$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/48ed3810-816a-3e90-8728-bcb8b396c1a9.roa File: 48ed3810-816a-3e90-8728-bcb8b396c1a9.roa (raw, json) Hash identifier: KhuaeNy4hFNfk6Z3dqX6EbD6eKiKmUXgx6Hnf/VIuRA= Subject key identifier: 43:F0:03:50:FF:C2:30:08:EB:83:2E:D6:DE:91:07:EB:A3:40:2D:B9 Certificate issuer: /CN=02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450 Certificate serial: 010D0C9F43285845B383671C00A27EBD53F4BB40 Authority key identifier: A2:42:64:E5:0B:6C:5C:DA:DE:37:D9:44:16:26:3D:B5:FC:75:92:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/48ed3810-816a-3e90-8728-bcb8b396c1a9.roa Signing time: Mon 29 Apr 2024 01:00:25 +0000 ROA not before: Mon 29 Apr 2024 01:00:25 +0000 ROA not after: Sun 28 Jul 2024 01:00:25 +0000 asID: 394688 IP address blocks: 192.152.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b3:83:67:1c:00:a2:7e:bd:53:f4:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450 Validity Not Before: Apr 29 01:00:25 2024 GMT Not After : Jul 28 01:00:25 2024 GMT Subject: CN=d47ac089-b8ef-45df-b437-f2739e2b9bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e2:60:69:8e:96:49:c1:42:8d:42:36:76:06: 05:cd:c4:e9:4c:30:48:44:4e:0c:65:a4:61:86:8b: 70:09:66:4f:3d:9b:59:69:56:a3:94:a4:99:a6:a9: 77:e7:fe:04:ce:c2:01:0b:0f:8c:e6:9d:89:43:a5: c9:8c:68:e2:1c:44:00:69:80:0b:52:cf:02:a5:4e: 79:06:4b:a4:d9:2d:ae:2a:df:71:99:e3:78:90:38: 4c:ba:7c:91:93:65:bd:f3:8a:02:5b:14:87:13:81: 49:60:55:3e:80:80:83:54:b5:52:b3:2c:fb:3b:2a: b7:89:25:e1:7d:bc:a8:19:21:45:bf:00:c8:94:f1: 1a:04:90:ec:ea:85:d5:97:42:84:d4:e7:ae:a2:2b: ee:62:4c:c3:f8:ed:6f:d7:ab:aa:2a:71:93:7b:96: 38:f5:47:c5:01:74:6a:a5:65:1b:93:c5:ec:5e:89: f8:76:db:be:e0:d9:d2:c5:4c:c3:03:f8:43:e7:ba: 15:9a:52:fb:2d:83:58:5c:c0:44:74:11:78:9e:ca: da:0e:23:45:b2:73:ba:cd:c8:5c:6f:9d:48:e2:06: 84:8c:5a:64:95:6e:74:82:f2:42:c2:92:a8:7e:9e: b2:0d:ec:de:e8:91:da:b1:47:24:ec:db:25:2a:85: b0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F0:03:50:FF:C2:30:08:EB:83:2E:D6:DE:91:07:EB:A3:40:2D:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/48ed3810-816a-3e90-8728-bcb8b396c1a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450.crl X509v3 Authority Key Identifier: keyid:A2:42:64:E5:0B:6C:5C:DA:DE:37:D9:44:16:26:3D:B5:FC:75:92:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450.cer sbgp-ipAddrBlock: critical IPv4: 192.152.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:23:35:08:66:c6:82:15:6b:76:e3:13:c0:4f:78:4f:bd:6d: 5d:de:d2:2e:a3:92:88:f8:de:04:b7:cb:39:e0:3d:ca:23:2f: f3:50:39:89:5f:14:d9:e3:e6:fd:d2:99:e5:1d:d7:31:eb:b0: 61:9d:c2:68:f3:e0:d3:bd:c3:67:b9:28:c5:27:d8:0c:05:2e: b2:69:c6:e4:90:76:5e:06:54:31:ce:2e:24:fa:5e:c8:04:88: 7e:ff:01:f2:af:5b:d6:4c:b9:f2:e7:5b:e2:32:51:9a:9f:a3: 2a:b8:1f:db:2d:45:cd:6a:f3:ed:e6:5c:be:6d:a6:57:bf:bd: be:26:12:db:e9:09:ba:2b:c3:fa:b0:80:e6:8c:99:2e:14:4d: 3f:75:d8:c7:ff:19:8f:f4:12:b3:ef:78:bf:ae:d4:7b:fa:ae: 1d:16:ec:ad:d6:b0:66:58:02:22:cb:dd:af:02:93:23:48:50: 16:e7:a7:d3:e5:f8:85:64:27:3b:a1:af:e3:13:fc:43:7a:05: 87:76:5e:ff:f0:ab:e9:c8:cd:64:a4:47:c5:38:2c:88:63:89: 02:2f:12:41:60:50:55:15:1e:25:7b:62:7a:8a:31:ce:21:52: ec:8c:7c:49:83:22:af:de:8e:43:bb:d1:62:aa:7d:14:88:a4: af:a5:18:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWzg2ccAKJ+vVP0u0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJkYjQxYzYtZjhlZi00ZWUyLWI2ZGMtYTYxYmEwZmI5 NDUwMB4XDTI0MDQyOTAxMDAyNVoXDTI0MDcyODAxMDAyNVowLzEtMCsGA1UEAxMk ZDQ3YWMwODktYjhlZi00NWRmLWI0MzctZjI3MzllMmI5YmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuJgaY6WScFCjUI2dgYFzcTpTDBIRE4MZaRh hotwCWZPPZtZaVajlKSZpql35/4EzsIBCw+M5p2JQ6XJjGjiHEQAaYALUs8CpU55 Bkuk2S2uKt9xmeN4kDhMunyRk2W984oCWxSHE4FJYFU+gICDVLVSsyz7Oyq3iSXh fbyoGSFFvwDIlPEaBJDs6oXVl0KE1OeuoivuYkzD+O1v16uqKnGTe5Y49UfFAXRq pWUbk8XsXon4dtu+4NnSxUzDA/hD57oVmlL7LYNYXMBEdBF4nsraDiNFsnO6zchc b51I4gaEjFpklW50gvJCwpKofp6yDeze6JHasUck7NslKoWwbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPwA1D/wjAI64Mu1t6RB+ujQC25MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wMmRi NDFjNi1mOGVmLTRlZTItYjZkYy1hNjFiYTBmYjk0NTAvNDhlZDM4MTAtODE2YS0z ZTkwLTg3MjgtYmNiOGIzOTZjMWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDJkYjQxYzYtZjhlZi00ZWUyLWI2 ZGMtYTYxYmEwZmI5NDUwLzAyZGI0MWM2LWY4ZWYtNGVlMi1iNmRjLWE2MWJhMGZi OTQ1MC5jcmwwHwYDVR0jBBgwFoAUokJk5QtsXNreN9lEFiY9tfx1koswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wMmRiNDFjNi1mOGVmLTRlZTItYjZkYy1hNjFi YTBmYjk0NTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJjzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcjNQhmxoIVa3bjE8BPeE+9bV3e0i6jkoj43gS3yzngPcojL/NQOYlf FNnj5v3SmeUd1zHrsGGdwmjz4NO9w2e5KMUn2AwFLrJpxuSQdl4GVDHOLiT6XsgE iH7/AfKvW9ZMufLnW+IyUZqfoyq4H9stRc1q8+3mXL5tple/vb4mEtvpCborw/qw gOaMmS4UTT912Mf/GY/0ErPveL+u1Hv6rh0W7K3WsGZYAiLL3a8CkyNIUBbnp9Pl +IVkJzuhr+MT/EN6BYd2Xv/wq+nIzWSkR8U4LIhjiQIvEkFgUFUVHiV7YnqKMc4h UuyMfEmDIq/ejkO70WKqfRSIpK+lGJA= -----END CERTIFICATE-----Generated at Thu May 23 20:11:27 2024 by rpki-client on console-ams.rpki-client.org