$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/8854b722-19fe-3709-b8c9-baa21c86eb4a.roa File: 8854b722-19fe-3709-b8c9-baa21c86eb4a.roa (raw, json) Hash identifier: aq70Dn2W8pQ4+btI/2QzJv9y0iU5W+rREPrkG3ompFw= Subject key identifier: C9:55:CB:43:C6:8F:E1:1A:DE:30:43:69:BC:14:EC:3B:E6:61:39:97 Certificate issuer: /CN=e8abcb36-7d75-4654-a098-d032ddf03d8a Certificate serial: 010D0C9F432858454C380FE8333BF58FF6CD2000 Authority key identifier: E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/8854b722-19fe-3709-b8c9-baa21c86eb4a.roa Signing time: Sat 23 Mar 2024 01:00:24 +0000 ROA not before: Sat 23 Mar 2024 01:00:24 +0000 ROA not after: Fri 21 Jun 2024 01:00:24 +0000 asID: 14618 IP address blocks: 161.199.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:4c:38:0f:e8:33:3b:f5:8f:f6:cd:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8abcb36-7d75-4654-a098-d032ddf03d8a Validity Not Before: Mar 23 01:00:24 2024 GMT Not After : Jun 21 01:00:24 2024 GMT Subject: CN=0e8eaeaa-e54b-42dc-8f1f-999b169eef69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9f:9b:61:04:63:ab:cc:40:2e:ae:ce:3a:a3: be:ac:9b:66:c8:9b:5d:a5:72:d0:d5:2e:0b:a5:4d: 08:dc:25:97:8d:5a:d0:84:ec:95:2a:ba:39:eb:4c: 03:b7:db:af:6f:a2:82:40:e9:58:a4:e7:45:6f:28: c8:20:36:c1:60:dd:57:c7:e0:1a:fd:74:2f:da:82: 63:2b:0d:81:38:ca:b5:f3:9f:a2:e6:9b:f7:df:01: 37:37:2a:fa:60:47:46:d7:d4:8d:5f:c2:7e:39:b7: b2:be:18:dc:c5:fa:cb:dd:40:87:46:11:dd:1c:cd: a4:cd:88:e0:6c:4e:c2:12:1d:87:c4:5b:66:a1:05: c2:a6:3d:42:a8:1e:4e:bd:19:e7:8d:2e:f5:d4:35: 9a:45:23:4d:b9:c0:e1:91:42:c5:42:72:d5:e8:9d: 3b:5a:03:24:d4:ea:48:90:5e:62:0d:3b:9a:88:dd: 19:31:84:e0:a3:8a:d4:7a:8f:6d:d3:08:a8:8a:ec: 4a:42:dc:08:45:9c:de:34:ae:89:72:a0:19:c8:07: 63:a5:96:8b:ed:e5:5b:0d:b1:6e:07:66:a5:09:eb: 71:e1:b8:81:04:16:a7:47:85:e7:e4:c2:8d:52:17: 6c:46:15:8a:86:cf:ce:95:3f:d0:4c:e2:95:1f:b1: d8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:55:CB:43:C6:8F:E1:1A:DE:30:43:69:BC:14:EC:3B:E6:61:39:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/8854b722-19fe-3709-b8c9-baa21c86eb4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl X509v3 Authority Key Identifier: keyid:E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer sbgp-ipAddrBlock: critical IPv4: 161.199.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:f6:f5:a7:3f:2f:47:d5:90:08:e4:1f:be:fb:05:b2:02:7f: 90:04:29:fc:bc:b9:40:bc:c3:ce:66:f3:26:b3:fc:9e:57:80: f1:98:b7:1e:dd:99:3b:3a:07:bc:8d:94:0d:16:15:2c:47:86: e9:65:2c:da:e3:2c:32:09:32:01:d7:30:67:e1:50:f0:5f:c1: 5c:b5:d8:54:70:b9:e5:36:2b:b8:24:f8:f9:d9:66:f6:19:7b: 29:f6:06:cf:f4:db:f3:2e:20:33:8a:09:eb:d4:df:42:09:bb: cc:16:27:85:b8:ee:10:76:3c:ba:4d:60:1d:c8:28:1d:dc:13: c2:9d:2d:3a:30:e7:f6:6b:ec:48:9d:10:92:d9:a1:3c:56:98: be:a1:a4:65:65:3b:2e:03:aa:40:aa:59:b7:e4:04:4d:8d:52: 6d:a2:20:65:35:3d:0f:5c:09:45:c8:0a:82:75:1e:62:9f:09: 68:56:44:72:fc:5c:67:ea:b4:31:cb:75:76:30:73:cc:e1:25: 18:34:6b:8d:69:a1:b5:41:45:0d:03:bb:30:7b:8e:bb:47:34: 8f:a4:ed:72:5d:35:53:0a:47:5a:44:73:4b:09:75:83:83:3c: 11:0e:da:9a:11:a1:ad:63:24:8e:5c:60:a4:57:2a:35:93:1c: a6:a9:24:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVMOA/oMzv1j/bNIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThhYmNiMzYtN2Q3NS00NjU0LWEwOTgtZDAzMmRkZjAz ZDhhMB4XDTI0MDMyMzAxMDAyNFoXDTI0MDYyMTAxMDAyNFowLzEtMCsGA1UEAxMk MGU4ZWFlYWEtZTU0Yi00MmRjLThmMWYtOTk5YjE2OWVlZjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5+bYQRjq8xALq7OOqO+rJtmyJtdpXLQ1S4L pU0I3CWXjVrQhOyVKro560wDt9uvb6KCQOlYpOdFbyjIIDbBYN1Xx+Aa/XQv2oJj Kw2BOMq185+i5pv33wE3Nyr6YEdG19SNX8J+ObeyvhjcxfrL3UCHRhHdHM2kzYjg bE7CEh2HxFtmoQXCpj1CqB5OvRnnjS711DWaRSNNucDhkULFQnLV6J07WgMk1OpI kF5iDTuaiN0ZMYTgo4rUeo9t0wioiuxKQtwIRZzeNK6JcqAZyAdjpZaL7eVbDbFu B2alCetx4biBBBanR4Xn5MKNUhdsRhWKhs/OlT/QTOKVH7HYtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlVy0PGj+Ea3jBDabwU7DvmYTmXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFi Y2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMyZGRmMDNkOGEvODg1NGI3MjItMTlmZS0z NzA5LWI4YzktYmFhMjFjODZlYjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZThhYmNiMzYtN2Q3NS00NjU0LWEw OTgtZDAzMmRkZjAzZDhhL2U4YWJjYjM2LTdkNzUtNDY1NC1hMDk4LWQwMzJkZGYw M2Q4YS5jcmwwHwYDVR0jBBgwFoAU5SKbDu705qho1RMGspmd441YHB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFiY2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMy ZGRmMDNkOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBocf6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABX29ac/L0fVkAjkH777BbICf5AEKfy8uUC8w85m8yaz/J5XgPGYtx7d mTs6B7yNlA0WFSxHhullLNrjLDIJMgHXMGfhUPBfwVy12FRwueU2K7gk+PnZZvYZ eyn2Bs/02/MuIDOKCevU30IJu8wWJ4W47hB2PLpNYB3IKB3cE8KdLTow5/Zr7Eid EJLZoTxWmL6hpGVlOy4DqkCqWbfkBE2NUm2iIGU1PQ9cCUXICoJ1HmKfCWhWRHL8 XGfqtDHLdXYwc8zhJRg0a41pobVBRQ0DuzB7jrtHNI+k7XJdNVMKR1pEc0sJdYOD PBEO2poRoa1jJI5cYKRXKjWTHKapJC0= -----END CERTIFICATE-----Generated at Thu May 2 11:54:20 2024 by rpki-client on console-fra.rpki-client.org