$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/a3b9924a-3cfa-336d-94bf-5700d26ae52d.roa File: a3b9924a-3cfa-336d-94bf-5700d26ae52d.roa (raw, json) Hash identifier: XzDicVruK1WBBGf8xLc9kPxBXrJeUVjQhEWgT3ikYHg= Subject key identifier: 3F:F9:EC:8A:AA:3C:62:91:53:2B:45:00:F9:23:84:B1:3A:40:EF:84 Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F43285845A6F3621818EBD657333D3180 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/a3b9924a-3cfa-336d-94bf-5700d26ae52d.roa Signing time: Wed 24 Apr 2024 13:00:33 +0000 ROA not before: Wed 24 Apr 2024 13:00:33 +0000 ROA not after: Tue 23 Jul 2024 13:00:33 +0000 asID: 16509 IP address blocks: 162.33.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a6:f3:62:18:18:eb:d6:57:33:3d:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: Apr 24 13:00:33 2024 GMT Not After : Jul 23 13:00:33 2024 GMT Subject: CN=8578c88b-6074-4a4f-a3ac-03a61d47f01d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b6:78:ec:13:b9:17:68:70:28:f8:51:13:a5: 34:0c:74:46:a0:cc:c9:bd:48:74:6c:e5:dd:2c:be: 3d:c4:21:93:44:f1:52:01:8f:60:e8:cc:65:9a:2c: 68:23:84:1e:c5:5e:1e:76:6e:7b:92:0b:de:47:2a: 85:d3:c0:a3:18:76:86:21:69:2c:be:e8:11:b9:65: 81:78:85:c2:7d:ad:17:22:d5:29:5f:9d:93:51:e0: a0:b1:8d:ab:d2:72:c8:ee:a0:ab:51:bc:89:9d:fe: ae:c3:57:40:11:ea:bc:5f:43:4a:14:76:1a:45:da: 77:f8:a8:be:36:5b:be:43:53:56:d8:88:a5:0f:a5: 8c:b3:21:48:01:78:ee:9f:40:08:43:9c:8e:72:d5: f8:bf:45:1b:d9:6f:4a:81:f2:bc:bc:6a:70:e8:1e: 04:9b:de:af:c1:47:7f:f1:8d:be:88:4d:30:9c:49: 20:23:77:cf:1e:bc:53:14:b5:09:ce:18:68:5a:d3: c3:6f:c4:6d:37:ed:35:d2:6c:a9:54:20:94:a2:e6: 40:5b:67:77:3a:cf:68:6f:89:06:dc:c4:1c:f6:aa: 18:e4:7b:b1:6f:b3:f1:99:56:97:bc:b5:aa:69:6a: 5a:61:06:cf:fc:5c:26:2c:cb:0f:8d:29:cb:67:69: dc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F9:EC:8A:AA:3C:62:91:53:2B:45:00:F9:23:84:B1:3A:40:EF:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/a3b9924a-3cfa-336d-94bf-5700d26ae52d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:9a:30:64:fe:a9:2a:d2:96:2d:da:02:16:13:51:41:12:c3: e5:c9:df:5c:4f:4b:8e:fb:63:a4:a1:e9:46:53:eb:40:70:b4: b3:4f:54:53:31:03:eb:54:53:cb:10:8d:36:5a:2c:0f:5c:36: d0:d3:a9:ba:e3:e1:42:c0:b9:69:74:74:18:2b:f6:1b:94:d7: 68:cd:e2:fe:38:40:bc:9f:ed:06:e4:ce:0d:c4:43:27:9f:74: 88:2f:82:f2:1a:f2:b0:ba:15:39:a5:49:ff:0e:98:5e:64:41: 74:b1:ec:5d:68:76:a6:62:89:9d:12:29:91:bc:3e:cd:23:6d: e4:3b:70:06:04:9a:88:7e:81:9d:9a:2a:6d:12:47:42:56:82: 45:6e:7c:72:d0:10:0f:ab:fe:bc:d7:6b:e0:19:a6:89:1f:82: f2:18:b5:a4:90:9a:92:bb:49:c3:d8:61:86:52:19:28:f2:a7: 34:1e:4c:6f:28:e2:e8:a1:08:4b:69:97:8e:72:f7:cd:a9:fd: bb:bf:44:fd:db:c9:20:f0:9a:90:85:40:0a:6b:1e:37:c9:6e: b2:b0:43:e9:ca:54:cc:a4:d3:4c:eb:7e:31:16:94:b2:70:aa: cb:19:0c:50:20:7b:ad:49:1c:38:2c:17:93:4c:52:a2:41:7f: 39:5a:0c:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWm82IYGOvWVzM9MYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI0MDQyNDEzMDAzM1oXDTI0MDcyMzEzMDAzM1owLzEtMCsGA1UEAxMk ODU3OGM4OGItNjA3NC00YTRmLWEzYWMtMDNhNjFkNDdmMDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbZ47BO5F2hwKPhRE6U0DHRGoMzJvUh0bOXd LL49xCGTRPFSAY9g6MxlmixoI4QexV4edm57kgveRyqF08CjGHaGIWksvugRuWWB eIXCfa0XItUpX52TUeCgsY2r0nLI7qCrUbyJnf6uw1dAEeq8X0NKFHYaRdp3+Ki+ Nlu+Q1NW2IilD6WMsyFIAXjun0AIQ5yOctX4v0Ub2W9KgfK8vGpw6B4Em96vwUd/ 8Y2+iE0wnEkgI3fPHrxTFLUJzhhoWtPDb8RtN+010mypVCCUouZAW2d3Os9ob4kG 3MQc9qoY5Huxb7PxmVaXvLWqaWpaYQbP/FwmLMsPjSnLZ2ncMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/57IqqPGKRUytFAPkjhLE6QO+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvYTNiOTkyNGEtM2NmYS0z MzZkLTk0YmYtNTcwMGQyNmFlNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASaMGT+qSrSli3aAhYTUUESw+XJ31xPS477Y6Sh6UZT60BwtLNPVFMx A+tUU8sQjTZaLA9cNtDTqbrj4ULAuWl0dBgr9huU12jN4v44QLyf7Qbkzg3EQyef dIgvgvIa8rC6FTmlSf8OmF5kQXSx7F1odqZiiZ0SKZG8Ps0jbeQ7cAYEmoh+gZ2a Km0SR0JWgkVufHLQEA+r/rzXa+AZpokfgvIYtaSQmpK7ScPYYYZSGSjypzQeTG8o 4uihCEtpl45y982p/bu/RP3bySDwmpCFQAprHjfJbrKwQ+nKVMyk00zrfjEWlLJw qssZDFAge61JHDgsF5NMUqJBfzlaDH0= -----END CERTIFICATE-----Generated at Thu May 2 14:56:56 2024 by rpki-client on console-ams.rpki-client.org