$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa File: 8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa (raw, json) Hash identifier: dHf9oGUCgMqt3RWMsmbhvgTkUJvgWBY0uTldO3EiKng= Subject key identifier: D1:1B:71:6F:AE:E7:82:77:C5:E2:94:27:B2:D9:C2:5A:A7:DA:F0:CF Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285844F8955B4425390D3960B81080 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa Signing time: Thu 22 Feb 2024 02:00:27 +0000 ROA not before: Thu 22 Feb 2024 02:00:27 +0000 ROA not after: Wed 22 May 2024 01:00:27 +0000 asID: 22781 IP address blocks: 173.255.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f8:95:5b:44:25:39:0d:39:60:b8:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 22 02:00:27 2024 GMT Not After : May 22 01:00:27 2024 GMT Subject: CN=ff4555cb-b9a9-4229-9c4e-81048ab3812f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a6:8e:20:45:26:58:23:ce:05:6b:93:a6:1e: 18:85:c3:b1:75:7c:ab:a7:95:0e:78:a0:28:c9:07: 6c:c4:38:6a:3d:7b:98:1b:3a:13:1d:41:1f:19:5e: bf:49:5b:19:4d:f4:84:04:03:6f:48:7b:d6:31:78: b4:c3:7c:e2:ce:70:53:4b:14:e2:04:cb:52:08:e0: f7:05:45:06:20:fe:d8:62:ad:ee:c4:99:47:f2:57: 87:97:c3:9b:b2:33:98:8f:59:72:80:5d:6e:a9:da: 57:16:06:29:50:cd:b6:2e:4b:4b:db:c0:75:59:0f: c5:66:e4:f6:15:06:3a:75:b1:66:44:10:cc:57:14: d3:cf:73:0e:bc:39:97:45:7a:1b:05:98:99:16:38: fc:f4:12:4f:e6:87:c0:d7:60:8e:c7:1c:f0:dd:b6: 9b:5f:24:aa:dd:41:dd:72:90:48:f4:c3:76:21:3d: ac:c2:83:6a:1e:86:86:09:01:94:61:e6:ca:4f:a1: ae:6f:db:a8:8b:f1:be:e4:1c:34:be:1b:66:2a:47: a0:3f:12:4e:e2:ba:21:36:f3:9c:0f:18:35:ba:c5: 08:ec:08:14:bc:46:f3:fd:63:66:5e:03:ad:cd:bb: 40:c2:8a:b4:42:f4:2a:17:ca:ec:e0:24:aa:55:dc: a1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1B:71:6F:AE:E7:82:77:C5:E2:94:27:B2:D9:C2:5A:A7:DA:F0:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 173.255.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:d4:fe:08:e8:5c:9a:d4:c7:55:2f:1f:43:56:e1:1e:4e:85: 6c:a8:45:03:c8:e8:20:df:c2:40:1e:f6:59:c2:77:40:3a:1f: ce:cb:1f:e7:42:a1:43:22:66:e1:f6:db:79:af:0a:2d:29:8e: e8:66:fa:84:73:2c:17:5e:7b:c2:8e:10:22:27:19:42:4e:7a: 0d:04:f7:fc:a5:1b:14:ef:d4:d7:ac:3c:bb:95:5c:26:0f:5c: c7:b8:b0:86:d7:a5:4a:5e:30:fd:b6:f4:d6:7b:d4:b2:5b:f2: 20:b2:6f:97:86:49:ea:58:0b:f1:f0:5e:b0:f1:e6:6e:84:9e: b9:bc:4a:0b:83:8a:20:5a:d0:16:5e:31:03:ae:eb:27:28:7a: 82:27:4e:0a:d0:5b:d1:a9:ad:79:81:b2:b0:b3:eb:17:19:67: 0e:e5:0e:9d:db:ad:e6:74:79:76:82:21:61:79:0b:84:94:17: 8c:68:69:06:06:74:21:57:03:5f:ed:6f:07:1f:7a:74:be:53: 9c:12:c0:68:1a:6d:70:44:e3:b5:4f:03:d8:24:6d:bf:c3:fe: 37:ff:84:c9:9d:0b:39:bd:30:73:a5:d2:8a:82:3b:4e:bc:0b: c4:11:89:48:51:42:51:a4:bd:90:1f:dc:ce:4d:49:96:8e:b7: a6:ec:ff:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET4lVtEJTkNOWC4EIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI0MDIyMjAyMDAyN1oXDTI0MDUyMjAxMDAyN1owLzEtMCsGA1UEAxMk ZmY0NTU1Y2ItYjlhOS00MjI5LTljNGUtODEwNDhhYjM4MTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqaOIEUmWCPOBWuTph4YhcOxdXyrp5UOeKAo yQdsxDhqPXuYGzoTHUEfGV6/SVsZTfSEBANvSHvWMXi0w3ziznBTSxTiBMtSCOD3 BUUGIP7YYq3uxJlH8leHl8ObsjOYj1lygF1uqdpXFgYpUM22LktL28B1WQ/FZuT2 FQY6dbFmRBDMVxTTz3MOvDmXRXobBZiZFjj89BJP5ofA12COxxzw3babXySq3UHd cpBI9MN2IT2swoNqHoaGCQGUYebKT6Gub9uoi/G+5Bw0vhtmKkegPxJO4rohNvOc Dxg1usUI7AgUvEbz/WNmXgOtzbtAwoq0QvQqF8rs4CSqVdyhXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEbcW+u54J3xeKUJ7LZwlqn2vDPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvOGFhNGNkYTgtMDZmMy0z YTc3LThjZmYtNWU4NjAzY2U0YjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrf+oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHU/gjoXJrUx1UvH0NW4R5OhWyoRQPI6CDfwkAe9lnCd0A6H87LH+dC oUMiZuH223mvCi0pjuhm+oRzLBdee8KOECInGUJOeg0E9/ylGxTv1NesPLuVXCYP XMe4sIbXpUpeMP229NZ71LJb8iCyb5eGSepYC/HwXrDx5m6Enrm8SguDiiBa0BZe MQOu6ycoeoInTgrQW9GprXmBsrCz6xcZZw7lDp3breZ0eXaCIWF5C4SUF4xoaQYG dCFXA1/tbwcfenS+U5wSwGgabXBE47VPA9gkbb/D/jf/hMmdCzm9MHOl0oqCO068 C8QRiUhRQlGkvZAf3M5NSZaOt6bs/+4= -----END CERTIFICATE-----Generated at Thu May 9 15:30:21 2024 by rpki-client on console-fra.rpki-client.org