$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/a955688c-c2c2-3f78-b969-0eeec2f199c6.roa File: a955688c-c2c2-3f78-b969-0eeec2f199c6.roa (raw, json) Hash identifier: ohhg5wymQt3UUFmoepAFjPTIpOV7aXqfwwtHt4dlUII= Subject key identifier: C9:14:29:86:67:50:B1:64:10:79:F1:1F:96:77:5F:77:05:F1:78:97 Certificate issuer: /CN=e51abfb2-ff55-4866-8f32-d2fc9346d303 Certificate serial: 010D0C9F43285845A428AD1597EEDF933E2F4B80 Authority key identifier: 0E:F4:F9:26:E2:FD:E0:9A:05:E4:95:43:52:A6:26:C3:19:A1:EB:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/a955688c-c2c2-3f78-b969-0eeec2f199c6.roa Signing time: Tue 23 Apr 2024 13:00:34 +0000 ROA not before: Tue 23 Apr 2024 13:00:34 +0000 ROA not after: Mon 22 Jul 2024 13:00:34 +0000 asID: 16509 IP address blocks: 208.78.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a4:28:ad:15:97:ee:df:93:3e:2f:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e51abfb2-ff55-4866-8f32-d2fc9346d303 Validity Not Before: Apr 23 13:00:34 2024 GMT Not After : Jul 22 13:00:34 2024 GMT Subject: CN=75021b78-baf9-4d5d-a8fb-fd93bbd7e262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:39:f9:8b:fb:cb:32:82:b3:13:77:d5:c2:bf: 2b:e4:78:1a:bc:3e:b7:d0:d5:a2:6f:f5:91:51:24: 8a:5c:e1:ec:03:66:34:f8:43:91:e5:4e:da:a0:9e: 63:b3:fd:93:60:04:0d:64:00:d7:76:f6:00:86:91: 14:0b:69:36:15:c9:2c:e1:90:8a:df:98:da:56:a7: 14:50:65:e2:4f:4a:31:54:86:f6:1a:7e:6c:3d:9f: 05:f5:5a:d1:c4:b8:5a:e0:37:34:5d:ac:86:fe:dd: b8:f4:0e:0c:d9:d3:36:e0:7a:c0:3d:61:8e:07:50: 7b:73:e5:37:37:da:8d:c0:8f:3c:e7:17:68:36:ba: 09:bf:c6:2b:b5:e8:59:c2:ad:fb:9a:24:8c:be:e1: 96:09:fc:1b:80:cd:3d:aa:42:23:46:3b:a4:26:6a: 3c:af:9a:68:38:75:f4:2f:f4:5d:48:06:b4:fc:5f: 0e:2c:08:5b:88:ec:38:86:19:b8:2f:69:6b:20:98: ca:e4:8f:79:05:ae:1b:65:85:80:71:64:3d:ff:ed: 89:9b:f9:fb:56:5b:73:ee:0f:75:85:9b:d0:cc:b1: 50:d3:f8:83:9c:36:d3:50:32:e0:0b:12:11:e7:5d: 31:4a:5a:c6:eb:5c:1f:9a:a2:c7:40:26:5d:1f:31: c8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:14:29:86:67:50:B1:64:10:79:F1:1F:96:77:5F:77:05:F1:78:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/a955688c-c2c2-3f78-b969-0eeec2f199c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.crl X509v3 Authority Key Identifier: keyid:0E:F4:F9:26:E2:FD:E0:9A:05:E4:95:43:52:A6:26:C3:19:A1:EB:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer sbgp-ipAddrBlock: critical IPv4: 208.78.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:75:38:89:d5:78:47:ac:38:83:76:ab:0a:af:55:20:02:c1: c0:69:9b:83:6f:8d:d1:f1:37:87:1c:86:e7:4c:7f:fd:60:53: 25:2b:94:9d:8f:86:4a:a6:30:22:3b:8a:4b:7b:98:45:8a:3f: 83:55:cd:75:d5:4d:72:f3:dc:d8:61:c1:00:84:fd:b1:7f:36: 65:92:f0:b6:49:3e:86:ee:09:61:34:f9:45:2b:62:57:d0:a6: 0a:7e:ed:1e:55:4b:c6:fa:62:b6:ed:1b:30:91:8b:22:59:fe: 9c:fd:5c:c9:9f:0c:ea:d9:00:9f:19:22:13:e7:c0:35:fa:7b: 5e:16:81:b4:5a:09:27:c8:2a:41:d6:28:5e:53:2c:3a:e0:b5: 0f:10:e9:06:65:4c:20:1c:56:2f:e4:5d:e4:9c:df:ff:0c:4b: 3b:71:72:50:fe:00:40:54:4f:0f:07:cc:fe:93:2f:33:0c:05: f9:db:51:4a:0d:a5:13:96:9a:bb:53:96:38:94:a5:7e:72:72: 95:05:19:f6:86:b1:84:a1:7b:c9:d5:3f:6b:ea:93:76:a0:95: 01:b9:2d:50:b4:94:5b:ef:41:e4:ff:19:e0:e3:be:c5:28:71: 7c:72:95:56:37:77:2a:7e:50:3d:5a:06:43:51:83:fe:42:cd: 59:1d:d1:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWkKK0Vl+7fkz4vS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTUxYWJmYjItZmY1NS00ODY2LThmMzItZDJmYzkzNDZk MzAzMB4XDTI0MDQyMzEzMDAzNFoXDTI0MDcyMjEzMDAzNFowLzEtMCsGA1UEAxMk NzUwMjFiNzgtYmFmOS00ZDVkLWE4ZmItZmQ5M2JiZDdlMjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDn5i/vLMoKzE3fVwr8r5HgavD630NWib/WR USSKXOHsA2Y0+EOR5U7aoJ5js/2TYAQNZADXdvYAhpEUC2k2Fcks4ZCK35jaVqcU UGXiT0oxVIb2Gn5sPZ8F9VrRxLha4Dc0XayG/t249A4M2dM24HrAPWGOB1B7c+U3 N9qNwI885xdoNroJv8YrtehZwq37miSMvuGWCfwbgM09qkIjRjukJmo8r5poOHX0 L/RdSAa0/F8OLAhbiOw4hhm4L2lrIJjK5I95Ba4bZYWAcWQ9/+2Jm/n7Vltz7g91 hZvQzLFQ0/iDnDbTUDLgCxIR510xSlrG61wfmqLHQCZdHzHIuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkUKYZnULFkEHnxH5Z3X3cF8XiXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lNTFh YmZiMi1mZjU1LTQ4NjYtOGYzMi1kMmZjOTM0NmQzMDMvYTk1NTY4OGMtYzJjMi0z Zjc4LWI5NjktMGVlZWMyZjE5OWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTUxYWJmYjItZmY1NS00ODY2LThm MzItZDJmYzkzNDZkMzAzL2U1MWFiZmIyLWZmNTUtNDg2Ni04ZjMyLWQyZmM5MzQ2 ZDMwMy5jcmwwHwYDVR0jBBgwFoAUDvT5JuL94JoF5JVDUqYmwxmh63QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lNTFhYmZiMi1mZjU1LTQ4NjYtOGYzMi1kMmZj OTM0NmQzMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0E4GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJh1OInVeEesOIN2qwqvVSACwcBpm4NvjdHxN4cchudMf/1gUyUrlJ2P hkqmMCI7ikt7mEWKP4NVzXXVTXLz3NhhwQCE/bF/NmWS8LZJPobuCWE0+UUrYlfQ pgp+7R5VS8b6YrbtGzCRiyJZ/pz9XMmfDOrZAJ8ZIhPnwDX6e14WgbRaCSfIKkHW KF5TLDrgtQ8Q6QZlTCAcVi/kXeSc3/8MSztxclD+AEBUTw8HzP6TLzMMBfnbUUoN pROWmrtTljiUpX5ycpUFGfaGsYShe8nVP2vqk3aglQG5LVC0lFvvQeT/GeDjvsUo cXxylVY3dyp+UD1aBkNRg/5CzVkd0dE= -----END CERTIFICATE-----Generated at Thu May 2 14:56:58 2024 by rpki-client on console-ams.rpki-client.org