$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa File: 5c304d34-8950-35d5-acec-d2d13773b41a.roa (raw, json) Hash identifier: 1EoC+XK1inx1F+VVywNLLWt4TRFfR5uzdvPLRmQPHq0= Subject key identifier: 8C:8D:7E:B7:D1:83:68:F0:75:53:AF:FA:21:41:F4:FF:BF:6F:01:96 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F43285844F80722C90AA38E59E4BBBB00 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa Signing time: Wed 21 Feb 2024 21:13:59 +0000 ROA not before: Wed 21 Feb 2024 21:13:59 +0000 ROA not after: Tue 21 May 2024 20:13:59 +0000 asID: 16509 IP address blocks: 216.157.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f8:07:22:c9:0a:a3:8e:59:e4:bb:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Feb 21 21:13:59 2024 GMT Not After : May 21 20:13:59 2024 GMT Subject: CN=16498bd2-3cfb-4296-8b9b-fef8608806dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d7:db:67:4a:fc:84:d0:a9:ed:67:9c:98:e8: e8:68:97:7c:e2:ca:4e:29:a1:62:e2:22:9a:99:eb: 24:15:bf:c6:c7:99:c7:66:55:ef:5e:92:37:33:d7: b0:b6:be:b2:dd:6b:0d:ba:c8:04:ed:16:26:31:bc: b2:d1:9c:29:ea:f1:c5:fb:36:38:54:55:88:ab:dc: 40:62:b3:94:34:0b:05:68:a3:17:53:9c:f0:f2:c6: 93:8e:03:8a:89:ab:00:34:0c:6f:f0:bf:b4:e1:93: 8e:e0:e1:f8:a7:93:2b:d0:6d:a0:10:a9:6c:fe:0c: 3c:46:83:6c:12:bf:ec:13:25:46:2f:62:7b:11:d7: da:8f:72:50:2e:cc:ee:3a:8b:27:55:ff:ac:1b:12: 7c:61:e2:55:2b:a0:99:d9:cc:95:5c:42:42:bf:f0: 67:ca:8d:90:bd:bf:fe:e0:50:b0:16:78:45:81:8e: d8:3e:3e:67:4c:9f:6f:b7:49:e7:26:b6:e9:78:83: 57:c7:1b:0a:34:63:c6:0b:af:78:3e:4b:e3:41:4b: 91:06:df:f9:9b:a2:b1:62:b6:b5:2c:a4:17:86:ec: 3c:ab:78:23:cf:d8:3f:9e:25:aa:0d:61:1a:6a:d0: 58:b7:7d:16:e8:5a:df:45:c4:db:27:a9:ca:df:36: 50:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8D:7E:B7:D1:83:68:F0:75:53:AF:FA:21:41:F4:FF:BF:6F:01:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:dc:52:c8:57:d5:6f:87:1b:99:37:1d:09:05:33:fc:d0:78: b7:12:c4:c6:fd:b9:5e:a7:e4:20:40:65:c6:34:e5:be:35:cc: 2c:57:cf:64:92:9e:16:c9:cd:c8:11:a4:25:2c:3f:f9:c7:dd: 9f:81:98:ce:09:6f:d1:c0:9b:12:31:56:de:a9:86:a5:99:d1: a9:0b:ac:b9:68:12:5f:74:c0:5a:fd:c9:aa:3b:88:9f:c5:57: 07:92:ab:3f:37:78:83:ac:38:4d:30:bd:df:ae:6c:19:7e:61: 34:cc:f6:da:40:3f:87:21:33:e4:39:f4:b1:ad:35:3b:20:d4: 64:fc:65:f5:4d:82:57:c3:e8:13:5c:68:41:d6:77:82:ce:03: a3:1f:be:0a:b7:37:03:3b:7d:ea:0b:54:be:8a:4f:44:fc:df: 1f:dc:9b:9b:16:05:d9:59:73:5d:2b:94:de:11:e8:e7:0d:d5: 7c:23:8b:ed:cd:47:0a:0f:74:48:bf:5b:62:5a:a0:c2:44:a3: de:1e:b3:5c:ca:2d:a5:b6:03:7f:7a:f1:f2:cd:20:c3:3a:94: 9b:ed:19:4c:60:6b:f9:86:1c:f7:56:95:fc:56:b3:cc:54:a9: 2b:a6:3e:b2:94:23:ad:1b:9c:67:34:22:46:42:de:27:25:4b: d0:61:90:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET4ByLJCqOOWeS7uwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI0MDIyMTIxMTM1OVoXDTI0MDUyMTIwMTM1OVowLzEtMCsGA1UEAxMk MTY0OThiZDItM2NmYi00Mjk2LThiOWItZmVmODYwODgwNmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9fbZ0r8hNCp7WecmOjoaJd84spOKaFi4iKa meskFb/Gx5nHZlXvXpI3M9ewtr6y3WsNusgE7RYmMbyy0Zwp6vHF+zY4VFWIq9xA YrOUNAsFaKMXU5zw8saTjgOKiasANAxv8L+04ZOO4OH4p5Mr0G2gEKls/gw8RoNs Er/sEyVGL2J7Edfaj3JQLszuOosnVf+sGxJ8YeJVK6CZ2cyVXEJCv/Bnyo2Qvb/+ 4FCwFnhFgY7YPj5nTJ9vt0nnJrbpeINXxxsKNGPGC694PkvjQUuRBt/5m6KxYra1 LKQXhuw8q3gjz9g/niWqDWEaatBYt30W6FrfRcTbJ6nK3zZQSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyNfrfRg2jwdVOv+iFB9P+/bwGWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNWMzMDRkMzQtODk1MC0z NWQ1LWFjZWMtZDJkMTM3NzNiNDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7cUshX1W+HG5k3HQkFM/zQeLcSxMb9uV6n5CBAZcY05b41zCxXz2SS nhbJzcgRpCUsP/nH3Z+BmM4Jb9HAmxIxVt6phqWZ0akLrLloEl90wFr9yao7iJ/F VweSqz83eIOsOE0wvd+ubBl+YTTM9tpAP4chM+Q59LGtNTsg1GT8ZfVNglfD6BNc aEHWd4LOA6Mfvgq3NwM7feoLVL6KT0T83x/cm5sWBdlZc10rlN4R6OcN1Xwji+3N RwoPdEi/W2JaoMJEo94es1zKLaW2A3968fLNIMM6lJvtGUxga/mGHPdWlfxWs8xU qSumPrKUI60bnGc0IkZC3iclS9BhkLs= -----END CERTIFICATE-----Generated at Thu May 2 14:53:29 2024 by rpki-client on console-fra.rpki-client.org