$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/c08f5a86-f15c-34e1-8512-7fb349c6712f.roa File: c08f5a86-f15c-34e1-8512-7fb349c6712f.roa (raw, json) Hash identifier: lM+I3eX5EOfhAbO3tfE62NavYfG6hngmYIcBusXc3NY= Subject key identifier: B4:FF:9D:69:1F:CD:77:EF:58:DF:AD:90:EF:60:D3:83:C4:46:84:FF Certificate issuer: /CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615 Certificate serial: 010D0C9F43285841F32800773111108AE2AC4D80 Authority key identifier: CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/c08f5a86-f15c-34e1-8512-7fb349c6712f.roa Signing time: Sun 21 May 2023 01:00:16 +0000 ROA not before: Sun 21 May 2023 01:00:16 +0000 ROA not after: Sat 19 Aug 2023 01:00:16 +0000 asID: 398123 IP address blocks: 161.38.188.0/23 maxlen: 24 2620:13d:e002::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 May 2023 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:f3:28:00:77:31:11:10:8a:e2:ac:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615 Validity Not Before: May 21 01:00:16 2023 GMT Not After : Aug 19 01:00:16 2023 GMT Subject: CN=a7a51afb-df69-418c-b6cb-2c8f2a23d966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6c:3a:9c:86:fc:81:17:4f:e7:94:71:61:3f: 8e:0c:6e:d4:f4:b0:1a:bd:1f:67:57:11:c0:a3:23: 34:f7:ab:99:08:24:76:37:10:bd:71:44:ce:11:6a: e3:95:e8:12:62:23:2f:11:75:f3:f8:3c:38:14:86: 82:4f:80:cb:db:4f:85:c9:c3:6d:8d:f0:2c:dc:ff: d8:75:00:c1:86:85:70:e1:67:94:1d:4d:0b:14:28: cc:69:56:f2:81:f9:98:52:7c:65:66:e9:c3:33:08: 05:b9:30:08:f5:6d:2c:50:b4:5f:3e:f9:e7:ec:96: 68:f0:11:30:78:79:ac:95:12:c9:ee:55:f0:af:e2: 23:08:d6:5a:df:ed:e9:48:50:32:86:83:31:51:7b: 69:99:da:9d:ee:3e:05:ad:ef:dd:c2:ea:7b:8e:37: 03:a7:53:6b:3a:87:28:cf:c6:65:ed:36:f6:89:d4: 3e:51:a0:37:10:fe:21:6e:46:13:80:87:db:81:9c: 32:bd:41:00:05:96:ca:70:7a:62:61:41:08:13:0c: dc:a8:8c:b6:7f:6c:0c:e4:3d:47:4b:84:17:df:55: 7b:99:62:1c:84:b9:08:03:d2:81:b8:ca:2b:de:d4: 4a:f3:f9:b0:e8:f2:92:53:5a:60:aa:02:60:cb:5e: a5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FF:9D:69:1F:CD:77:EF:58:DF:AD:90:EF:60:D3:83:C4:46:84:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/c08f5a86-f15c-34e1-8512-7fb349c6712f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl X509v3 Authority Key Identifier: keyid:CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer sbgp-ipAddrBlock: critical IPv4: 161.38.188.0/23 IPv6: 2620:13d:e002::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:c9:c5:95:91:9c:fa:e8:c9:78:88:c4:5f:74:e4:2c:03:9a: d3:ef:18:7d:a3:59:a7:5d:93:10:29:11:f3:b6:8b:94:08:b0: bf:51:63:89:11:7b:77:41:62:d1:41:49:5f:7c:e2:d7:2b:2e: 35:16:ec:0a:3f:bb:9e:e4:54:6c:5b:78:09:a1:9b:7e:46:31: e0:e4:c6:99:52:f5:15:81:22:ce:71:46:d3:fe:5e:d2:e6:1c: 6f:73:41:53:91:24:cd:8c:f1:7e:2f:c0:78:04:ac:e6:98:e5: 26:9e:28:ae:53:ba:be:ba:6d:20:bb:28:01:15:cf:fb:d8:89: 48:00:b4:77:3b:1e:48:de:20:0f:65:a9:0f:74:c1:5a:75:e9: 15:08:f0:59:bd:92:dd:37:df:7e:2c:bc:1b:f1:73:16:ce:0a: 10:45:36:fb:0b:fd:2b:9d:8e:5a:5f:fe:ac:2a:45:4f:6a:5c: 3b:6e:aa:d2:64:eb:02:cc:e4:9d:83:89:68:e7:7a:3e:c4:05: 75:8a:12:c4:87:31:2e:0e:a5:b4:e9:5e:1f:8f:26:23:c2:79: 27:e7:2b:46:2c:b3:0d:4c:53:98:21:87:59:10:ec:8c:bb:28: f2:87:ef:1f:5a:a8:4f:9b:36:13:34:20:a5:d0:f0:0b:e5:c5: 24:48:9c:cb -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEHzKAB3MREQiuKsTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU4ZjI3OTctYjZmYS00YzQ5LWEzZTItODExZDBjNDg0 NjE1MB4XDTIzMDUyMTAxMDAxNloXDTIzMDgxOTAxMDAxNlowLzEtMCsGA1UEAxMk YTdhNTFhZmItZGY2OS00MThjLWI2Y2ItMmM4ZjJhMjNkOTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWw6nIb8gRdP55RxYT+ODG7U9LAavR9nVxHA oyM096uZCCR2NxC9cUTOEWrjlegSYiMvEXXz+Dw4FIaCT4DL20+FycNtjfAs3P/Y dQDBhoVw4WeUHU0LFCjMaVbygfmYUnxlZunDMwgFuTAI9W0sULRfPvnn7JZo8BEw eHmslRLJ7lXwr+IjCNZa3+3pSFAyhoMxUXtpmdqd7j4Fre/dwup7jjcDp1NrOoco z8Zl7Tb2idQ+UaA3EP4hbkYTgIfbgZwyvUEABZbKcHpiYUEIEwzcqIy2f2wM5D1H S4QX31V7mWIchLkIA9KBuMor3tRK8/mw6PKSU1pgqgJgy16lSwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFLT/nWkfzXfvWN+tkO9g04PERoT/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZThm Mjc5Ny1iNmZhLTRjNDktYTNlMi04MTFkMGM0ODQ2MTUvYzA4ZjVhODYtZjE1Yy0z NGUxLTg1MTItN2ZiMzQ5YzY3MTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWU4ZjI3OTctYjZmYS00YzQ5LWEz ZTItODExZDBjNDg0NjE1L2FlOGYyNzk3LWI2ZmEtNGM0OS1hM2UyLTgxMWQwYzQ4 NDYxNS5jcmwwHwYDVR0jBBgwFoAUz7ik/uhMqXTUbgBNZMs+DoEvxugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZThmMjc5Ny1iNmZhLTRjNDktYTNlMi04MTFk MGM0ODQ2MTUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBoSa8MA8E AgACMAkDBwEmIAE94AIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA0MnFlZGc+ujJeIjEX3TkLAOa0+8YfaNZ p12TECkR87aLlAiwv1FjiRF7d0Fi0UFJX3zi1ysuNRbsCj+7nuRUbFt4CaGbfkYx 4OTGmVL1FYEiznFG0/5e0uYcb3NBU5EkzYzxfi/AeASs5pjlJp4orlO6vrptILso ARXP+9iJSAC0dzseSN4gD2WpD3TBWnXpFQjwWb2S3Tfffiy8G/FzFs4KEEU2+wv9 K52OWl/+rCpFT2pcO26q0mTrAszknYOJaOd6PsQFdYoSxIcxLg6ltOleH48mI8J5 J+crRiyzDUxTmCGHWRDsjLso8ofvH1qoT5s2EzQgpdDwC+XFJEicyw== -----END CERTIFICATE-----Generated at Sun May 21 01:42:13 2023 by rpki-client on console-fra.rpki-client.org