$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/08a1aae1-bf76-3858-b6ae-a1eff354e303.roa File: 08a1aae1-bf76-3858-b6ae-a1eff354e303.roa (raw, json) Hash identifier: dIHfJku1/7vFDQ9NZKMIa/airEZqHFd71jWV00H4t9o= Subject key identifier: 01:5B:2B:F0:69:7F:FE:07:F5:76:C9:08:2A:44:98:2F:52:CF:06:72 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584521104C554BEEB098CA546E00 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/08a1aae1-bf76-3858-b6ae-a1eff354e303.roa Signing time: Thu 07 Mar 2024 14:00:32 +0000 ROA not before: Thu 07 Mar 2024 14:00:32 +0000 ROA not after: Wed 05 Jun 2024 13:00:32 +0000 asID: 395111 IP address blocks: 216.122.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Apr 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:21:10:4c:55:4b:ee:b0:98:ca:54:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Mar 7 14:00:32 2024 GMT Not After : Jun 5 13:00:32 2024 GMT Subject: CN=b2fd1853-9935-46ac-89da-cd0661f26409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7b:82:93:ab:4d:34:c3:61:90:eb:d1:3d:60: a6:a9:17:c0:7b:07:2f:4a:52:2c:a5:2b:b3:6b:d0: 4a:35:77:09:74:3e:73:4e:c2:42:cb:44:08:96:b5: e6:2c:30:70:4b:53:ad:10:a3:23:3b:5e:50:7d:35: fb:1c:6a:6d:cf:37:37:89:3f:23:dc:da:36:c1:3c: 6a:b2:4d:36:99:2f:7d:24:c6:01:e2:d0:88:fa:9a: ea:2c:b7:d6:91:03:ed:bc:f9:6d:8f:93:d3:8c:b6: d3:fe:76:13:bd:0d:50:1e:d9:0f:6c:52:ed:d9:fc: fe:9f:47:3f:6d:8d:d4:b3:e1:7c:71:dc:8f:39:63: 69:54:d7:ac:6f:66:24:36:f7:89:db:7e:eb:b6:38: 52:13:9f:e8:78:d1:27:50:74:7b:50:b1:6f:43:21: 81:a4:bf:a1:21:76:1e:0f:4d:1d:0f:fa:86:0f:f9: db:6e:47:01:ea:f6:bb:b5:4e:20:9a:40:c5:53:42: 9b:a8:3d:ae:86:da:69:fe:3f:0e:a6:08:4a:07:73: 55:24:ca:7a:a3:47:ce:8c:4f:9b:4b:03:ed:ff:19: f0:ff:af:88:18:91:a6:47:ef:dd:87:06:a7:da:41: 62:32:e5:2c:ee:97:2a:4f:43:00:7a:ef:6c:d4:a2: 75:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5B:2B:F0:69:7F:FE:07:F5:76:C9:08:2A:44:98:2F:52:CF:06:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/08a1aae1-bf76-3858-b6ae-a1eff354e303.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 216.122.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:8f:53:b4:8c:b7:b9:a0:db:69:0a:bc:2e:ae:2f:17:1c:3d: 55:4e:28:0c:65:d8:e1:e6:52:c2:4b:d7:93:c9:d1:4e:29:be: ad:75:25:92:40:2b:4d:e7:f3:9c:ef:8d:90:5a:54:66:77:c8: bf:e2:e9:7e:eb:30:cd:f1:c3:cf:12:c3:c0:3b:77:ed:20:01: 6c:d7:1a:f0:5b:eb:56:fe:cf:bd:d7:f9:26:ca:0f:c3:7e:84: c6:80:2a:91:ad:56:c2:cb:cf:5a:56:c8:b6:8d:21:05:30:b1: 86:37:3f:66:c4:8b:19:20:50:c5:e1:55:ca:1c:ab:b7:b7:4f: 9c:ba:6e:01:e0:d9:8f:5c:e2:5f:e9:a1:e4:20:1f:0c:71:13: 69:56:5a:f9:60:e8:f8:55:cb:06:bd:ec:0d:70:1b:9f:3c:97: a7:ea:52:3d:32:77:67:ad:e8:a4:e3:c1:ce:39:37:85:2b:16: e0:2c:96:f6:4c:a0:d4:72:6e:9d:92:af:31:73:82:fe:02:9c: 05:e7:4f:64:0e:3b:36:65:a1:15:e5:f9:b0:d6:99:97:56:92: 8a:84:15:52:5c:55:76:f4:e2:05:8c:e8:b0:80:c1:44:da:7a: bb:23:74:a5:0f:6f:e9:cb:10:2a:4e:9c:69:d5:2c:d8:ed:e4: e2:e7:08:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUhEExVS+6wmMpUbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI0MDMwNzE0MDAzMloXDTI0MDYwNTEzMDAzMlowLzEtMCsGA1UEAxMk YjJmZDE4NTMtOTkzNS00NmFjLTg5ZGEtY2QwNjYxZjI2NDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHuCk6tNNMNhkOvRPWCmqRfAewcvSlIspSuz a9BKNXcJdD5zTsJCy0QIlrXmLDBwS1OtEKMjO15QfTX7HGptzzc3iT8j3No2wTxq sk02mS99JMYB4tCI+prqLLfWkQPtvPltj5PTjLbT/nYTvQ1QHtkPbFLt2fz+n0c/ bY3Us+F8cdyPOWNpVNesb2YkNveJ237rtjhSE5/oeNEnUHR7ULFvQyGBpL+hIXYe D00dD/qGD/nbbkcB6va7tU4gmkDFU0KbqD2uhtpp/j8OpghKB3NVJMp6o0fOjE+b SwPt/xnw/6+IGJGmR+/dhwan2kFiMuUs7pcqT0MAeu9s1KJ1WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFbK/Bpf/4H9XbJCCpEmC9SzwZyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMDhhMWFhZTEtYmY3Ni0z ODU4LWI2YWUtYTFlZmYzNTRlMzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HqqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6PU7SMt7mg22kKvC6uLxccPVVOKAxl2OHmUsJL15PJ0U4pvq11JZJA K03n85zvjZBaVGZ3yL/i6X7rMM3xw88Sw8A7d+0gAWzXGvBb61b+z73X+SbKD8N+ hMaAKpGtVsLLz1pWyLaNIQUwsYY3P2bEixkgUMXhVcocq7e3T5y6bgHg2Y9c4l/p oeQgHwxxE2lWWvlg6PhVywa97A1wG588l6fqUj0yd2et6KTjwc45N4UrFuAslvZM oNRybp2SrzFzgv4CnAXnT2QOOzZloRXl+bDWmZdWkoqEFVJcVXb04gWM6LCAwUTa ersjdKUPb+nLECpOnGnVLNjt5OLnCLA= -----END CERTIFICATE-----Generated at Sat Apr 27 10:41:53 2024 by rpki-client on console-ams.rpki-client.org