$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/33b25462-3f2f-33b4-ab16-bb27bccd452c.roa File: 33b25462-3f2f-33b4-ab16-bb27bccd452c.roa (raw, json) Hash identifier: ANKL4bJYI106F9kGusDfT/7mBzW6TkKPx4CQ3r6fExU= Subject key identifier: A2:2C:09:73:B6:95:76:D4:17:55:00:B6:B9:62:B9:FE:EB:B5:E2:CE Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F43285845453D6B1E11C50DFAC9688100 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/33b25462-3f2f-33b4-ab16-bb27bccd452c.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 21949 IP address blocks: 198.22.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:6b:1e:11:c5:0d:fa:c9:68:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=708051d0-373d-40fb-a9b9-160352062254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:59:a2:c7:60:2c:d6:f3:ee:71:af:e1:71:73: d1:45:0d:50:68:5b:70:8d:ba:59:9b:d4:58:ce:f8: 86:7c:98:2d:c6:9f:d6:b2:fd:a3:e8:53:0a:32:82: e9:d1:e1:c7:5e:f1:4d:7a:93:2f:da:53:c1:5a:bb: 4c:19:38:e8:a8:b7:68:2e:66:c6:4c:d0:68:ce:95: 00:bb:d4:27:0d:5f:95:4d:8c:8f:81:1b:fc:98:69: 25:ea:6f:0e:1a:ec:e3:6e:cd:a0:0f:66:bf:e3:9c: 2e:1d:a6:65:de:34:41:27:91:fd:32:31:0c:c3:19: c9:ef:38:20:8e:23:d0:70:d1:8b:44:a3:c6:e0:42: 3c:06:91:33:d2:bc:7e:86:01:aa:79:18:79:44:3d: 7b:6c:94:b9:67:fa:1e:e1:c7:e0:2b:ec:e0:c7:06: 1f:e8:a3:0c:62:09:4a:95:b5:f9:e6:81:a6:c2:d0: a5:c7:a6:6a:2a:2d:35:1d:f2:f3:a9:26:3e:ea:16: 15:80:b5:ec:53:c9:ce:c4:09:33:76:a3:ba:f7:e3: 5f:0b:a3:1a:88:6f:5d:f3:0f:6e:f9:25:c8:07:e8: 04:1e:58:69:65:34:2e:03:b2:7c:45:6a:dc:85:30: 1f:f0:b6:11:85:32:dd:ba:5d:e0:bf:76:8a:45:da: 06:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2C:09:73:B6:95:76:D4:17:55:00:B6:B9:62:B9:FE:EB:B5:E2:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/33b25462-3f2f-33b4-ab16-bb27bccd452c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 198.22.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:a5:03:28:1f:fc:3b:71:56:b4:03:8c:55:3b:80:eb:a6:82: 1c:e5:86:12:da:a9:f4:18:5b:11:6f:fc:54:7a:dc:c5:3e:61: 9e:34:b1:5c:1d:f5:cc:fb:61:43:86:fa:da:3d:28:6a:19:3e: 7d:ad:56:ec:2b:b1:83:f6:b6:a7:61:fe:55:d3:c5:20:3b:91: 93:8a:ea:ae:b4:d9:4c:00:2d:ad:c1:6d:5d:4f:4c:63:fe:40: a4:e5:a6:29:82:f2:96:04:a7:9b:07:bb:68:38:c5:7b:68:54: 12:ec:d2:0f:06:39:0a:eb:55:27:f6:53:1b:29:a4:e2:c9:af: cb:bf:8b:dc:75:37:87:78:a7:10:4b:48:bb:d6:de:e3:f4:33: e1:cc:b5:2a:89:d4:7a:ca:35:87:ad:84:b8:2b:8c:74:42:80: 00:ef:7f:59:49:4e:fe:b4:9c:6a:95:7f:de:05:66:fa:ad:6c: d5:fe:4a:16:7b:63:54:09:48:b9:97:9e:d8:c5:f6:28:fa:3f: 62:bd:8b:f6:d7:da:9d:f8:3e:c5:71:bc:8d:39:a1:9f:58:ba: 1d:c2:6d:c3:ec:df:db:4c:2c:89:08:37:89:ad:64:6b:d4:9f: b7:4a:52:3a:50:7a:df:f6:01:73:ea:e1:ae:56:17:90:19:23: 6a:85:6a:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPWseEcUN+slogQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk NzA4MDUxZDAtMzczZC00MGZiLWE5YjktMTYwMzUyMDYyMjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lmix2As1vPuca/hcXPRRQ1QaFtwjbpZm9RY zviGfJgtxp/Wsv2j6FMKMoLp0eHHXvFNepMv2lPBWrtMGTjoqLdoLmbGTNBozpUA u9QnDV+VTYyPgRv8mGkl6m8OGuzjbs2gD2a/45wuHaZl3jRBJ5H9MjEMwxnJ7zgg jiPQcNGLRKPG4EI8BpEz0rx+hgGqeRh5RD17bJS5Z/oe4cfgK+zgxwYf6KMMYglK lbX55oGmwtClx6ZqKi01HfLzqSY+6hYVgLXsU8nOxAkzdqO69+NfC6MaiG9d8w9u +SXIB+gEHlhpZTQuA7J8RWrchTAf8LYRhTLdul3gv3aKRdoGEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIsCXO2lXbUF1UAtrliuf7rteLOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvMzNiMjU0NjItM2YyZi0z M2I0LWFiMTYtYmIyN2JjY2Q0NTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhbhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOlAygf/DtxVrQDjFU7gOumghzlhhLaqfQYWxFv/FR63MU+YZ40sVwd 9cz7YUOG+to9KGoZPn2tVuwrsYP2tqdh/lXTxSA7kZOK6q602UwALa3BbV1PTGP+ QKTlpimC8pYEp5sHu2g4xXtoVBLs0g8GOQrrVSf2UxsppOLJr8u/i9x1N4d4pxBL SLvW3uP0M+HMtSqJ1HrKNYethLgrjHRCgADvf1lJTv60nGqVf94FZvqtbNX+ShZ7 Y1QJSLmXntjF9ij6P2K9i/bX2p34PsVxvI05oZ9Yuh3CbcPs39tMLIkIN4mtZGvU n7dKUjpQet/2AXPq4a5WF5AZI2qFalU= -----END CERTIFICATE-----Generated at Sat May 18 16:09:07 2024 by rpki-client on console-ams.rpki-client.org