$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/dda2e103-179f-3b96-ad9c-3fdcdfd96908.roa File: dda2e103-179f-3b96-ad9c-3fdcdfd96908.roa (raw, json) Hash identifier: vE3OB1T/5UNC8NqfwUxKIcrfzst44gn493eY7lLOqFA= Subject key identifier: 42:3A:36:08:36:D3:88:9B:F1:F4:12:2D:01:B5:05:7C:B5:39:FD:D8 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285844F9FAB310DEE92BABDD6E1800 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/dda2e103-179f-3b96-ad9c-3fdcdfd96908.roa Signing time: Thu 22 Feb 2024 14:00:30 +0000 ROA not before: Thu 22 Feb 2024 14:00:30 +0000 ROA not after: Wed 22 May 2024 13:00:30 +0000 asID: 11042 IP address blocks: 207.204.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f9:fa:b3:10:de:e9:2b:ab:dd:6e:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 22 14:00:30 2024 GMT Not After : May 22 13:00:30 2024 GMT Subject: CN=34c843a6-bcf3-4a0d-ae14-b14fb87c1f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:71:99:c9:39:2f:81:f2:42:36:b5:c1:07:06: 2f:3a:4f:06:eb:aa:09:9a:20:ce:19:ab:42:8b:c3: 97:f0:f4:8c:d4:3a:b6:3f:17:7e:f8:0a:90:e8:87: dd:3d:16:fe:cd:79:ac:8a:53:d6:07:7a:10:6e:d6: 8a:aa:fe:e7:1a:89:6e:7e:8c:14:1b:86:0a:5a:dc: 57:66:07:e4:e0:db:32:59:59:08:7c:24:b2:85:10: 06:c2:84:ab:95:2f:b8:bb:dc:02:8d:93:54:ee:b3: 7a:c0:48:10:22:e9:df:b8:81:6b:ec:0e:ce:c8:e8: 28:56:03:68:c9:03:aa:d0:f8:3d:34:10:99:56:ff: c9:c0:5f:da:d1:3e:ba:17:5a:e4:cd:cb:3c:84:e9: 1b:bc:02:85:a7:66:01:04:7a:d6:f6:b8:53:e2:74: 19:52:31:df:f9:b4:1d:15:f4:54:6f:ff:32:02:c3: f7:64:d8:ba:3f:d9:c9:6c:70:1b:a2:ae:d5:2f:f7: 0d:63:06:d8:15:35:dc:3c:eb:19:8f:a4:91:c4:6d: 6e:06:18:6c:13:00:69:2c:b2:42:b4:a7:e4:33:be: 7c:c1:59:a1:ef:ba:d4:16:99:06:34:e1:77:eb:25: 02:ba:ff:a5:5b:08:1c:2b:0c:21:44:24:c5:bc:cb: ed:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3A:36:08:36:D3:88:9B:F1:F4:12:2D:01:B5:05:7C:B5:39:FD:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/dda2e103-179f-3b96-ad9c-3fdcdfd96908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 207.204.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ec:0b:b2:5c:0c:91:65:86:ec:18:77:38:89:58:3a:fb:76: 94:cf:75:27:93:55:fc:ee:30:e0:ec:22:46:1c:7b:84:81:5b: 74:ee:4c:ba:a5:c0:e7:14:ae:c6:fd:8d:45:d4:c9:39:49:5a: 33:cd:ff:4e:0f:b5:f3:25:ba:d8:73:7f:61:f2:70:0f:4c:6b: 22:9a:20:c7:29:39:3d:1b:19:de:e4:a4:f4:a1:73:51:ae:02: f9:4f:17:b3:40:e2:0a:2c:be:9a:00:38:eb:3e:b9:93:b6:6e: b8:85:16:d5:4a:35:a5:95:01:e0:16:f2:e7:9e:b7:8e:c3:c6: 5a:2c:96:6a:d8:cd:92:b8:6a:31:06:9e:ed:1a:27:88:31:40: b5:d8:7d:b6:9e:07:69:86:42:60:c3:5c:5d:7d:e9:f2:76:45: d0:7e:75:7d:ce:f5:1d:5a:2e:20:47:5a:17:7c:b0:0b:33:1d: a5:ac:32:ca:1d:d1:6a:ad:54:1e:79:4b:db:e7:57:12:48:a9: e9:b2:4e:4c:7e:6f:ac:06:28:4d:12:c0:0f:48:30:db:6d:bb: 66:b1:fb:e0:cb:51:ad:ec:81:82:51:39:16:aa:0a:8c:94:4c: 4e:ad:30:2d:59:7f:0e:1e:0d:b2:e9:6a:f4:14:4b:d5:80:0c: 02:12:8f:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET5+rMQ3ukrq91uGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI0MDIyMjE0MDAzMFoXDTI0MDUyMjEzMDAzMFowLzEtMCsGA1UEAxMk MzRjODQzYTYtYmNmMy00YTBkLWFlMTQtYjE0ZmI4N2MxZjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23GZyTkvgfJCNrXBBwYvOk8G66oJmiDOGatC i8OX8PSM1Dq2Pxd++AqQ6IfdPRb+zXmsilPWB3oQbtaKqv7nGolufowUG4YKWtxX Zgfk4NsyWVkIfCSyhRAGwoSrlS+4u9wCjZNU7rN6wEgQIunfuIFr7A7OyOgoVgNo yQOq0Pg9NBCZVv/JwF/a0T66F1rkzcs8hOkbvAKFp2YBBHrW9rhT4nQZUjHf+bQd FfRUb/8yAsP3ZNi6P9nJbHAboq7VL/cNYwbYFTXcPOsZj6SRxG1uBhhsEwBpLLJC tKfkM758wVmh77rUFpkGNOF36yUCuv+lWwgcKwwhRCTFvMvt4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEI6Ngg204ib8fQSLQG1BXy1Of3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZGRhMmUxMDMtMTc5Zi0z Yjk2LWFkOWMtM2ZkY2RmZDk2OTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz8z4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7sC7JcDJFlhuwYdziJWDr7dpTPdSeTVfzuMODsIkYce4SBW3TuTLql wOcUrsb9jUXUyTlJWjPN/04PtfMluthzf2HycA9MayKaIMcpOT0bGd7kpPShc1Gu AvlPF7NA4gosvpoAOOs+uZO2briFFtVKNaWVAeAW8ueet47DxloslmrYzZK4ajEG nu0aJ4gxQLXYfbaeB2mGQmDDXF196fJ2RdB+dX3O9R1aLiBHWhd8sAszHaWsMsod 0WqtVB55S9vnVxJIqemyTkx+b6wGKE0SwA9IMNttu2ax++DLUa3sgYJRORaqCoyU TE6tMC1Zfw4eDbLpavQUS9WADAISj1g= -----END CERTIFICATE-----Generated at Thu May 9 15:20:26 2024 by rpki-client on console-ams.rpki-client.org