$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/57d3021b-d699-3504-9528-d82afc503970.roa File: 57d3021b-d699-3504-9528-d82afc503970.roa (raw, json) Hash identifier: sqx4gwIdUz2iQqa6t1HVqf+AhmeYOnghMHcOGw5YUW0= Subject key identifier: 4B:3B:5C:77:7F:AE:DE:00:82:8D:1C:0F:DE:80:4B:12:43:6D:28:0B Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285844F8955738B96C4BE3A90DC000 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/57d3021b-d699-3504-9528-d82afc503970.roa Signing time: Thu 22 Feb 2024 02:00:27 +0000 ROA not before: Thu 22 Feb 2024 02:00:27 +0000 ROA not after: Wed 22 May 2024 01:00:27 +0000 asID: 22781 IP address blocks: 108.171.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f8:95:57:38:b9:6c:4b:e3:a9:0d:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 22 02:00:27 2024 GMT Not After : May 22 01:00:27 2024 GMT Subject: CN=43ad6a6a-5808-4b21-934c-e900b94c207a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b6:69:2b:f0:ef:13:dd:7f:94:2f:1b:e2:65: f9:5b:53:14:88:1d:b7:bf:3c:76:c4:da:1f:47:06: 8e:82:d5:fe:6d:1e:9b:56:91:85:1f:55:64:bc:99: 7c:5b:c9:14:13:1b:ba:1a:67:65:73:09:08:42:b6: 2d:35:4f:72:f5:68:3a:7d:cb:90:aa:d6:3d:7d:ad: 8c:d4:c3:af:1f:ce:f1:0c:c8:98:2c:b9:63:68:14: 4a:b8:b5:1b:48:8d:62:0b:ad:8d:2f:a6:09:a1:07: 90:98:be:bc:19:d9:f9:78:21:45:72:50:37:79:7e: 4b:40:e7:82:ff:fe:6e:c7:9b:8d:4b:81:37:2a:44: 1f:35:4f:2d:ec:23:7c:6e:4f:0a:e9:53:90:cc:70: 7d:2c:3d:fb:b0:2f:62:85:fe:51:b6:5c:8b:23:97: c2:49:cc:f3:93:1b:fe:51:76:97:2b:7e:61:18:86: ca:fa:01:df:04:fa:0b:ba:2f:df:01:79:eb:ed:1f: ce:1a:49:a3:6e:7e:b5:4e:41:b9:bb:9b:ec:18:21: c6:60:b6:42:c2:ce:dc:ce:22:b4:c3:26:b6:0e:db: 41:77:7f:c8:9c:7f:25:0b:10:20:78:47:be:b5:7d: d7:90:dd:be:ce:c1:f6:fd:1a:ee:8a:1c:16:4d:34: b5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3B:5C:77:7F:AE:DE:00:82:8D:1C:0F:DE:80:4B:12:43:6D:28:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/57d3021b-d699-3504-9528-d82afc503970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 108.171.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:5e:ca:d4:38:90:fd:24:ca:9a:86:8d:ad:46:7e:78:cd:06: 97:d0:10:03:aa:13:5d:0a:5a:4c:ce:7b:35:38:a7:c2:6e:52: 39:97:16:ff:0e:48:3b:7a:a0:0c:89:87:16:e1:f5:c2:dc:a6: ee:e3:f8:8a:c2:ad:29:f5:92:9f:41:2b:6d:04:6a:3d:33:01: 35:97:ad:52:c6:87:68:a6:f1:fc:37:9a:fe:b8:ca:f9:7e:b7: 0e:b5:a3:3c:b6:c5:ce:b7:28:ad:a5:b8:73:0e:6f:98:58:19: f9:49:e3:d6:95:c4:1e:9a:ec:8d:87:61:62:26:2a:7b:41:fe: 0a:92:ae:0a:a6:da:01:b4:71:25:99:04:9e:6b:26:b1:af:77: 17:2c:54:4d:93:84:eb:c4:95:00:65:a0:02:b6:3b:8e:a6:46: bb:bf:70:21:4c:2c:9b:42:f6:bf:50:77:b5:0a:0d:c9:ea:1f: bc:75:56:c6:da:1c:1c:67:30:94:be:06:37:6d:e5:e8:95:57: 69:21:a1:09:99:5a:d5:10:7d:a8:44:b0:5b:fa:2e:dd:cd:8d: 69:b8:5b:c7:4f:42:9a:36:df:92:a8:85:79:71:d7:52:35:c7: 1f:7d:1f:2d:d6:49:c6:20:f5:81:97:06:16:d5:1a:c8:45:13: f8:2f:25:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET4lVc4uWxL46kNwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI0MDIyMjAyMDAyN1oXDTI0MDUyMjAxMDAyN1owLzEtMCsGA1UEAxMk NDNhZDZhNmEtNTgwOC00YjIxLTkzNGMtZTkwMGI5NGMyMDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrZpK/DvE91/lC8b4mX5W1MUiB23vzx2xNof RwaOgtX+bR6bVpGFH1VkvJl8W8kUExu6GmdlcwkIQrYtNU9y9Wg6fcuQqtY9fa2M 1MOvH87xDMiYLLljaBRKuLUbSI1iC62NL6YJoQeQmL68Gdn5eCFFclA3eX5LQOeC //5ux5uNS4E3KkQfNU8t7CN8bk8K6VOQzHB9LD37sC9ihf5RtlyLI5fCSczzkxv+ UXaXK35hGIbK+gHfBPoLui/fAXnr7R/OGkmjbn61TkG5u5vsGCHGYLZCws7cziK0 wya2DttBd3/InH8lCxAgeEe+tX3XkN2+zsH2/RruihwWTTS1ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEs7XHd/rt4Ago0cD96ASxJDbSgLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNTdkMzAyMWItZDY5OS0z NTA0LTk1MjgtZDgyYWZjNTAzOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbKtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACteytQ4kP0kypqGja1GfnjNBpfQEAOqE10KWkzOezU4p8JuUjmXFv8O SDt6oAyJhxbh9cLcpu7j+IrCrSn1kp9BK20Eaj0zATWXrVLGh2im8fw3mv64yvl+ tw61ozy2xc63KK2luHMOb5hYGflJ49aVxB6a7I2HYWImKntB/gqSrgqm2gG0cSWZ BJ5rJrGvdxcsVE2ThOvElQBloAK2O46mRru/cCFMLJtC9r9Qd7UKDcnqH7x1Vsba HBxnMJS+Bjdt5eiVV2khoQmZWtUQfahEsFv6Lt3NjWm4W8dPQpo235KohXlx11I1 xx99Hy3WScYg9YGXBhbVGshFE/gvJYE= -----END CERTIFICATE-----Generated at Fri May 10 16:50:02 2024 by rpki-client on console-ams.rpki-client.org