$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/98d4dcd1-7048-351e-8685-4eb20dda3967.roa File: 98d4dcd1-7048-351e-8685-4eb20dda3967.roa (raw, json) Hash identifier: DJyOFt0Tr0FATBoun622IkonlrT5PGSe5zpnYdPUbHE= Subject key identifier: 1F:36:32:42:76:C3:37:D3:BE:71:6C:C9:42:2E:4B:6F:74:9B:DA:65 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F43285844ED6AAA429BA3C9BC1B546A00 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/98d4dcd1-7048-351e-8685-4eb20dda3967.roa Signing time: Sun 18 Feb 2024 02:00:25 +0000 ROA not before: Sun 18 Feb 2024 02:00:25 +0000 ROA not after: Sat 18 May 2024 01:00:25 +0000 asID: 16509 IP address blocks: 170.225.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:ed:6a:aa:42:9b:a3:c9:bc:1b:54:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Feb 18 02:00:25 2024 GMT Not After : May 18 01:00:25 2024 GMT Subject: CN=32ef7a47-695f-46b7-a04b-1d73aa2ce682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c0:98:c2:49:e8:8b:ff:5c:0d:a1:52:04:8d: 0e:e6:36:75:3d:1d:c3:0c:08:32:8c:81:94:41:40: 22:07:48:0d:ce:76:ad:38:78:71:e6:69:00:e6:a6: 67:30:2b:66:40:a9:b7:8a:87:f0:23:cc:23:f5:10: 50:df:46:30:01:3f:8a:e4:09:95:62:71:9e:7a:ba: 02:91:6a:91:f3:89:85:95:fa:1d:f1:03:52:fe:4f: 7c:e4:51:44:62:4f:10:78:98:d1:de:46:da:47:cf: fe:6e:12:68:ae:bf:7a:e7:ce:c0:5d:db:f2:d2:2c: 3c:e5:e8:c7:d6:1f:0c:5d:85:69:56:55:2b:7a:3b: 51:70:43:8f:c2:7d:33:0f:a2:a8:7f:8b:23:d2:f2: ab:d1:9b:9b:8b:eb:f4:dc:d8:b8:a3:1b:d1:86:85: e6:f0:c6:a2:d8:d4:8b:29:5c:1a:08:77:1d:e5:cf: 5d:07:ca:65:b3:57:b1:4c:59:e4:99:96:45:9e:e6: 17:93:33:97:f5:68:38:6f:b4:95:fe:3b:26:ea:79: 38:3c:cc:3e:04:5c:90:d8:a6:f7:f8:dd:3b:6f:c4: a5:62:2b:5b:62:ad:0b:ba:4b:58:ee:9f:e7:0b:50: 05:f4:ce:92:4c:3f:72:75:90:a7:fe:ec:20:ee:69: 6f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:36:32:42:76:C3:37:D3:BE:71:6C:C9:42:2E:4B:6F:74:9B:DA:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/98d4dcd1-7048-351e-8685-4eb20dda3967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:a1:47:c0:f5:fb:7c:6d:89:a7:65:8f:b0:68:b5:ab:53:e7: 9b:c6:8c:6f:54:fe:c9:6b:f8:de:80:99:9f:b7:27:c2:72:7a: 85:59:18:82:c0:69:bb:da:19:65:88:6d:dc:2c:41:f6:4d:71: be:05:15:fc:d9:be:66:b2:c6:aa:db:f2:c6:fc:74:18:67:77: 31:46:e8:15:38:37:2e:76:2d:ec:50:80:d4:3f:9d:c1:4e:43: 10:5a:d0:d6:b9:8e:87:b8:52:82:6f:e8:96:59:b1:31:b6:cb: 63:50:21:d0:60:38:63:1e:ee:0c:1b:a2:7f:01:ed:58:af:8e: 76:54:ea:0f:f1:a7:39:71:f1:0a:d4:76:42:31:b7:0c:0e:43: 2d:db:01:a9:4e:68:0f:66:f0:01:68:cd:71:09:81:ad:ea:fb: f9:50:e9:41:87:49:f0:f2:74:d7:1a:81:31:02:eb:9b:63:1d: de:fb:ad:01:8c:85:2f:f3:41:c5:6f:4e:36:7d:ec:c5:36:93: 9a:80:d7:15:28:6a:c1:d7:8c:c8:bd:d3:9e:67:6b:79:b4:f8: fc:25:fb:59:09:df:e9:a4:7d:5e:e6:b4:37:dd:c6:cc:70:25: 33:19:45:18:f1:a9:79:62:15:26:97:5e:37:dd:79:02:9c:ce: be:3a:e5:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETtaqpCm6PJvBtUagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI0MDIxODAyMDAyNVoXDTI0MDUxODAxMDAyNVowLzEtMCsGA1UEAxMk MzJlZjdhNDctNjk1Zi00NmI3LWEwNGItMWQ3M2FhMmNlNjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocCYwknoi/9cDaFSBI0O5jZ1PR3DDAgyjIGU QUAiB0gNznatOHhx5mkA5qZnMCtmQKm3iofwI8wj9RBQ30YwAT+K5AmVYnGeeroC kWqR84mFlfod8QNS/k985FFEYk8QeJjR3kbaR8/+bhJorr96587AXdvy0iw85ejH 1h8MXYVpVlUrejtRcEOPwn0zD6Kof4sj0vKr0Zubi+v03Ni4oxvRhoXm8Mai2NSL KVwaCHcd5c9dB8pls1exTFnkmZZFnuYXkzOX9Wg4b7SV/jsm6nk4PMw+BFyQ2Kb3 +N07b8SlYitbYq0LuktY7p/nC1AF9M6STD9ydZCn/uwg7mlvjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB82MkJ2wzfTvnFsyUIuS290m9plMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvOThkNGRjZDEtNzA0OC0z NTFlLTg2ODUtNGViMjBkZGEzOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6hR8D1+3xtiadlj7BotatT55vGjG9U/slr+N6AmZ+3J8JyeoVZGILA abvaGWWIbdwsQfZNcb4FFfzZvmayxqrb8sb8dBhndzFG6BU4Ny52LexQgNQ/ncFO QxBa0Na5joe4UoJv6JZZsTG2y2NQIdBgOGMe7gwbon8B7VivjnZU6g/xpzlx8QrU dkIxtwwOQy3bAalOaA9m8AFozXEJga3q+/lQ6UGHSfDydNcagTEC65tjHd77rQGM hS/zQcVvTjZ97MU2k5qA1xUoasHXjMi9055na3m0+Pwl+1kJ3+mkfV7mtDfdxsxw JTMZRRjxqXliFSaXXjfdeQKczr465To= -----END CERTIFICATE-----Generated at Thu May 2 14:56:21 2024 by rpki-client on console-ams.rpki-client.org