$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/77249fb6-3491-3c4a-b600-9e887b42f36b.roa File: 77249fb6-3491-3c4a-b600-9e887b42f36b.roa (raw, json) Hash identifier: QJ5RW1cGPRUe2dGxcTS167d4ySSY+FLGTIf10Uoi9f0= Subject key identifier: 9C:78:42:6B:5B:09:58:EB:0E:33:42:29:EA:7B:07:25:B0:F4:4D:DE Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F43285845BD48D77E24D645617A48F980 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/77249fb6-3491-3c4a-b600-9e887b42f36b.roa Signing time: Thu 02 May 2024 13:00:34 +0000 ROA not before: Thu 02 May 2024 13:00:34 +0000 ROA not after: Wed 31 Jul 2024 13:00:34 +0000 asID: 62856 IP address blocks: 162.248.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:bd:48:d7:7e:24:d6:45:61:7a:48:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: May 2 13:00:34 2024 GMT Not After : Jul 31 13:00:34 2024 GMT Subject: CN=28ae54d4-8749-4c8c-9bcf-e250e316063b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:49:2c:83:3a:6d:a5:43:89:19:3a:64:01:0c: 3d:57:2d:9d:49:87:43:f7:17:36:ab:78:8c:03:4f: 8b:ad:e3:4a:3c:dd:ac:5f:3b:e7:d8:23:c2:9a:30: 84:f9:55:1f:1e:ba:2a:fb:31:73:7c:b5:84:7a:4e: 33:3b:42:b8:c8:e3:2e:28:89:52:84:71:a1:2a:bf: 08:d3:4b:ca:8e:12:94:42:c9:56:b5:56:13:50:5d: 4d:c2:f7:d5:71:28:01:55:37:73:88:3c:6c:61:94: 22:b2:58:e9:db:ca:7e:36:a0:08:b4:74:dc:79:d7: f3:1a:8e:8d:a5:9f:ee:4d:b2:a7:2f:96:7d:04:79: c4:f8:33:24:d3:91:35:c4:63:d1:b1:11:a5:ec:c8: bf:13:d6:e1:a5:4f:4d:0d:07:ce:a9:93:7d:ff:3d: dc:f8:c7:9d:94:cd:df:79:e5:ac:b0:a6:04:68:cf: 46:7d:c5:92:f9:74:8a:54:ae:e9:77:d8:97:79:24: ff:6d:ff:83:2c:99:25:14:fa:37:cb:0e:0b:5d:30: 66:81:66:c5:2c:ca:e3:64:c8:97:c4:35:c0:c3:df: 3e:22:e7:4a:4b:ea:0c:51:72:89:ed:bb:63:af:b0: e2:82:ec:0d:fd:2d:f1:e5:42:01:e9:f9:43:3a:4c: 68:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:78:42:6B:5B:09:58:EB:0E:33:42:29:EA:7B:07:25:B0:F4:4D:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/77249fb6-3491-3c4a-b600-9e887b42f36b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv4: 162.248.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:d1:56:8e:12:d2:9f:39:ba:41:ab:c0:0b:69:c3:c6:81:84: 2d:c4:d6:9d:d6:4b:a7:1d:99:87:56:3b:87:ce:6f:b1:75:72: dc:14:57:7c:86:a6:2e:ec:67:d2:58:54:9f:c6:57:bc:2e:90: 17:9b:57:91:cc:79:f6:d3:90:e9:48:1a:44:31:28:4f:16:a5: 42:e0:dd:e4:4f:1b:cd:48:99:38:4e:29:2e:f8:c7:0a:72:46: 46:f3:ff:d3:59:5e:15:9a:97:c2:29:ea:60:2d:6c:81:46:9e: 37:06:ae:66:5c:ae:ef:9b:8b:64:d7:59:88:ad:aa:b6:91:cb: ad:93:f8:4a:06:47:27:b6:79:bf:33:75:bb:1a:db:a2:04:b9: d5:1e:2c:ea:5a:0c:ce:71:a0:ea:af:81:97:cd:85:45:37:31: 39:fb:4e:9e:02:6c:5f:d3:d6:a8:c9:d5:49:df:e5:6e:4a:96: 0f:65:e2:21:aa:45:63:33:38:b8:b6:cc:33:59:bc:8a:8c:45: af:ce:83:cb:55:68:9b:fb:53:fe:76:2e:d8:b9:b2:c2:89:d9: 26:32:f2:ff:d5:85:92:ae:b6:b1:89:1e:8c:a9:db:19:35:d1: 5f:5c:27:57:e8:3a:7c:ad:a5:34:18:63:55:a8:e7:c2:11:cb: 2f:9f:57:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW9SNd+JNZFYXpI+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI0MDUwMjEzMDAzNFoXDTI0MDczMTEzMDAzNFowLzEtMCsGA1UEAxMk MjhhZTU0ZDQtODc0OS00YzhjLTliY2YtZTI1MGUzMTYwNjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0ksgzptpUOJGTpkAQw9Vy2dSYdD9xc2q3iM A0+LreNKPN2sXzvn2CPCmjCE+VUfHroq+zFzfLWEek4zO0K4yOMuKIlShHGhKr8I 00vKjhKUQslWtVYTUF1NwvfVcSgBVTdziDxsYZQisljp28p+NqAItHTcedfzGo6N pZ/uTbKnL5Z9BHnE+DMk05E1xGPRsRGl7Mi/E9bhpU9NDQfOqZN9/z3c+MedlM3f eeWssKYEaM9GfcWS+XSKVK7pd9iXeST/bf+DLJklFPo3yw4LXTBmgWbFLMrjZMiX xDXAw98+IudKS+oMUXKJ7btjr7DiguwN/S3x5UIB6flDOkxonwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJx4QmtbCVjrDjNCKep7ByWw9E3eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvNzcyNDlmYjYtMzQ5MS0z YzRhLWI2MDAtOWU4ODdiNDJmMzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovi4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnRVo4S0p85ukGrwAtpw8aBhC3E1p3WS6cdmYdWO4fOb7F1ctwUV3yG pi7sZ9JYVJ/GV7wukBebV5HMefbTkOlIGkQxKE8WpULg3eRPG81ImThOKS74xwpy Rkbz/9NZXhWal8Ip6mAtbIFGnjcGrmZcru+bi2TXWYitqraRy62T+EoGRye2eb8z dbsa26IEudUeLOpaDM5xoOqvgZfNhUU3MTn7Tp4CbF/T1qjJ1Unf5W5Klg9l4iGq RWMzOLi2zDNZvIqMRa/Og8tVaJv7U/52Lti5ssKJ2SYy8v/VhZKutrGJHoyp2xk1 0V9cJ1foOnytpTQYY1Wo58IRyy+fV3M= -----END CERTIFICATE-----Generated at Fri May 17 15:32:32 2024 by rpki-client on console-ams.rpki-client.org