$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/0335608f-a9cd-3396-90f3-61164a83f73d.roa File: 0335608f-a9cd-3396-90f3-61164a83f73d.roa (raw, json) Hash identifier: o9RL3Kahwc7E0nCJCDnr/MkOgkLXXT5xOn9gxo2CDJc= Subject key identifier: 49:49:4E:A5:BD:D0:1A:32:D9:48:05:DC:58:16:87:41:5D:19:E2:98 Certificate issuer: /CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Certificate serial: 010D0C9F43285845280AF90711A11B6FE9E644C0 Authority key identifier: D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/0335608f-a9cd-3396-90f3-61164a83f73d.roa Signing time: Sun 10 Mar 2024 02:00:25 +0000 ROA not before: Sun 10 Mar 2024 02:00:25 +0000 ROA not after: Sat 08 Jun 2024 01:00:25 +0000 asID: 400245 IP address blocks: 165.140.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:28:0a:f9:07:11:a1:1b:6f:e9:e6:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Validity Not Before: Mar 10 02:00:25 2024 GMT Not After : Jun 8 01:00:25 2024 GMT Subject: CN=5f173306-533a-4c7d-9a0a-e7f0d9a7a4de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d6:f4:3f:3f:53:53:e5:76:92:b9:4c:96:6b: ec:4e:a7:f6:ad:7b:0c:6e:f1:86:0a:10:d6:9d:5d: db:e6:6c:1b:ac:04:74:1a:59:4a:cd:de:6d:21:e8: b9:45:7a:47:79:c0:91:02:94:78:26:00:c5:1e:92: 70:1c:69:f5:df:45:af:64:14:d8:d4:5b:a9:b6:2a: 47:35:a8:e5:f5:3b:eb:ee:70:93:93:99:70:0a:c5: 7f:fa:e5:4b:82:b9:0c:e9:af:d8:ff:35:bc:13:2a: 20:8a:ef:0a:e5:66:60:de:f1:16:44:ad:64:0a:40: 07:4c:fc:69:77:b5:0b:30:29:f7:c4:22:fa:d4:e1: e5:15:65:85:c4:74:39:ec:4b:98:a0:23:9f:2f:60: f0:c4:ec:7e:72:da:5b:c1:59:74:93:15:3e:8c:a9: 89:85:71:38:11:a0:3c:00:6d:f0:3e:d1:57:24:ca: 9a:c0:c9:5b:dd:3e:2f:cf:92:33:6c:e5:5c:4d:d7: fc:7b:5e:db:a0:0a:aa:3a:e6:8a:4e:1b:f9:f0:72: 7b:9c:88:12:c5:85:2e:f5:98:55:19:08:69:be:ee: 7e:7e:4e:3a:41:2f:3b:fa:e9:ce:25:8a:88:83:ee: 0a:73:5f:7e:d3:26:b3:08:80:59:99:d8:a4:2f:04: 26:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:49:4E:A5:BD:D0:1A:32:D9:48:05:DC:58:16:87:41:5D:19:E2:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/0335608f-a9cd-3396-90f3-61164a83f73d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl X509v3 Authority Key Identifier: keyid:D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer sbgp-ipAddrBlock: critical IPv4: 165.140.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:1c:4b:a0:c5:ec:ba:45:bf:90:c1:a6:1c:52:2f:09:24:df: e6:6a:df:61:de:21:0c:53:55:e3:5d:dc:97:e1:06:a3:64:ce: bd:cc:14:c5:bb:d4:d8:76:d9:41:3f:30:53:03:d1:fb:17:4c: c3:8c:de:42:54:15:e5:e0:d1:73:8d:ee:c1:28:b7:cd:84:c5: 5e:dc:aa:d0:af:af:8b:f2:4c:e6:82:53:98:cd:c7:ca:2c:50: 44:ba:19:fd:7f:e4:c2:e1:e0:03:bd:00:c0:70:4a:e7:c1:f9: f3:02:76:c7:cd:45:01:b5:ed:ca:f3:cc:dc:04:2f:bd:1c:91: 5c:50:af:79:a6:ad:ec:81:42:1e:f1:b8:0d:d0:66:2e:6b:0f: ca:2b:2c:2a:7a:55:50:bd:f7:75:a2:de:87:29:84:8c:fe:65: 28:d7:d3:9f:61:44:fe:8b:9b:be:a6:59:0b:98:6c:a4:c4:de: 5e:35:0d:0b:f3:3d:84:6e:38:dc:3b:18:e2:68:be:3c:ba:f3: e9:2c:76:e6:ad:4a:1c:06:64:2d:37:bc:b5:21:a7:54:e1:07: 5f:75:95:63:1c:4f:15:3d:32:c3:8c:25:30:d9:9b:6e:4b:19: 02:97:35:85:f9:3e:d1:8d:f0:71:aa:59:50:b2:49:27:c7:35: 70:57:3b:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUoCvkHEaEbb+nmRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmExZTk3MzQtMGE3Zi00OGU2LTg3ZDMtY2E3ZDgzN2Y0 ZTUwMB4XDTI0MDMxMDAyMDAyNVoXDTI0MDYwODAxMDAyNVowLzEtMCsGA1UEAxMk NWYxNzMzMDYtNTMzYS00YzdkLTlhMGEtZTdmMGQ5YTdhNGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9b0Pz9TU+V2krlMlmvsTqf2rXsMbvGGChDW nV3b5mwbrAR0GllKzd5tIei5RXpHecCRApR4JgDFHpJwHGn130WvZBTY1FuptipH Najl9Tvr7nCTk5lwCsV/+uVLgrkM6a/Y/zW8Eyogiu8K5WZg3vEWRK1kCkAHTPxp d7ULMCn3xCL61OHlFWWFxHQ57EuYoCOfL2DwxOx+ctpbwVl0kxU+jKmJhXE4EaA8 AG3wPtFXJMqawMlb3T4vz5IzbOVcTdf8e17boAqqOuaKThv58HJ7nIgSxYUu9ZhV GQhpvu5+fk46QS87+unOJYqIg+4Kc19+0yazCIBZmdikLwQm7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElJTqW90Boy2UgF3FgWh0FdGeKYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFl OTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdkODM3ZjRlNTAvMDMzNTYwOGYtYTljZC0z Mzk2LTkwZjMtNjExNjRhODNmNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmExZTk3MzQtMGE3Zi00OGU2LTg3 ZDMtY2E3ZDgzN2Y0ZTUwLzJhMWU5NzM0LTBhN2YtNDhlNi04N2QzLWNhN2Q4Mzdm NGU1MC5jcmwwHwYDVR0jBBgwFoAU2ZfG3YFV+RX1BGNFOdNqUSwXdMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFlOTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdk ODM3ZjRlNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpYx8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0cS6DF7LpFv5DBphxSLwkk3+Zq32HeIQxTVeNd3JfhBqNkzr3MFMW7 1Nh22UE/MFMD0fsXTMOM3kJUFeXg0XON7sEot82ExV7cqtCvr4vyTOaCU5jNx8os UES6Gf1/5MLh4AO9AMBwSufB+fMCdsfNRQG17crzzNwEL70ckVxQr3mmreyBQh7x uA3QZi5rD8orLCp6VVC993Wi3ocphIz+ZSjX059hRP6Lm76mWQuYbKTE3l41DQvz PYRuONw7GOJovjy68+ksduatShwGZC03vLUhp1ThB191lWMcTxU9MsOMJTDZm25L GQKXNYX5PtGN8HGqWVCySSfHNXBXO40= -----END CERTIFICATE-----Generated at Fri Apr 26 11:12:32 2024 by rpki-client on console-ams.rpki-client.org