$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/867ffd2c-0f1a-38f5-92d2-42f194e02b2f.roa File: 867ffd2c-0f1a-38f5-92d2-42f194e02b2f.roa (raw, json) Hash identifier: XFWS+ZmAPRy7yvv3Xnrrq0hWXKnddR3Ggtc+s3O7754= Subject key identifier: F3:E9:EA:F0:1B:AB:A4:00:45:81:89:FF:1D:E4:79:A3:C2:AB:9C:4E Certificate issuer: /CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Certificate serial: 010D0C9F43285845A9BE18AF0399F9FF94FD0D00 Authority key identifier: E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/867ffd2c-0f1a-38f5-92d2-42f194e02b2f.roa Signing time: Thu 25 Apr 2024 13:00:33 +0000 ROA not before: Thu 25 Apr 2024 13:00:33 +0000 ROA not after: Wed 24 Jul 2024 13:00:33 +0000 asID: 16509 IP address blocks: 192.131.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a9:be:18:af:03:99:f9:ff:94:fd:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Validity Not Before: Apr 25 13:00:33 2024 GMT Not After : Jul 24 13:00:33 2024 GMT Subject: CN=ff33dab3-5513-455c-b219-a97254d4a471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:94:43:3a:5f:31:3d:99:75:fd:63:5a:3d:25: 75:bd:3f:d4:ed:46:02:93:7b:e2:43:d6:c3:a4:fe: a5:95:96:87:19:f9:82:9f:de:63:b2:6b:65:5f:13: 38:0f:d6:b0:f8:61:af:6a:d1:bc:c5:f0:6c:b0:5d: c3:81:91:10:81:57:6e:92:e9:be:c1:31:64:8d:1d: bc:4c:1f:08:45:f8:13:cc:73:06:3d:24:8c:aa:83: 8f:1b:03:e3:51:a7:6f:3b:57:55:93:47:05:fb:29: 76:05:33:b7:f7:55:71:1f:7d:c6:96:98:78:d2:d6: b6:d8:5b:b9:da:bb:2b:be:56:9b:e4:7d:67:bc:c7: 0e:84:fb:f6:4b:7d:9a:3c:3f:55:36:8f:be:d3:6a: fa:75:03:73:be:f8:d8:87:01:ec:a1:67:ea:81:92: a9:31:c7:85:20:e8:dc:9e:7f:a6:da:c8:38:85:c5: 2b:be:83:02:15:4e:7e:ca:e7:b4:43:b2:73:4a:3f: e8:af:ee:6e:69:21:10:5f:ce:0d:59:f9:31:20:f7: 3c:4f:8b:21:50:6a:72:3d:93:ab:21:a5:82:82:7d: f3:bb:7f:5f:1b:59:39:ab:01:6d:55:61:3f:48:14: 27:5b:3c:87:91:91:2a:b1:30:9e:f4:00:37:3d:d3: 71:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E9:EA:F0:1B:AB:A4:00:45:81:89:FF:1D:E4:79:A3:C2:AB:9C:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/867ffd2c-0f1a-38f5-92d2-42f194e02b2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl X509v3 Authority Key Identifier: keyid:E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer sbgp-ipAddrBlock: critical IPv4: 192.131.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ed:8e:9d:23:ee:5c:43:2b:0b:18:43:3d:9a:5d:8b:ed:0b: 7d:f0:59:b1:52:63:1c:6b:a8:cf:da:ef:b0:ea:52:0a:ed:54: ed:15:77:7e:b7:b5:de:87:1f:2e:cf:ff:74:0a:49:f8:d6:7c: 8d:b5:a4:86:54:bc:5b:58:d4:ae:51:42:b2:a4:7b:f1:1e:12: 31:b0:fb:1e:3d:60:4f:d9:b4:1e:3d:db:6c:a0:51:c8:65:0b: b1:94:6b:5f:4a:b6:25:7b:75:ed:f2:f3:2b:7f:dc:02:3e:59: ba:00:74:ba:c2:9c:2f:b0:64:c1:48:e4:12:69:65:1d:dd:2a: 9a:00:dd:df:67:ba:50:cb:16:c6:b2:d0:b2:1b:0e:42:c0:85: 7f:6a:07:67:da:a1:f8:32:f9:bd:0d:f5:5b:b2:b5:69:76:ec: 6b:d5:b9:5a:fe:c2:ed:51:71:e5:69:02:42:14:61:cf:2d:19: c0:93:de:b4:34:d2:2c:51:6f:b6:73:a7:fd:88:16:39:5c:ba: 3c:f7:d1:8c:67:e0:8f:38:d3:db:af:ab:3f:a2:b6:97:9b:a7: ba:e2:ad:36:bb:9a:4b:f5:a3:c4:6f:b8:33:56:1a:48:f2:e9: d7:c0:5a:5f:05:dd:b1:27:c3:12:fa:55:ca:2c:25:5d:ee:6b: dd:a5:79:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWpvhivA5n5/5T9DQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU2ZDZiYWMtMWExNi00YjBjLWI1NzgtOTkyZmYxYjk0 NWM0MB4XDTI0MDQyNTEzMDAzM1oXDTI0MDcyNDEzMDAzM1owLzEtMCsGA1UEAxMk ZmYzM2RhYjMtNTUxMy00NTVjLWIyMTktYTk3MjU0ZDRhNDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJRDOl8xPZl1/WNaPSV1vT/U7UYCk3viQ9bD pP6llZaHGfmCn95jsmtlXxM4D9aw+GGvatG8xfBssF3DgZEQgVdukum+wTFkjR28 TB8IRfgTzHMGPSSMqoOPGwPjUadvO1dVk0cF+yl2BTO391VxH33Glph40ta22Fu5 2rsrvlab5H1nvMcOhPv2S32aPD9VNo++02r6dQNzvvjYhwHsoWfqgZKpMceFIOjc nn+m2sg4hcUrvoMCFU5+yue0Q7JzSj/or+5uaSEQX84NWfkxIPc8T4shUGpyPZOr IaWCgn3zu39fG1k5qwFtVWE/SBQnWzyHkZEqsTCe9AA3PdNxeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPp6vAbq6QARYGJ/x3keaPCq5xOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZk NmJhYy0xYTE2LTRiMGMtYjU3OC05OTJmZjFiOTQ1YzQvODY3ZmZkMmMtMGYxYS0z OGY1LTkyZDItNDJmMTk0ZTAyYjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTU2ZDZiYWMtMWExNi00YjBjLWI1 NzgtOTkyZmYxYjk0NWM0LzE1NmQ2YmFjLTFhMTYtNGIwYy1iNTc4LTk5MmZmMWI5 NDVjNC5jcmwwHwYDVR0jBBgwFoAU53jqrc4KmjfoNgHD2ir7bXsaYFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZkNmJhYy0xYTE2LTRiMGMtYjU3OC05OTJm ZjFiOTQ1YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwINYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXtjp0j7lxDKwsYQz2aXYvtC33wWbFSYxxrqM/a77DqUgrtVO0Vd363 td6HHy7P/3QKSfjWfI21pIZUvFtY1K5RQrKke/EeEjGw+x49YE/ZtB4922ygUchl C7GUa19KtiV7de3y8yt/3AI+WboAdLrCnC+wZMFI5BJpZR3dKpoA3d9nulDLFsay 0LIbDkLAhX9qB2faofgy+b0N9VuytWl27GvVuVr+wu1RceVpAkIUYc8tGcCT3rQ0 0ixRb7Zzp/2IFjlcujz30Yxn4I8409uvqz+itpebp7rirTa7mkv1o8RvuDNWGkjy 6dfAWl8F3bEnwxL6VcosJV3ua92leeQ= -----END CERTIFICATE-----Generated at Thu May 2 14:53:26 2024 by rpki-client on console-fra.rpki-client.org