$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/38c17b7a-0754-332b-ad37-ba79d152d002.roa File: 38c17b7a-0754-332b-ad37-ba79d152d002.roa (raw, json) Hash identifier: ZzGmgYmXGL2YqFQDiq5kg5Emvmy71iRKBF4ugMDqpuU= Subject key identifier: 24:E6:89:97:FC:B7:1B:A6:3A:20:8A:09:57:C6:CE:10:98:36:5F:27 Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e Certificate serial: 010D0C9F43285845612852727AEBD72BF4C7AE80 Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/38c17b7a-0754-332b-ad37-ba79d152d002.roa Signing time: Sat 30 Mar 2024 13:00:38 +0000 ROA not before: Sat 30 Mar 2024 13:00:38 +0000 ROA not after: Fri 28 Jun 2024 13:00:38 +0000 asID: 399726 IP address blocks: 204.144.182.0/23 maxlen: 24 204.144.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:61:28:52:72:7a:eb:d7:2b:f4:c7:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e Validity Not Before: Mar 30 13:00:38 2024 GMT Not After : Jun 28 13:00:38 2024 GMT Subject: CN=06ae1a76-5d82-4e61-a891-b5eb4a2ed768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ac:9e:d8:7f:bc:9a:79:26:bd:b7:6a:72:fc: 75:d9:98:92:a4:9d:ab:21:12:b6:0c:68:1a:a9:50: 3d:0d:25:65:2a:b7:3a:6e:04:f8:b3:e4:ba:a3:86: 3f:4a:b9:38:55:23:8c:9e:62:2f:79:e3:57:83:37: 7f:66:28:88:42:5e:41:24:a0:c5:29:d2:68:0e:71: fa:21:b0:5c:98:9e:fb:a0:9e:2d:28:1a:8c:06:79: 22:b3:14:49:14:42:5e:f9:91:fc:a3:4e:5b:a2:29: 2a:4b:48:1f:44:94:29:10:cf:23:15:25:e4:f1:97: 01:7b:56:97:a0:17:e7:e0:00:30:63:9c:1c:58:77: 0c:53:7c:b9:7a:3e:2f:90:b9:7b:25:af:dd:31:1d: cb:9d:32:51:e1:08:71:85:ad:cd:8f:e2:7c:cd:ac: 9a:66:71:2e:1c:4d:9a:41:f4:26:05:1d:64:fe:64: f2:ca:36:28:47:85:23:98:d8:be:10:22:70:c0:a5: 9c:2a:ec:66:9c:68:f0:de:58:c8:dd:34:71:81:05: b6:49:fd:82:13:c0:ee:97:18:fa:5a:02:ab:d5:ee: dd:5d:00:e6:34:0d:2b:44:26:d1:b8:64:83:30:72: 09:c6:c8:17:cf:ed:1c:53:08:38:49:f4:bc:05:e9: 70:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E6:89:97:FC:B7:1B:A6:3A:20:8A:09:57:C6:CE:10:98:36:5F:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/38c17b7a-0754-332b-ad37-ba79d152d002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl X509v3 Authority Key Identifier: keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer sbgp-ipAddrBlock: critical IPv4: 204.144.180.0/24 204.144.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:71:2b:a1:e4:89:f7:26:41:81:9c:a3:e5:c0:26:82:8d:b8: ef:31:58:16:16:62:0a:16:01:a7:5d:76:9e:d5:ca:d7:49:54: 44:a8:3a:ea:30:75:a6:3f:bf:4b:c7:05:d9:6b:50:cf:40:d8: 0b:a4:dd:f0:65:60:23:3c:4d:28:c4:81:f7:7a:d2:86:3d:9c: ef:22:73:99:eb:95:90:a4:12:db:81:e5:dc:b8:62:fd:0c:0d: 7d:29:40:9d:c9:6b:48:e4:4f:71:be:dc:30:c4:66:32:3c:1f: 15:69:86:0a:6b:1d:0f:4e:30:4a:b4:e5:07:12:3d:df:68:99: 0f:f8:5c:98:e7:99:54:e8:04:fe:2a:f0:9d:24:28:d1:d6:55: 89:45:d3:eb:06:3d:a2:69:ca:1d:b0:c1:60:ba:ba:02:b4:d6: c0:4f:f2:3a:d4:9e:04:bb:34:32:3d:02:e8:8f:23:76:0f:5f: c2:fe:81:43:fe:3e:ff:a9:93:ad:3f:81:33:ec:67:2f:eb:b6: a8:28:b7:2b:39:98:63:d3:80:c7:fa:17:5d:2b:c1:c9:4a:c9: 4f:08:ab:16:fa:65:21:d9:95:c6:8c:2b:d3:9e:b3:d7:1b:64: be:2c:ba:a9:a1:f9:94:b1:1c:f4:ea:56:fe:e7:07:dc:d0:90: eb:24:75:d8 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEVhKFJyeuvXK/THroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNWFmMjAtODM4NS00NGQ0LTgxNWYtYmI4MzQ5N2Q0 YTBlMB4XDTI0MDMzMDEzMDAzOFoXDTI0MDYyODEzMDAzOFowLzEtMCsGA1UEAxMk MDZhZTFhNzYtNWQ4Mi00ZTYxLWE4OTEtYjVlYjRhMmVkNzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaye2H+8mnkmvbdqcvx12ZiSpJ2rIRK2DGga qVA9DSVlKrc6bgT4s+S6o4Y/Srk4VSOMnmIveeNXgzd/ZiiIQl5BJKDFKdJoDnH6 IbBcmJ77oJ4tKBqMBnkisxRJFEJe+ZH8o05boikqS0gfRJQpEM8jFSXk8ZcBe1aX oBfn4AAwY5wcWHcMU3y5ej4vkLl7Ja/dMR3LnTJR4Qhxha3Nj+J8zayaZnEuHE2a QfQmBR1k/mTyyjYoR4UjmNi+ECJwwKWcKuxmnGjw3ljI3TRxgQW2Sf2CE8Dulxj6 WgKr1e7dXQDmNA0rRCbRuGSDMHIJxsgXz+0cUwg4SfS8BelwuQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCTmiZf8txumOiCKCVfGzhCYNl8nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1 YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgzNDk3ZDRhMGUvMzhjMTdiN2EtMDc1NC0z MzJiLWFkMzctYmE3OWQxNTJkMDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFkNWFmMjAtODM4NS00NGQ0LTgx NWYtYmI4MzQ5N2Q0YTBlL2JhZDVhZjIwLTgzODUtNDRkNC04MTVmLWJiODM0OTdk NGEwZS5jcmwwHwYDVR0jBBgwFoAUEapw8wRQo6yCOXMUtq3WNdHdOZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgz NDk3ZDRhMGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzJC0AwQB zJC2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADBxK6HkifcmQYGco+XAJoKNuO8xWBYWYgoWAadddp7VytdJ VESoOuowdaY/v0vHBdlrUM9A2Auk3fBlYCM8TSjEgfd60oY9nO8ic5nrlZCkEtuB 5dy4Yv0MDX0pQJ3Ja0jkT3G+3DDEZjI8HxVphgprHQ9OMEq05QcSPd9omQ/4XJjn mVToBP4q8J0kKNHWVYlF0+sGPaJpyh2wwWC6ugK01sBP8jrUngS7NDI9AuiPI3YP X8L+gUP+Pv+pk60/gTPsZy/rtqgotys5mGPTgMf6F10rwclKyU8Iqxb6ZSHZlcaM K9Oes9cbZL4suqmh+ZSxHPTqVv7nB9zQkOskddg= -----END CERTIFICATE-----Generated at Sat May 18 01:45:57 2024 by rpki-client on console-ams.rpki-client.org