$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/c006c92f-a5fb-39d8-8272-7f5e2bff3f73.roa File: c006c92f-a5fb-39d8-8272-7f5e2bff3f73.roa (raw, json) Hash identifier: d5TdlNzg2SQIKGASvTXJouVpxHe8/EzTFpFUuGtV/P4= Subject key identifier: 05:72:E4:EA:65:BE:32:61:0D:59:B6:DD:39:35:67:11:20:C0:41:5C Certificate issuer: /CN=798448e2-55be-4c24-8014-28c2c70dfc84 Certificate serial: 010D0C9F43285845A6E41B081C5FFBE3E7457F80 Authority key identifier: C6:70:25:5D:39:7D:E7:0D:25:72:01:A7:2B:BD:EB:72:84:D2:D6:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/c006c92f-a5fb-39d8-8272-7f5e2bff3f73.roa Signing time: Wed 24 Apr 2024 12:29:52 +0000 ROA not before: Wed 24 Apr 2024 12:29:52 +0000 ROA not after: Tue 23 Jul 2024 12:29:52 +0000 asID: 401024 IP address blocks: 172.83.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a6:e4:1b:08:1c:5f:fb:e3:e7:45:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798448e2-55be-4c24-8014-28c2c70dfc84 Validity Not Before: Apr 24 12:29:52 2024 GMT Not After : Jul 23 12:29:52 2024 GMT Subject: CN=2307a921-c35e-4c83-9437-3a9eea306d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b7:82:5d:f0:0b:3e:d5:a9:c5:d2:a3:5e:c7: ae:02:34:2d:bb:eb:50:e4:d9:a5:1e:14:d6:47:18: dd:4f:a5:00:a1:fe:93:7d:95:e6:72:41:39:50:95: b9:ec:f0:b9:d5:85:b1:a1:ba:f0:53:b2:af:93:03: 6a:53:c2:a3:b8:5e:05:9b:6e:eb:4d:9f:1d:e1:43: 97:33:44:de:8a:d4:26:26:7f:7d:00:91:12:f5:57: 36:c7:8a:52:a2:41:78:51:94:10:2f:1d:8f:77:10: a0:b4:74:53:37:09:f0:ae:e6:6c:48:f5:b5:71:b5: a6:7d:48:21:c5:8a:92:b5:5d:b9:ec:69:61:a8:cf: 89:4e:f4:ba:8b:fd:12:ad:56:50:f5:ff:7c:69:4d: 36:de:15:2e:87:73:48:52:c4:9d:84:ed:bd:57:21: b5:f1:6e:44:8d:e8:0f:e2:75:aa:e5:11:9b:61:b6: e1:2c:34:22:75:fb:4d:d8:4a:4b:50:12:74:17:0e: 5c:dc:0a:e6:68:65:0c:31:f8:62:d2:74:93:60:7a: 25:ef:a0:e1:64:97:db:7f:78:7e:fb:bf:dd:3f:c8: c1:13:dc:04:55:c9:c8:52:40:3a:68:b5:31:0a:59: 42:c8:6e:9d:4a:37:f1:3b:d4:41:92:be:27:04:a7: 6d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:72:E4:EA:65:BE:32:61:0D:59:B6:DD:39:35:67:11:20:C0:41:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/c006c92f-a5fb-39d8-8272-7f5e2bff3f73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.crl X509v3 Authority Key Identifier: keyid:C6:70:25:5D:39:7D:E7:0D:25:72:01:A7:2B:BD:EB:72:84:D2:D6:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer sbgp-ipAddrBlock: critical IPv4: 172.83.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:89:47:28:c6:c7:c8:45:b6:c1:46:7d:3a:ac:da:6b:25:f9: 0c:ee:f1:60:e3:43:df:2b:95:75:e1:d3:27:a3:d7:59:55:a6: 94:3e:c3:92:db:b5:5b:85:15:eb:5e:96:7e:0c:67:58:4d:c1: 30:59:09:e3:83:c6:5f:21:d2:8b:b1:83:a5:f7:f9:91:89:25: f1:28:5b:81:f7:d5:cb:20:09:2d:df:cf:02:0c:70:f8:e6:11: de:bc:35:08:6f:56:00:56:a7:33:37:f7:ac:d3:b4:00:90:ae: e0:21:18:fe:f5:f9:d7:cc:aa:7f:91:5e:59:af:92:82:9b:47: 28:a6:1d:7e:36:e7:88:34:68:56:f4:d1:cc:b4:af:da:5b:90: f0:66:ac:27:e2:c9:da:ef:07:41:70:53:58:e8:45:10:e8:2c: d8:d4:99:90:14:39:90:1e:bd:76:d9:b0:ee:39:3f:0a:14:1e: 96:df:b7:55:8e:93:fb:1c:23:ed:9d:48:42:bd:44:f7:32:95: cb:ac:58:a4:24:d2:11:fd:18:f7:39:8e:47:a4:c9:17:78:46: ad:57:73:f4:23:0a:55:fb:89:47:c9:70:06:73:1b:b4:83:d3: 82:24:ba:b9:a5:3d:3d:f4:c6:78:fc:d3:80:8b:79:21:20:a8: 0f:b4:12:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWm5BsIHF/74+dFf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzk4NDQ4ZTItNTViZS00YzI0LTgwMTQtMjhjMmM3MGRm Yzg0MB4XDTI0MDQyNDEyMjk1MloXDTI0MDcyMzEyMjk1MlowLzEtMCsGA1UEAxMk MjMwN2E5MjEtYzM1ZS00YzgzLTk0MzctM2E5ZWVhMzA2ZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgreCXfALPtWpxdKjXseuAjQtu+tQ5NmlHhTW RxjdT6UAof6TfZXmckE5UJW57PC51YWxobrwU7KvkwNqU8KjuF4Fm27rTZ8d4UOX M0TeitQmJn99AJES9Vc2x4pSokF4UZQQLx2PdxCgtHRTNwnwruZsSPW1cbWmfUgh xYqStV257GlhqM+JTvS6i/0SrVZQ9f98aU023hUuh3NIUsSdhO29VyG18W5EjegP 4nWq5RGbYbbhLDQidftN2EpLUBJ0Fw5c3ArmaGUMMfhi0nSTYHol76DhZJfbf3h+ +7/dP8jBE9wEVcnIUkA6aLUxCllCyG6dSjfxO9RBkr4nBKdtYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVy5OplvjJhDVm23Tk1ZxEgwEFcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83OTg0 NDhlMi01NWJlLTRjMjQtODAxNC0yOGMyYzcwZGZjODQvYzAwNmM5MmYtYTVmYi0z OWQ4LTgyNzItN2Y1ZTJiZmYzZjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzk4NDQ4ZTItNTViZS00YzI0LTgw MTQtMjhjMmM3MGRmYzg0Lzc5ODQ0OGUyLTU1YmUtNGMyNC04MDE0LTI4YzJjNzBk ZmM4NC5jcmwwHwYDVR0jBBgwFoAUxnAlXTl95w0lcgGnK73rcoTS1tcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83OTg0NDhlMi01NWJlLTRjMjQtODAxNC0yOGMy YzcwZGZjODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFP4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiJRyjGx8hFtsFGfTqs2msl+Qzu8WDjQ98rlXXh0yej11lVppQ+w5Lb tVuFFeteln4MZ1hNwTBZCeODxl8h0ouxg6X3+ZGJJfEoW4H31csgCS3fzwIMcPjm Ed68NQhvVgBWpzM396zTtACQruAhGP71+dfMqn+RXlmvkoKbRyimHX4254g0aFb0 0cy0r9pbkPBmrCfiydrvB0FwU1joRRDoLNjUmZAUOZAevXbZsO45PwoUHpbft1WO k/scI+2dSEK9RPcylcusWKQk0hH9GPc5jkekyRd4Rq1Xc/QjClX7iUfJcAZzG7SD 04IkurmlPT30xnj804CLeSEgqA+0EoI= -----END CERTIFICATE-----Generated at Sun May 12 01:33:12 2024 by rpki-client on console-fra.rpki-client.org