$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa File: 857207aa-33ba-3517-ba92-dbeae756a93f.roa (raw, json) Hash identifier: vCNfkyAwwZP1krRueuRPyGZVhgsE2jtybdS2P+WdJ8s= Subject key identifier: D8:D3:CD:25:6F:9E:30:7F:7D:04:58:98:6D:49:59:71:7F:1F:82:4C Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F432858457FDDE51715B57D15F6481080 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa Signing time: Wed 10 Apr 2024 13:00:34 +0000 ROA not before: Wed 10 Apr 2024 13:00:34 +0000 ROA not after: Tue 09 Jul 2024 13:00:34 +0000 asID: 212238 IP address blocks: 158.115.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:7f:dd:e5:17:15:b5:7d:15:f6:48:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Apr 10 13:00:34 2024 GMT Not After : Jul 9 13:00:34 2024 GMT Subject: CN=e09a9947-bfb9-48f2-b6fd-f659547e6cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:30:8e:60:1a:a5:35:8c:0a:a5:7f:6b:d1:d3: 12:bf:f5:8d:a8:20:01:09:c2:f9:31:e5:2c:dd:bf: bf:f8:60:0c:a9:fa:2f:5d:56:88:d5:b7:8e:c0:cd: b1:e5:a3:71:a1:bd:cb:54:64:1e:16:51:41:64:0d: 7c:82:2a:b9:46:15:a5:ac:1e:f7:8f:15:6c:df:8b: d7:4d:11:22:38:b4:28:35:97:63:23:83:50:8f:6a: af:07:46:40:5b:60:fa:00:cd:25:22:5c:5a:1f:2c: 64:49:29:39:2e:67:bd:19:82:6a:6a:d0:d7:3c:a9: 0f:52:ab:fe:98:bc:e8:d4:a1:01:35:e1:a0:1a:62: 9d:0a:8e:19:22:8b:42:2c:f3:87:be:c4:ba:30:0c: 52:bf:94:27:07:db:a5:79:22:3d:22:8c:8e:80:07: 6f:6a:1c:59:fc:31:d6:48:3c:7d:f1:95:5b:b7:cc: 4d:c3:06:f5:d7:28:80:31:87:c3:34:18:cc:43:65: 58:d9:a7:17:17:f4:e6:04:a5:f1:62:7a:34:91:e6: 3d:84:8e:2f:c9:4f:ab:e7:29:f1:1f:93:2b:e5:11: b8:ed:99:54:48:01:31:45:d4:2d:f4:17:08:ad:a3: 4e:64:23:33:f0:c2:07:da:cc:99:3a:3f:73:5c:00: 82:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D3:CD:25:6F:9E:30:7F:7D:04:58:98:6D:49:59:71:7F:1F:82:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 158.115.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:2b:df:b2:6f:5b:29:a9:db:f6:ce:46:6c:17:90:96:d8:31: 1e:a7:0e:bc:35:ab:3a:3c:d3:25:79:5a:f2:33:ee:bb:20:e9: 38:9f:30:42:b3:d3:a0:90:03:c1:8f:1e:f9:a2:cc:47:af:6e: d9:b8:33:c8:96:d5:dc:29:e9:48:3a:1f:86:d4:89:ce:82:13: 12:3c:35:38:09:df:1e:43:f4:29:63:ff:59:60:91:f5:45:c9: d6:41:1d:89:01:6c:53:d2:a4:ec:92:8e:8a:de:13:74:04:fa: 69:b9:08:fd:e4:16:be:6a:99:e6:82:09:77:b1:11:10:5d:01: ae:66:fa:07:5a:2d:2e:23:e1:73:f8:42:1e:a6:f6:8a:b3:7a: 54:5c:69:2b:57:91:95:08:7b:91:77:42:3a:d0:44:34:7d:1d: 91:27:35:e2:c9:f5:48:28:ad:97:52:d1:8a:a7:80:9e:b7:79: 16:01:d5:34:55:1e:38:7c:3a:e8:c3:a9:f5:45:17:d5:b9:6f: 0b:a1:86:88:99:3c:1b:64:5d:ad:0c:03:4c:1a:eb:97:04:c0: ca:6f:96:3a:0e:d4:31:df:68:a1:95:b2:79:5d:79:f3:46:56: ad:82:6c:2c:33:f7:63:fe:ab:da:62:c8:ad:22:58:df:4e:d1: c1:5c:dc:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV/3eUXFbV9FfZIEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI0MDQxMDEzMDAzNFoXDTI0MDcwOTEzMDAzNFowLzEtMCsGA1UEAxMk ZTA5YTk5NDctYmZiOS00OGYyLWI2ZmQtZjY1OTU0N2U2Y2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzCOYBqlNYwKpX9r0dMSv/WNqCABCcL5MeUs 3b+/+GAMqfovXVaI1beOwM2x5aNxob3LVGQeFlFBZA18giq5RhWlrB73jxVs34vX TREiOLQoNZdjI4NQj2qvB0ZAW2D6AM0lIlxaHyxkSSk5Lme9GYJqatDXPKkPUqv+ mLzo1KEBNeGgGmKdCo4ZIotCLPOHvsS6MAxSv5QnB9uleSI9IoyOgAdvahxZ/DHW SDx98ZVbt8xNwwb11yiAMYfDNBjMQ2VY2acXF/TmBKXxYno0keY9hI4vyU+r5ynx H5Mr5RG47ZlUSAExRdQt9BcIraNOZCMz8MIH2syZOj9zXACCuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjTzSVvnjB/fQRYmG1JWXF/H4JMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvODU3MjA3YWEtMzNiYS0z NTE3LWJhOTItZGJlYWU3NTZhOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnnP8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0r37JvWymp2/bORmwXkJbYMR6nDrw1qzo80yV5WvIz7rsg6TifMEKz 06CQA8GPHvmizEevbtm4M8iW1dwp6Ug6H4bUic6CExI8NTgJ3x5D9Clj/1lgkfVF ydZBHYkBbFPSpOySjoreE3QE+mm5CP3kFr5qmeaCCXexERBdAa5m+gdaLS4j4XP4 Qh6m9oqzelRcaStXkZUIe5F3QjrQRDR9HZEnNeLJ9UgorZdS0YqngJ63eRYB1TRV Hjh8OujDqfVFF9W5bwuhhoiZPBtkXa0MA0wa65cEwMpvljoO1DHfaKGVsnldefNG Vq2CbCwz92P+q9piyK0iWN9O0cFc3A4= -----END CERTIFICATE-----Generated at Sun Apr 28 03:26:34 2024 by rpki-client on console-ams.rpki-client.org