$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/ebc74e11-a225-3c40-a976-f2047dc2fdea.roa File: ebc74e11-a225-3c40-a976-f2047dc2fdea.roa (raw, json) Hash identifier: rvs4FuvwnTD68sxP86eokYqO7s2Od4fWAYXOaBsv6xs= Subject key identifier: A7:51:B6:C1:88:3D:D3:76:26:57:16:77:01:6F:E8:2C:58:06:65:37 Certificate issuer: /CN=b414afc1-d8ed-4d3f-8f5b-ff72e57f699c Certificate serial: 010D0C9F43285845F253F0ED1115E0FF1FFD5C40 Authority key identifier: 84:18:2E:63:63:C3:F9:7A:FD:FC:D9:56:B9:F2:6A:9E:82:CB:58:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/ebc74e11-a225-3c40-a976-f2047dc2fdea.roa Signing time: Tue 21 May 2024 13:00:34 +0000 ROA not before: Tue 21 May 2024 13:00:34 +0000 ROA not after: Mon 19 Aug 2024 13:00:34 +0000 asID: 14041 IP address blocks: 192.43.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 May 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:f2:53:f0:ed:11:15:e0:ff:1f:fd:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b414afc1-d8ed-4d3f-8f5b-ff72e57f699c Validity Not Before: May 21 13:00:34 2024 GMT Not After : Aug 19 13:00:34 2024 GMT Subject: CN=d05af910-7026-401e-bf6f-5e9d2dd9583b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:75:49:45:f2:bf:29:0f:d8:e2:5c:a8:83:a6: 7e:10:72:4d:4d:64:eb:5d:e6:16:11:6b:dd:f3:f4: bf:9e:65:23:0d:cb:46:ee:d3:1a:fa:9b:57:42:2c: 21:5b:47:63:b2:6e:91:a0:7d:0a:d6:39:47:01:f6: 7b:c0:ba:bd:08:22:21:3f:f3:8b:6a:0d:ea:ea:f7: c7:28:31:10:35:b7:06:60:2f:9f:a5:12:78:a3:6b: 04:f1:d5:8a:26:56:e3:32:09:cd:04:97:7d:6e:b7: 0c:5a:ea:d0:2c:a9:8c:b2:7a:b5:4f:38:ff:ee:77: c9:d1:02:f1:44:bb:09:9b:85:9d:13:0a:74:3b:0c: 8f:e3:46:23:bd:7a:14:ad:c9:24:da:23:6e:33:d7: c2:b3:95:7f:ac:c1:22:32:6d:97:5c:00:ba:d4:88: 11:a4:fe:2c:3f:25:63:73:ec:80:b8:86:11:2d:0c: 6e:51:6e:b7:76:ae:a4:f0:9f:5a:8a:c1:2c:0d:0d: 88:f6:58:cc:46:66:81:f6:01:89:c2:e8:1b:7c:c8: 17:8d:93:0b:0b:0d:24:d7:3d:13:2b:9a:80:b6:25: 88:88:c5:1e:d5:78:ee:b5:df:c9:96:8d:69:8e:23: d3:9b:2c:20:48:28:5b:01:15:d0:e2:9c:6c:91:ee: 8a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:51:B6:C1:88:3D:D3:76:26:57:16:77:01:6F:E8:2C:58:06:65:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/ebc74e11-a225-3c40-a976-f2047dc2fdea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.crl X509v3 Authority Key Identifier: keyid:84:18:2E:63:63:C3:F9:7A:FD:FC:D9:56:B9:F2:6A:9E:82:CB:58:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer sbgp-ipAddrBlock: critical IPv4: 192.43.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:8b:c1:df:31:86:2f:88:46:2f:2b:25:47:06:41:34:a5:a4: 23:81:eb:bd:81:df:b9:a8:cd:fe:6f:24:08:f5:13:b1:f2:89: d8:09:ce:d3:e0:e3:65:1c:c1:2b:ea:85:96:4d:9b:75:4a:8c: 41:bd:5f:5b:0e:f0:7d:60:09:6e:43:2e:23:0a:0f:20:78:ab: 57:78:69:a8:6e:4b:71:9c:88:67:ac:d1:b4:ef:ff:2b:a5:50: e5:10:92:3c:f4:a9:a8:ee:dc:42:fb:f3:11:aa:07:9b:a1:d3: 7c:44:c5:f0:fc:c2:bb:2b:16:e9:f0:82:35:38:10:2c:b6:13: de:be:bd:18:92:61:2e:76:ae:4e:f9:15:02:33:19:5b:16:42: f9:d3:8e:88:92:6e:20:ba:f3:93:40:89:e2:36:7b:96:30:37: 3a:c5:48:64:43:75:29:f7:42:a1:2f:e9:2e:5b:27:10:fe:1c: cb:72:21:97:9d:77:4a:5b:f5:11:d9:92:24:86:c9:8f:5c:35: b8:ee:89:8a:01:7e:a4:f5:e0:73:1e:e9:e7:40:1b:aa:d5:b0: 38:8a:2f:96:d7:c3:32:e1:a5:50:56:16:f1:dc:c2:2d:d7:c3: 0c:55:d5:e0:ca:b3:d0:fa:44:ab:37:41:e9:15:34:13:fb:46: b6:ee:cd:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXyU/DtERXg/x/9XEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQxNGFmYzEtZDhlZC00ZDNmLThmNWItZmY3MmU1N2Y2 OTljMB4XDTI0MDUyMTEzMDAzNFoXDTI0MDgxOTEzMDAzNFowLzEtMCsGA1UEAxMk ZDA1YWY5MTAtNzAyNi00MDFlLWJmNmYtNWU5ZDJkZDk1ODNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3VJRfK/KQ/Y4lyog6Z+EHJNTWTrXeYWEWvd 8/S/nmUjDctG7tMa+ptXQiwhW0djsm6RoH0K1jlHAfZ7wLq9CCIhP/OLag3q6vfH KDEQNbcGYC+fpRJ4o2sE8dWKJlbjMgnNBJd9brcMWurQLKmMsnq1Tzj/7nfJ0QLx RLsJm4WdEwp0OwyP40YjvXoUrckk2iNuM9fCs5V/rMEiMm2XXAC61IgRpP4sPyVj c+yAuIYRLQxuUW63dq6k8J9aisEsDQ2I9ljMRmaB9gGJwugbfMgXjZMLCw0k1z0T K5qAtiWIiMUe1Xjutd/Jlo1pjiPTmywgSChbARXQ4pxske6K9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdRtsGIPdN2JlcWdwFv6CxYBmU3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNDE0 YWZjMS1kOGVkLTRkM2YtOGY1Yi1mZjcyZTU3ZjY5OWMvZWJjNzRlMTEtYTIyNS0z YzQwLWE5NzYtZjIwNDdkYzJmZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjQxNGFmYzEtZDhlZC00ZDNmLThm NWItZmY3MmU1N2Y2OTljL2I0MTRhZmMxLWQ4ZWQtNGQzZi04ZjViLWZmNzJlNTdm Njk5Yy5jcmwwHwYDVR0jBBgwFoAUhBguY2PD+Xr9/NlWufJqnoLLWNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNDE0YWZjMS1kOGVkLTRkM2YtOGY1Yi1mZjcy ZTU3ZjY5OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCvZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiLwd8xhi+IRi8rJUcGQTSlpCOB672B37mozf5vJAj1E7HyidgJztPg 42UcwSvqhZZNm3VKjEG9X1sO8H1gCW5DLiMKDyB4q1d4aahuS3GciGes0bTv/yul UOUQkjz0qaju3EL78xGqB5uh03xExfD8wrsrFunwgjU4ECy2E96+vRiSYS52rk75 FQIzGVsWQvnTjoiSbiC685NAieI2e5YwNzrFSGRDdSn3QqEv6S5bJxD+HMtyIZed d0pb9RHZkiSGyY9cNbjuiYoBfqT14HMe6edAG6rVsDiKL5bXwzLhpVBWFvHcwi3X wwxV1eDKs9D6RKs3QekVNBP7Rrbuzfw= -----END CERTIFICATE-----Generated at Wed May 22 01:54:49 2024 by rpki-client on console-fra.rpki-client.org