$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/b7718956-829a-3e02-9a2b-7cfb84f2012b.roa File: b7718956-829a-3e02-9a2b-7cfb84f2012b.roa (raw, json) Hash identifier: efU7A3JcIVacLmIcgTMKmHY62fSAoBmw7AlUbch8+a4= Subject key identifier: 0B:AB:4A:FA:68:CC:2F:27:0D:5B:39:98:12:D2:DA:EC:02:6E:C2:C0 Certificate issuer: /CN=add35f11-0294-4be9-94b7-49cac2bcb001 Certificate serial: 010D0C9F43285845A428D2DB92254F2B99398D40 Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/b7718956-829a-3e02-9a2b-7cfb84f2012b.roa Signing time: Tue 23 Apr 2024 13:00:34 +0000 ROA not before: Tue 23 Apr 2024 13:00:34 +0000 ROA not after: Mon 22 Jul 2024 13:00:34 +0000 asID: 212149 IP address blocks: 207.167.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a4:28:d2:db:92:25:4f:2b:99:39:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001 Validity Not Before: Apr 23 13:00:34 2024 GMT Not After : Jul 22 13:00:34 2024 GMT Subject: CN=ba020e48-ca08-44c7-8397-0a727f0bdb40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c2:ec:c4:ee:7e:25:3d:a6:0f:ba:4d:6f:a4: 89:c4:75:d2:b1:00:1a:e1:d9:4f:54:a4:cb:9e:cd: b5:9f:97:81:7a:4e:1c:5c:30:c0:f3:08:8a:e4:fe: b2:ad:8e:11:22:d9:7d:f7:50:35:04:54:6a:66:47: f4:05:ca:80:6f:05:43:4a:df:1b:49:44:ce:50:05: d6:49:23:41:56:3d:20:b7:5d:1e:9e:6d:af:20:c2: 55:f6:22:d3:b7:61:0a:1c:fe:9e:7d:09:ce:d5:2c: 67:72:64:a4:a1:a3:3e:96:ac:5a:08:e3:ae:da:2c: 91:92:d3:1d:3b:f9:3f:cb:c3:58:16:c5:dc:55:60: 86:29:5e:85:47:df:a8:17:27:96:3d:a5:b7:a5:15: 86:49:81:51:57:7a:ea:af:7e:17:17:5c:e1:6e:b2: ee:9d:fa:90:1a:7b:05:50:16:b1:d5:8c:a3:ac:6b: e5:e5:b5:73:63:30:4d:bd:f9:a5:3b:3e:54:e0:6a: 7e:90:65:48:c8:6f:3f:0d:d8:53:98:71:c5:ea:e8: d7:0a:7c:7a:07:30:84:e5:97:fc:54:43:20:19:ab: 17:e3:fb:a7:9b:e0:54:56:7f:f7:64:24:d3:fe:2d: e8:ff:55:50:8e:0b:ca:29:b2:39:7b:0a:ed:fc:00: 87:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AB:4A:FA:68:CC:2F:27:0D:5B:39:98:12:D2:DA:EC:02:6E:C2:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/b7718956-829a-3e02-9a2b-7cfb84f2012b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl X509v3 Authority Key Identifier: keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer sbgp-ipAddrBlock: critical IPv4: 207.167.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:9b:13:6d:e9:49:ff:2a:8f:c6:94:aa:96:c3:53:8f:64:33: dd:14:34:ff:73:7a:b2:2e:4f:90:b0:d4:87:28:4f:71:6a:20: f2:1f:96:f6:47:ad:aa:56:fb:b6:d3:16:e5:7e:c7:ec:da:f1: 63:89:2b:37:82:e1:18:3b:84:f7:37:e0:40:42:96:f0:ce:10: c3:d7:42:c6:c3:e4:37:3b:14:dc:63:75:47:f4:77:43:e5:a3: a8:08:0c:3f:41:f3:0b:b5:fa:a2:f6:28:91:44:8e:3b:95:59: 20:dd:be:c6:70:11:13:f7:96:e7:0d:16:60:80:db:92:be:26: 63:ed:90:69:dd:bb:92:1d:32:0e:ff:4e:9a:b7:4e:bd:c8:cf: cd:e8:9d:cd:46:f0:5c:2a:e9:9e:37:ed:38:7a:17:be:3e:9b: 4d:3b:61:2e:19:78:29:18:4e:a4:e3:04:04:26:20:1f:93:b0: c5:2a:28:82:1e:7f:9c:c6:aa:65:d1:1c:6f:d3:54:47:16:33: 45:d5:64:f1:28:dd:11:6e:6e:e7:7b:bd:58:e0:1e:e4:38:63: 36:19:20:f5:ee:38:b2:76:b7:29:c0:26:b4:bd:e7:4a:a9:60: 32:a5:bd:0c:8e:af:d3:21:9a:60:87:cf:a9:e0:60:e5:db:ca: 36:55:ec:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWkKNLbkiVPK5k5jUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRkMzVmMTEtMDI5NC00YmU5LTk0YjctNDljYWMyYmNi MDAxMB4XDTI0MDQyMzEzMDAzNFoXDTI0MDcyMjEzMDAzNFowLzEtMCsGA1UEAxMk YmEwMjBlNDgtY2EwOC00NGM3LTgzOTctMGE3MjdmMGJkYjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicLsxO5+JT2mD7pNb6SJxHXSsQAa4dlPVKTL ns21n5eBek4cXDDA8wiK5P6yrY4RItl991A1BFRqZkf0BcqAbwVDSt8bSUTOUAXW SSNBVj0gt10enm2vIMJV9iLTt2EKHP6efQnO1SxncmSkoaM+lqxaCOOu2iyRktMd O/k/y8NYFsXcVWCGKV6FR9+oFyeWPaW3pRWGSYFRV3rqr34XF1zhbrLunfqQGnsF UBax1YyjrGvl5bVzYzBNvfmlOz5U4Gp+kGVIyG8/DdhTmHHF6ujXCnx6BzCE5Zf8 VEMgGasX4/unm+BUVn/3ZCTT/i3o/1VQjgvKKbI5ewrt/ACHMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAurSvpozC8nDVs5mBLS2uwCbsLAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQz NWYxMS0wMjk0LTRiZTktOTRiNy00OWNhYzJiY2IwMDEvYjc3MTg5NTYtODI5YS0z ZTAyLTlhMmItN2NmYjg0ZjIwMTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWRkMzVmMTEtMDI5NC00YmU5LTk0 YjctNDljYWMyYmNiMDAxL2FkZDM1ZjExLTAyOTQtNGJlOS05NGI3LTQ5Y2FjMmJj YjAwMS5jcmwwHwYDVR0jBBgwFoAUpXphLLBJKDwfCZ0NXgzzjrlY+MowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQzNWYxMS0wMjk0LTRiZTktOTRiNy00OWNh YzJiY2IwMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6d5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALubE23pSf8qj8aUqpbDU49kM90UNP9zerIuT5Cw1IcoT3FqIPIflvZH rapW+7bTFuV+x+za8WOJKzeC4Rg7hPc34EBClvDOEMPXQsbD5Dc7FNxjdUf0d0Pl o6gIDD9B8wu1+qL2KJFEjjuVWSDdvsZwERP3lucNFmCA25K+JmPtkGndu5IdMg7/ Tpq3Tr3Iz83onc1G8Fwq6Z437Th6F74+m007YS4ZeCkYTqTjBAQmIB+TsMUqKIIe f5zGqmXRHG/TVEcWM0XVZPEo3RFubud7vVjgHuQ4YzYZIPXuOLJ2tynAJrS950qp YDKlvQyOr9MhmmCHz6ngYOXbyjZV7DE= -----END CERTIFICATE-----Generated at Fri May 17 18:15:23 2024 by rpki-client on console-fra.rpki-client.org