$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8b3ae5ad-89e3-3f5a-b346-255b9f34e950.roa File: 8b3ae5ad-89e3-3f5a-b346-255b9f34e950.roa (raw, json) Hash identifier: /TVQycxLcVue4bi39DT+iLDHCskA6SblX90eEM6EOk0= Subject key identifier: D3:D7:44:81:7C:7F:32:B6:A7:83:59:B4:DB:19:32:B4:2B:AB:16:E7 Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F432858454628A4B38E4E492E51900900 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8b3ae5ad-89e3-3f5a-b346-255b9f34e950.roa Signing time: Wed 20 Mar 2024 20:54:33 +0000 ROA not before: Wed 20 Mar 2024 20:54:33 +0000 ROA not after: Tue 18 Jun 2024 20:54:33 +0000 asID: 36492 IP address blocks: 216.252.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:28:a4:b3:8e:4e:49:2e:51:90:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Mar 20 20:54:33 2024 GMT Not After : Jun 18 20:54:33 2024 GMT Subject: CN=bdcedaa8-1675-40df-b6d2-7155ed71169a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a9:93:92:d4:34:89:d6:c9:cd:d5:44:ea:79: 13:ca:2e:93:ff:6c:94:24:6b:29:80:c7:a5:ce:3a: 45:73:da:e4:57:3d:dd:d6:f6:52:e8:59:5d:95:ee: e1:ad:16:f0:0e:6a:34:97:c3:6f:56:26:ee:65:4d: 8a:ec:80:31:d7:b2:8d:70:b3:c6:eb:e5:7b:70:94: c2:6a:ba:b2:29:70:3a:07:b9:ec:80:d9:d3:34:46: 94:cb:34:2c:45:0a:c4:27:2c:57:7b:fb:db:91:d1: 7a:8f:f8:26:cc:1e:86:06:32:81:a0:e0:cf:7f:7d: 4d:ee:91:56:61:53:90:03:a3:fb:1a:9f:9b:ad:89: 71:7d:97:ea:cd:19:a0:23:6d:eb:ce:4f:d4:bf:ea: c5:20:07:a0:98:e4:2a:e7:37:cb:d0:f3:e0:80:e2: ca:f9:73:f9:50:2c:94:c3:0e:64:63:d6:41:6c:ec: d3:c2:e3:93:6d:36:61:98:98:53:52:04:3a:9d:3e: 16:88:c5:fd:9b:68:77:6c:c2:94:26:9a:78:37:5e: 36:a7:24:8a:93:5c:77:fd:60:1d:8f:22:7a:79:13: 54:6f:5f:a9:38:2c:fb:89:79:5a:9a:cd:c5:1b:4c: 24:ed:18:7c:b7:20:d8:a5:0e:ae:11:4f:77:80:63: bc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D7:44:81:7C:7F:32:B6:A7:83:59:B4:DB:19:32:B4:2B:AB:16:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8b3ae5ad-89e3-3f5a-b346-255b9f34e950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 216.252.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:9c:43:a8:07:02:70:e8:c8:b6:16:b3:66:b8:52:1c:d6:81: 0d:bb:8d:d2:ac:ae:c6:8a:3d:6b:c3:30:4e:b4:bb:56:bb:4d: 63:0c:65:6e:bc:36:52:57:ff:41:d6:7b:7d:d8:06:a5:e6:f3: 34:c6:49:e8:c9:82:c4:e6:77:59:9c:59:91:be:47:89:08:06: a1:1b:af:ac:ec:df:0c:0f:cf:22:e6:23:2f:e0:40:25:c1:7c: 71:f3:78:86:77:9f:80:2b:36:31:0a:9f:0e:99:49:93:07:25: 0c:08:9e:5e:fe:89:2a:bf:20:15:d7:3d:21:77:3e:a4:88:cc: 35:6e:60:24:71:64:20:32:96:99:dd:99:6b:13:2f:89:d3:7a: 39:b2:0b:9e:a3:95:a2:c0:d0:5d:98:52:8b:fc:4a:f7:19:99: 6b:8f:f8:d3:78:b3:f8:44:cd:53:3a:12:de:d3:4a:fa:b6:df: d2:d4:58:54:2f:1b:d0:d4:c3:f8:a9:ab:18:00:13:30:88:ca: 61:02:87:4d:4d:7f:35:bb:0a:a5:c5:ef:1b:00:7d:66:5d:2c: 69:29:e8:c8:19:36:e6:82:aa:40:b2:58:d8:0c:8c:1c:b7:16: 81:7e:3f:7f:0c:6f:54:47:12:9a:b5:e6:86:dc:df:dc:3e:db: c2:28:86:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGKKSzjk5JLlGQCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI0MDMyMDIwNTQzM1oXDTI0MDYxODIwNTQzM1owLzEtMCsGA1UEAxMk YmRjZWRhYTgtMTY3NS00MGRmLWI2ZDItNzE1NWVkNzExNjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqmTktQ0idbJzdVE6nkTyi6T/2yUJGspgMel zjpFc9rkVz3d1vZS6Fldle7hrRbwDmo0l8NvVibuZU2K7IAx17KNcLPG6+V7cJTC arqyKXA6B7nsgNnTNEaUyzQsRQrEJyxXe/vbkdF6j/gmzB6GBjKBoODPf31N7pFW YVOQA6P7Gp+brYlxfZfqzRmgI23rzk/Uv+rFIAegmOQq5zfL0PPggOLK+XP5UCyU ww5kY9ZBbOzTwuOTbTZhmJhTUgQ6nT4WiMX9m2h3bMKUJpp4N142pySKk1x3/WAd jyJ6eRNUb1+pOCz7iXlams3FG0wk7Rh8tyDYpQ6uEU93gGO8EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPXRIF8fzK2p4NZtNsZMrQrqxbnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvOGIzYWU1YWQtODllMy0z ZjVhLWIzNDYtMjU1YjlmMzRlOTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2PzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+cQ6gHAnDoyLYWs2a4UhzWgQ27jdKsrsaKPWvDME60u1a7TWMMZW68 NlJX/0HWe33YBqXm8zTGSejJgsTmd1mcWZG+R4kIBqEbr6zs3wwPzyLmIy/gQCXB fHHzeIZ3n4ArNjEKnw6ZSZMHJQwInl7+iSq/IBXXPSF3PqSIzDVuYCRxZCAylpnd mWsTL4nTejmyC56jlaLA0F2YUov8SvcZmWuP+NN4s/hEzVM6Et7TSvq239LUWFQv G9DUw/ipqxgAEzCIymECh01NfzW7CqXF7xsAfWZdLGkp6MgZNuaCqkCyWNgMjBy3 FoF+P38Mb1RHEpq15obc39w+28IohsY= -----END CERTIFICATE-----Generated at Wed May 1 19:31:41 2024 by rpki-client on console-fra.rpki-client.org