$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/539b5ee5-7dd2-3b98-b79b-e8ade83252de.roa File: 539b5ee5-7dd2-3b98-b79b-e8ade83252de.roa (raw, json) Hash identifier: Mpkfp6+hsMafzXwy475bgRJRd78vLJvI8ynGvtIY9F4= Subject key identifier: 9A:06:7F:34:C3:01:05:DD:8C:11:EE:CD:F7:C4:93:2A:BA:D5:81:38 Certificate issuer: /CN=7e014cdd-4a76-4eef-86f7-6b6a836e1dbf Certificate serial: 010D0C9F43285845254045BA0A2A876C0DD5B580 Authority key identifier: F8:18:1F:C9:C8:20:2D:78:59:D4:B0:EF:4C:4B:A5:8D:C7:DC:93:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/539b5ee5-7dd2-3b98-b79b-e8ade83252de.roa Signing time: Sat 09 Mar 2024 02:00:25 +0000 ROA not before: Sat 09 Mar 2024 02:00:25 +0000 ROA not after: Fri 07 Jun 2024 01:00:25 +0000 asID: 22941 IP address blocks: 168.245.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:25:40:45:ba:0a:2a:87:6c:0d:d5:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e014cdd-4a76-4eef-86f7-6b6a836e1dbf Validity Not Before: Mar 9 02:00:25 2024 GMT Not After : Jun 7 01:00:25 2024 GMT Subject: CN=3aed566c-011e-4e41-a4b7-29bd89a97840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3a:ea:91:a4:57:96:ad:e9:33:02:53:04:36: 41:31:cc:bc:de:d3:80:f4:83:0a:40:4e:df:14:29: 95:c6:83:3b:f5:0e:36:35:e5:04:2c:e5:03:06:63: b1:76:28:7f:45:3d:7e:4c:69:aa:4e:04:bc:cb:21: d2:9c:88:97:76:59:41:2e:d1:69:e8:59:3b:33:91: ca:a7:d1:1e:dc:1e:5e:19:7b:f9:01:87:2e:03:cb: 44:2b:a9:2c:be:62:fe:b1:b9:b1:78:86:21:51:1a: cd:ca:7b:19:cb:32:45:5e:01:2c:d0:ea:d1:f7:13: 04:d5:00:26:2a:b1:36:da:00:58:ce:00:81:52:9a: f9:4b:de:7b:de:0d:50:22:e6:fd:57:69:95:d2:c9: c9:bf:8e:a9:fa:d2:5c:b3:65:9e:ba:18:40:62:8c: 78:fd:b8:88:33:d4:27:96:09:fc:82:e9:ca:25:4a: e2:66:d6:4f:55:22:25:f8:7e:b3:46:5f:9f:1f:06: ad:93:02:a1:79:64:e1:e8:df:65:de:77:f8:38:3e: f0:b5:dd:d6:1d:8b:5c:f4:a0:51:df:bf:5a:fa:c7: cd:88:69:cc:e2:36:ae:7f:a3:c0:5b:09:45:f7:fe: f1:9d:03:f3:f1:07:95:99:28:51:8b:f1:5b:71:a2: 7a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:06:7F:34:C3:01:05:DD:8C:11:EE:CD:F7:C4:93:2A:BA:D5:81:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/539b5ee5-7dd2-3b98-b79b-e8ade83252de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.crl X509v3 Authority Key Identifier: keyid:F8:18:1F:C9:C8:20:2D:78:59:D4:B0:EF:4C:4B:A5:8D:C7:DC:93:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.cer sbgp-ipAddrBlock: critical IPv4: 168.245.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e7:e7:f2:fe:b7:e0:e6:75:f1:8b:6c:30:8a:bc:16:52:79: 64:23:0b:4b:fa:54:38:d3:b6:01:8c:ed:bd:be:a8:18:1e:88: 0b:27:b9:44:dc:bf:15:25:f8:aa:29:de:51:ee:56:b7:ad:1d: 68:11:53:78:aa:cd:08:0e:c6:fb:55:e0:19:ec:a7:8b:aa:32: a6:2d:48:16:69:a4:96:f3:d7:7b:fe:6e:99:79:2c:62:d6:30: 7d:b3:4a:ff:53:a0:3d:ec:06:9c:6d:12:58:b0:a4:86:54:f4: 2c:68:9c:79:07:fa:c8:ca:bb:35:88:fb:64:98:6d:5b:33:05: 96:b0:48:85:b4:ac:fe:92:70:36:2d:44:fa:fe:2b:37:2f:30: 20:df:6a:bd:0d:28:f0:25:3b:34:fb:b5:96:7b:89:39:a7:03: 33:a6:49:fe:66:f0:a5:80:ac:63:79:58:14:d9:ab:85:29:84: 0c:cf:5e:c9:cd:12:c9:b2:73:b0:a9:3b:95:c9:5d:31:1e:85: 08:b8:f6:dd:5c:ae:30:f0:bb:c3:58:76:f4:01:91:8a:de:f4: 47:66:4b:90:67:ab:e5:0a:18:bc:9d:ef:fb:63:66:ca:08:26: a0:11:55:60:06:d1:1e:7f:1f:56:6d:e5:00:c2:4e:d4:45:ae: 3e:8d:f4:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUlQEW6CiqHbA3VtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2UwMTRjZGQtNGE3Ni00ZWVmLTg2ZjctNmI2YTgzNmUx ZGJmMB4XDTI0MDMwOTAyMDAyNVoXDTI0MDYwNzAxMDAyNVowLzEtMCsGA1UEAxMk M2FlZDU2NmMtMDExZS00ZTQxLWE0YjctMjliZDg5YTk3ODQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDrqkaRXlq3pMwJTBDZBMcy83tOA9IMKQE7f FCmVxoM79Q42NeUELOUDBmOxdih/RT1+TGmqTgS8yyHSnIiXdllBLtFp6Fk7M5HK p9Ee3B5eGXv5AYcuA8tEK6ksvmL+sbmxeIYhURrNynsZyzJFXgEs0OrR9xME1QAm KrE22gBYzgCBUpr5S9573g1QIub9V2mV0snJv46p+tJcs2WeuhhAYox4/biIM9Qn lgn8gunKJUriZtZPVSIl+H6zRl+fHwatkwKheWTh6N9l3nf4OD7wtd3WHYtc9KBR 379a+sfNiGnM4jauf6PAWwlF9/7xnQPz8QeVmShRi/FbcaJ6CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoGfzTDAQXdjBHuzffEkyq61YE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTAx NGNkZC00YTc2LTRlZWYtODZmNy02YjZhODM2ZTFkYmYvNTM5YjVlZTUtN2RkMi0z Yjk4LWI3OWItZThhZGU4MzI1MmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2UwMTRjZGQtNGE3Ni00ZWVmLTg2 ZjctNmI2YTgzNmUxZGJmLzdlMDE0Y2RkLTRhNzYtNGVlZi04NmY3LTZiNmE4MzZl MWRiZi5jcmwwHwYDVR0jBBgwFoAU+BgfycggLXhZ1LDvTEuljcfck+kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTAxNGNkZC00YTc2LTRlZWYtODZmNy02YjZh ODM2ZTFkYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqPWMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvn5/L+t+DmdfGLbDCKvBZSeWQjC0v6VDjTtgGM7b2+qBgeiAsnuUTc vxUl+Kop3lHuVretHWgRU3iqzQgOxvtV4Bnsp4uqMqYtSBZppJbz13v+bpl5LGLW MH2zSv9ToD3sBpxtEliwpIZU9CxonHkH+sjKuzWI+2SYbVszBZawSIW0rP6ScDYt RPr+KzcvMCDfar0NKPAlOzT7tZZ7iTmnAzOmSf5m8KWArGN5WBTZq4UphAzPXsnN Esmyc7CpO5XJXTEehQi49t1crjDwu8NYdvQBkYre9EdmS5Bnq+UKGLyd7/tjZsoI JqARVWAG0R5/H1Zt5QDCTtRFrj6N9NQ= -----END CERTIFICATE-----Generated at Thu May 16 17:53:39 2024 by rpki-client on console-ams.rpki-client.org