$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/3277a19f-1890-3af9-a132-a8c716b788f2.roa File: 3277a19f-1890-3af9-a132-a8c716b788f2.roa (raw, json) Hash identifier: klN3IrcQiwedlrQRBP1Zv8a5i3C/1CVLAKZzXIRL5rw= Subject key identifier: 75:04:73:E2:2A:6A:C6:53:E1:17:5F:6A:38:3F:C7:AE:7D:68:A3:9C Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F432858452275982AA65E036F02BBB880 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/3277a19f-1890-3af9-a132-a8c716b788f2.roa Signing time: Fri 08 Mar 2024 02:00:26 +0000 ROA not before: Fri 08 Mar 2024 02:00:26 +0000 ROA not after: Thu 06 Jun 2024 01:00:26 +0000 asID: 398420 IP address blocks: 208.89.52.0/22 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:22:75:98:2a:a6:5e:03:6f:02:bb:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Mar 8 02:00:26 2024 GMT Not After : Jun 6 01:00:26 2024 GMT Subject: CN=095b0888-9e5e-440a-be3a-17eb60fb5bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bf:ca:d9:a6:c6:55:c6:89:04:54:9b:38:a6: a8:d9:47:6d:85:93:8c:b1:d9:64:bb:66:79:97:60: 07:0a:92:98:ab:e1:c6:35:b9:72:16:66:cc:c7:ee: 55:f8:28:5d:ff:4f:23:d4:e9:5b:44:4d:18:6c:b7: 10:b6:43:c3:2e:0a:b3:7d:8f:2c:3a:da:b2:8c:aa: 68:db:2b:24:7f:bc:47:b4:45:28:c4:6b:08:a5:2b: 1a:d9:27:78:8a:2e:8c:e6:af:2b:f2:2e:e3:33:b9: 04:0a:6d:f4:83:a0:62:fc:bb:b5:a8:e1:ba:17:f0: 71:29:73:e6:24:91:1c:e7:20:f1:f6:29:bf:c8:9c: 7b:2d:75:d3:64:91:c0:a7:22:bb:bb:ba:e5:73:64: 5a:54:cf:5f:35:d3:15:2e:3c:04:fb:fd:9f:55:e8: ad:f0:52:df:f0:39:58:90:ea:64:c7:bd:8d:72:d4: 0f:36:67:43:e6:fa:22:4a:6e:ac:6f:31:e4:d6:2a: c8:a3:56:e2:32:f4:2d:fb:a6:25:a6:69:af:3b:f2: 8d:da:bd:85:a8:7e:73:dc:1e:d4:d5:f7:c7:7f:26: ac:b0:d6:8a:c1:23:04:ce:8e:16:16:b3:2b:de:bd: 4a:c1:20:8f:25:ef:19:70:21:87:f5:83:5e:47:b6: 9b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:04:73:E2:2A:6A:C6:53:E1:17:5F:6A:38:3F:C7:AE:7D:68:A3:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/3277a19f-1890-3af9-a132-a8c716b788f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 208.89.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f7:59:a6:08:82:45:5b:34:c8:b9:cc:2a:46:a6:1e:4d:63: 49:50:b2:8b:26:b2:be:66:87:3a:94:ca:2a:7e:3a:0d:6f:a2: 16:f1:9f:e1:39:6f:03:35:d4:a2:09:45:96:72:6d:f1:8d:ba: 4c:bd:0e:b6:dd:01:e3:2a:7a:60:be:e2:1e:e4:0d:f9:2e:f7: 95:12:40:3a:b6:d9:32:cc:78:74:80:03:05:7d:4f:4c:28:15: 29:67:e0:8e:3a:f2:aa:18:76:f0:14:94:d6:12:61:9d:54:4c: b3:68:2d:4e:ed:67:e6:53:d7:a5:49:de:29:04:73:bb:a7:37: 2d:d0:72:2b:e3:ac:e0:f5:53:4c:36:62:91:64:ee:79:c3:87: 44:22:81:86:5a:21:2c:1b:ed:50:a7:07:1d:2c:07:d8:86:f9: d6:fe:4e:98:df:cc:17:07:42:35:94:55:62:d6:a9:72:4f:4c: 90:8b:f3:d8:6f:0f:0b:ec:56:c4:4d:e6:89:a1:22:47:bd:d9: 78:c2:38:35:27:41:4d:dd:7e:35:7b:0c:6c:0b:13:cd:96:bf: f5:b4:07:61:08:19:5b:ba:d3:17:d1:13:7d:91:9a:fe:6e:39: 30:17:bf:d9:7e:39:64:6c:00:6c:0c:72:bd:98:ed:83:2e:5a: 9d:72:c9:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUidZgqpl4DbwK7uIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI0MDMwODAyMDAyNloXDTI0MDYwNjAxMDAyNlowLzEtMCsGA1UEAxMk MDk1YjA4ODgtOWU1ZS00NDBhLWJlM2EtMTdlYjYwZmI1YmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL/K2abGVcaJBFSbOKao2UdthZOMsdlku2Z5 l2AHCpKYq+HGNblyFmbMx+5V+Chd/08j1OlbRE0YbLcQtkPDLgqzfY8sOtqyjKpo 2yskf7xHtEUoxGsIpSsa2Sd4ii6M5q8r8i7jM7kECm30g6Bi/Lu1qOG6F/BxKXPm JJEc5yDx9im/yJx7LXXTZJHApyK7u7rlc2RaVM9fNdMVLjwE+/2fVeit8FLf8DlY kOpkx72NctQPNmdD5voiSm6sbzHk1irIo1biMvQt+6YlpmmvO/KN2r2FqH5z3B7U 1ffHfyassNaKwSMEzo4WFrMr3r1KwSCPJe8ZcCGH9YNeR7ab8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUEc+IqasZT4Rdfajg/x659aKOcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMzI3N2ExOWYtMTg5MC0z YWY5LWExMzItYThjNzE2Yjc4OGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Fk0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEL3WaYIgkVbNMi5zCpGph5NY0lQsosmsr5mhzqUyip+Og1vohbxn+E5 bwM11KIJRZZybfGNuky9DrbdAeMqemC+4h7kDfku95USQDq22TLMeHSAAwV9T0wo FSln4I468qoYdvAUlNYSYZ1UTLNoLU7tZ+ZT16VJ3ikEc7unNy3QcivjrOD1U0w2 YpFk7nnDh0QigYZaISwb7VCnBx0sB9iG+db+TpjfzBcHQjWUVWLWqXJPTJCL89hv DwvsVsRN5omhIke92XjCODUnQU3dfjV7DGwLE82Wv/W0B2EIGVu60xfRE32Rmv5u OTAXv9l+OWRsAGwMcr2Y7YMuWp1yybE= -----END CERTIFICATE-----Generated at Wed May 1 02:27:56 2024 by rpki-client on console-fra.rpki-client.org