$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/bf398656-87b8-31bc-bc34-40b0e06987a0.roa File: bf398656-87b8-31bc-bc34-40b0e06987a0.roa (raw, json) Hash identifier: W/cRYaxzMa9nnPvLSjFJsr9QNcwTSEwtcYKLIxCt1Hc= Subject key identifier: AC:6B:D5:66:27:ED:59:3C:45:1C:C7:83:9F:57:DC:76:98:00:47:05 Certificate issuer: /CN=cffdb071-c372-4fb8-ae3c-ab449c400178 Certificate serial: 010D0C9F43285845936896E637BE9C9DEC86F340 Authority key identifier: D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/bf398656-87b8-31bc-bc34-40b0e06987a0.roa Signing time: Wed 17 Apr 2024 13:00:34 +0000 ROA not before: Wed 17 Apr 2024 13:00:34 +0000 ROA not after: Tue 16 Jul 2024 13:00:34 +0000 asID: 16509 IP address blocks: 207.34.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:93:68:96:e6:37:be:9c:9d:ec:86:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cffdb071-c372-4fb8-ae3c-ab449c400178 Validity Not Before: Apr 17 13:00:34 2024 GMT Not After : Jul 16 13:00:34 2024 GMT Subject: CN=4f1681a3-717f-4170-ac10-2b21d54bfbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:23:30:c7:f3:ef:83:29:5a:1f:f5:fc:79:04: 75:64:5e:f5:17:25:51:c7:2c:0b:d7:90:6c:95:b3: a2:1b:c7:78:82:20:0d:a8:40:57:bc:05:36:48:24: d7:b8:70:5c:a0:f5:52:07:6a:82:e7:52:bf:8c:1b: ef:1c:94:ec:2a:d4:a1:4b:e2:12:e3:f4:a8:a7:04: b2:49:5e:aa:7b:f4:af:c1:e5:02:73:cf:59:1f:e0: 56:44:69:37:c7:d6:d4:53:95:09:2d:31:1b:bf:89: 14:af:58:3b:3d:5b:91:7c:e6:a9:3e:b6:d5:19:fc: 1d:e2:34:77:3a:fc:eb:e0:2b:16:65:6f:ed:d1:aa: bd:dc:97:68:28:06:3c:55:de:02:1a:e9:e5:6f:d8: b2:2b:d5:a3:82:4d:9c:79:54:d7:cc:8b:0c:ad:23: a0:cf:04:d1:11:40:8b:3a:dc:76:42:4f:90:1f:a6: 04:b1:f7:41:6f:ea:6e:a6:a1:ae:9a:91:7a:dc:f9: 50:55:28:d8:ba:c1:a9:7e:b1:fb:0b:64:a0:73:ac: 18:a2:9a:aa:5e:f7:ae:45:bd:cc:d3:eb:54:74:59: 54:bc:83:23:0a:e3:31:6d:b9:3f:13:a0:b7:e6:47: 6f:59:7b:8e:d7:97:4e:b6:b4:15:fa:5f:68:6b:83: 7a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6B:D5:66:27:ED:59:3C:45:1C:C7:83:9F:57:DC:76:98:00:47:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/bf398656-87b8-31bc-bc34-40b0e06987a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.crl X509v3 Authority Key Identifier: keyid:D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer sbgp-ipAddrBlock: critical IPv4: 207.34.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:84:f8:07:34:a3:db:89:f8:c2:d8:30:b3:f4:f5:67:c2:84: 63:7c:06:25:c1:1a:1d:c0:d8:57:a5:3d:a2:72:07:00:67:9a: f3:bd:3c:8c:2a:24:b5:9d:f1:25:8f:42:e0:09:89:3a:1b:d5: 67:1f:1b:02:eb:f9:d7:ba:6c:34:e3:38:fd:ee:15:f5:e2:3b: 45:68:b7:28:cf:11:00:97:95:18:8b:20:25:36:62:f0:9f:a6: 1d:8c:f0:2e:df:24:bb:11:52:b9:8e:eb:bf:10:87:b5:fa:27: 1d:21:2f:cf:fb:e8:12:f1:1b:6b:50:86:a9:1c:67:95:a9:1b: d2:65:6b:ac:c8:e0:38:19:ab:95:17:72:f7:0c:23:e8:e8:55: fa:5d:d1:8e:11:ff:c9:dd:e7:78:ef:d4:b5:b0:a7:59:7c:39: 11:b0:9d:4b:46:c6:1a:dd:f4:ea:04:e1:21:70:89:2f:4c:af: 56:cd:1f:f0:84:2c:65:08:70:37:21:9e:31:0b:52:89:3b:68: de:08:8a:3a:65:e8:24:43:ca:30:59:b2:95:39:16:76:aa:09: e3:2d:bf:29:98:51:16:c1:ef:69:69:d6:5b:32:9d:24:f5:f3: 29:04:b6:5b:12:b1:2f:ae:59:af:8a:0a:dd:02:70:b2:61:c5: 9e:74:cd:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWTaJbmN76cneyG80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZmZGIwNzEtYzM3Mi00ZmI4LWFlM2MtYWI0NDljNDAw MTc4MB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk NGYxNjgxYTMtNzE3Zi00MTcwLWFjMTAtMmIyMWQ1NGJmYmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yMwx/PvgylaH/X8eQR1ZF71FyVRxywL15Bs lbOiG8d4giANqEBXvAU2SCTXuHBcoPVSB2qC51K/jBvvHJTsKtShS+IS4/SopwSy SV6qe/SvweUCc89ZH+BWRGk3x9bUU5UJLTEbv4kUr1g7PVuRfOapPrbVGfwd4jR3 Ovzr4CsWZW/t0aq93JdoKAY8Vd4CGunlb9iyK9Wjgk2ceVTXzIsMrSOgzwTREUCL Otx2Qk+QH6YEsfdBb+pupqGumpF63PlQVSjYusGpfrH7C2Sgc6wYopqqXveuRb3M 0+tUdFlUvIMjCuMxbbk/E6C35kdvWXuO15dOtrQV+l9oa4N6UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxr1WYn7Vk8RRzHg59X3HaYAEcFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZmZk YjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0OWM0MDAxNzgvYmYzOTg2NTYtODdiOC0z MWJjLWJjMzQtNDBiMGUwNjk4N2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2ZmZGIwNzEtYzM3Mi00ZmI4LWFl M2MtYWI0NDljNDAwMTc4L2NmZmRiMDcxLWMzNzItNGZiOC1hZTNjLWFiNDQ5YzQw MDE3OC5jcmwwHwYDVR0jBBgwFoAU0G9rpKq4NruHn3CfJlRBiJL9bcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZmZkYjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0 OWM0MDAxNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzyILMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyE+Ac0o9uJ+MLYMLP09WfChGN8BiXBGh3A2FelPaJyBwBnmvO9PIwq JLWd8SWPQuAJiTob1WcfGwLr+de6bDTjOP3uFfXiO0VotyjPEQCXlRiLICU2YvCf ph2M8C7fJLsRUrmO678Qh7X6Jx0hL8/76BLxG2tQhqkcZ5WpG9Jla6zI4DgZq5UX cvcMI+joVfpd0Y4R/8nd53jv1LWwp1l8ORGwnUtGxhrd9OoE4SFwiS9Mr1bNH/CE LGUIcDchnjELUok7aN4Iijpl6CRDyjBZspU5FnaqCeMtvymYURbB72lp1lsynST1 8ykEtlsSsS+uWa+KCt0CcLJhxZ50zQw= -----END CERTIFICATE-----Generated at Thu May 2 20:21:44 2024 by rpki-client on console-ams.rpki-client.org