$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2e4f323f-9e40-377f-afd6-c70bef8712b2.roa File: 2e4f323f-9e40-377f-afd6-c70bef8712b2.roa (raw, json) Hash identifier: pTkeWJ4VbaHhEIgjmoYj8dWF/qrTVDpDZtiSWSZaBDw= Subject key identifier: CD:4E:08:C8:A5:3A:0A:37:EF:E5:CC:D8:7F:A5:90:C4:47:80:FD:B5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858457A31A6873B3418D5014D20C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2e4f323f-9e40-377f-afd6-c70bef8712b2.roa Signing time: Mon 08 Apr 2024 12:14:44 +0000 ROA not before: Mon 08 Apr 2024 12:14:44 +0000 ROA not after: Sun 07 Jul 2024 12:14:44 +0000 asID: 212238 IP address blocks: 45.74.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:7a:31:a6:87:3b:34:18:d5:01:4d:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 8 12:14:44 2024 GMT Not After : Jul 7 12:14:44 2024 GMT Subject: CN=fa3776d2-1763-4e5b-9df8-0fb7b4315137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:aa:38:a2:a1:9d:20:2a:0e:c2:19:3c:70:02: 7a:ce:f3:c5:7f:fb:59:67:da:81:ff:19:0b:91:e9: fc:89:72:e8:05:fd:ec:1b:63:03:75:d4:cc:46:ce: 21:da:9d:ff:bd:b3:0f:28:7c:a8:2d:2e:6b:27:16: 84:6f:b1:5e:af:b8:ce:75:1d:9f:d1:99:9d:af:96: 3f:de:d6:a2:ce:cc:08:82:e9:15:77:02:07:2e:9b: 4e:e1:0c:a5:30:43:af:96:bc:f3:50:e6:50:47:b7: ad:85:fb:57:03:64:5f:59:24:bf:17:15:fa:06:8c: 4c:e7:34:a0:e7:b4:04:09:e3:07:2a:a1:27:d6:d6: 0f:8e:39:9b:dc:37:ba:22:b6:e4:7b:71:83:89:68: 60:10:49:84:b4:fd:9e:e3:90:34:23:17:d1:40:d5: 00:5d:e2:a5:fd:ca:53:3f:a9:4b:66:9e:73:c4:de: 9b:d9:4a:92:7b:23:a8:ef:e7:f0:26:29:92:04:51: 1b:39:5d:8f:b2:66:a5:4e:0f:c2:ab:d8:f9:b4:c8: 0d:f4:b9:00:a3:df:c2:37:22:30:1d:91:39:f3:a5: cd:21:50:48:0a:9a:dc:3f:96:d1:38:2d:60:9b:ce: fe:25:7f:34:20:18:c0:20:eb:19:c5:0f:da:aa:52: 8e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:4E:08:C8:A5:3A:0A:37:EF:E5:CC:D8:7F:A5:90:C4:47:80:FD:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2e4f323f-9e40-377f-afd6-c70bef8712b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:94:48:14:9a:c3:0e:0d:b5:95:c9:f7:3f:7b:fe:1b:1d:24: 7f:20:cc:00:8c:0e:51:7a:37:f1:f4:52:79:89:39:17:d2:65: 0c:76:a6:09:e3:56:a4:77:ae:e2:40:44:a9:bc:90:26:7f:bc: 54:58:3f:cb:6d:e0:f0:a3:53:d3:87:71:9a:5b:e5:04:af:5d: e0:89:23:83:40:da:9a:2b:14:73:09:81:3f:51:e6:02:0a:1b: e4:53:36:c2:1f:d3:9f:ac:c7:73:f4:06:a2:51:10:04:ba:47: a4:9a:b2:02:49:3f:c1:27:c5:f0:57:ea:aa:d6:39:46:8a:2e: 2b:97:10:4d:81:8b:46:b5:5d:af:d2:db:ba:f6:27:28:74:a7: 82:54:a6:3c:68:ef:82:90:96:95:c7:d5:59:0e:35:fd:07:1a: fb:d0:b7:50:5c:16:df:fb:72:5c:1e:cb:2b:fb:2a:ff:aa:46: ec:9e:13:91:f9:50:f3:11:ca:81:21:3a:e6:8f:14:0d:0d:99: 3c:6a:d9:3c:a0:f2:09:9e:cc:88:e0:50:14:f1:de:06:80:31: 46:77:d5:c7:d1:b9:9b:91:15:15:31:cd:dc:29:fe:cb:3a:74: 75:74:cc:7e:20:4b:5a:13:e6:79:28:f7:26:17:49:6f:5a:45: 9d:8d:32:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV6MaaHOzQY1QFNIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDQwODEyMTQ0NFoXDTI0MDcwNzEyMTQ0NFowLzEtMCsGA1UEAxMk ZmEzNzc2ZDItMTc2My00ZTViLTlkZjgtMGZiN2I0MzE1MTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhao4oqGdICoOwhk8cAJ6zvPFf/tZZ9qB/xkL ken8iXLoBf3sG2MDddTMRs4h2p3/vbMPKHyoLS5rJxaEb7Fer7jOdR2f0Zmdr5Y/ 3taizswIgukVdwIHLptO4QylMEOvlrzzUOZQR7ethftXA2RfWSS/FxX6BoxM5zSg 57QECeMHKqEn1tYPjjmb3De6Irbke3GDiWhgEEmEtP2e45A0IxfRQNUAXeKl/cpT P6lLZp5zxN6b2UqSeyOo7+fwJimSBFEbOV2PsmalTg/Cq9j5tMgN9LkAo9/CNyIw HZE586XNIVBICprcP5bROC1gm87+JX80IBjAIOsZxQ/aqlKOuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1OCMilOgo37+XM2H+lkMRHgP21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMmU0ZjMyM2YtOWU0MC0z NzdmLWFmZDYtYzcwYmVmODcxMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeUSBSaww4NtZXJ9z97/hsdJH8gzACMDlF6N/H0UnmJORfSZQx2pgnj VqR3ruJARKm8kCZ/vFRYP8tt4PCjU9OHcZpb5QSvXeCJI4NA2porFHMJgT9R5gIK G+RTNsIf05+sx3P0BqJREAS6R6SasgJJP8EnxfBX6qrWOUaKLiuXEE2Bi0a1Xa/S 27r2Jyh0p4JUpjxo74KQlpXH1VkONf0HGvvQt1BcFt/7clweyyv7Kv+qRuyeE5H5 UPMRyoEhOuaPFA0NmTxq2Tyg8gmezIjgUBTx3gaAMUZ31cfRuZuRFRUxzdwp/ss6 dHV0zH4gS1oT5nko9yYXSW9aRZ2NMlE= -----END CERTIFICATE-----Generated at Wed May 8 02:00:05 2024 by rpki-client on console-fra.rpki-client.org