$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/db428115-c456-3334-b37a-ff20543aaa4a.roa File: db428115-c456-3334-b37a-ff20543aaa4a.roa (raw, json) Hash identifier: hSKzuBCoo8TNP+DS+Dw+HRYoXhbjy11abD9TJ+faG1s= Subject key identifier: F0:7E:00:DC:CE:BC:B2:C3:CC:49:DC:AA:25:E7:92:EA:45:97:1D:39 Certificate issuer: /CN=27a0a206-0e8b-48c1-9191-51dfb13bd365 Certificate serial: 010D0C9F43285845AC88CE20200BBC481F1D3500 Authority key identifier: 5A:95:8C:B3:2D:4E:31:15:67:60:DB:39:65:FB:70:E8:11:B9:35:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/db428115-c456-3334-b37a-ff20543aaa4a.roa Signing time: Fri 26 Apr 2024 13:00:35 +0000 ROA not before: Fri 26 Apr 2024 13:00:35 +0000 ROA not after: Thu 25 Jul 2024 13:00:35 +0000 asID: 14946 IP address blocks: 167.251.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/27a0a206-0e8b-48c1-9191-51dfb13bd365.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/27a0a206-0e8b-48c1-9191-51dfb13bd365.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Jun 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ac:88:ce:20:20:0b:bc:48:1f:1d:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a0a206-0e8b-48c1-9191-51dfb13bd365 Validity Not Before: Apr 26 13:00:35 2024 GMT Not After : Jul 25 13:00:35 2024 GMT Subject: CN=f3f5001f-0a2b-475e-ada1-41744dd510de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:25:a6:72:17:f8:12:5c:4c:68:a8:4c:d5:e9: 16:6f:70:1d:22:43:58:ad:29:9d:66:ae:f7:f2:11: cb:9b:a9:e7:c4:ab:1c:fe:9c:11:8a:76:d4:bd:2b: 06:a4:85:d7:86:02:a2:f7:ab:75:2a:74:a6:d7:4f: ae:f8:66:1b:6b:d7:9f:2a:3b:28:02:07:4b:f2:8d: 1a:51:ab:2f:4d:d7:98:aa:80:c2:a3:9c:ac:0e:e9: 90:c5:db:e2:7a:a1:a2:76:4a:08:25:56:2d:b2:5c: f9:f4:b5:85:cb:48:f2:61:86:8d:fe:46:7b:79:34: 5c:b4:bf:85:ac:76:5f:6c:48:53:8a:1d:4a:05:f6: ed:18:27:ac:9e:fe:83:98:7c:3a:e4:3f:e1:d8:02: 6d:d7:5f:0d:3a:6c:6d:b2:e7:6a:f5:d4:39:bc:f7: 86:b1:92:9d:85:60:0d:b3:c1:8e:9d:8a:36:83:28: b6:b7:f1:79:92:ea:da:de:94:57:a0:ad:1e:3a:89: 2e:b7:b7:17:c1:be:85:d9:33:43:b0:17:bf:dc:5e: 58:19:b5:39:04:c9:e4:f0:fa:7c:68:73:90:b9:41: 7f:92:4f:75:51:ae:a5:8c:b6:e9:03:14:c1:45:c6: d0:25:50:cb:d1:e2:a8:ac:eb:d1:7c:45:ed:be:10: 15:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7E:00:DC:CE:BC:B2:C3:CC:49:DC:AA:25:E7:92:EA:45:97:1D:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/db428115-c456-3334-b37a-ff20543aaa4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/27a0a206-0e8b-48c1-9191-51dfb13bd365.crl X509v3 Authority Key Identifier: keyid:5A:95:8C:B3:2D:4E:31:15:67:60:DB:39:65:FB:70:E8:11:B9:35:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365.cer sbgp-ipAddrBlock: critical IPv4: 167.251.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:ea:f7:fc:40:6d:0b:f7:09:8a:77:60:98:c3:f8:b8:38:63: 8d:86:1a:8f:98:06:48:78:8c:3f:49:6b:c0:4c:4b:5e:ec:47: ee:08:9d:0c:b7:47:6b:55:0e:31:a1:17:70:52:b2:56:15:50: 7e:89:f0:a1:b0:5d:11:54:b5:4b:4a:07:ed:0a:dd:09:93:cf: db:cc:42:aa:31:4d:7a:3c:5f:ea:2b:74:e5:04:ad:d2:e9:b0: 8c:07:a0:16:db:a5:8b:fe:2c:d8:c6:0e:0f:4c:de:0e:cf:f2: a4:58:4a:fa:5b:3f:e7:67:82:06:0b:d3:36:6e:6b:e0:5c:be: 22:82:b5:7c:70:47:a4:a5:91:a6:ed:9e:36:db:fa:6e:63:4e: 24:1e:4b:a8:5c:e3:82:93:b1:66:80:f5:23:4f:48:d7:9f:2d: 84:7d:cd:02:0f:6f:87:51:f0:1c:e7:e1:11:a7:16:65:66:3c: c6:e3:d5:8a:ae:3c:52:0a:ef:6e:6a:16:6f:5f:0e:f1:00:d0: 7e:c4:93:4b:9c:5a:2e:09:da:ed:a7:22:e8:a4:17:e3:18:a1: 29:45:ff:f5:68:9c:db:09:b7:dd:33:9b:71:b4:ed:61:2f:44: 25:1b:0e:65:65:2f:b1:55:51:91:a4:80:37:3c:0c:9f:ff:f9: 9a:b6:bd:fd -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEWsiM4gIAu8SB8dNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjdhMGEyMDYtMGU4Yi00OGMxLTkxOTEtNTFkZmIxM2Jk MzY1MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk ZjNmNTAwMWYtMGEyYi00NzVlLWFkYTEtNDE3NDRkZDUxMGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+SWmchf4ElxMaKhM1ekWb3AdIkNYrSmdZq73 8hHLm6nnxKsc/pwRinbUvSsGpIXXhgKi96t1KnSm10+u+GYba9efKjsoAgdL8o0a UasvTdeYqoDCo5ysDumQxdvieqGidkoIJVYtslz59LWFy0jyYYaN/kZ7eTRctL+F rHZfbEhTih1KBfbtGCesnv6DmHw65D/h2AJt118NOmxtsudq9dQ5vPeGsZKdhWAN s8GOnYo2gyi2t/F5kura3pRXoK0eOokut7cXwb6F2TNDsBe/3F5YGbU5BMnk8Pp8 aHOQuUF/kk91Ua6ljLbpAxTBRcbQJVDL0eKorOvRfEXtvhAVIwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPB+ANzOvLLDzEncqiXnkupFlx05MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yN2Ew YTIwNi0wZThiLTQ4YzEtOTE5MS01MWRmYjEzYmQzNjUvZGI0MjgxMTUtYzQ1Ni0z MzM0LWIzN2EtZmYyMDU0M2FhYTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjdhMGEyMDYtMGU4Yi00OGMxLTkx OTEtNTFkZmIxM2JkMzY1LzI3YTBhMjA2LTBlOGItNDhjMS05MTkxLTUxZGZiMTNi ZDM2NS5jcmwwHwYDVR0jBBgwFoAUWpWMsy1OMRVnYNs5Zftw6BG5NcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yN2EwYTIwNi0wZThiLTQ4YzEtOTE5MS01MWRm YjEzYmQzNjUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAp/swVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAVer3/EBtC/cJindgmMP4uDhjjYYaj5gGSHiMP0lrwExLXuxH7gidDLdH a1UOMaEXcFKyVhVQfonwobBdEVS1S0oH7QrdCZPP28xCqjFNejxf6it05QSt0umw jAegFtuli/4s2MYOD0zeDs/ypFhK+ls/52eCBgvTNm5r4Fy+IoK1fHBHpKWRpu2e Ntv6bmNOJB5LqFzjgpOxZoD1I09I158thH3NAg9vh1HwHOfhEacWZWY8xuPViq48 UgrvbmoWb18O8QDQfsSTS5xaLgna7aci6KQX4xihKUX/9Wic2wm33TObcbTtYS9E JRsOZWUvsVVRkaSANzwMn//5mra9/Q== -----END CERTIFICATE-----Generated at Mon Jun 3 21:55:33 2024 by rpki-client on console-fra.rpki-client.org