$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/7f43a0dc-e9ca-3da8-ab74-890e20c39735.roa File: 7f43a0dc-e9ca-3da8-ab74-890e20c39735.roa (raw, json) Hash identifier: SUb1YFHWjMkig+GsZRJsbsfet3kByvqDpE9fW0IjL7M= Subject key identifier: 2D:92:BA:74:15:6F:3A:39:9D:D9:34:CB:8E:CE:2C:DF:5D:61:30:97 Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b Certificate serial: 010D0C9F4328584593689C669A31A86347FE8DC0 Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/7f43a0dc-e9ca-3da8-ab74-890e20c39735.roa Signing time: Wed 17 Apr 2024 13:00:34 +0000 ROA not before: Wed 17 Apr 2024 13:00:34 +0000 ROA not after: Tue 16 Jul 2024 13:00:34 +0000 asID: 22925 IP address blocks: 162.221.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:93:68:9c:66:9a:31:a8:63:47:fe:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b Validity Not Before: Apr 17 13:00:34 2024 GMT Not After : Jul 16 13:00:34 2024 GMT Subject: CN=1e8af995-ec1c-40f1-97ae-114b81763c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b0:e8:0e:d5:c6:cc:29:ec:0e:9b:9e:c7:dc: 49:3e:2f:48:89:f9:c3:46:f2:28:15:e4:83:a0:ab: bb:dd:25:28:68:92:d5:4b:e9:95:0e:74:1d:fb:ca: 28:b2:4e:ec:01:0f:5b:1a:46:08:8e:4a:d0:d4:5c: 25:14:98:d0:65:50:7d:9f:25:1d:08:77:60:77:d5: 9f:80:c3:dd:69:ba:f9:c5:fb:90:7a:e4:80:e3:13: e1:6a:97:e4:a7:fb:fa:1b:d6:e8:40:85:12:c4:07: f5:df:81:07:df:23:66:7f:42:fe:70:d8:1e:28:4e: d4:f1:9e:79:16:c6:df:6d:ac:d0:60:1a:2d:d4:a7: 85:e0:ab:ea:33:5f:8f:f6:e1:41:d6:9b:f0:6f:51: 81:cf:0f:ac:60:9b:ec:69:4f:df:5b:88:03:8f:f5: 67:17:00:17:64:2d:42:a7:2c:9a:8a:6f:05:52:15: 1e:00:6b:bd:38:ab:6e:6a:51:b6:02:94:e7:2d:3d: 60:20:79:be:57:df:32:49:39:ce:4e:29:4e:ae:d3: 15:79:eb:a2:cc:d4:35:11:98:8b:a7:c2:7e:0c:cb: 9d:51:59:cb:e8:f1:46:fe:67:92:5f:58:ad:c6:ec: 05:3e:6b:90:51:a7:bb:75:83:b4:6e:2f:a1:20:5d: ae:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:92:BA:74:15:6F:3A:39:9D:D9:34:CB:8E:CE:2C:DF:5D:61:30:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/7f43a0dc-e9ca-3da8-ab74-890e20c39735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl X509v3 Authority Key Identifier: keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer sbgp-ipAddrBlock: critical IPv4: 162.221.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:fa:f4:25:ee:3c:16:58:b7:07:ed:26:61:f8:5d:5b:9c:ba: 98:0c:c6:67:be:9b:9e:94:90:00:36:b7:c1:d1:9a:f3:d0:00: f4:00:23:6f:a6:3e:dc:e0:d8:aa:7d:c1:19:ed:c6:2c:55:ba: fe:a0:7a:fe:28:72:80:b0:00:e5:c8:ad:54:d4:42:96:d1:24: a9:c4:61:e0:9d:51:f0:52:81:53:af:b7:91:b3:4a:90:ef:70: b7:b1:34:76:d8:6c:39:7c:cf:67:39:34:5f:57:0c:e8:51:e7: 04:b9:63:82:42:70:e2:94:67:f1:cf:7a:5c:52:31:cc:12:93: 19:9f:29:f6:4c:6e:2a:02:41:3b:37:9d:4f:4e:9b:54:f7:0f: 46:ac:3e:48:76:4e:8e:df:bc:8f:17:9c:e3:65:58:42:02:5a: ec:34:b5:26:0c:cf:d5:3e:e1:aa:4d:d0:6d:15:1f:78:3f:56: 3f:d5:01:77:94:17:bc:3c:88:10:cf:49:cc:7d:e4:41:d1:81: 9a:24:80:27:b1:8c:bb:3a:4b:ee:7c:94:e6:a9:17:73:ec:ef: 80:cc:a1:2f:a9:4b:13:70:64:e1:ce:4e:60:58:4f:61:a7:1e: 00:50:55:56:99:ae:33:c7:7a:c1:3a:03:5a:e6:ce:9b:d8:f9: bf:ad:d0:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWTaJxmmjGoY0f+jcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjc4YTIzNGYtOTU1My00NDZhLTk2NWQtMGJmZmZhNDAy ZjFiMB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk MWU4YWY5OTUtZWMxYy00MGYxLTk3YWUtMTE0YjgxNzYzYzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bDoDtXGzCnsDpuex9xJPi9IifnDRvIoFeSD oKu73SUoaJLVS+mVDnQd+8oosk7sAQ9bGkYIjkrQ1FwlFJjQZVB9nyUdCHdgd9Wf gMPdabr5xfuQeuSA4xPhapfkp/v6G9boQIUSxAf134EH3yNmf0L+cNgeKE7U8Z55 FsbfbazQYBot1KeF4KvqM1+P9uFB1pvwb1GBzw+sYJvsaU/fW4gDj/VnFwAXZC1C pyyaim8FUhUeAGu9OKtualG2ApTnLT1gIHm+V98ySTnOTilOrtMVeeuizNQ1EZiL p8J+DMudUVnL6PFG/meSX1itxuwFPmuQUae7dYO0bi+hIF2uawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2SunQVbzo5ndk0y47OLN9dYTCXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhh MjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZmZmE0MDJmMWIvN2Y0M2EwZGMtZTljYS0z ZGE4LWFiNzQtODkwZTIwYzM5NzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjc4YTIzNGYtOTU1My00NDZhLTk2 NWQtMGJmZmZhNDAyZjFiL2Y3OGEyMzRmLTk1NTMtNDQ2YS05NjVkLTBiZmZmYTQw MmYxYi5jcmwwHwYDVR0jBBgwFoAUySL1rL077bzOZt54JOhaPckKjtYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhhMjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZm ZmE0MDJmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDot2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKr69CXuPBZYtwftJmH4XVucupgMxme+m56UkAA2t8HRmvPQAPQAI2+m Ptzg2Kp9wRntxixVuv6gev4ocoCwAOXIrVTUQpbRJKnEYeCdUfBSgVOvt5GzSpDv cLexNHbYbDl8z2c5NF9XDOhR5wS5Y4JCcOKUZ/HPelxSMcwSkxmfKfZMbioCQTs3 nU9Om1T3D0asPkh2To7fvI8XnONlWEICWuw0tSYMz9U+4apN0G0VH3g/Vj/VAXeU F7w8iBDPScx95EHRgZokgCexjLs6S+58lOapF3Ps74DMoS+pSxNwZOHOTmBYT2Gn HgBQVVaZrjPHesE6A1rmzpvY+b+t0AU= -----END CERTIFICATE-----Generated at Sat Jun 1 19:54:30 2024 by rpki-client on console-ams.rpki-client.org