$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/cafabcb4-1733-380b-a238-a258e12b6734.roa File: cafabcb4-1733-380b-a238-a258e12b6734.roa (raw, json) Hash identifier: 2g2Vg389k9qb7Hb4cCEFQAnoZXnLWHmxnXUA0XOoNw0= Subject key identifier: B8:B9:A8:76:A7:8A:FB:DD:38:94:69:DC:7C:52:69:89:7B:D2:0D:E5 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F43285844F9FAB9900DC49A245BEC0F00 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/cafabcb4-1733-380b-a238-a258e12b6734.roa Signing time: Thu 22 Feb 2024 14:00:30 +0000 ROA not before: Thu 22 Feb 2024 14:00:30 +0000 ROA not after: Wed 22 May 2024 13:00:30 +0000 asID: 16509 IP address blocks: 192.156.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f9:fa:b9:90:0d:c4:9a:24:5b:ec:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Feb 22 14:00:30 2024 GMT Not After : May 22 13:00:30 2024 GMT Subject: CN=37b18281-0638-41d2-ae04-2f0c9574739e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bf:df:35:7d:06:34:be:43:32:c0:03:8e:12: 11:75:dd:6c:ce:b1:ee:35:1d:29:62:dd:bf:9c:1e: ac:3e:7f:ad:ea:89:0c:f7:07:ed:f6:94:9f:e2:84: 9c:80:f3:d7:eb:eb:0a:fc:79:fe:6c:6d:07:0c:05: ed:07:1e:78:11:61:67:3f:4a:58:f3:12:ee:54:69: d9:55:f3:9c:aa:78:43:05:5e:ab:47:9f:29:83:f2: 52:9b:5d:3b:78:fa:3b:20:55:8d:6a:a2:38:3d:78: 18:34:57:90:1d:75:22:d0:90:c6:ca:af:e6:e5:2a: 5b:e3:40:ca:06:bf:e4:e5:1e:84:94:d6:0a:2f:3b: d6:10:3b:ee:a8:9e:61:78:d8:c4:32:79:21:bf:b5: 39:98:fd:cd:e8:75:2b:66:82:30:85:7b:eb:2e:93: ea:94:ba:56:44:34:f5:d1:14:1c:6c:bd:57:34:17: 35:44:aa:42:fd:e6:ee:e1:e2:de:9c:92:31:3d:57: b4:c8:0a:f7:e9:9a:db:ba:a7:2c:9b:ce:37:5a:d4: 18:b1:85:1e:d4:90:bc:99:ad:f0:00:04:3d:c2:61: bd:ef:f3:d4:46:22:9a:e3:95:57:0f:39:16:03:f6: f6:b9:eb:07:86:98:8d:d4:17:ad:8a:ad:91:79:13: 58:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B9:A8:76:A7:8A:FB:DD:38:94:69:DC:7C:52:69:89:7B:D2:0D:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/cafabcb4-1733-380b-a238-a258e12b6734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 192.156.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:89:f3:02:1e:8e:e2:76:1c:66:0d:60:9c:df:16:cf:3a:fa: 4d:65:2f:bc:98:e9:e0:be:21:46:74:00:96:93:ed:15:f7:50: fb:98:05:67:7c:20:2a:f0:1f:30:3b:0e:51:1c:80:7f:58:88: 68:0e:7a:f7:02:95:1a:93:44:63:c6:ad:49:e0:71:bf:4e:95: 4b:84:2b:0d:13:3c:5b:92:ef:4d:ea:3c:06:e8:cf:62:5e:63: 74:a4:f1:a7:66:94:c6:36:5e:71:06:5f:09:2e:c1:34:25:4f: ae:53:8f:d6:82:55:56:48:41:ad:1d:5c:79:ca:c3:d8:21:c8: d3:2c:db:b2:bf:ce:00:93:29:d3:22:a6:f9:59:92:36:a1:8e: 6c:06:23:6c:95:4d:56:d5:6b:de:52:3a:ee:d2:6a:c7:fa:09: e9:43:c5:31:a0:80:f1:37:93:0e:fc:b8:53:ab:a1:26:f0:bc: b9:76:03:4d:ac:27:34:56:2a:39:8f:b6:86:e9:69:46:f9:7d: 71:a9:4e:c8:c5:40:1a:a5:2a:5e:42:2f:ae:dd:20:ef:cd:65: aa:bc:c7:09:0c:6b:58:95:62:78:5f:92:ea:2c:2a:85:54:8d: ca:c5:a2:3b:b4:bc:89:80:7b:58:01:f0:8c:0c:e6:bf:d0:45: 34:cd:76:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET5+rmQDcSaJFvsDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI0MDIyMjE0MDAzMFoXDTI0MDUyMjEzMDAzMFowLzEtMCsGA1UEAxMk MzdiMTgyODEtMDYzOC00MWQyLWFlMDQtMmYwYzk1NzQ3MzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr/fNX0GNL5DMsADjhIRdd1szrHuNR0pYt2/ nB6sPn+t6okM9wft9pSf4oScgPPX6+sK/Hn+bG0HDAXtBx54EWFnP0pY8xLuVGnZ VfOcqnhDBV6rR58pg/JSm107ePo7IFWNaqI4PXgYNFeQHXUi0JDGyq/m5Spb40DK Br/k5R6ElNYKLzvWEDvuqJ5heNjEMnkhv7U5mP3N6HUrZoIwhXvrLpPqlLpWRDT1 0RQcbL1XNBc1RKpC/ebu4eLenJIxPVe0yAr36Zrbuqcsm843WtQYsYUe1JC8ma3w AAQ9wmG97/PURiKa45VXDzkWA/b2uesHhpiN1Betiq2ReRNYgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLi5qHanivvdOJRp3HxSaYl70g3lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvY2FmYWJjYjQtMTczMy0z ODBiLWEyMzgtYTI1OGUxMmI2NzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJzbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKJ8wIejuJ2HGYNYJzfFs86+k1lL7yY6eC+IUZ0AJaT7RX3UPuYBWd8 ICrwHzA7DlEcgH9YiGgOevcClRqTRGPGrUngcb9OlUuEKw0TPFuS703qPAboz2Je Y3Sk8admlMY2XnEGXwkuwTQlT65Tj9aCVVZIQa0dXHnKw9ghyNMs27K/zgCTKdMi pvlZkjahjmwGI2yVTVbVa95SOu7Sasf6CelDxTGggPE3kw78uFOroSbwvLl2A02s JzRWKjmPtobpaUb5fXGpTsjFQBqlKl5CL67dIO/NZaq8xwkMa1iVYnhfkuosKoVU jcrFoju0vImAe1gB8IwM5r/QRTTNdl0= -----END CERTIFICATE-----Generated at Thu May 2 15:01:38 2024 by rpki-client on console-ams.rpki-client.org