$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/44924e0a-deef-3257-a202-f20fac287530.roa File: 44924e0a-deef-3257-a202-f20fac287530.roa (raw, json) Hash identifier: AbxAIO7AAA+mU9UG59BzuZeJnLemS6pZI1aNgXUQc9Y= Subject key identifier: F8:EF:98:DB:40:E4:50:3B:06:EA:08:C9:D6:E4:4D:4E:41:C6:23:C4 Certificate issuer: /CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa Certificate serial: 010D0C9F432858457D131682AF4D547721EC9A00 Authority key identifier: F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/44924e0a-deef-3257-a202-f20fac287530.roa Signing time: Tue 09 Apr 2024 13:00:34 +0000 ROA not before: Tue 09 Apr 2024 13:00:34 +0000 ROA not after: Mon 08 Jul 2024 13:00:34 +0000 asID: 16509 IP address blocks: 208.91.37.0/24 maxlen: 24 208.91.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:7d:13:16:82:af:4d:54:77:21:ec:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa Validity Not Before: Apr 9 13:00:34 2024 GMT Not After : Jul 8 13:00:34 2024 GMT Subject: CN=3977c1c8-cf48-40e7-b3e2-4537985ec1da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:00:ad:1c:43:c2:5b:46:c4:84:4a:ea:47:8e: 58:52:34:ee:68:ad:c4:ff:a9:fe:f2:2d:0f:40:db: f3:af:77:05:fa:2f:88:a6:6b:0f:95:e4:e4:b9:e9: 23:a4:93:b4:29:b2:6a:0f:ea:12:e7:07:bb:59:2e: 4a:06:a6:2b:fa:6a:e5:11:e9:b7:47:74:c3:4d:44: 64:97:2a:6e:84:45:58:d9:7e:31:bf:a6:7a:5a:53: aa:5c:ab:92:a3:6d:0d:d0:51:25:c9:b7:d2:3e:ec: f4:d5:5e:ce:a2:05:6a:fb:f7:aa:69:1c:99:f9:b2: 81:f9:8a:62:77:94:14:4a:d7:bf:ff:c7:03:01:b6: c3:2c:8b:68:87:17:a7:72:37:42:b1:51:e8:d4:d4: 82:f2:f7:6c:ff:44:d5:31:9d:32:f8:95:1e:2d:78: 3b:f8:65:7e:b9:f3:c6:71:8e:81:12:49:e3:59:5e: 7c:36:08:a7:70:38:67:65:62:f4:7f:cb:ce:0b:3f: 85:98:bc:7e:4e:a1:9a:4f:7b:bf:29:40:b1:e9:12: 4a:a7:13:83:21:8e:4c:be:ad:f8:1c:09:af:29:ba: 4c:24:ca:e5:a8:17:be:69:a9:9a:a3:a8:d2:7c:ce: 42:54:54:67:26:8f:93:60:33:d2:c6:d7:9a:9c:71: 5e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:EF:98:DB:40:E4:50:3B:06:EA:08:C9:D6:E4:4D:4E:41:C6:23:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/44924e0a-deef-3257-a202-f20fac287530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.crl X509v3 Authority Key Identifier: keyid:F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer sbgp-ipAddrBlock: critical IPv4: 208.91.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:47:36:95:79:17:02:89:c2:89:91:df:25:30:70:96:1d:5e: ef:1c:ab:59:be:36:3e:76:bb:6d:93:22:23:0e:70:ee:d8:76: 37:d3:6b:a1:d7:ba:7f:92:91:d0:af:0d:93:1e:0c:ee:a1:83: bb:81:de:7e:e3:5b:6d:59:9f:8d:2f:69:de:50:c5:9a:22:54: 77:5a:32:1b:03:28:2f:74:12:94:1a:4a:22:82:c6:27:72:c0: 5e:d7:64:52:c8:00:27:2e:e8:36:3f:d4:e2:b1:65:f3:4c:5e: 79:fc:a4:6f:b5:5b:e9:32:f4:49:49:14:59:c2:aa:ad:ae:9d: 90:85:59:20:e3:7d:e2:14:b1:09:fa:f7:a1:da:d0:70:e2:34: 49:21:11:b1:63:2e:4e:b2:d5:47:61:20:70:bb:56:35:e4:03: 72:54:8d:e7:61:a3:9e:94:2c:d8:1c:a9:f0:2b:13:be:04:8e: 23:94:6a:64:93:7b:e6:7e:00:7a:29:6d:30:9e:81:54:3d:7c: 85:15:5f:65:4a:d9:64:44:af:8a:3d:27:42:4d:84:0c:21:6b: a8:94:39:8b:d0:d3:bc:e2:b8:c5:6a:a6:5c:55:43:42:56:4f: 6f:02:6f:7c:db:2e:4f:ee:84:77:cd:dd:63:7e:fd:67:0b:60: d1:bc:b2:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV9ExaCr01UdyHsmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTVmOGQ0NDMtZTgyMy00YjM3LTkyMTctM2M1YWY4ZGNj OGZhMB4XDTI0MDQwOTEzMDAzNFoXDTI0MDcwODEzMDAzNFowLzEtMCsGA1UEAxMk Mzk3N2MxYzgtY2Y0OC00MGU3LWIzZTItNDUzNzk4NWVjMWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQCtHEPCW0bEhErqR45YUjTuaK3E/6n+8i0P QNvzr3cF+i+IpmsPleTkuekjpJO0KbJqD+oS5we7WS5KBqYr+mrlEem3R3TDTURk lypuhEVY2X4xv6Z6WlOqXKuSo20N0FElybfSPuz01V7OogVq+/eqaRyZ+bKB+Ypi d5QUSte//8cDAbbDLItohxencjdCsVHo1NSC8vds/0TVMZ0y+JUeLXg7+GV+ufPG cY6BEknjWV58NgincDhnZWL0f8vOCz+FmLx+TqGaT3u/KUCx6RJKpxODIY5Mvq34 HAmvKbpMJMrlqBe+aamao6jSfM5CVFRnJo+TYDPSxteanHFeLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjvmNtA5FA7BuoIydbkTU5BxiPEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xNWY4 ZDQ0My1lODIzLTRiMzctOTIxNy0zYzVhZjhkY2M4ZmEvNDQ5MjRlMGEtZGVlZi0z MjU3LWEyMDItZjIwZmFjMjg3NTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTVmOGQ0NDMtZTgyMy00YjM3LTky MTctM2M1YWY4ZGNjOGZhLzE1ZjhkNDQzLWU4MjMtNGIzNy05MjE3LTNjNWFmOGRj YzhmYS5jcmwwHwYDVR0jBBgwFoAU9YWLjmQM9/Nlg4QdP7rAQAXC1tswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xNWY4ZDQ0My1lODIzLTRiMzctOTIxNy0zYzVh ZjhkY2M4ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FskMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5HNpV5FwKJwomR3yUwcJYdXu8cq1m+Nj52u22TIiMOcO7YdjfTa6HX un+SkdCvDZMeDO6hg7uB3n7jW21Zn40vad5QxZoiVHdaMhsDKC90EpQaSiKCxidy wF7XZFLIACcu6DY/1OKxZfNMXnn8pG+1W+ky9ElJFFnCqq2unZCFWSDjfeIUsQn6 96Ha0HDiNEkhEbFjLk6y1UdhIHC7VjXkA3JUjedho56ULNgcqfArE74EjiOUamST e+Z+AHopbTCegVQ9fIUVX2VK2WREr4o9J0JNhAwha6iUOYvQ07ziuMVqplxVQ0JW T28Cb3zbLk/uhHfN3WN+/WcLYNG8svU= -----END CERTIFICATE-----