$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/9efb72b6-e5a6-3dca-af65-3982a56ca00d.roa File: 9efb72b6-e5a6-3dca-af65-3982a56ca00d.roa (raw, json) Hash identifier: ab4SzfxjXPNp2iDdrjJ5L8lFACz3616Gine77LTLhc4= Subject key identifier: A2:FC:07:33:B8:ED:D2:22:FC:9A:82:55:DC:2E:5B:20:6E:00:BF:DC Certificate issuer: /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Certificate serial: 010D0C9F4328584589A31D51C43E8C8CA3E42F80 Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/9efb72b6-e5a6-3dca-af65-3982a56ca00d.roa Signing time: Sun 14 Apr 2024 01:00:24 +0000 ROA not before: Sun 14 Apr 2024 01:00:24 +0000 ROA not after: Sat 13 Jul 2024 01:00:24 +0000 asID: 396416 IP address blocks: 216.211.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:89:a3:1d:51:c4:3e:8c:8c:a3:e4:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Validity Not Before: Apr 14 01:00:24 2024 GMT Not After : Jul 13 01:00:24 2024 GMT Subject: CN=ef83e31d-f8a3-49af-a92c-8f9c8e9b4a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e7:5b:7f:7c:e5:40:4a:de:3e:0d:e1:78:29: 33:22:1b:e1:d6:47:72:52:13:7e:30:f7:27:93:cb: f8:af:e6:4f:be:89:65:59:f5:f3:7b:07:9f:4f:58: 28:83:33:c4:e0:ed:a7:5b:17:b4:e8:af:48:d9:85: e9:9f:eb:28:d3:59:23:8f:0c:59:3f:8f:39:f2:00: 01:5b:c1:62:fc:c9:66:2f:eb:8a:33:34:54:a5:d5: 92:fc:bc:b4:43:dd:6a:02:11:d0:0e:fb:24:4b:5d: 2a:ab:94:78:0e:41:af:d9:7d:49:e9:e8:d6:44:36: 18:33:bb:ff:a3:e4:fa:aa:92:dc:33:dd:b7:98:77: 27:67:d6:6f:4f:52:20:52:9c:1f:53:ff:b3:f4:89: a2:94:23:44:b8:15:f8:0f:f6:62:54:c9:47:4c:6b: 76:76:2f:71:9e:5a:89:d6:65:42:3c:d2:a6:34:15: ab:f6:3f:ad:14:89:57:2a:fb:f8:09:c6:eb:ff:ac: a5:d7:c9:56:fe:11:77:76:e2:0f:46:0f:16:7c:74: 7e:32:9a:a7:d5:ae:09:12:07:2b:e8:26:83:1c:76: 4a:a4:47:1a:e6:c6:7c:ce:0c:f3:d8:86:7f:ee:9f: 75:49:b0:44:72:ca:9e:95:67:bc:dd:5d:0b:fa:8d: bb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FC:07:33:B8:ED:D2:22:FC:9A:82:55:DC:2E:5B:20:6E:00:BF:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/9efb72b6-e5a6-3dca-af65-3982a56ca00d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl X509v3 Authority Key Identifier: keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer sbgp-ipAddrBlock: critical IPv4: 216.211.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:64:18:90:cb:12:5d:b5:0d:b8:7d:4c:fa:53:a8:c1:b3:a3: b8:da:87:e6:29:fe:09:d2:c7:c9:cf:06:29:e8:90:f1:5c:bd: af:79:7d:21:13:68:8b:d4:d3:2e:a2:b8:1c:9a:64:4a:fb:78: 8b:c0:28:bb:d8:e7:de:1a:b5:7a:d4:7b:13:82:9f:33:f4:16: d6:66:e5:12:f7:f8:4d:53:a8:0e:83:df:cf:4d:e9:1a:8e:b6: 0d:d5:ca:44:96:40:8e:35:3c:8f:ad:0d:c8:db:dc:f8:0e:18: a3:e3:22:f9:6e:ea:02:0e:ce:ce:91:1e:47:f3:c2:db:2a:4c: d6:97:8b:b4:e9:65:ed:c7:49:43:e5:fc:d4:cf:eb:73:22:14: c8:8b:9c:bb:25:f4:4c:90:45:ee:e7:bb:89:0e:49:ab:90:13: 45:6b:10:4f:a0:5c:65:4c:1c:0f:b7:a6:27:ac:fb:93:32:99: 20:c4:ca:24:64:f3:3e:fc:df:7b:35:9b:c9:17:3f:70:ca:2c: 5f:8b:76:88:6b:cc:a4:1d:b1:7d:5c:a3:5d:39:01:e2:44:50: c0:eb:21:24:fb:5c:29:1d:d6:1e:ec:f3:c3:c3:44:91:6e:4d: 43:d1:dd:b0:b6:49:4e:c2:18:18:10:bc:f6:4e:8a:83:c6:e4: 2f:8b:be:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWJox1RxD6MjKPkL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNzExYjUtZDE2Zi00NTQ5LTllNzUtYmQyMDFmNWI3 YTEzMB4XDTI0MDQxNDAxMDAyNFoXDTI0MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZWY4M2UzMWQtZjhhMy00OWFmLWE5MmMtOGY5YzhlOWI0YThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOdbf3zlQErePg3heCkzIhvh1kdyUhN+MPcn k8v4r+ZPvollWfXzewefT1gogzPE4O2nWxe06K9I2YXpn+so01kjjwxZP4858gAB W8Fi/MlmL+uKMzRUpdWS/Ly0Q91qAhHQDvskS10qq5R4DkGv2X1J6ejWRDYYM7v/ o+T6qpLcM923mHcnZ9ZvT1IgUpwfU/+z9ImilCNEuBX4D/ZiVMlHTGt2di9xnlqJ 1mVCPNKmNBWr9j+tFIlXKvv4Ccbr/6yl18lW/hF3duIPRg8WfHR+Mpqn1a4JEgcr 6CaDHHZKpEca5sZ8zgzz2IZ/7p91SbBEcsqelWe83V0L+o27nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKL8BzO47dIi/JqCVdwuWyBuAL/cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3 MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIwMWY1YjdhMTMvOWVmYjcyYjYtZTVhNi0z ZGNhLWFmNjUtMzk4MmE1NmNhMDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmRkNzExYjUtZDE2Zi00NTQ5LTll NzUtYmQyMDFmNWI3YTEzL2ZkZDcxMWI1LWQxNmYtNDU0OS05ZTc1LWJkMjAxZjVi N2ExMy5jcmwwHwYDVR0jBBgwFoAUHHKGSiScg7PMA5PUnLiNgqiJlT8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIw MWY1YjdhMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NPFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxkGJDLEl21Dbh9TPpTqMGzo7jah+Yp/gnSx8nPBinokPFcva95fSET aIvU0y6iuByaZEr7eIvAKLvY594atXrUexOCnzP0FtZm5RL3+E1TqA6D389N6RqO tg3VykSWQI41PI+tDcjb3PgOGKPjIvlu6gIOzs6RHkfzwtsqTNaXi7TpZe3HSUPl /NTP63MiFMiLnLsl9EyQRe7nu4kOSauQE0VrEE+gXGVMHA+3pies+5MymSDEyiRk 8z7833s1m8kXP3DKLF+LdohrzKQdsX1co105AeJEUMDrIST7XCkd1h7s88PDRJFu TUPR3bC2SU7CGBgQvPZOioPG5C+Lvlk= -----END CERTIFICATE-----Generated at Sat May 4 15:02:40 2024 by rpki-client on console-ams.rpki-client.org