:a3:82:b3:3d: 69:33:21:42:b1:9f:63:a2:17:28:f6:e3:58:75:92: f5:cf:b7:bc:4b:43:d2:49:6f:c3:94:55:9e:8d:32: 05:3e:7e:4e:64:10:aa:5e:97:c0:38:d9:45:b1:13: da:bd:b4:ce:80:11:82:d2:1a:d2:0a:b1:b4:12:25: ed:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2A:61:FE:F6:66:43:58:60:4C:5D:BE:53:10:DC:4B:AC:6A:CE:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21d04289-2f11-33da-91ed-4e1e5b825ad1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:2d:f2:8a:59:f6:53:9b:ed:05:3b:44:ac:7b:82:c5:8d:2c: 3f:0f:ad:b5:9f:8f:95:4c:62:43:78:1f:d3:db:51:66:9b:d9: 0f:fe:81:d5:d3:86:99:07:af:2b:30:15:52:78:d5:2e:64:53: 7f:ab:3d:97:a7:88:56:22:b3:0c:62:22:56:4e:a0:5a:4e:46: 86:07:7b:78:93:e3:30:f9:f4:d2:ea:7b:5a:f0:c2:00:e5:3c: b8:91:5a:79:25:ab:55:46:47:07:b2:50:df:c2:71:4c:b5:38: c8:b8:8c:cf:5c:7a:55:02:54:25:8b:eb:3d:d9:c0:bc:8f:18: be:d3:ed:04:0f:11:a8:10:12:4e:7e:64:9a:8d:64:e2:e9:42: cd:2d:82:0c:1d:8c:83:5b:73:8c:1a:ae:4a:28:a5:3c:ce:75: c1:31:b1:89:e1:aa:53:1f:20:66:0b:9b:da:3f:a1:09:78:2c: 29:c4:b0:f8:c3:4e:f9:81:4b:e5:bb:e9:92:6a:80:d9:b4:fe: a2:6f:37:6c:5f:ab:de:26:de:d3:e7:e0:99:6a:5e:1d:cd:a1: ea:ca:7f:53:73:2c:26:a1:ed:33:72:30:70:5c:01:36:5a:6b: 1b:65:ba:b2:76:0b:f4:1c:c9:d6:32:e8:29:b3:77:af:68:51: 7a:15:6b:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESl5vnPd8HRgLFRqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDEyMjEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk NGI4NzIxNzgtMTc2Zi00NTYwLTgxODQtOTg5Y2E4YjEyYmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYIFQMVwxM1thsbWyVcDo9oIIyli7cY3OLMJ UHHuo39aiXflWPo7SJyQYqQsXSvbXB9zKPkRsggo0JcS1AUyES9L6q58a1xo6CHR AOLMS+hxJPSO36q2W4VNaTvuRAOxXqCj8mMTAK1HtmqquBhnvv9iQ/wIaBriOq6V Rk0AUYgqCPJBU3fL+Zfo8wr0nYlu3k7wusybjmq0u03BCay34gjFdYdDGLtVJh45 IuGPnkTocNgTNkfknrWwUlAfQ6OCsz1pMyFCsZ9johco9uNYdZL1z7e8S0PSSW/D lFWejTIFPn5OZBCqXpfAONlFsRPavbTOgBGC0hrSCrG0EiXt8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoqYf72ZkNYYExdvlMQ3Eusas4FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjFkMDQyODktMmYxMS0z M2RhLTkxZWQtNGUxZTViODI1YWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkt8opZ9lOb7QU7RKx7gsWNLD8PrbWfj5VMYkN4H9PbUWab2Q/+gdXT hpkHryswFVJ41S5kU3+rPZeniFYiswxiIlZOoFpORoYHe3iT4zD59NLqe1rwwgDl PLiRWnklq1VGRweyUN/CcUy1OMi4jM9celUCVCWL6z3ZwLyPGL7T7QQPEagQEk5+ ZJqNZOLpQs0tggwdjINbc4warkoopTzOdcExsYnhqlMfIGYLm9o/oQl4LCnEsPjD TvmBS+W76ZJqgNm0/qJvN2xfq94m3tPn4JlqXh3NoerKf1NzLCah7TNyMHBcATZa axtlurJ2C/QcydYy6Cmzd69oUXoVa44= -----END CERTIFICATE-----Generated at Sun May 12 03:30:12 2024 by rpki-client on console-ams.rpki-client.org