$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa File: b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa (raw, json) Hash identifier: 7oFwAZ8rjNgbsv+IEVLCrpZJVvuDweDu7bUlU9xWEpo= Subject key identifier: 91:BC:3C:9E:06:53:BC:2E:30:56:BB:AD:C1:0B:24:62:FA:96:AA:E2 Certificate issuer: /CN=04c216c1-5924-4a66-9346-a1f215800ceb Certificate serial: 010D0C9F432858453317E975E377A5E41111D9C0 Authority key identifier: 98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa Signing time: Thu 14 Mar 2024 01:00:25 +0000 ROA not before: Thu 14 Mar 2024 01:00:25 +0000 ROA not after: Wed 12 Jun 2024 01:00:25 +0000 asID: 399889 IP address blocks: 216.170.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:33:17:e9:75:e3:77:a5:e4:11:11:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04c216c1-5924-4a66-9346-a1f215800ceb Validity Not Before: Mar 14 01:00:25 2024 GMT Not After : Jun 12 01:00:25 2024 GMT Subject: CN=4c3cdbef-358e-470c-9bf6-daac6f62502e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e3:e1:0f:cc:ca:6b:70:ab:a0:a2:f6:ef:c3: 5a:70:c3:8b:85:c9:f6:7b:fc:14:68:ba:34:6c:bc: 49:3f:d9:97:52:35:b4:22:e4:13:85:03:b8:1e:55: b5:ae:c8:d7:c6:8d:96:1f:d4:c3:95:c2:93:2f:28: 25:3d:9f:25:74:18:f0:c7:ae:fd:80:f0:70:64:83: 61:b1:e1:f0:e5:7f:29:be:ba:e1:ef:2d:d3:e9:9c: 15:b9:8c:95:fa:70:56:6b:18:21:01:54:fe:a3:d6: 68:27:1d:14:4e:a8:43:c7:12:07:7f:33:ad:d9:b1: 6d:5f:e4:99:a6:20:fa:e2:30:fc:de:2c:5c:c7:97: 8d:7b:5f:e5:75:3a:65:97:e0:ac:21:af:ac:0c:af: 84:58:89:d7:b6:88:f1:a7:83:40:c1:83:1c:0d:9c: ed:09:0c:93:17:bc:7e:d4:92:37:f0:ea:6c:38:1c: 0e:4d:fe:91:28:e6:32:12:e5:8e:ff:ba:ac:8d:89: 5c:62:b0:b9:e2:0e:01:04:06:60:73:23:a9:61:76: ff:36:05:72:a5:35:0f:80:94:07:16:bc:1b:0a:85: b1:3e:1f:67:aa:67:d9:ec:b5:53:ab:30:ea:10:ca: de:56:a4:a5:d6:e5:39:89:cc:f1:8d:23:ce:94:f3: 53:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BC:3C:9E:06:53:BC:2E:30:56:BB:AD:C1:0B:24:62:FA:96:AA:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl X509v3 Authority Key Identifier: keyid:98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer sbgp-ipAddrBlock: critical IPv4: 216.170.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:27:14:18:95:91:e1:4f:0a:57:55:6f:fb:11:7d:f5:12:8b: c1:85:89:7d:dc:a8:50:63:74:dd:26:10:3a:2b:74:e9:b1:3c: 50:c9:85:ae:a7:cc:52:23:c1:35:9b:10:a0:1b:6d:88:3f:ce: 85:4f:7a:7b:a7:f8:08:e4:72:29:89:b1:31:f0:d6:eb:0a:20: 42:8b:99:69:8f:f1:51:c0:43:fa:98:38:0f:51:ab:73:1b:ac: 49:69:1c:0e:6f:e7:b9:b9:a4:aa:21:5c:d3:30:aa:f3:76:08: 7d:62:3c:81:ce:6a:0a:3f:09:3d:01:88:78:64:a5:86:59:6c: 9b:fc:16:1a:cf:c3:4e:6b:f3:8d:7d:91:e0:9c:d6:d8:bd:8b: 89:68:9a:c6:30:9e:1a:ba:cb:10:96:39:73:21:44:21:71:af: 20:78:6c:81:aa:0d:95:ee:e4:cd:e0:34:5d:f1:73:1d:b9:49: 33:a6:08:ad:8c:49:39:d2:7f:e6:e5:c6:03:46:13:60:f7:fd: 01:04:af:9d:15:65:62:2e:e8:88:67:d9:70:d5:31:7c:18:27: 54:2c:00:a3:2c:96:5a:a6:4e:7d:4b:33:f1:90:f0:cf:94:bd: e9:b1:f8:5f:58:6b:eb:d0:21:2f:1f:29:73:2d:eb:ca:81:e2: a6:92:f0:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUzF+l143el5BER2cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRjMjE2YzEtNTkyNC00YTY2LTkzNDYtYTFmMjE1ODAw Y2ViMB4XDTI0MDMxNDAxMDAyNVoXDTI0MDYxMjAxMDAyNVowLzEtMCsGA1UEAxMk NGMzY2RiZWYtMzU4ZS00NzBjLTliZjYtZGFhYzZmNjI1MDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouPhD8zKa3CroKL278NacMOLhcn2e/wUaLo0 bLxJP9mXUjW0IuQThQO4HlW1rsjXxo2WH9TDlcKTLyglPZ8ldBjwx679gPBwZINh seHw5X8pvrrh7y3T6ZwVuYyV+nBWaxghAVT+o9ZoJx0UTqhDxxIHfzOt2bFtX+SZ piD64jD83ixcx5eNe1/ldTpll+CsIa+sDK+EWInXtojxp4NAwYMcDZztCQyTF7x+ 1JI38OpsOBwOTf6RKOYyEuWO/7qsjYlcYrC54g4BBAZgcyOpYXb/NgVypTUPgJQH FrwbCoWxPh9nqmfZ7LVTqzDqEMreVqSl1uU5iczxjSPOlPNTkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJG8PJ4GU7wuMFa7rcELJGL6lqriMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNGMy MTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYyMTU4MDBjZWIvYjRhYmFmNTEtNDJlMi0z OTRkLTgwZTEtYmM2M2Y1NGMwZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDRjMjE2YzEtNTkyNC00YTY2LTkz NDYtYTFmMjE1ODAwY2ViLzA0YzIxNmMxLTU5MjQtNGE2Ni05MzQ2LWExZjIxNTgw MGNlYi5jcmwwHwYDVR0jBBgwFoAUmLhMbN09mwrXBph9YXSVqxVUBDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNGMyMTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYy MTU4MDBjZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2KpoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsnFBiVkeFPCldVb/sRffUSi8GFiX3cqFBjdN0mEDordOmxPFDJha6n zFIjwTWbEKAbbYg/zoVPenun+AjkcimJsTHw1usKIEKLmWmP8VHAQ/qYOA9Rq3Mb rElpHA5v57m5pKohXNMwqvN2CH1iPIHOago/CT0BiHhkpYZZbJv8FhrPw05r8419 keCc1ti9i4lomsYwnhq6yxCWOXMhRCFxryB4bIGqDZXu5M3gNF3xcx25STOmCK2M STnSf+blxgNGE2D3/QEEr50VZWIu6Ihn2XDVMXwYJ1QsAKMsllqmTn1LM/GQ8M+U vemx+F9Ya+vQIS8fKXMt68qB4qaS8Kk= -----END CERTIFICATE-----Generated at Sat May 4 15:05:22 2024 by rpki-client on console-fra.rpki-client.org