$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/af1e45bb-3d5f-3a3b-8818-884ece6c1541.roa File: af1e45bb-3d5f-3a3b-8818-884ece6c1541.roa (raw, json) Hash identifier: bDD3BNpPtuylw14ZChE/B/rEjB0HmqTrbnLwFgIzung= Subject key identifier: A5:3B:FA:AA:4D:FC:5C:67:6C:19:95:E8:01:77:72:AF:55:18:A0:56 Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F432858454627C64D6CDFBA40D2771D80 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/af1e45bb-3d5f-3a3b-8818-884ece6c1541.roa Signing time: Wed 20 Mar 2024 20:52:48 +0000 ROA not before: Wed 20 Mar 2024 20:52:48 +0000 ROA not after: Tue 18 Jun 2024 20:52:48 +0000 asID: 36492 IP address blocks: 172.102.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:27:c6:4d:6c:df:ba:40:d2:77:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Mar 20 20:52:48 2024 GMT Not After : Jun 18 20:52:48 2024 GMT Subject: CN=b2383219-46ba-4dc3-984f-a82b5a5211f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:98:77:3e:a5:67:34:1e:b0:e9:bb:ba:a5:be: 10:ce:7e:8c:7b:39:6b:b3:ad:df:63:1e:95:22:c9: 65:fc:f5:6e:a1:02:ef:64:02:62:c8:4a:0c:17:be: 73:e3:24:cf:10:81:8d:45:c4:e9:86:39:d1:30:00: a1:68:a3:22:70:b4:61:05:03:ef:85:39:29:64:02: ae:5a:5a:46:c3:bc:bf:17:d8:00:cb:5d:0c:7d:5c: b0:b9:82:f6:17:25:02:a8:be:87:21:bf:c3:83:c1: 91:d7:f8:24:16:83:9c:84:e2:d3:d7:b8:04:9b:c2: 27:65:c6:0b:d9:b9:5c:5a:06:9e:84:95:0b:92:52: bc:13:2c:d3:b1:bb:b4:5f:9e:89:d5:17:14:bb:1f: f7:a8:0d:57:45:68:ed:61:dc:d3:97:76:6d:90:da: 04:24:e3:99:2a:46:50:37:cf:77:fd:70:ad:42:5d: 31:ea:f1:4a:7c:60:75:92:c6:e0:93:23:85:60:62: dc:bf:7b:0f:ae:3b:e7:03:2b:98:61:2f:48:d6:b9: 29:48:32:3c:b4:37:8f:42:97:14:4f:92:99:ee:b0: 46:49:01:97:b8:c3:3b:78:c6:e2:3f:33:cc:17:65: 5e:b9:e0:a8:13:1f:a5:a6:a2:b0:56:db:9b:43:b9: e0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3B:FA:AA:4D:FC:5C:67:6C:19:95:E8:01:77:72:AF:55:18:A0:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/af1e45bb-3d5f-3a3b-8818-884ece6c1541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 172.102.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:fc:81:c7:7b:f2:fa:80:22:90:f6:27:ad:94:50:8a:c6:6a: cf:72:71:b0:00:9d:96:72:bd:14:7d:0a:81:b3:2c:69:b5:8a: f5:30:38:a5:8f:7c:7a:75:65:4d:95:af:fe:d8:82:a1:27:ad: fd:94:45:18:97:13:88:23:e2:c8:b5:08:cb:78:62:69:72:ad: 2c:51:40:3e:8d:d8:27:66:ba:d6:ea:55:cb:c5:78:35:cb:1a: bf:3a:17:86:09:ec:7d:39:21:39:f3:55:d7:d5:f5:d8:a0:71: 9b:13:f7:92:c0:71:71:2a:6f:27:d0:07:b5:9a:11:36:f0:af: 9b:c3:47:0b:07:ce:91:48:52:34:dd:b2:b4:60:b9:f2:dd:25: 23:6f:2e:74:c1:be:0b:d1:84:98:34:4a:b2:6e:0c:35:3f:a0: 5c:f0:12:74:f0:c4:8f:47:8c:13:13:d9:de:81:39:d2:11:3e: 40:52:74:be:2f:4d:93:59:77:e5:4a:2f:3f:5b:53:2f:9a:08: bc:0f:58:2f:fd:0b:ec:fd:39:a1:58:4f:f6:e9:04:c0:2b:b4: b8:ab:91:ef:21:13:ce:d6:9e:e4:26:5c:0e:06:a8:88:71:9c: d8:11:88:9a:42:19:74:17:da:18:6d:68:ed:ae:33:48:22:e3: 6a:32:34:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGJ8ZNbN+6QNJ3HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI0MDMyMDIwNTI0OFoXDTI0MDYxODIwNTI0OFowLzEtMCsGA1UEAxMk YjIzODMyMTktNDZiYS00ZGMzLTk4NGYtYTgyYjVhNTIxMWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArph3PqVnNB6w6bu6pb4Qzn6Mezlrs63fYx6V Isll/PVuoQLvZAJiyEoMF75z4yTPEIGNRcTphjnRMAChaKMicLRhBQPvhTkpZAKu WlpGw7y/F9gAy10MfVywuYL2FyUCqL6HIb/Dg8GR1/gkFoOchOLT17gEm8InZcYL 2blcWgaehJULklK8EyzTsbu0X56J1RcUux/3qA1XRWjtYdzTl3ZtkNoEJOOZKkZQ N893/XCtQl0x6vFKfGB1ksbgkyOFYGLcv3sPrjvnAyuYYS9I1rkpSDI8tDePQpcU T5KZ7rBGSQGXuMM7eMbiPzPMF2VeueCoEx+lpqKwVtubQ7ng0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKU7+qpN/FxnbBmV6AF3cq9VGKBWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvYWYxZTQ1YmItM2Q1Zi0z YTNiLTg4MTgtODg0ZWNlNmMxNTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGYJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACr8gcd78vqAIpD2J62UUIrGas9ycbAAnZZyvRR9CoGzLGm1ivUwOKWP fHp1ZU2Vr/7YgqEnrf2URRiXE4gj4si1CMt4YmlyrSxRQD6N2CdmutbqVcvFeDXL Gr86F4YJ7H05ITnzVdfV9digcZsT95LAcXEqbyfQB7WaETbwr5vDRwsHzpFIUjTd srRgufLdJSNvLnTBvgvRhJg0SrJuDDU/oFzwEnTwxI9HjBMT2d6BOdIRPkBSdL4v TZNZd+VKLz9bUy+aCLwPWC/9C+z9OaFYT/bpBMArtLirke8hE87WnuQmXA4GqIhx nNgRiJpCGXQX2hhtaO2uM0gi42oyNI0= -----END CERTIFICATE-----Generated at Wed May 1 18:27:45 2024 by rpki-client on console-ams.rpki-client.org