$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/880caa1d-47af-334b-8051-595434b22264.roa File: 880caa1d-47af-334b-8051-595434b22264.roa (raw, json) Hash identifier: ATyVHZOUZb0HUIUQf+0lQzWuHNy0mYjXB0D8+j6MtRg= Subject key identifier: A6:5E:C5:33:2D:70:47:5B:BD:11:E0:1F:E3:40:75:42:F5:8B:6E:23 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F43285845B38365EBE6E4DE4F5FE4B180 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/880caa1d-47af-334b-8051-595434b22264.roa Signing time: Mon 29 Apr 2024 01:00:25 +0000 ROA not before: Mon 29 Apr 2024 01:00:25 +0000 ROA not after: Sun 28 Jul 2024 01:00:25 +0000 asID: 14618 IP address blocks: 158.115.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b3:83:65:eb:e6:e4:de:4f:5f:e4:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Apr 29 01:00:25 2024 GMT Not After : Jul 28 01:00:25 2024 GMT Subject: CN=ee7a3265-7304-43a4-b9f8-e992dbd9b50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4e:85:96:4e:d9:f6:2a:41:b9:79:1e:96:47: 77:e4:42:cc:18:99:5b:56:83:2e:a0:49:43:b3:7a: 80:e5:aa:c6:ee:9c:cc:85:f1:45:44:9a:33:64:58: a2:1d:39:6f:17:0e:1a:15:99:03:fe:ad:66:bf:30: 1d:45:32:de:dc:36:fa:55:33:b6:49:58:93:44:48: b4:18:f5:64:22:76:17:3a:29:3d:d6:f8:9c:9d:3d: 82:6a:8c:4d:7f:d4:a1:6f:4d:fd:41:c9:25:3d:18: 7e:29:09:e4:35:38:c4:42:47:77:39:61:d0:53:fa: 9b:67:76:76:b9:86:11:ac:15:3f:ff:39:17:57:44: 76:b6:b6:c7:f9:75:15:fe:da:a9:0e:c2:5e:6e:42: 92:05:b8:b3:c4:80:7b:5c:d3:23:f3:c5:83:f5:e2: 31:56:d5:d1:86:95:95:34:ff:a0:8a:2c:f3:93:a8: 75:dd:84:8e:8e:e3:e8:12:9e:3f:be:e1:48:3c:3b: d4:0a:9c:e6:76:4d:fc:d4:c9:7f:50:4e:2d:9a:94: b9:62:6c:b8:17:84:d7:23:65:65:3b:c0:a9:1c:fe: be:66:e6:07:86:38:4d:42:b1:96:59:69:1b:21:c2: a0:0d:80:bf:ca:b4:73:96:7d:92:7d:12:7c:8c:47: 5b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5E:C5:33:2D:70:47:5B:BD:11:E0:1F:E3:40:75:42:F5:8B:6E:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/880caa1d-47af-334b-8051-595434b22264.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:94:f9:f3:82:5f:de:4a:68:58:56:0a:e0:51:e0:47:b5:c4: 89:45:24:e3:a8:13:45:53:3a:1a:63:9b:3f:61:0c:ee:53:1b: 99:c3:de:eb:23:ac:fc:2f:10:b3:ad:79:11:59:f5:a2:db:c9: 00:d6:7b:ef:2c:9e:a2:28:2e:de:5e:f8:f7:41:37:c5:36:f1: b0:71:ac:8a:72:d6:4d:5c:a2:a6:4c:ea:42:24:41:b3:ea:e6: 24:f9:f1:46:a2:8d:fe:83:17:39:4d:b3:aa:2d:ec:16:bf:8a: 9a:9a:82:e4:e4:88:91:6c:a6:95:45:41:90:c9:03:5a:33:11: 56:db:ad:50:6f:3f:9e:b1:67:d9:56:61:f9:ed:cb:6e:09:72: 7a:d7:09:76:b2:9d:d8:19:37:c2:92:7b:b3:e7:ea:a2:9d:d0: af:90:8d:d7:4c:7f:f6:d7:6e:31:ce:b0:6b:31:dc:fc:81:1c: cd:d3:92:41:c2:29:87:c3:b6:4c:10:dd:cc:d0:8c:79:fa:33: 3b:0d:66:7d:0e:7e:a2:d5:a5:24:47:75:52:8b:47:18:d2:d9: 39:75:21:bb:85:fb:60:d9:37:83:33:ea:41:fd:cb:16:ab:44: 44:4c:65:a0:64:8f:43:d8:dd:e7:85:76:40:4b:ce:8f:61:b1: f1:6f:57:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWzg2Xr5uTeT1/ksYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI0MDQyOTAxMDAyNVoXDTI0MDcyODAxMDAyNVowLzEtMCsGA1UEAxMk ZWU3YTMyNjUtNzMwNC00M2E0LWI5ZjgtZTk5MmRiZDliNTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU6Flk7Z9ipBuXkelkd35ELMGJlbVoMuoElD s3qA5arG7pzMhfFFRJozZFiiHTlvFw4aFZkD/q1mvzAdRTLe3Db6VTO2SViTREi0 GPVkInYXOik91vicnT2CaoxNf9Shb039QcklPRh+KQnkNTjEQkd3OWHQU/qbZ3Z2 uYYRrBU//zkXV0R2trbH+XUV/tqpDsJebkKSBbizxIB7XNMj88WD9eIxVtXRhpWV NP+giizzk6h13YSOjuPoEp4/vuFIPDvUCpzmdk381Ml/UE4tmpS5Ymy4F4TXI2Vl O8CpHP6+ZuYHhjhNQrGWWWkbIcKgDYC/yrRzln2SfRJ8jEdb8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZexTMtcEdbvRHgH+NAdUL1i24jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvODgwY2FhMWQtNDdhZi0z MzRiLTgwNTEtNTk1NDM0YjIyMjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnONMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqU+fOCX95KaFhWCuBR4Ee1xIlFJOOoE0VTOhpjmz9hDO5TG5nD3usj rPwvELOteRFZ9aLbyQDWe+8snqIoLt5e+PdBN8U28bBxrIpy1k1coqZM6kIkQbPq 5iT58Uaijf6DFzlNs6ot7Ba/ipqaguTkiJFsppVFQZDJA1ozEVbbrVBvP56xZ9lW Yfnty24JcnrXCXayndgZN8KSe7Pn6qKd0K+QjddMf/bXbjHOsGsx3PyBHM3TkkHC KYfDtkwQ3czQjHn6MzsNZn0OfqLVpSRHdVKLRxjS2Tl1IbuF+2DZN4Mz6kH9yxar RERMZaBkj0PY3eeFdkBLzo9hsfFvV8g= -----END CERTIFICATE-----Generated at Sun May 5 15:32:38 2024 by rpki-client on console-fra.rpki-client.org