$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/bad0311b-b1a2-37a6-9a54-a4b25e414ba1.roa File: bad0311b-b1a2-37a6-9a54-a4b25e414ba1.roa (raw, json) Hash identifier: 9QGTx1jDQ1aVUfXpup3YvUfMEpER/ApREXl+xmlnWi4= Subject key identifier: 34:D6:C7:01:8A:4E:BA:4A:A1:A1:40:F8:D4:C4:41:E1:06:96:80:D3 Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b Certificate serial: 010D0C9F43285844FE2AE826E0AD5E5280EB2D00 Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/bad0311b-b1a2-37a6-9a54-a4b25e414ba1.roa Signing time: Sat 24 Feb 2024 02:00:26 +0000 ROA not before: Sat 24 Feb 2024 02:00:26 +0000 ROA not after: Fri 24 May 2024 01:00:26 +0000 asID: 14618 IP address blocks: 52.129.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:fe:2a:e8:26:e0:ad:5e:52:80:eb:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b Validity Not Before: Feb 24 02:00:26 2024 GMT Not After : May 24 01:00:26 2024 GMT Subject: CN=19bb10b8-e25c-4681-bcd5-f555c14e5d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3d:08:32:c2:64:78:ee:74:f9:d1:05:cb:aa: 24:9d:d0:be:eb:3c:78:ae:0c:33:50:20:51:71:c6: aa:51:7c:54:c7:a0:81:ff:7e:38:f7:a6:bb:b2:a6: 40:64:c1:b0:25:d4:11:47:4a:c9:25:68:24:6f:8f: cf:2c:57:d4:72:91:b3:00:ff:f1:88:04:27:9a:e5: 47:24:94:6c:78:c4:fc:2d:84:5f:83:a0:f5:2d:5c: 28:f9:3a:a6:36:df:59:2c:64:5e:c1:f2:fe:57:11: 55:fc:41:5a:87:0d:a7:fc:75:64:66:4f:77:fe:e8: f4:07:a6:1f:7e:91:3c:45:d6:6c:5e:c1:46:50:a8: 9f:b6:84:ab:02:42:89:0a:95:09:13:79:43:9c:ce: e9:f7:18:e2:9e:02:10:14:54:be:91:48:ab:c2:18: 4f:99:d1:6c:a0:89:0e:81:9e:4d:21:6a:08:a4:09: 85:39:81:4e:7e:29:27:34:94:e4:53:c8:15:31:7f: 71:77:5a:55:76:88:58:1f:ad:20:2d:71:5e:1a:f1: f9:59:5b:ea:1d:d9:30:c1:30:58:f8:77:1b:7e:2a: f4:d0:8f:e4:4f:b0:13:54:c3:a8:3f:de:e1:7b:cf: 85:d2:41:52:9d:69:fa:6d:56:a4:28:d6:31:a0:e0: 96:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D6:C7:01:8A:4E:BA:4A:A1:A1:40:F8:D4:C4:41:E1:06:96:80:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/bad0311b-b1a2-37a6-9a54-a4b25e414ba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl X509v3 Authority Key Identifier: keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer sbgp-ipAddrBlock: critical IPv4: 52.129.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:31:0c:b7:91:9b:e2:30:b1:76:94:8f:84:fb:9d:a7:19:f0: 6e:0a:12:bc:93:9b:80:f6:31:45:7f:89:7c:62:34:73:98:d1: 65:39:34:ad:69:56:18:cf:af:40:4d:68:bb:6a:73:a0:66:60: ec:a0:6b:ab:17:ff:da:60:31:86:45:a6:55:76:26:14:b7:b5: 1d:18:7a:66:c7:7e:8b:ab:a1:4d:b9:7e:02:10:11:c4:3a:c9: 9a:ed:be:f5:16:ef:a0:0b:a1:dd:02:4b:8f:de:b6:a3:ea:07: ed:6e:33:0b:4f:af:b3:00:76:77:f5:41:72:9b:00:af:a1:07: db:54:b0:cb:de:c6:38:7f:f8:9c:3f:ce:f6:ca:33:ae:06:94: dd:41:23:f2:d7:59:77:23:4f:58:37:85:4f:83:87:f6:34:4b: b1:7f:e4:18:df:00:7d:92:b7:7e:e1:0e:1f:a3:22:44:c4:9e: 99:8e:fb:02:3c:ee:df:0d:fa:a0:80:74:f3:9e:db:6c:35:c2: e8:ba:4f:06:74:13:2c:a1:95:09:3c:41:ed:e8:01:d1:1c:53: 8d:28:3e:7a:9e:f2:30:c7:92:3d:c7:26:65:5b:27:e8:d2:22: ce:67:5e:b7:ae:c4:76:f7:1f:eb:4a:07:2f:20:27:54:40:36: 8b:34:66:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET+Kugm4K1eUoDrLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw YzRiMB4XDTI0MDIyNDAyMDAyNloXDTI0MDUyNDAxMDAyNlowLzEtMCsGA1UEAxMk MTliYjEwYjgtZTI1Yy00NjgxLWJjZDUtZjU1NWMxNGU1ZDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz0IMsJkeO50+dEFy6okndC+6zx4rgwzUCBR ccaqUXxUx6CB/34496a7sqZAZMGwJdQRR0rJJWgkb4/PLFfUcpGzAP/xiAQnmuVH JJRseMT8LYRfg6D1LVwo+TqmNt9ZLGRewfL+VxFV/EFahw2n/HVkZk93/uj0B6Yf fpE8RdZsXsFGUKiftoSrAkKJCpUJE3lDnM7p9xjingIQFFS+kUirwhhPmdFsoIkO gZ5NIWoIpAmFOYFOfiknNJTkU8gVMX9xd1pVdohYH60gLXFeGvH5WVvqHdkwwTBY +Hcbfir00I/kT7ATVMOoP97he8+F0kFSnWn6bVakKNYxoOCWxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTWxwGKTrpKoaFA+NTEQeEGloDTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvYmFkMDMxMWItYjFhMi0z N2E2LTlhNTQtYTRiMjVlNDE0YmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1 MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4 ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIFvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUxDLeRm+IwsXaUj4T7nacZ8G4KEryTm4D2MUV/iXxiNHOY0WU5NK1p VhjPr0BNaLtqc6BmYOyga6sX/9pgMYZFplV2JhS3tR0YembHfouroU25fgIQEcQ6 yZrtvvUW76ALod0CS4/etqPqB+1uMwtPr7MAdnf1QXKbAK+hB9tUsMvexjh/+Jw/ zvbKM64GlN1BI/LXWXcjT1g3hU+Dh/Y0S7F/5BjfAH2St37hDh+jIkTEnpmO+wI8 7t8N+qCAdPOe22w1wui6TwZ0EyyhlQk8Qe3oAdEcU40oPnqe8jDHkj3HJmVbJ+jS Is5nXreuxHb3H+tKBy8gJ1RANos0ZrU= -----END CERTIFICATE-----Generated at Thu May 2 08:06:17 2024 by rpki-client on console-ams.rpki-client.org