$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648/5d01e5dc-9b1f-3e4d-8735-aa36b3b9e61e.roa File: 5d01e5dc-9b1f-3e4d-8735-aa36b3b9e61e.roa (raw, json) Hash identifier: O005T81ByfGnzGl/tHr3LIjrySHeKQpNzim1Ik/tInA= Subject key identifier: B1:89:2C:E6:BD:08:F3:69:9E:F4:40:B9:4C:21:82:2D:91:83:C0:17 Certificate issuer: /CN=1908c59f-d1ec-4450-8633-d94e6b9f1648 Certificate serial: 010D0C9F432858451A15874B91138F7C35264280 Authority key identifier: E6:DD:C4:CD:C3:06:89:3D:4D:5B:EF:6D:AB:21:AE:4C:59:2F:ED:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648/5d01e5dc-9b1f-3e4d-8735-aa36b3b9e61e.roa Signing time: Tue 05 Mar 2024 02:00:26 +0000 ROA not before: Tue 05 Mar 2024 02:00:26 +0000 ROA not after: Mon 03 Jun 2024 01:00:26 +0000 asID: 13764 IP address blocks: 162.245.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648/1908c59f-d1ec-4450-8633-d94e6b9f1648.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648/1908c59f-d1ec-4450-8633-d94e6b9f1648.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1a:15:87:4b:91:13:8f:7c:35:26:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1908c59f-d1ec-4450-8633-d94e6b9f1648 Validity Not Before: Mar 5 02:00:26 2024 GMT Not After : Jun 3 01:00:26 2024 GMT Subject: CN=a42f3302-e7f1-4834-8c92-913cc02db38b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f9:22:fa:4d:b1:91:03:0a:ae:1c:6c:1d:74: e1:87:3c:59:94:3d:27:09:78:26:d7:cf:5d:80:55: 5b:1c:29:39:1b:79:74:19:d8:c5:c4:ca:c3:68:7b: d9:ef:02:67:89:42:21:60:0e:71:bc:f1:09:d2:00: 51:b4:bc:11:30:08:77:21:8f:0f:98:3c:64:54:18: 4f:84:81:41:0b:e1:c7:53:ea:a9:28:fb:8c:94:76: 65:a4:12:c2:29:53:0b:3c:43:cb:f9:fb:1a:63:6e: f0:54:fd:30:37:ee:14:33:eb:23:f7:79:02:1b:90: 58:da:50:8d:71:46:6e:2a:0b:25:51:81:5b:e8:90: ca:45:e4:58:82:a5:40:f4:6f:11:a6:09:50:4a:12: 97:d4:6d:b8:5c:98:6b:71:4d:1b:28:58:ce:b9:0e: aa:51:04:d9:e9:59:93:ae:06:82:a9:d3:0c:70:96: 62:84:d4:b8:5e:20:67:94:af:c0:cd:99:59:b8:c7: 94:ec:0e:5f:3a:c2:7b:5c:47:1f:02:f6:4c:10:1c: 46:e4:5f:c6:58:9d:36:b1:a7:0e:12:ab:29:99:7b: 94:74:37:f4:5d:b7:9a:dc:cf:d2:48:4c:c9:75:cd: 46:85:37:1a:42:65:f1:6d:56:b6:03:3a:bf:1c:b1: 77:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:89:2C:E6:BD:08:F3:69:9E:F4:40:B9:4C:21:82:2D:91:83:C0:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648/5d01e5dc-9b1f-3e4d-8735-aa36b3b9e61e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648/1908c59f-d1ec-4450-8633-d94e6b9f1648.crl X509v3 Authority Key Identifier: keyid:E6:DD:C4:CD:C3:06:89:3D:4D:5B:EF:6D:AB:21:AE:4C:59:2F:ED:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648.cer sbgp-ipAddrBlock: critical IPv4: 162.245.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:f2:d9:a9:0d:fb:02:2c:50:ca:b8:03:79:35:20:1c:72:40: 79:4d:f2:9b:9c:45:0b:35:ab:10:fe:c6:d8:74:55:40:90:5c: ae:59:79:fd:24:37:87:58:a5:b4:8a:e0:0b:5c:eb:61:a4:e6: 76:ff:71:ee:62:81:ad:0e:99:4a:5a:51:be:b9:50:b7:97:49: 93:97:b7:0f:e2:c9:b9:7d:f6:ca:61:d9:a5:21:5f:fb:02:5d: a2:bc:ed:8e:75:7d:4b:97:53:96:43:ef:e1:21:54:60:60:9a: 6e:35:04:74:8d:93:56:d8:c1:98:82:93:0c:77:eb:fa:04:b6: 2d:4f:59:66:38:b5:33:03:9e:3f:39:3d:ad:b3:cc:e6:ce:1f: 57:17:cd:76:90:ce:74:76:9b:d4:4e:d6:03:75:62:bd:aa:50: 84:58:9e:f5:48:13:56:10:f1:0e:ea:bc:72:c5:d1:04:3a:4d: 1f:a8:b8:94:42:7c:32:d0:3c:c7:93:ca:e6:ef:bb:86:b3:48: 11:f7:f1:c0:d1:01:de:73:df:9e:e6:1a:25:32:dd:0f:d5:13: f4:8b:75:7c:7a:f5:93:bc:86:13:41:4e:f8:96:82:49:16:65: ed:a6:2c:db:16:84:6a:c3:70:bc:db:67:3d:97:23:c5:10:5b: b8:7c:18:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUaFYdLkROPfDUmQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTkwOGM1OWYtZDFlYy00NDUwLTg2MzMtZDk0ZTZiOWYx NjQ4MB4XDTI0MDMwNTAyMDAyNloXDTI0MDYwMzAxMDAyNlowLzEtMCsGA1UEAxMk YTQyZjMzMDItZTdmMS00ODM0LThjOTItOTEzY2MwMmRiMzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfki+k2xkQMKrhxsHXThhzxZlD0nCXgm189d gFVbHCk5G3l0GdjFxMrDaHvZ7wJniUIhYA5xvPEJ0gBRtLwRMAh3IY8PmDxkVBhP hIFBC+HHU+qpKPuMlHZlpBLCKVMLPEPL+fsaY27wVP0wN+4UM+sj93kCG5BY2lCN cUZuKgslUYFb6JDKReRYgqVA9G8RpglQShKX1G24XJhrcU0bKFjOuQ6qUQTZ6VmT rgaCqdMMcJZihNS4XiBnlK/AzZlZuMeU7A5fOsJ7XEcfAvZMEBxG5F/GWJ02sacO EqspmXuUdDf0Xbea3M/SSEzJdc1GhTcaQmXxbVa2Azq/HLF3GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGJLOa9CPNpnvRAuUwhgi2Rg8AXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xOTA4 YzU5Zi1kMWVjLTQ0NTAtODYzMy1kOTRlNmI5ZjE2NDgvNWQwMWU1ZGMtOWIxZi0z ZTRkLTg3MzUtYWEzNmIzYjllNjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTkwOGM1OWYtZDFlYy00NDUwLTg2 MzMtZDk0ZTZiOWYxNjQ4LzE5MDhjNTlmLWQxZWMtNDQ1MC04NjMzLWQ5NGU2Yjlm MTY0OC5jcmwwHwYDVR0jBBgwFoAU5t3EzcMGiT1NW+9tqyGuTFkv7dswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xOTA4YzU5Zi1kMWVjLTQ0NTAtODYzMy1kOTRl NmI5ZjE2NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABny2akN+wIsUMq4A3k1IBxyQHlN8pucRQs1qxD+xth0VUCQXK5Zef0k N4dYpbSK4Atc62Gk5nb/ce5iga0OmUpaUb65ULeXSZOXtw/iybl99sph2aUhX/sC XaK87Y51fUuXU5ZD7+EhVGBgmm41BHSNk1bYwZiCkwx36/oEti1PWWY4tTMDnj85 Pa2zzObOH1cXzXaQznR2m9RO1gN1Yr2qUIRYnvVIE1YQ8Q7qvHLF0QQ6TR+ouJRC fDLQPMeTyubvu4azSBH38cDRAd5z357mGiUy3Q/VE/SLdXx69ZO8hhNBTviWgkkW Ze2mLNsWhGrDcLzbZz2XI8UQW7h8GJg= -----END CERTIFICATE-----Generated at Wed May 22 22:44:56 2024 by rpki-client on console-fra.rpki-client.org