$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/f3a1ca03-2bbd-36fe-b0ce-7e9ff6101e86.roa File: f3a1ca03-2bbd-36fe-b0ce-7e9ff6101e86.roa (raw, json) Hash identifier: pNcFOewTfRCp4zqHJd9XrILMUuveIJuNu6d/7+62wpE= Subject key identifier: 7A:06:BC:AE:82:9A:C1:F3:A3:68:76:FC:DF:73:F2:31:BF:EF:0A:57 Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Certificate serial: 010D0C9F432858451A15915636B24373D2477080 Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/f3a1ca03-2bbd-36fe-b0ce-7e9ff6101e86.roa Signing time: Tue 05 Mar 2024 02:00:26 +0000 ROA not before: Tue 05 Mar 2024 02:00:26 +0000 ROA not after: Mon 03 Jun 2024 01:00:26 +0000 asID: 203 IP address blocks: 216.168.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1a:15:91:56:36:b2:43:73:d2:47:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Validity Not Before: Mar 5 02:00:26 2024 GMT Not After : Jun 3 01:00:26 2024 GMT Subject: CN=51abd4da-d4f1-408f-a9e8-a85379a8d168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8a:a6:6b:a1:b3:1e:65:09:a5:82:fb:28:65: 07:da:f5:42:73:e1:15:51:52:b2:a6:0a:52:c3:13: cc:16:be:73:aa:67:24:10:3b:02:62:4d:bb:3d:db: 10:fa:42:1a:e4:ee:03:ad:c9:93:66:e2:a3:5c:48: f7:0c:99:c2:ea:ff:af:f6:97:a3:be:01:50:75:55: c6:55:3d:6b:04:a8:26:d7:f0:3e:fc:0d:c4:35:0f: db:64:fd:f3:1a:d8:d1:16:3e:34:5f:7e:c1:24:5f: 17:45:93:a9:71:03:2b:63:ce:14:ec:3b:2c:a5:48: 24:5a:59:02:18:f9:62:d3:a1:2e:5b:e5:6a:3f:16: 60:94:fd:ca:c8:82:19:79:dc:ab:2b:0e:84:82:a5: 3f:7b:02:4e:ef:95:70:bd:a6:50:ef:15:b5:e3:6e: 0e:be:14:24:82:7c:8f:18:b4:36:dc:99:d0:b2:36: c4:e8:1b:00:67:c7:19:19:f7:2b:db:a0:aa:12:44: 97:78:70:85:c0:6f:cd:9b:5f:04:af:d6:61:6f:81: 60:87:92:a5:a6:d9:b8:6b:12:8f:96:ba:c2:51:4f: 7e:9b:cb:9a:a4:69:7c:91:77:41:fd:dc:bc:e7:bf: 55:f2:a1:57:9b:44:ae:aa:d9:8c:67:ab:45:06:44: 55:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:06:BC:AE:82:9A:C1:F3:A3:68:76:FC:DF:73:F2:31:BF:EF:0A:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/f3a1ca03-2bbd-36fe-b0ce-7e9ff6101e86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl X509v3 Authority Key Identifier: keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer sbgp-ipAddrBlock: critical IPv4: 216.168.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c3:2a:7b:e7:08:84:8d:c2:3f:00:9c:ee:bc:cb:3c:8a:fc: 1a:cd:a9:7b:12:3f:c9:17:5b:68:08:d0:c9:21:e7:ca:13:dd: 62:4a:42:d0:5a:59:f1:40:67:1c:8a:80:96:43:20:0f:35:e1: ce:a6:52:bc:e1:12:a3:b5:c0:8c:64:69:ff:47:b5:35:4a:72: 62:53:71:6c:35:f5:61:09:fe:50:14:9f:e5:fb:8c:f1:48:79: 74:f3:89:dc:f6:05:6e:99:fe:df:ed:04:46:38:fa:cb:f9:cc: dd:3b:e7:bd:7f:74:a2:02:22:bc:17:f2:ff:d5:b2:de:cd:d6: 28:40:21:37:cc:1e:a6:4f:78:bd:f6:af:18:d5:91:38:2d:5f: a0:80:c3:54:f5:60:e4:ea:db:6d:a4:bd:21:cd:b7:d2:10:a2: 49:ee:1f:7d:76:3d:f4:8c:45:1c:86:14:58:ed:d0:44:12:3b: 6f:7d:9d:62:e5:3c:4e:05:d1:63:32:34:80:34:e1:80:69:2d: 24:40:2f:6f:8c:10:56:6c:96:ea:52:4e:8f:62:0b:1e:56:ec: bd:eb:ed:a8:fe:de:3a:ab:c2:29:d0:ce:4b:6a:59:83:eb:40: 0c:ce:ee:71:a5:b0:23:5e:b4:11:77:83:7c:f6:09:64:09:38: de:77:dc:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUaFZFWNrJDc9JHcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm ZTE5MB4XDTI0MDMwNTAyMDAyNloXDTI0MDYwMzAxMDAyNlowLzEtMCsGA1UEAxMk NTFhYmQ0ZGEtZDRmMS00MDhmLWE5ZTgtYTg1Mzc5YThkMTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIqma6GzHmUJpYL7KGUH2vVCc+EVUVKypgpS wxPMFr5zqmckEDsCYk27PdsQ+kIa5O4DrcmTZuKjXEj3DJnC6v+v9pejvgFQdVXG VT1rBKgm1/A+/A3ENQ/bZP3zGtjRFj40X37BJF8XRZOpcQMrY84U7DsspUgkWlkC GPli06EuW+VqPxZglP3KyIIZedyrKw6EgqU/ewJO75VwvaZQ7xW1424OvhQkgnyP GLQ23JnQsjbE6BsAZ8cZGfcr26CqEkSXeHCFwG/Nm18Er9Zhb4Fgh5Klptm4axKP lrrCUU9+m8uapGl8kXdB/dy8579V8qFXm0SuqtmMZ6tFBkRVRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoGvK6CmsHzo2h2/N9z8jG/7wpXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvZjNhMWNhMDMtMmJiZC0z NmZlLWIwY2UtN2U5ZmY2MTAxZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3 MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5 NTZiZGZlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTDKnvnCISNwj8AnO68yzyK/BrNqXsSP8kXW2gI0Mkh58oT3WJKQtBa WfFAZxyKgJZDIA814c6mUrzhEqO1wIxkaf9HtTVKcmJTcWw19WEJ/lAUn+X7jPFI eXTzidz2BW6Z/t/tBEY4+sv5zN07571/dKICIrwX8v/Vst7N1ihAITfMHqZPeL32 rxjVkTgtX6CAw1T1YOTq222kvSHNt9IQoknuH312PfSMRRyGFFjt0EQSO299nWLl PE4F0WMyNIA04YBpLSRAL2+MEFZslupSTo9iCx5W7L3r7aj+3jqrwinQzktqWYPr QAzO7nGlsCNetBF3g3z2CWQJON533IA= -----END CERTIFICATE-----Generated at Mon May 13 01:43:45 2024 by rpki-client on console-ams.rpki-client.org