$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/0ed1469f-de30-3a23-b0d4-761cc1186a5f.roa File: 0ed1469f-de30-3a23-b0d4-761cc1186a5f.roa (raw, json) Hash identifier: g99nQfgTPN35MNAukqS3j+ENBTiSrR8VydeCGt3sOss= Subject key identifier: A0:1A:EB:F0:66:4D:0B:17:80:9F:10:0A:E1:90:71:68:1A:6F:8C:86 Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F43285845963345195D318455B9F81980 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/0ed1469f-de30-3a23-b0d4-761cc1186a5f.roa Signing time: Thu 18 Apr 2024 13:00:33 +0000 ROA not before: Thu 18 Apr 2024 13:00:33 +0000 ROA not after: Wed 17 Jul 2024 13:00:33 +0000 asID: 394111 IP address blocks: 216.213.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:96:33:45:19:5d:31:84:55:b9:f8:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Apr 18 13:00:33 2024 GMT Not After : Jul 17 13:00:33 2024 GMT Subject: CN=02882326-f403-4080-bafd-786c231754ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:48:7a:73:e7:b7:40:23:c7:6a:2a:97:d0:df: 0d:df:ec:d9:d8:65:6e:71:86:a1:e0:4a:7a:ac:a7: 80:28:4e:b0:8c:22:cf:97:e3:28:23:3a:73:6a:c3: 7c:0b:3f:5b:42:f4:39:5f:64:61:62:a6:eb:92:f1: a1:95:41:74:42:aa:a1:4e:4e:3f:34:85:13:6d:46: 00:0e:95:41:70:fa:78:c0:1c:10:56:91:3e:ab:5e: a2:ad:73:98:9e:2e:00:3f:0b:c4:79:e3:99:f7:2b: 90:ce:fe:e0:54:27:90:98:57:6a:d1:be:6a:67:bc: a5:51:06:b5:29:0a:af:9b:e6:7a:14:ee:d4:d4:10: ed:5b:e9:24:df:8e:67:ce:c1:47:64:fc:64:fe:9e: 85:61:52:06:05:25:61:04:b4:2b:66:58:01:96:c8: e4:10:27:be:44:a2:4b:66:11:8b:3d:41:e5:30:ed: 9b:39:d9:24:de:d5:12:f8:57:e6:ab:88:92:45:4b: fd:ad:91:e0:ae:ec:51:79:80:12:64:82:e8:ae:9b: bb:ba:1d:2c:6c:5c:a7:48:6f:c0:fa:2b:6d:2a:3e: a6:8b:cd:57:5c:81:21:24:f7:ea:4e:a8:f4:7b:1b: ba:93:93:4e:5f:ac:33:6e:54:3c:3f:13:42:f0:5d: f2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1A:EB:F0:66:4D:0B:17:80:9F:10:0A:E1:90:71:68:1A:6F:8C:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/0ed1469f-de30-3a23-b0d4-761cc1186a5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 216.213.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:e0:52:cc:ca:a8:1f:09:f1:d8:67:ef:e7:cd:f6:ce:58:b5: ce:4a:2d:33:6c:b5:a3:a6:f2:13:cc:c2:5b:61:2d:1b:cc:ac: 61:25:95:81:9c:a0:2b:ed:d4:cf:bd:aa:a0:94:da:f1:19:9f: b2:dd:0a:a3:93:8e:51:79:45:51:1e:21:dc:2c:c5:e8:97:19: 71:28:aa:be:f2:b3:a6:fc:34:05:52:bb:9f:db:2b:5f:dc:9d: a5:16:37:64:03:85:f5:d9:55:df:88:17:4e:d8:d1:0c:7f:46: df:ef:dc:a8:08:1a:34:ff:c7:0b:a1:b4:d9:16:6d:78:da:8a: 1f:18:ea:9f:2b:88:a8:f1:74:d2:7e:95:09:76:94:01:57:8e: 19:ef:37:e2:3b:2d:e2:8e:05:1d:9b:e2:6f:61:d9:09:ef:16: 5e:2f:3a:57:d6:5a:bf:19:46:1c:29:5e:bd:52:2e:1f:79:c5: f3:89:dc:93:d2:95:a2:96:4e:79:f5:f7:8c:c7:2f:06:29:55: bd:ad:a9:fe:85:b2:70:d9:56:c0:f2:38:71:f0:d3:a2:ef:68: 96:f9:50:ef:72:c1:cf:52:58:92:2f:a6:24:52:65:bc:e9:08: 5a:05:7f:c3:c3:0b:48:31:09:0e:70:5b:a0:23:82:49:9e:2a: f6:d5:fa:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWWM0UZXTGEVbn4GYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI0MDQxODEzMDAzM1oXDTI0MDcxNzEzMDAzM1owLzEtMCsGA1UEAxMk MDI4ODIzMjYtZjQwMy00MDgwLWJhZmQtNzg2YzIzMTc1NGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEh6c+e3QCPHaiqX0N8N3+zZ2GVucYah4Ep6 rKeAKE6wjCLPl+MoIzpzasN8Cz9bQvQ5X2RhYqbrkvGhlUF0QqqhTk4/NIUTbUYA DpVBcPp4wBwQVpE+q16irXOYni4APwvEeeOZ9yuQzv7gVCeQmFdq0b5qZ7ylUQa1 KQqvm+Z6FO7U1BDtW+kk345nzsFHZPxk/p6FYVIGBSVhBLQrZlgBlsjkECe+RKJL ZhGLPUHlMO2bOdkk3tUS+Ffmq4iSRUv9rZHgruxReYASZILorpu7uh0sbFynSG/A +ittKj6mi81XXIEhJPfqTqj0exu6k5NOX6wzblQ8PxNC8F3yuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAa6/BmTQsXgJ8QCuGQcWgab4yGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvMGVkMTQ2OWYtZGUzMC0z YTIzLWIwZDQtNzYxY2MxMTg2YTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2NUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPgUszKqB8J8dhn7+fN9s5Ytc5KLTNstaOm8hPMwlthLRvMrGEllYGc oCvt1M+9qqCU2vEZn7LdCqOTjlF5RVEeIdwsxeiXGXEoqr7ys6b8NAVSu5/bK1/c naUWN2QDhfXZVd+IF07Y0Qx/Rt/v3KgIGjT/xwuhtNkWbXjaih8Y6p8riKjxdNJ+ lQl2lAFXjhnvN+I7LeKOBR2b4m9h2QnvFl4vOlfWWr8ZRhwpXr1SLh95xfOJ3JPS laKWTnn194zHLwYpVb2tqf6FsnDZVsDyOHHw06LvaJb5UO9ywc9SWJIvpiRSZbzp CFoFf8PDC0gxCQ5wW6AjgkmeKvbV+hc= -----END CERTIFICATE-----Generated at Tue May 21 16:35:33 2024 by rpki-client on console-ams.rpki-client.org