$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/303511ae-00e0-3ae9-9384-2797153592ac.roa File: 303511ae-00e0-3ae9-9384-2797153592ac.roa (raw, json) Hash identifier: RknHGiNEdLXg/PgcIfQplIMzOphYS/B27dQ0RB7ErI8= Subject key identifier: 47:9A:24:C4:BC:A9:E0:08:99:E6:44:02:CD:0D:93:66:98:95:73:AE Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285844D5AFD81B4B5BE630378E4B40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/303511ae-00e0-3ae9-9384-2797153592ac.roa Signing time: Fri 09 Feb 2024 14:00:30 +0000 ROA not before: Fri 09 Feb 2024 14:00:30 +0000 ROA not after: Thu 09 May 2024 13:00:30 +0000 asID: 212238 IP address blocks: 104.243.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:d5:af:d8:1b:4b:5b:e6:30:37:8e:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 9 14:00:30 2024 GMT Not After : May 9 13:00:30 2024 GMT Subject: CN=832f430d-4c79-41a2-8a21-af8c12acf3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:30:85:27:48:ba:79:5d:46:05:bb:6b:e1:3e: 0d:11:2a:9a:8f:3e:71:7e:47:d4:61:7c:51:f1:bb: 76:52:2a:f1:43:a2:8f:f7:31:b6:69:8d:cd:8f:92: 6d:90:85:bf:09:a3:27:ae:2e:6b:96:52:df:6d:f5: 30:c4:7f:7d:d3:b7:cb:0f:71:ec:2d:76:be:13:42: 7d:ab:ff:94:99:40:51:76:50:e6:06:40:04:9e:b6: 26:df:21:0e:87:03:0a:1a:4e:70:7a:f4:b9:d8:dc: 23:e8:f8:4d:4d:36:52:a6:5c:f3:11:6b:48:cf:7d: 82:02:23:f7:c1:ad:55:05:73:16:99:44:49:16:96: 91:47:aa:b4:c5:97:be:1f:35:61:38:71:bd:18:56: 6f:97:60:73:62:a0:74:bf:e5:ae:d1:8e:be:99:fd: 2e:56:b0:f7:62:c2:91:b7:34:84:49:6b:1e:41:12: e0:1b:bc:ee:c4:94:71:4d:81:a0:ce:39:2d:42:fb: 57:ab:b0:4c:e6:44:26:8f:a7:9d:51:64:7d:df:bd: 76:3b:c7:f0:20:01:6f:51:12:76:f8:72:0d:b5:fa: ac:29:63:6b:57:c4:71:a2:09:43:21:c7:f1:04:d5: 91:b1:de:2b:ed:8b:b6:0a:c8:57:6d:61:27:a1:74: e7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9A:24:C4:BC:A9:E0:08:99:E6:44:02:CD:0D:93:66:98:95:73:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/303511ae-00e0-3ae9-9384-2797153592ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:af:21:64:6f:e6:0f:6f:22:53:01:9b:e5:de:ec:5d:04:0c: b6:9d:bc:28:05:a3:c6:e8:7c:e9:f5:6e:10:61:67:84:02:35: b0:b5:1d:ec:ff:5d:82:3b:9b:ac:e0:af:54:15:77:5c:c3:0f: 75:2b:55:2c:f1:6c:b8:86:8e:34:a4:b8:c3:de:d2:36:72:24: e7:cd:f8:c4:20:5a:83:b7:cd:63:7b:f5:38:0d:c0:ee:4d:b0: 72:ad:26:bb:b9:d0:88:c2:2d:11:df:e0:10:8b:c1:30:47:e2: 6c:26:3a:75:f4:af:7e:7a:ea:f9:93:ea:a3:76:25:51:50:4a: f9:f7:0c:ce:75:e4:34:71:a8:b0:f0:96:3e:51:08:d5:2b:1c: 04:8d:14:a6:cb:eb:8a:21:57:05:08:a1:1c:a2:16:df:74:8e: f9:70:40:b2:1d:0f:c2:5b:77:cb:1a:f7:15:bb:0d:8d:45:34: be:85:eb:65:a7:d9:3f:29:cb:e2:79:be:5a:fd:06:d5:4c:35: 79:98:c3:6f:40:d6:e2:83:27:d0:7f:d7:c0:91:34:f8:01:fd: 97:66:a7:2d:51:6a:23:df:ca:ac:97:22:6d:a0:02:bf:4d:3d: 94:02:ed:78:35:2e:97:77:99:71:25:39:0f:44:4b:a7:82:11: f0:0a:a3:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETVr9gbS1vmMDeOS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDIwOTE0MDAzMFoXDTI0MDUwOTEzMDAzMFowLzEtMCsGA1UEAxMk ODMyZjQzMGQtNGM3OS00MWEyLThhMjEtYWY4YzEyYWNmM2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijCFJ0i6eV1GBbtr4T4NESqajz5xfkfUYXxR 8bt2UirxQ6KP9zG2aY3Nj5JtkIW/CaMnri5rllLfbfUwxH9907fLD3HsLXa+E0J9 q/+UmUBRdlDmBkAEnrYm3yEOhwMKGk5wevS52Nwj6PhNTTZSplzzEWtIz32CAiP3 wa1VBXMWmURJFpaRR6q0xZe+HzVhOHG9GFZvl2BzYqB0v+Wu0Y6+mf0uVrD3YsKR tzSESWseQRLgG7zuxJRxTYGgzjktQvtXq7BM5kQmj6edUWR93712O8fwIAFvURJ2 +HINtfqsKWNrV8RxoglDIcfxBNWRsd4r7Yu2CshXbWEnoXTnCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeaJMS8qeAImeZEAs0Nk2aYlXOuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzAzNTExYWUtMDBlMC0z YWU5LTkzODQtMjc5NzE1MzU5MmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSvIWRv5g9vIlMBm+Xe7F0EDLadvCgFo8bofOn1bhBhZ4QCNbC1Hez/ XYI7m6zgr1QVd1zDD3UrVSzxbLiGjjSkuMPe0jZyJOfN+MQgWoO3zWN79TgNwO5N sHKtJru50IjCLRHf4BCLwTBH4mwmOnX0r3566vmT6qN2JVFQSvn3DM515DRxqLDw lj5RCNUrHASNFKbL64ohVwUIoRyiFt90jvlwQLIdD8Jbd8sa9xW7DY1FNL6F62Wn 2T8py+J5vlr9BtVMNXmYw29A1uKDJ9B/18CRNPgB/Zdmpy1RaiPfyqyXIm2gAr9N PZQC7Xg1Lpd3mXElOQ9ES6eCEfAKo2U= -----END CERTIFICATE-----Generated at Sat Apr 27 22:32:27 2024 by rpki-client on console-ams.rpki-client.org