$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa File: a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa (raw, json) Hash identifier: wsNHyhi/nyjET8eHVMzraD2j6kOL/9ow6VIEr8A6pCY= Subject key identifier: 0D:77:39:31:AD:F1:88:7F:4C:AD:A7:13:61:48:27:A8:BE:38:E2:E6 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584203E820D12820CB44027A2EC0 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa Signing time: Sat 27 May 2023 01:00:17 +0000 ROA not before: Sat 27 May 2023 01:00:17 +0000 ROA not after: Fri 25 Aug 2023 01:00:17 +0000 asID: 399629 IP address blocks: 168.100.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 May 2023 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:03:e8:20:d1:28:20:cb:44:02:7a:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: May 27 01:00:17 2023 GMT Not After : Aug 25 01:00:17 2023 GMT Subject: CN=8908cb2b-80b6-4e0f-ba6c-bc2f88ded9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7e:28:b9:6f:15:f2:50:8e:64:fa:b9:99:cd: 5b:57:ae:5f:3b:a2:cb:8e:ab:ab:0c:6a:b4:b8:90: 8e:3e:55:a2:a6:4f:ab:43:dc:21:82:83:32:22:61: 44:09:fe:23:05:ac:1d:c8:89:3f:09:92:d4:ea:3a: 78:b8:57:07:c3:bf:40:79:4b:d2:07:1c:30:16:cf: d5:b1:9c:6e:37:1a:db:26:60:97:aa:4d:88:d3:1f: 2e:3d:2c:62:b3:c6:14:3d:6c:3d:c2:0f:82:56:a9: 98:ac:e5:01:4c:1e:da:dc:dc:7a:d5:90:9b:b5:eb: ca:7e:51:07:ad:45:50:1a:ad:4d:b0:b8:03:60:7d: 8b:fb:c1:1f:b1:43:91:58:83:d4:02:ba:97:2f:c6: ac:4d:8a:06:b8:7a:80:cf:57:e0:d3:9e:e8:72:af: 89:7c:1d:39:2c:0a:78:8e:9f:1b:1a:cb:11:cc:e3: b5:8c:d9:5f:28:08:2e:56:65:79:dd:56:44:ee:8b: 5f:9c:91:11:44:9b:57:b8:4f:bb:18:da:31:16:ae: 36:c4:cc:05:c0:2f:93:61:87:1f:f1:d4:04:e1:da: e6:7a:e0:2f:5b:9e:86:4f:47:d7:5f:ac:77:0c:fe: 78:fb:24:71:19:17:09:31:ac:f7:4f:7b:d2:78:ce: bf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:77:39:31:AD:F1:88:7F:4C:AD:A7:13:61:48:27:A8:BE:38:E2:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 168.100.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:19:ab:32:52:29:9d:44:08:7c:b5:2d:a9:65:15:41:b7:b8: 47:8d:8b:38:48:06:c7:37:fa:b4:ac:e9:b2:0b:84:1c:12:0b: 77:a5:b3:22:f4:a8:35:a6:9a:d3:a7:40:9b:84:03:2b:ea:29: af:23:8f:e2:9f:2b:48:90:49:ac:61:5e:e2:26:1f:7f:e3:7f: 49:11:c2:2d:fb:44:ec:f0:b6:e7:40:73:69:cc:3e:ff:53:ea: 41:f8:0f:a0:5e:3b:8c:f6:85:d6:53:43:10:61:0e:e9:0f:7c: 58:bc:c5:25:57:7e:7c:b8:20:41:b4:22:6d:85:11:72:ba:ff: d5:10:90:bd:d5:1e:49:a1:58:da:73:52:15:2a:cb:be:a5:55: f9:1b:d6:6f:26:ce:82:78:fe:8c:74:a7:0b:d4:31:f4:17:03: 2f:fc:9e:9b:09:0e:a6:f7:a6:a7:c9:1b:db:d7:26:22:5e:15: 85:68:60:79:70:f1:b6:24:2d:8e:f3:32:8a:a3:30:8a:e4:4d: ae:19:2c:f3:ed:68:1b:6c:4a:74:bd:42:eb:f3:87:4d:ec:86: 59:63:2d:0b:3a:3a:7a:9b:60:5a:e4:2e:d7:c7:da:28:a9:1a: 24:84:64:05:c5:0c:fa:0c:35:dd:24:11:11:88:ea:30:bf:ae: 3c:14:9b:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEID6CDRKCDLRAJ6LsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTIzMDUyNzAxMDAxN1oXDTIzMDgyNTAxMDAxN1owLzEtMCsGA1UEAxMk ODkwOGNiMmItODBiNi00ZTBmLWJhNmMtYmMyZjg4ZGVkOWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH4ouW8V8lCOZPq5mc1bV65fO6LLjqurDGq0 uJCOPlWipk+rQ9whgoMyImFECf4jBawdyIk/CZLU6jp4uFcHw79AeUvSBxwwFs/V sZxuNxrbJmCXqk2I0x8uPSxis8YUPWw9wg+CVqmYrOUBTB7a3Nx61ZCbtevKflEH rUVQGq1NsLgDYH2L+8EfsUORWIPUArqXL8asTYoGuHqAz1fg057ocq+JfB05LAp4 jp8bGssRzOO1jNlfKAguVmV53VZE7otfnJERRJtXuE+7GNoxFq42xMwFwC+TYYcf 8dQE4drmeuAvW56GT0fXX6x3DP54+yRxGRcJMaz3T3vSeM6/ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA13OTGt8Yh/TK2nE2FIJ6i+OOLmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvYTNmODM3MzYtYTJmNC0z ZThiLWE2OTQtZTRlYjcyZDVjNTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqGQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUZqzJSKZ1ECHy1LallFUG3uEeNizhIBsc3+rSs6bILhBwSC3elsyL0 qDWmmtOnQJuEAyvqKa8jj+KfK0iQSaxhXuImH3/jf0kRwi37ROzwtudAc2nMPv9T 6kH4D6BeO4z2hdZTQxBhDukPfFi8xSVXfny4IEG0Im2FEXK6/9UQkL3VHkmhWNpz UhUqy76lVfkb1m8mzoJ4/ox0pwvUMfQXAy/8npsJDqb3pqfJG9vXJiJeFYVoYHlw 8bYkLY7zMoqjMIrkTa4ZLPPtaBtsSnS9Quvzh03shlljLQs6OnqbYFrkLtfH2iip GiSEZAXFDPoMNd0kERGI6jC/rjwUm4o= -----END CERTIFICATE-----Generated at Sat May 27 01:38:31 2023 by rpki-client on console-ams.rpki-client.org