$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4e23e5df-ddab-3213-b067-9016783a3f0a.roa File: 4e23e5df-ddab-3213-b067-9016783a3f0a.roa (raw, json) Hash identifier: G1LNGCGV0Rpn+oi1yAMA9+Likvi0oHzeqsRIm5x5DNI= Subject key identifier: 22:BC:D6:B5:7F:C0:40:93:6E:93:43:58:59:0D:0D:16:0B:FB:B2:93 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F43285845B21E1FF3AF6BA802C4718680 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4e23e5df-ddab-3213-b067-9016783a3f0a.roa Signing time: Sun 28 Apr 2024 13:00:34 +0000 ROA not before: Sun 28 Apr 2024 13:00:34 +0000 ROA not after: Sat 27 Jul 2024 13:00:34 +0000 asID: 16509 IP address blocks: 216.157.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b2:1e:1f:f3:af:6b:a8:02:c4:71:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Apr 28 13:00:34 2024 GMT Not After : Jul 27 13:00:34 2024 GMT Subject: CN=5d1a57a5-e4be-4c8b-b880-60809ab32539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:94:cb:e3:bf:eb:82:b9:ed:a4:bb:d0:b0:6a: ad:77:41:c9:c1:e3:6c:dd:dc:1f:70:c6:62:43:17: 4e:b9:56:03:62:03:3f:61:f5:6e:0f:3a:48:2f:c5: 91:51:02:17:bf:39:29:df:7e:dd:ab:85:3c:0a:5b: 4d:8c:27:49:aa:c4:ad:bf:00:dc:a0:c0:05:c9:28: cc:df:07:4c:09:6f:80:f9:95:46:13:c2:cd:48:99: 73:55:4f:89:42:90:c0:cf:d8:b8:08:3b:73:b4:de: 24:21:dc:67:8c:ef:70:d4:aa:0a:7c:02:90:c1:2d: 93:35:5d:b5:1a:18:68:c7:83:30:09:3e:72:82:65: bd:82:01:2d:75:dc:14:29:64:39:13:11:b6:9a:c8: 09:26:cd:ab:4b:38:a4:98:8c:69:d2:bb:cb:09:23: cb:d9:48:32:bb:5d:cd:da:cb:6c:7a:a3:b0:cc:06: af:fc:db:ec:55:b0:c7:48:0b:1d:6a:11:98:a9:33: 21:17:1d:18:20:cc:76:d2:5b:59:8b:3c:69:c4:2a: b7:fa:28:6a:b6:b5:3d:ba:76:64:62:a7:99:f0:45: d9:a1:f0:ab:1c:8e:cf:db:46:a4:cf:10:c4:2a:06: 17:77:a1:34:99:e2:7b:fc:8a:5a:03:9c:3f:02:4e: 53:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BC:D6:B5:7F:C0:40:93:6E:93:43:58:59:0D:0D:16:0B:FB:B2:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4e23e5df-ddab-3213-b067-9016783a3f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:34:45:5c:94:bf:6d:30:5f:82:ed:1c:2d:6a:93:6d:71:33: ed:b5:c6:94:de:ee:07:f2:c1:cd:cf:fb:96:7e:b5:47:8d:f4: b2:e2:ef:52:22:38:ee:a8:3a:39:2e:77:d3:46:8e:b8:f8:3a: 7e:ce:88:55:a0:2a:2f:9e:31:84:68:b9:20:31:05:b7:08:02: 7b:08:2a:d7:17:3f:c4:d1:a5:63:fb:ca:41:e0:8a:91:b6:85: 91:4f:1a:8a:80:3c:8a:8c:da:99:89:b2:ed:60:aa:01:e8:6f: 9b:0c:6d:9b:02:d0:77:a2:bf:f0:76:81:ec:86:12:6c:14:98: b9:ac:86:73:f1:a1:54:43:33:6c:75:4a:06:6b:7d:56:a5:72: 79:09:68:69:51:37:9e:84:17:75:1a:15:07:e7:90:ab:ee:d7: 29:8d:ba:f3:1b:01:c1:d5:1e:1f:a4:cc:1c:a8:b7:ba:ce:40: 2f:ec:df:52:c8:e0:af:3a:1e:c0:65:aa:22:c3:bf:cd:e6:c6: e7:72:17:ef:80:29:a5:9b:28:2d:8c:4a:ee:fd:43:7b:d3:df: 38:d3:fa:ae:6e:8d:cc:46:38:d0:9e:3c:57:93:50:b7:1a:b4: 40:cd:6a:d2:d3:e9:37:e4:cd:df:f6:77:25:07:e6:44:14:4a: 9c:0e:a3:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWyHh/zr2uoAsRxhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI0MDQyODEzMDAzNFoXDTI0MDcyNzEzMDAzNFowLzEtMCsGA1UEAxMk NWQxYTU3YTUtZTRiZS00YzhiLWI4ODAtNjA4MDlhYjMyNTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypTL47/rgrntpLvQsGqtd0HJweNs3dwfcMZi QxdOuVYDYgM/YfVuDzpIL8WRUQIXvzkp337dq4U8CltNjCdJqsStvwDcoMAFySjM 3wdMCW+A+ZVGE8LNSJlzVU+JQpDAz9i4CDtztN4kIdxnjO9w1KoKfAKQwS2TNV21 Ghhox4MwCT5ygmW9ggEtddwUKWQ5ExG2msgJJs2rSzikmIxp0rvLCSPL2Ugyu13N 2stseqOwzAav/NvsVbDHSAsdahGYqTMhFx0YIMx20ltZizxpxCq3+ihqtrU9unZk YqeZ8EXZofCrHI7P20akzxDEKgYXd6E0meJ7/IpaA5w/Ak5TUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCK81rV/wECTbpNDWFkNDRYL+7KTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNGUyM2U1ZGYtZGRhYi0z MjEzLWIwNjctOTAxNjc4M2EzZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE80RVyUv20wX4LtHC1qk21xM+21xpTe7gfywc3P+5Z+tUeN9LLi71Ii OO6oOjkud9NGjrj4On7OiFWgKi+eMYRouSAxBbcIAnsIKtcXP8TRpWP7ykHgipG2 hZFPGoqAPIqM2pmJsu1gqgHob5sMbZsC0Heiv/B2geyGEmwUmLmshnPxoVRDM2x1 SgZrfValcnkJaGlRN56EF3UaFQfnkKvu1ymNuvMbAcHVHh+kzByot7rOQC/s31LI 4K86HsBlqiLDv83mxudyF++AKaWbKC2MSu79Q3vT3zjT+q5ujcxGONCePFeTULca tEDNatLT6Tfkzd/2dyUH5kQUSpwOo7Q= -----END CERTIFICATE-----Generated at Thu May 2 14:53:29 2024 by rpki-client on console-fra.rpki-client.org