$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa File: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (raw, json) Hash identifier: 1GjwImwrYpt5kptOMIL+C1Lx+99+JEY9CI9mrN/9X8A= Subject key identifier: A5:6B:10:9E:1A:9D:85:61:CF:BC:6F:B6:43:BF:FE:4B:DB:FE:EB:6F Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F43285844F19AB00757A7A41108BBBE40 Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa Signing time: Mon 19 Feb 2024 14:00:31 +0000 ROA not before: Mon 19 Feb 2024 14:00:31 +0000 ROA not after: Sun 19 May 2024 13:00:31 +0000 asID: 13849 IP address blocks: 173.243.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f1:9a:b0:07:57:a7:a4:11:08:bb:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Feb 19 14:00:31 2024 GMT Not After : May 19 13:00:31 2024 GMT Subject: CN=d7ce079b-4971-4c4b-b557-a3f5c7748165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:47:6b:f1:8a:b4:bb:8c:2b:42:d8:48:69:fc: 11:c9:70:bb:8c:4e:d7:7b:c1:94:d0:64:8e:f3:53: 35:5d:7b:73:75:e6:ee:24:18:bb:c5:cf:c1:10:40: 1d:59:47:30:23:ed:d8:b1:22:96:d3:e2:9f:5c:ee: 7a:3b:69:9a:db:05:c3:44:55:69:9b:b2:1f:fe:47: 97:ca:a8:86:94:96:50:30:67:35:e5:5e:b0:81:8e: c1:30:d0:ca:a0:88:92:0d:59:8c:b4:70:f3:40:d3: 39:98:8f:cd:ff:8b:a8:c2:e0:68:31:8c:bb:08:81: e2:cf:3a:44:6f:bc:66:47:1b:1f:95:d5:f5:8a:c7: 37:c3:87:f9:9f:45:21:94:31:33:85:ae:fe:c4:62: 40:e3:b3:aa:35:ac:3f:5b:ff:d9:b5:37:d8:ad:e0: c4:97:f6:af:7e:ec:a9:af:cd:49:5c:2b:9b:84:03: 85:d0:d5:ab:c8:df:10:55:6b:3e:f6:6a:66:2a:4a: 65:45:7b:4a:03:f0:03:60:83:8d:3e:66:00:f6:aa: cc:dd:37:36:94:d5:36:e1:cc:3a:07:3f:ed:d1:77: 90:6d:11:24:77:91:3c:e1:69:30:3a:1b:13:4e:ad: 64:00:59:82:c0:ad:a5:41:6f:08:01:42:ed:91:2c: cc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6B:10:9E:1A:9D:85:61:CF:BC:6F:B6:43:BF:FE:4B:DB:FE:EB:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: 173.243.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:e8:e7:f5:07:c3:e4:49:04:0e:15:d5:e4:67:3a:13:46:47: 7d:bc:04:95:7b:ed:1b:9a:d4:42:c5:09:b6:a9:e3:f9:f7:9a: 35:42:15:95:fb:90:30:ac:3d:be:2e:d9:3f:58:7f:c4:b4:1c: d3:a4:33:4a:59:30:0b:20:c6:20:54:05:10:45:c5:23:6d:17: e3:e6:9d:e9:a0:2c:47:38:cd:68:92:b9:58:72:f0:6e:40:85: da:7d:73:24:2c:67:8d:90:72:78:b9:7b:eb:d7:2e:6d:6b:69: d0:62:85:8c:3c:2c:c7:ca:b9:c3:26:9a:ab:87:75:54:a2:75: 45:9e:f2:37:19:22:55:04:bb:ab:71:02:66:c4:d2:c4:6d:49: c8:56:e5:c9:1a:dd:5a:ab:5d:46:9b:3e:73:60:1e:90:1a:10: ea:ca:5f:86:45:e9:72:22:7c:81:b0:dd:d0:f7:9e:00:95:72: 66:ea:dc:29:13:35:c0:8f:b8:d1:05:cc:0f:26:80:93:4f:67: db:1d:d8:1e:35:d8:55:00:81:8b:4f:6d:67:4f:cc:40:49:97: 9e:d5:f4:78:02:d8:f3:ea:2a:7a:31:1c:48:95:ac:5a:33:a8: e8:18:21:ec:fe:48:17:b0:dd:86:c3:ca:cc:2c:f3:70:46:f2: 75:0f:27:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETxmrAHV6ekEQi7vkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI0MDIxOTE0MDAzMVoXDTI0MDUxOTEzMDAzMVowLzEtMCsGA1UEAxMk ZDdjZTA3OWItNDk3MS00YzRiLWI1NTctYTNmNWM3NzQ4MTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0dr8Yq0u4wrQthIafwRyXC7jE7Xe8GU0GSO 81M1XXtzdebuJBi7xc/BEEAdWUcwI+3YsSKW0+KfXO56O2ma2wXDRFVpm7If/keX yqiGlJZQMGc15V6wgY7BMNDKoIiSDVmMtHDzQNM5mI/N/4uowuBoMYy7CIHizzpE b7xmRxsfldX1isc3w4f5n0UhlDEzha7+xGJA47OqNaw/W//ZtTfYreDEl/avfuyp r81JXCubhAOF0NWryN8QVWs+9mpmKkplRXtKA/ADYIONPmYA9qrM3Tc2lNU24cw6 Bz/t0XeQbREkd5E84WkwOhsTTq1kAFmCwK2lQW8IAULtkSzMbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVrEJ4anYVhz7xvtkO//kvb/utvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvZmFlYWEzNWEtM2QwMy0z YzczLTliZWEtYTZlODk5MGFlYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfPkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTo5/UHw+RJBA4V1eRnOhNGR328BJV77Rua1ELFCbap4/n3mjVCFZX7 kDCsPb4u2T9Yf8S0HNOkM0pZMAsgxiBUBRBFxSNtF+PmnemgLEc4zWiSuVhy8G5A hdp9cyQsZ42Qcni5e+vXLm1radBihYw8LMfKucMmmquHdVSidUWe8jcZIlUEu6tx AmbE0sRtSchW5cka3VqrXUabPnNgHpAaEOrKX4ZF6XIifIGw3dD3ngCVcmbq3CkT NcCPuNEFzA8mgJNPZ9sd2B412FUAgYtPbWdPzEBJl57V9HgC2PPqKnoxHEiVrFoz qOgYIez+SBew3YbDysws83BG8nUPJ1E= -----END CERTIFICATE-----Generated at Thu May 9 03:31:03 2024 by rpki-client on console-fra.rpki-client.org