$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3a608c73-f53b-3894-9986-24db210ce7ac.roa File: 3a608c73-f53b-3894-9986-24db210ce7ac.roa (raw, json) Hash identifier: KDmQ5fS3mcCgUWDuZW3Apd9Pm8YJs96CeOKZGhKvVmM= Subject key identifier: 7E:B2:0E:78:BF:6A:07:A9:B0:4F:B8:A4:19:78:02:04:BE:9C:13:F7 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285844F5CAAB70B5AA66F5BEED2380 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3a608c73-f53b-3894-9986-24db210ce7ac.roa Signing time: Wed 21 Feb 2024 02:00:25 +0000 ROA not before: Wed 21 Feb 2024 02:00:25 +0000 ROA not after: Tue 21 May 2024 01:00:25 +0000 asID: 54203 IP address blocks: 173.255.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f5:ca:ab:70:b5:aa:66:f5:be:ed:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 21 02:00:25 2024 GMT Not After : May 21 01:00:25 2024 GMT Subject: CN=cb2dc3a8-2beb-4684-8902-26b1b4da07fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:87:84:f7:d9:49:b7:38:ef:a1:59:d4:cb:5c: a4:43:43:5b:58:81:de:91:46:d7:53:d7:d1:91:0b: 6d:4f:73:8e:34:72:49:5b:c0:0f:64:a9:0d:f7:d7: 58:10:2a:0a:42:56:b3:d3:57:57:5d:f3:46:7c:2e: 21:67:d9:99:1c:e8:0e:a7:e3:82:83:7e:e5:ff:58: 4f:92:29:a8:1e:86:24:d7:4e:12:04:56:a4:36:f5: 43:48:1b:74:ab:2f:9d:36:0b:7c:4a:4a:f1:5d:48: 2c:2b:47:e1:ee:3f:cc:2b:a4:4a:f0:42:51:52:21: 0e:a1:37:0c:70:3a:e5:09:17:2c:04:66:ae:d3:29: 86:f5:44:9b:9e:80:f0:f8:de:88:d1:d1:0f:bd:c4: 89:a3:82:2f:8c:c8:bf:9e:5b:21:a9:7c:cc:a9:87: b2:51:b0:72:37:d8:cb:23:b0:e0:3e:2c:b3:ed:4e: 82:4a:41:ff:e4:16:cd:48:77:33:5d:ee:17:43:29: d1:40:80:d2:57:14:05:23:b1:33:0f:c7:ac:74:3f: 43:b2:b2:c5:da:e4:52:3e:8b:b4:d7:a2:61:e0:7d: de:55:59:b0:fb:8a:b6:01:6b:3c:b8:34:4f:6a:c2: dc:72:fe:71:de:2a:e9:36:2f:77:85:17:09:da:bf: 74:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B2:0E:78:BF:6A:07:A9:B0:4F:B8:A4:19:78:02:04:BE:9C:13:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3a608c73-f53b-3894-9986-24db210ce7ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 173.255.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:87:70:71:67:6d:5f:a7:dd:77:c1:12:d6:02:cc:71:39:59: 98:26:d6:4d:de:9f:37:6b:51:58:9a:98:47:bf:62:93:56:07: 93:0c:98:24:07:4d:3f:46:ee:0e:91:1b:0f:ef:cd:72:07:d4: 1b:8c:5a:ea:aa:6f:cc:72:4c:35:fe:11:a2:08:e1:94:ca:5b: 1e:4a:39:4b:7b:61:02:b0:c7:74:64:00:db:8a:88:8c:be:fe: 03:c6:ec:12:f3:32:27:01:2a:8a:e3:3d:5e:63:3b:92:e0:ab: fd:c6:de:1a:bb:70:c3:f0:09:00:f8:fd:d9:2f:96:37:bb:17: 26:33:54:62:37:05:9d:16:75:d9:93:4d:d4:c7:d4:26:38:b6: 55:9e:34:9e:c8:d8:19:1f:e2:82:81:ac:a5:a3:66:d6:fb:e9: 07:87:a6:60:c2:7b:ff:73:d9:f5:e5:67:79:11:5d:25:34:cc: a8:4d:e4:06:db:63:af:3e:04:b1:81:88:04:ce:8e:eb:5d:cf: 2a:08:6e:b7:f3:49:ea:1a:7f:2b:87:9e:7e:c5:e7:d3:3f:b3: 84:5a:45:57:6e:e0:72:b8:52:cf:24:fe:c3:bf:df:23:f6:3f: a6:77:cb:74:cd:a7:62:2a:0f:df:6d:a2:bc:ae:4d:11:ef:6c: 88:a0:9f:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET1yqtwtapm9b7tI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI0MDIyMTAyMDAyNVoXDTI0MDUyMTAxMDAyNVowLzEtMCsGA1UEAxMk Y2IyZGMzYTgtMmJlYi00Njg0LTg5MDItMjZiMWI0ZGEwN2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oeE99lJtzjvoVnUy1ykQ0NbWIHekUbXU9fR kQttT3OONHJJW8APZKkN99dYECoKQlaz01dXXfNGfC4hZ9mZHOgOp+OCg37l/1hP kimoHoYk104SBFakNvVDSBt0qy+dNgt8SkrxXUgsK0fh7j/MK6RK8EJRUiEOoTcM cDrlCRcsBGau0ymG9USbnoDw+N6I0dEPvcSJo4IvjMi/nlshqXzMqYeyUbByN9jL I7DgPiyz7U6CSkH/5BbNSHczXe4XQynRQIDSVxQFI7EzD8esdD9DsrLF2uRSPou0 16Jh4H3eVVmw+4q2AWs8uDRPasLccv5x3irpNi93hRcJ2r90vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6yDni/agepsE+4pBl4AgS+nBP3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvM2E2MDhjNzMtZjUzYi0z ODk0LTk5ODYtMjRkYjIxMGNlN2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrf+qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6HcHFnbV+n3XfBEtYCzHE5WZgm1k3enzdrUViamEe/YpNWB5MMmCQH TT9G7g6RGw/vzXIH1BuMWuqqb8xyTDX+EaII4ZTKWx5KOUt7YQKwx3RkANuKiIy+ /gPG7BLzMicBKorjPV5jO5Lgq/3G3hq7cMPwCQD4/dkvlje7FyYzVGI3BZ0WddmT TdTH1CY4tlWeNJ7I2Bkf4oKBrKWjZtb76QeHpmDCe/9z2fXlZ3kRXSU0zKhN5Abb Y68+BLGBiATOjutdzyoIbrfzSeoafyuHnn7F59M/s4RaRVdu4HK4Us8k/sO/3yP2 P6Z3y3TNp2IqD99toryuTRHvbIign7k= -----END CERTIFICATE-----Generated at Thu May 9 15:30:21 2024 by rpki-client on console-fra.rpki-client.org