$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa File: f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa (raw, json) Hash identifier: hMbWYU6vAFBx64qvyizKD8hck+vn6xifNBvfKKuXKAc= Subject key identifier: E5:E0:95:F4:7E:D0:46:60:B8:5D:1A:83:49:6F:48:C4:DB:C2:26:0E Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F432858459D2DFC2F363DAE3D8A899A00 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa Signing time: Sun 21 Apr 2024 01:00:25 +0000 ROA not before: Sun 21 Apr 2024 01:00:25 +0000 ROA not after: Sat 20 Jul 2024 01:00:25 +0000 asID: 14618 IP address blocks: 170.225.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:9d:2d:fc:2f:36:3d:ae:3d:8a:89:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Apr 21 01:00:25 2024 GMT Not After : Jul 20 01:00:25 2024 GMT Subject: CN=37eb87f6-1faa-4d99-aeb5-7b57c76269c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:42:69:28:46:09:5f:a8:b9:4b:ae:56:8f:45: e2:38:5f:5b:9b:e1:fe:66:5a:a7:7c:b3:6f:69:6a: 8b:ed:79:16:86:23:1f:fa:7f:2a:19:ef:14:b0:d5: 88:58:e5:e1:bc:c8:af:bf:58:97:6b:ac:3c:d8:0a: f7:06:ba:25:55:62:cd:f9:fe:2c:e3:e9:67:fd:82: 52:c6:30:c9:54:d8:b1:63:a6:4b:5c:80:55:d4:0a: 8f:f1:e8:a3:27:51:b3:3e:8b:5a:d5:0c:8a:b8:c5: 76:5d:29:fb:3f:0b:e6:f0:fd:fa:ec:f0:97:92:a5: 26:b8:cb:5c:bb:ae:5d:00:ae:c6:04:43:94:12:ea: ba:f9:82:a0:c1:a3:05:a8:e9:5f:21:51:9f:c0:d6: 71:a3:f6:3e:31:05:11:1b:e4:9f:bc:42:ca:17:9b: ed:d7:8d:d7:a6:c2:ab:f1:c2:63:38:54:24:8b:87: d2:23:ab:a8:b5:8a:43:bf:cc:34:24:9d:54:c3:8e: 23:c0:64:fc:ed:8c:66:6f:40:18:de:6a:e0:10:da: 43:2f:7a:6c:fd:0d:9a:76:43:fa:74:3f:73:14:f3: 05:5c:b6:ca:ab:40:54:6d:57:c8:f7:da:c3:52:70: 71:e8:ae:57:26:96:f1:bf:5d:1e:48:fd:bf:c5:2e: 4b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E0:95:F4:7E:D0:46:60:B8:5D:1A:83:49:6F:48:C4:DB:C2:26:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:63:04:26:74:15:36:8e:5e:54:16:a5:ee:62:ec:69:05:2d: 1c:75:43:00:4e:24:cc:92:57:3b:b5:52:94:0b:9e:98:d0:68: 8e:de:0a:cc:4a:14:91:b2:97:50:62:0f:32:e9:21:c3:ae:d3: 2e:74:45:95:46:81:a4:00:da:fa:de:d4:04:2b:5a:3c:89:c3: 4b:c3:fa:03:2f:52:b8:e7:54:50:c9:0f:37:79:b5:a3:f5:18: 46:14:be:cd:0f:b8:ae:b9:b4:38:ca:8c:ec:9e:a4:71:5c:20: 76:f7:b8:f5:1c:46:ef:56:2c:cd:65:5a:2e:df:18:99:db:db: 5a:30:c7:8d:a7:1f:23:eb:a0:ef:63:ed:07:3b:38:e3:2c:b6: b8:0d:a4:29:c3:a5:36:a0:2a:be:53:0f:7f:6e:4e:e1:c4:3e: da:69:d5:24:fa:3c:fb:42:8d:8c:4f:23:e3:f0:74:12:d2:dd: 58:eb:0e:a2:f5:90:5f:bd:97:4a:af:2a:83:ae:c1:12:62:14: a8:57:71:2d:d3:49:e3:06:54:8b:b2:c5:83:14:84:ed:ca:20: 21:94:76:37:32:4e:10:04:fc:62:17:61:bb:25:25:d2:b9:62: 2a:03:77:8b:a3:bc:f3:95:9e:a0:47:32:fc:a7:b9:ce:d5:4f: 76:7f:71:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWdLfwvNj2uPYqJmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI0MDQyMTAxMDAyNVoXDTI0MDcyMDAxMDAyNVowLzEtMCsGA1UEAxMk MzdlYjg3ZjYtMWZhYS00ZDk5LWFlYjUtN2I1N2M3NjI2OWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkJpKEYJX6i5S65Wj0XiOF9bm+H+ZlqnfLNv aWqL7XkWhiMf+n8qGe8UsNWIWOXhvMivv1iXa6w82Ar3BrolVWLN+f4s4+ln/YJS xjDJVNixY6ZLXIBV1AqP8eijJ1GzPota1QyKuMV2XSn7Pwvm8P367PCXkqUmuMtc u65dAK7GBEOUEuq6+YKgwaMFqOlfIVGfwNZxo/Y+MQURG+SfvELKF5vt143XpsKr 8cJjOFQki4fSI6uotYpDv8w0JJ1Uw44jwGT87Yxmb0AY3mrgENpDL3ps/Q2adkP6 dD9zFPMFXLbKq0BUbVfI99rDUnBx6K5XJpbxv10eSP2/xS5LvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXglfR+0EZguF0ag0lvSMTbwiYOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvZjU5MWMzZjgtZmU2Mi0z Y2VhLThiNGUtNDZlMmVjYTMyMmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpjBCZ0FTaOXlQWpe5i7GkFLRx1QwBOJMySVzu1UpQLnpjQaI7eCsxK FJGyl1BiDzLpIcOu0y50RZVGgaQA2vre1AQrWjyJw0vD+gMvUrjnVFDJDzd5taP1 GEYUvs0PuK65tDjKjOyepHFcIHb3uPUcRu9WLM1lWi7fGJnb21owx42nHyProO9j 7Qc7OOMstrgNpCnDpTagKr5TD39uTuHEPtpp1ST6PPtCjYxPI+PwdBLS3VjrDqL1 kF+9l0qvKoOuwRJiFKhXcS3TSeMGVIuyxYMUhO3KICGUdjcyThAE/GIXYbslJdK5 YioDd4ujvPOVnqBHMvynuc7VT3Z/cYM= -----END CERTIFICATE-----Generated at Mon May 6 01:55:50 2024 by rpki-client on console-ams.rpki-client.org