$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/2456429a-c962-3d10-8c97-3ded933ea579.roa File: 2456429a-c962-3d10-8c97-3ded933ea579.roa (raw, json) Hash identifier: s7+KNMQA7RjS4AiNofyINpLolob3S4oLjAwGk6fw+dg= Subject key identifier: 09:EB:4B:95:E8:D1:79:DC:D9:C3:A2:7F:AE:E0:D7:49:C2:6F:96:D1 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F43285844E66FEF707249813DA83FB670 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/2456429a-c962-3d10-8c97-3ded933ea579.roa Signing time: Thu 15 Feb 2024 14:00:30 +0000 ROA not before: Thu 15 Feb 2024 14:00:30 +0000 ROA not after: Wed 15 May 2024 13:00:30 +0000 asID: 9009 IP address blocks: 172.102.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:e6:6f:ef:70:72:49:81:3d:a8:3f:b6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Feb 15 14:00:30 2024 GMT Not After : May 15 13:00:30 2024 GMT Subject: CN=ba57fa57-25a1-464e-9b75-6441252f1380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:14:6b:a5:ee:e5:34:81:ff:5d:57:89:c6:a7: 37:83:17:33:20:ea:a1:f0:15:ee:03:43:93:66:18: e1:4a:99:31:76:18:e2:0c:2f:5e:5e:8b:7b:f2:bf: 78:f3:a2:7d:6d:b7:89:5d:6d:dd:da:ff:6f:14:7e: c8:fe:3c:1d:71:fd:10:f2:ad:55:ec:a5:87:33:37: bf:2e:d4:81:d6:9e:30:22:55:9d:bc:56:c4:19:1a: e1:b5:90:46:4e:7a:2c:48:6a:0c:39:0c:90:1b:7f: 4a:eb:de:59:05:d3:5d:9c:ea:3e:62:f2:4c:77:88: df:d7:f5:2e:22:4d:31:f1:17:bf:d2:08:e6:a0:4c: 61:de:56:ff:46:b3:ac:c1:9b:82:b7:9d:01:b5:a7: b6:79:7d:c9:e0:85:b1:72:3c:34:ee:89:e6:fe:36: c5:da:f3:c5:e6:f1:b1:9f:61:e0:69:36:ea:f3:34: 2a:9f:94:60:81:ff:86:6e:4e:c8:68:07:b9:cd:2f: b0:80:52:28:83:92:10:b9:b8:3e:c5:1c:d3:56:b8: 5c:95:14:58:5b:b9:ee:53:e0:2e:28:bc:47:30:5f: b1:72:65:fc:33:29:34:11:50:a4:22:4a:70:0c:fd: 77:13:44:96:d9:9d:de:3e:93:57:f2:e4:34:ea:07: 11:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EB:4B:95:E8:D1:79:DC:D9:C3:A2:7F:AE:E0:D7:49:C2:6F:96:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/2456429a-c962-3d10-8c97-3ded933ea579.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:d8:dd:05:06:64:50:55:31:ae:8b:55:84:16:fc:47:b3:b8: ba:1b:4a:73:d3:f2:04:be:f6:30:c6:4d:90:da:7f:5c:fb:37: 7f:9a:bc:e6:9d:4a:a1:75:9d:62:92:b7:ae:75:1b:b4:4e:54: c7:2f:3f:3f:56:b6:c4:05:cb:e5:69:af:9b:0f:10:6b:43:92: 6d:d0:cd:de:08:d4:3b:5b:d3:ce:1d:11:32:21:a6:44:20:51: ae:63:4b:64:da:c8:23:36:97:f5:ff:c4:96:31:44:c2:0f:58: 40:19:02:a2:f1:07:72:97:d2:fc:dd:cf:98:c8:71:9e:80:cb: 0a:03:e9:f2:a5:05:ea:58:52:68:7e:6c:ee:02:27:2c:a6:73: 55:f3:52:c6:2f:dc:6b:40:5b:7d:af:c0:8e:0c:c3:44:2f:a2: 98:85:f2:7c:9d:d0:04:8c:68:52:c5:d5:89:d5:48:59:c2:3d: 2b:d5:f6:95:e7:1b:a6:71:3e:97:7d:b9:88:9f:9b:00:fc:94: 30:b7:17:5c:c5:de:90:89:a8:17:f3:0a:89:d3:11:0f:3b:1b: ae:b3:ee:a3:9e:96:15:c2:b9:f7:de:d1:c4:6f:60:85:fa:3c: aa:f2:36:a7:c2:02:d7:5a:69:38:11:5b:ae:7a:07:c3:9f:6b: 0e:48:0f:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETmb+9wckmBPag/tnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI0MDIxNTE0MDAzMFoXDTI0MDUxNTEzMDAzMFowLzEtMCsGA1UEAxMk YmE1N2ZhNTctMjVhMS00NjRlLTliNzUtNjQ0MTI1MmYxMzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixRrpe7lNIH/XVeJxqc3gxczIOqh8BXuA0OT ZhjhSpkxdhjiDC9eXot78r9486J9bbeJXW3d2v9vFH7I/jwdcf0Q8q1V7KWHMze/ LtSB1p4wIlWdvFbEGRrhtZBGTnosSGoMOQyQG39K695ZBdNdnOo+YvJMd4jf1/Uu Ik0x8Re/0gjmoExh3lb/RrOswZuCt50Btae2eX3J4IWxcjw07onm/jbF2vPF5vGx n2HgaTbq8zQqn5Rggf+Gbk7IaAe5zS+wgFIog5IQubg+xRzTVrhclRRYW7nuU+Au KLxHMF+xcmX8Myk0EVCkIkpwDP13E0SW2Z3ePpNX8uQ06gcRGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnrS5Xo0Xnc2cOif67g10nCb5bRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvMjQ1NjQyOWEtYzk2Mi0z ZDEwLThjOTctM2RlZDkzM2VhNTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGbeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPY3QUGZFBVMa6LVYQW/EezuLobSnPT8gS+9jDGTZDaf1z7N3+avOad SqF1nWKSt651G7ROVMcvPz9WtsQFy+Vpr5sPEGtDkm3Qzd4I1Dtb084dETIhpkQg Ua5jS2TayCM2l/X/xJYxRMIPWEAZAqLxB3KX0vzdz5jIcZ6AywoD6fKlBepYUmh+ bO4CJyymc1XzUsYv3GtAW32vwI4Mw0QvopiF8nyd0ASMaFLF1YnVSFnCPSvV9pXn G6ZxPpd9uYifmwD8lDC3F1zF3pCJqBfzConTEQ87G66z7qOelhXCuffe0cRvYIX6 PKryNqfCAtdaaTgRW656B8Ofaw5ID1E= -----END CERTIFICATE-----Generated at Sat Apr 20 02:48:08 2024 by rpki-client on console-ams.rpki-client.org