$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/09223a2e-2947-361f-938a-98cbd7de56d5.roa File: 09223a2e-2947-361f-938a-98cbd7de56d5.roa (raw, json) Hash identifier: JJsEVyuIapVGuy0f014CUBquqsB9fBajP/82MOiR/Tw= Subject key identifier: EE:38:EC:9F:C5:C6:35:64:BE:57:CE:D7:22:51:A2:BF:4E:67:19:83 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F432858452C1D405E3DB44DA1B62AEFC0 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/09223a2e-2947-361f-938a-98cbd7de56d5.roa Signing time: Mon 11 Mar 2024 13:00:31 +0000 ROA not before: Mon 11 Mar 2024 13:00:31 +0000 ROA not after: Sun 09 Jun 2024 13:00:31 +0000 asID: 1239 IP address blocks: 161.199.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:2c:1d:40:5e:3d:b4:4d:a1:b6:2a:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Mar 11 13:00:31 2024 GMT Not After : Jun 9 13:00:31 2024 GMT Subject: CN=fb3820e5-ceca-471e-9681-ec5396ed0fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:41:73:90:87:f7:e5:4d:c1:15:aa:64:f0:d7: 27:72:18:53:0c:24:6a:e9:51:1e:f0:91:45:03:71: 04:a2:9f:f4:57:5b:73:5c:11:f2:8c:80:5a:41:fa: c1:76:1c:3c:1c:79:fb:fc:c4:66:8e:ed:6f:e4:1b: f3:90:37:cc:30:a5:d5:37:b0:74:93:de:7d:c8:58: 68:f0:ff:09:9e:fe:03:e1:5e:00:19:5a:07:1d:d8: 72:00:74:1e:1a:c4:63:cd:82:c2:61:6f:78:a5:65: 64:ae:c4:e7:b1:99:94:54:92:c8:87:c4:22:86:ff: 44:ac:04:a1:63:a0:e4:86:2d:1c:60:5f:50:7a:5c: 50:3f:78:71:08:75:05:56:7e:9d:a9:fb:7a:97:b4: ec:8e:99:2c:f3:a8:67:81:2d:fe:d7:a6:27:ce:b9: 56:e8:c5:b2:5a:09:ae:2d:d2:cc:19:92:d3:9a:6b: 78:08:1d:0b:3e:cd:b8:25:67:38:52:55:b8:a4:21: 19:86:70:5e:e4:ee:4e:1b:b3:74:59:8e:04:0d:19: 90:9c:40:b0:cc:5e:8a:de:49:90:eb:03:31:1b:a3: 37:56:17:a3:55:30:d7:a7:ab:44:e3:41:4f:ae:53: ce:ea:da:55:b1:95:c7:5e:f9:87:56:ea:e4:67:dc: 94:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:38:EC:9F:C5:C6:35:64:BE:57:CE:D7:22:51:A2:BF:4E:67:19:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/09223a2e-2947-361f-938a-98cbd7de56d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 161.199.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:4b:60:bc:8b:6a:e8:ac:c7:e4:58:d8:7e:26:e9:4f:8b:a5: 3e:0f:b1:f2:4b:91:52:86:0e:84:8a:ca:60:3d:b2:33:72:62: 38:d5:28:1c:36:c0:c6:1c:d9:83:17:a3:f4:8d:b0:07:bc:ff: 74:3b:23:e8:36:f9:c8:83:79:0a:d4:90:ee:50:7f:51:f4:f9: 0f:46:9c:ba:6f:a5:fa:97:bf:c5:dc:d4:f0:7b:79:83:de:b5: f1:62:29:c2:ce:7c:18:cb:a1:a9:79:b7:f9:b8:b7:ad:52:25: 48:44:38:17:f2:e6:0b:7c:73:6e:5a:9b:9f:ba:5a:5c:51:f1: 47:37:9a:39:51:68:a8:0a:36:cd:2e:14:36:c0:53:00:5f:7f: a9:d7:ca:f1:51:c8:ea:47:ac:8c:3f:9b:c8:02:51:9a:58:b9: d1:df:5a:48:ce:17:83:c1:30:58:fb:65:d9:c8:2b:0e:cf:8e: 14:0e:24:83:3d:47:e2:bb:48:c4:73:87:6b:88:17:b8:d9:03: b3:ff:be:15:83:c1:8c:ca:5a:a2:45:4c:5d:fc:98:5e:db:01: 87:5c:0c:3a:b5:14:30:38:1c:7a:68:4e:c3:60:85:bf:a1:b3: 55:4d:11:ff:23:87:42:3e:2f:47:c4:ed:71:6b:05:c6:1f:a9: 02:16:22:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUsHUBePbRNobYq78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI0MDMxMTEzMDAzMVoXDTI0MDYwOTEzMDAzMVowLzEtMCsGA1UEAxMk ZmIzODIwZTUtY2VjYS00NzFlLTk2ODEtZWM1Mzk2ZWQwZmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0FzkIf35U3BFapk8NcnchhTDCRq6VEe8JFF A3EEop/0V1tzXBHyjIBaQfrBdhw8HHn7/MRmju1v5BvzkDfMMKXVN7B0k959yFho 8P8Jnv4D4V4AGVoHHdhyAHQeGsRjzYLCYW94pWVkrsTnsZmUVJLIh8Qihv9ErASh Y6Dkhi0cYF9QelxQP3hxCHUFVn6dqft6l7Tsjpks86hngS3+16YnzrlW6MWyWgmu LdLMGZLTmmt4CB0LPs24JWc4UlW4pCEZhnBe5O5OG7N0WY4EDRmQnECwzF6K3kmQ 6wMxG6M3VhejVTDXp6tE40FPrlPO6tpVsZXHXvmHVurkZ9yUHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO447J/FxjVkvlfO1yJRor9OZxmDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvMDkyMjNhMmUtMjk0Ny0z NjFmLTkzOGEtOThjYmQ3ZGU1NmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAocfjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhLYLyLauisx+RY2H4m6U+LpT4PsfJLkVKGDoSKymA9sjNyYjjVKBw2 wMYc2YMXo/SNsAe8/3Q7I+g2+ciDeQrUkO5Qf1H0+Q9GnLpvpfqXv8Xc1PB7eYPe tfFiKcLOfBjLoal5t/m4t61SJUhEOBfy5gt8c25am5+6WlxR8Uc3mjlRaKgKNs0u FDbAUwBff6nXyvFRyOpHrIw/m8gCUZpYudHfWkjOF4PBMFj7ZdnIKw7PjhQOJIM9 R+K7SMRzh2uIF7jZA7P/vhWDwYzKWqJFTF38mF7bAYdcDDq1FDA4HHpoTsNghb+h s1VNEf8jh0I+L0fE7XFrBcYfqQIWItc= -----END CERTIFICATE-----Generated at Fri Apr 26 11:16:08 2024 by rpki-client on console-ams.rpki-client.org