$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/875a6dd8-0332-3d39-b999-634a325db39c.roa File: 875a6dd8-0332-3d39-b999-634a325db39c.roa (raw, json) Hash identifier: 8wA2yt9u7QSVWq+IJATj9GFOpg/aFq4W3/SD6qV1mg4= Subject key identifier: 36:D2:B1:3E:80:1F:4A:5C:53:46:6E:2B:A7:54:75:E3:2B:D7:5F:90 Certificate issuer: /CN=b2456e11-ca83-4345-8884-0becc0831fb7 Certificate serial: 010D0C9F43285844CBEBAC14F180702781F609E0 Authority key identifier: E8:0D:FA:19:40:E1:CD:5A:C6:10:AE:B8:44:D8:0B:05:C4:18:0B:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/875a6dd8-0332-3d39-b999-634a325db39c.roa Signing time: Tue 06 Feb 2024 02:00:26 +0000 ROA not before: Tue 06 Feb 2024 02:00:26 +0000 ROA not after: Mon 06 May 2024 01:00:26 +0000 asID: 400416 IP address blocks: 76.164.232.0/23 maxlen: 24 104.238.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Apr 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:cb:eb:ac:14:f1:80:70:27:81:f6:09:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2456e11-ca83-4345-8884-0becc0831fb7 Validity Not Before: Feb 6 02:00:26 2024 GMT Not After : May 6 01:00:26 2024 GMT Subject: CN=865d9652-33cd-4300-88ac-db9a0f41ca49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:48:b5:86:48:78:89:dd:f7:2b:b5:67:2d:33: 55:fd:2d:e2:6a:f8:24:c1:d9:e4:6f:01:f2:15:03: b6:72:b0:e5:37:e7:ea:c0:a1:0a:be:3b:92:b8:1f: c3:f5:cc:bc:ac:6e:72:7d:a9:a6:d8:17:59:ba:d7: c5:60:9f:9f:19:dc:e0:46:4a:67:89:e3:32:cc:3a: 73:06:ee:b1:05:de:8a:ac:74:0f:d0:8a:9d:36:94: e2:c0:7d:a9:8a:13:f4:69:75:94:53:7a:12:14:20: 31:92:50:30:43:1e:42:d0:79:71:ce:45:b3:29:1a: 4c:03:d4:fb:96:b1:a7:b3:f2:34:6f:f9:09:37:2d: 8b:78:3f:d2:02:3e:f0:13:97:84:cf:42:f6:79:32: 9b:75:76:44:f2:2d:0e:7c:90:2e:49:4a:09:32:ba: de:5b:52:90:26:ae:b2:aa:ab:59:4c:7b:62:6a:5b: da:d6:eb:ee:29:20:03:8d:cf:24:0e:12:b8:08:4e: fe:2e:e9:5d:33:62:2c:7c:b6:ae:90:20:c8:04:7e: 24:a8:97:2b:0e:f6:ff:a7:6c:e6:cb:9d:c9:b9:a4: 47:6d:c6:08:f4:a8:78:45:dd:d1:cf:24:a5:ee:44: c3:56:3c:ca:1b:6e:6e:d2:9b:79:11:0e:e6:72:37: 36:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D2:B1:3E:80:1F:4A:5C:53:46:6E:2B:A7:54:75:E3:2B:D7:5F:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/875a6dd8-0332-3d39-b999-634a325db39c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.crl X509v3 Authority Key Identifier: keyid:E8:0D:FA:19:40:E1:CD:5A:C6:10:AE:B8:44:D8:0B:05:C4:18:0B:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer sbgp-ipAddrBlock: critical IPv4: 76.164.232.0/23 104.238.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:3c:40:4e:8e:e1:13:cc:64:62:67:40:f9:5a:40:b3:09:8f: f3:0e:e8:ca:b0:55:2d:5f:fc:c9:63:95:51:6d:29:80:5c:d7: 33:58:91:e1:15:b3:87:0b:35:61:63:ad:bc:b6:62:83:1e:c3: 76:b2:3d:d8:06:60:3f:2b:92:e2:64:45:d4:88:8c:df:d4:ef: dd:17:15:2e:c7:5b:76:48:ca:cb:ab:44:b3:87:e0:97:ac:db: 44:1d:9c:52:d3:ea:64:e2:c1:fd:6a:61:36:6f:53:ff:46:ff: 2f:54:24:4d:9a:f8:c7:31:e3:50:46:33:28:e1:7a:00:01:45: 17:33:21:45:88:58:f5:bc:fc:b8:99:f1:9e:1b:c3:07:4a:78: 3b:30:97:6f:5e:4f:2e:9b:ca:df:e9:5d:36:f0:ee:9e:2b:bc: f1:2b:2a:53:1b:06:5d:3e:60:0b:a8:59:7f:68:13:16:a9:5b: 7e:8c:d9:5b:cb:89:87:40:74:4d:fd:ed:7d:75:6f:11:85:80: 26:46:35:65:c8:e9:cd:53:f7:10:b6:b2:ca:97:7d:1e:dc:4a: 99:0d:e4:30:57:31:4b:f7:00:fc:94:67:2a:2d:39:a9:8d:12: 02:cc:18:55:3b:82:95:a2:e1:2e:fd:00:fc:79:e8:10:53:5d: df:d6:a3:9f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWETL66wU8YBwJ4H2CeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI0NTZlMTEtY2E4My00MzQ1LTg4ODQtMGJlY2MwODMx ZmI3MB4XDTI0MDIwNjAyMDAyNloXDTI0MDUwNjAxMDAyNlowLzEtMCsGA1UEAxMk ODY1ZDk2NTItMzNjZC00MzAwLTg4YWMtZGI5YTBmNDFjYTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ki1hkh4id33K7VnLTNV/S3iavgkwdnkbwHy FQO2crDlN+fqwKEKvjuSuB/D9cy8rG5yfamm2BdZutfFYJ+fGdzgRkpnieMyzDpz Bu6xBd6KrHQP0IqdNpTiwH2pihP0aXWUU3oSFCAxklAwQx5C0HlxzkWzKRpMA9T7 lrGns/I0b/kJNy2LeD/SAj7wE5eEz0L2eTKbdXZE8i0OfJAuSUoJMrreW1KQJq6y qqtZTHtialva1uvuKSADjc8kDhK4CE7+LuldM2IsfLaukCDIBH4kqJcrDvb/p2zm y53JuaRHbcYI9Kh4Rd3RzySl7kTDVjzKG25u0pt5EQ7mcjc2KQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDbSsT6AH0pcU0ZuK6dUdeMr11+QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMjQ1 NmUxMS1jYTgzLTQzNDUtODg4NC0wYmVjYzA4MzFmYjcvODc1YTZkZDgtMDMzMi0z ZDM5LWI5OTktNjM0YTMyNWRiMzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjI0NTZlMTEtY2E4My00MzQ1LTg4 ODQtMGJlY2MwODMxZmI3L2IyNDU2ZTExLWNhODMtNDM0NS04ODg0LTBiZWNjMDgz MWZiNy5jcmwwHwYDVR0jBBgwFoAU6A36GUDhzVrGEK64RNgLBcQYCxUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMjQ1NmUxMS1jYTgzLTQzNDUtODg4NC0wYmVj YzA4MzFmYjcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBTKToAwQB aO7YMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALI8QE6O4RPMZGJnQPlaQLMJj/MO6MqwVS1f/MljlVFtKYBc 1zNYkeEVs4cLNWFjrby2YoMew3ayPdgGYD8rkuJkRdSIjN/U790XFS7HW3ZIysur RLOH4Jes20QdnFLT6mTiwf1qYTZvU/9G/y9UJE2a+Mcx41BGMyjhegABRRczIUWI WPW8/LiZ8Z4bwwdKeDswl29eTy6byt/pXTbw7p4rvPErKlMbBl0+YAuoWX9oExap W36M2VvLiYdAdE397X11bxGFgCZGNWXI6c1T9xC2ssqXfR7cSpkN5DBXMUv3APyU ZyotOamNEgLMGFU7gpWi4S79APx56BBTXd/Wo58= -----END CERTIFICATE-----Generated at Wed Apr 17 15:55:21 2024 by rpki-client on console-ams.rpki-client.org