$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/8a8acdda-9292-36a3-b876-4a2667d678bc.roa File: 8a8acdda-9292-36a3-b876-4a2667d678bc.roa (raw, json) Hash identifier: ZXcCUrz3ez4q5lhygMS9tiFzrK3SDpFiBYHNy4TEagI= Subject key identifier: DA:B0:98:63:22:4B:A7:7A:E2:B6:6A:4C:B6:D0:F3:8A:5D:A5:5E:CB Certificate issuer: /CN=0db67e40-561b-4114-ad6b-0716593573be Certificate serial: 010D0C9F432858451FAAE77FF04D2FE530D3C240 Authority key identifier: 35:65:CA:70:E2:A5:75:5C:79:3E:8E:FF:F1:1C:9E:2D:63:A8:47:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/8a8acdda-9292-36a3-b876-4a2667d678bc.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 54702 IP address blocks: 128.254.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/0db67e40-561b-4114-ad6b-0716593573be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/0db67e40-561b-4114-ad6b-0716593573be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:aa:e7:7f:f0:4d:2f:e5:30:d3:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67e40-561b-4114-ad6b-0716593573be Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=ca442639-f2f4-43ef-89a9-5a693312eabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c2:b8:b8:93:18:66:16:18:45:c1:ea:8d:1e: 85:71:58:e5:61:2c:b7:46:d0:30:b0:2b:c1:15:da: cd:76:55:b0:81:01:1a:b3:f4:fe:94:17:76:be:17: e5:0a:6e:61:bb:c1:c8:94:ea:a6:a5:dc:e9:3a:db: 6a:7c:52:4c:bb:02:06:65:4b:bb:17:04:0e:a8:4b: 5b:3c:23:d5:b5:99:46:97:38:9b:82:5f:12:8d:31: 14:30:42:34:9a:79:2a:88:1f:35:ce:d7:62:a3:bc: ad:52:da:be:87:a6:1c:51:d3:99:a1:41:9a:fb:dc: 8e:e4:f1:18:e4:2d:5e:e7:24:62:b7:e0:47:9d:c9: a9:22:23:7b:d2:7f:b0:46:b2:a0:61:0c:3f:1b:04: 20:9a:04:fd:53:20:f0:ea:e8:66:d6:11:a3:e3:30: 9a:ad:f9:16:12:7a:c1:d0:d9:60:6e:d5:f5:67:6b: 1a:f8:34:ef:a5:ae:68:a7:66:c7:74:b4:cc:8c:f6: 97:7d:9e:98:df:e6:6b:95:8a:09:03:23:8a:ba:28: 7c:17:db:91:35:09:23:d6:70:d4:8e:5d:5b:eb:ab: f6:2f:4a:e1:f9:53:5c:c1:cc:0c:d8:53:c6:93:57: 05:de:62:89:82:f4:ea:a8:7d:fe:ee:cd:d2:98:1c: 37:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B0:98:63:22:4B:A7:7A:E2:B6:6A:4C:B6:D0:F3:8A:5D:A5:5E:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/8a8acdda-9292-36a3-b876-4a2667d678bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/0db67e40-561b-4114-ad6b-0716593573be.crl X509v3 Authority Key Identifier: keyid:35:65:CA:70:E2:A5:75:5C:79:3E:8E:FF:F1:1C:9E:2D:63:A8:47:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be.cer sbgp-ipAddrBlock: critical IPv4: 128.254.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:3b:22:16:e0:34:51:74:4c:e3:b3:f5:57:c8:40:a0:eb:49: a9:bd:8c:ba:c3:ef:b6:d9:28:1b:5c:6a:4b:6f:ff:ca:32:56: 87:31:7b:b7:84:c2:46:9b:fd:81:3d:1f:f0:ad:49:bf:dd:54: f9:9e:b1:24:33:98:be:9a:b2:4f:0c:b1:84:b1:69:7d:99:97: f7:a0:53:d4:9b:0a:f3:cc:a1:07:cb:be:fd:5a:3a:ff:de:cc: 43:c9:15:85:f7:75:b1:b9:d6:34:7f:08:0e:b0:77:93:f5:e8: c1:4b:b1:a2:ac:c6:ba:6a:d8:5f:bd:48:41:fe:5a:42:40:4f: 50:b6:96:10:92:a4:57:7a:de:fa:e3:21:72:81:82:51:8b:e3: 52:29:64:2f:1f:15:eb:17:dc:c8:fd:5f:7a:37:ff:21:2a:3e: 58:da:21:d2:9b:17:7e:04:d3:67:6f:5e:54:6f:07:77:1e:d1: 7c:d1:35:58:81:be:01:36:ee:7c:3a:16:82:45:00:d5:97:00: fb:9d:1c:06:a8:dd:7f:ee:bc:aa:0f:54:f4:03:5d:dd:9a:a0: d9:0b:4f:87:48:1c:94:ea:be:3e:d2:f0:18:67:ad:17:20:52: 16:0f:2d:e2:af:e1:4d:32:16:1b:bd:d2:af:a0:61:6c:a3:16: 04:8a:dd:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfqud/8E0v5TDTwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRiNjdlNDAtNTYxYi00MTE0LWFkNmItMDcxNjU5MzU3 M2JlMB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk Y2E0NDI2MzktZjJmNC00M2VmLTg5YTktNWE2OTMzMTJlYWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8K4uJMYZhYYRcHqjR6FcVjlYSy3RtAwsCvB FdrNdlWwgQEas/T+lBd2vhflCm5hu8HIlOqmpdzpOttqfFJMuwIGZUu7FwQOqEtb PCPVtZlGlzibgl8SjTEUMEI0mnkqiB81ztdio7ytUtq+h6YcUdOZoUGa+9yO5PEY 5C1e5yRit+BHncmpIiN70n+wRrKgYQw/GwQgmgT9UyDw6uhm1hGj4zCarfkWEnrB 0NlgbtX1Z2sa+DTvpa5op2bHdLTMjPaXfZ6Y3+ZrlYoJAyOKuih8F9uRNQkj1nDU jl1b66v2L0rh+VNcwcwM2FPGk1cF3mKJgvTqqH3+7s3SmBw34wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqwmGMiS6d64rZqTLbQ84pdpV7LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wZGI2 N2U0MC01NjFiLTQxMTQtYWQ2Yi0wNzE2NTkzNTczYmUvOGE4YWNkZGEtOTI5Mi0z NmEzLWI4NzYtNGEyNjY3ZDY3OGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGRiNjdlNDAtNTYxYi00MTE0LWFk NmItMDcxNjU5MzU3M2JlLzBkYjY3ZTQwLTU2MWItNDExNC1hZDZiLTA3MTY1OTM1 NzNiZS5jcmwwHwYDVR0jBBgwFoAUNWXKcOKldVx5Po7/8RyeLWOoR9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wZGI2N2U0MC01NjFiLTQxMTQtYWQ2Yi0wNzE2 NTkzNTczYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgP6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABk7IhbgNFF0TOOz9VfIQKDrSam9jLrD77bZKBtcaktv/8oyVocxe7eE wkab/YE9H/CtSb/dVPmesSQzmL6ask8MsYSxaX2Zl/egU9SbCvPMoQfLvv1aOv/e zEPJFYX3dbG51jR/CA6wd5P16MFLsaKsxrpq2F+9SEH+WkJAT1C2lhCSpFd63vrj IXKBglGL41IpZC8fFesX3Mj9X3o3/yEqPljaIdKbF34E02dvXlRvB3ce0XzRNViB vgE27nw6FoJFANWXAPudHAao3X/uvKoPVPQDXd2aoNkLT4dIHJTqvj7S8BhnrRcg UhYPLeKv4U0yFhu90q+gYWyjFgSK3bA= -----END CERTIFICATE-----Generated at Sat May 18 01:57:38 2024 by rpki-client on console-ams.rpki-client.org