$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/5e00859f-bf20-388d-a400-94e4c09e3154.roa File: 5e00859f-bf20-388d-a400-94e4c09e3154.roa (raw, json) Hash identifier: NRHLpjA1qYSKBtCrburPgeoqxkW841BlRm3q6B6umhs= Subject key identifier: D8:C2:84:A6:BE:E1:FA:E4:9A:C7:CE:AD:FC:08:BF:1E:D1:CF:DF:F2 Certificate issuer: /CN=7e70a287-ad97-4c1e-9564-9ca069f57b17 Certificate serial: 010D0C9F43285845A6F361D3C6B7F097008F7860 Authority key identifier: 21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/5e00859f-bf20-388d-a400-94e4c09e3154.roa Signing time: Wed 24 Apr 2024 13:00:33 +0000 ROA not before: Wed 24 Apr 2024 13:00:33 +0000 ROA not after: Tue 23 Jul 2024 13:00:33 +0000 asID: 399769 IP address blocks: 45.45.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a6:f3:61:d3:c6:b7:f0:97:00:8f:78:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e70a287-ad97-4c1e-9564-9ca069f57b17 Validity Not Before: Apr 24 13:00:33 2024 GMT Not After : Jul 23 13:00:33 2024 GMT Subject: CN=676ecdac-692f-4514-adc7-35fa51e6712a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:03:b2:fb:d4:9a:5f:a3:37:a0:c4:03:3a:85: 2d:87:41:4b:5d:70:e3:3b:b1:94:9f:80:30:84:40: e6:f1:37:33:20:48:9f:66:77:eb:f9:57:51:f0:14: e1:e9:50:dc:36:e9:67:4e:56:35:31:3c:e6:90:33: 23:7e:a8:e2:6f:95:7b:8c:f2:92:f2:2b:fd:73:fe: b2:ff:0d:83:62:66:86:37:e8:d9:60:53:1b:e8:c0: 30:2b:68:27:15:25:5b:ef:4d:ce:85:b4:ae:03:49: ed:6f:40:55:5f:ec:ee:32:3f:07:09:e9:29:23:2e: d5:63:bb:77:c2:80:81:43:ca:cb:62:ef:e0:ca:1e: 4c:45:44:05:4b:a1:d2:1c:85:3d:1c:1d:e7:ee:be: 22:77:1e:58:02:8c:79:f6:a2:f3:a6:6a:84:74:5f: 31:fc:16:f7:a7:7b:f4:38:65:1f:ac:7b:0f:eb:07: d6:96:db:7a:80:81:73:8b:9e:ff:84:87:dd:70:f5: 6e:ec:fe:1a:7c:46:38:30:65:f4:73:81:55:f1:23: fc:37:8f:fe:9e:a1:b1:5c:dd:ef:ef:0e:b9:8c:2f: 29:93:2c:15:81:bf:2f:d4:5a:bb:2c:52:e6:4e:6d: 96:b4:8c:f1:af:da:6a:7e:e9:3c:fc:ea:2b:a3:6e: d7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C2:84:A6:BE:E1:FA:E4:9A:C7:CE:AD:FC:08:BF:1E:D1:CF:DF:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/5e00859f-bf20-388d-a400-94e4c09e3154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.crl X509v3 Authority Key Identifier: keyid:21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer sbgp-ipAddrBlock: critical IPv4: 45.45.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:4f:59:9a:bd:8f:0b:a3:ea:39:a1:75:e6:b9:88:5e:4c:da: 34:ef:5b:e4:08:e1:35:c2:a8:62:17:53:e5:c2:24:c2:35:bd: 7f:a1:9f:e0:87:b3:b0:fa:f5:45:84:5e:34:66:f0:3e:09:a3: ea:d3:36:07:ab:3a:e4:07:8d:6b:b0:71:f5:dd:6e:e7:73:c1: 97:c8:5c:80:7f:e5:c8:28:ac:a3:db:07:49:f2:8c:74:e1:c2: e8:d1:94:36:1a:96:e6:f5:ae:b0:b2:3f:ba:2f:c1:8f:01:b1: a1:81:30:d7:30:63:91:77:d6:bc:47:29:d8:8b:f5:9b:52:7b: 76:91:bc:b2:15:01:34:05:d1:67:fc:f5:da:8e:7d:0c:be:6d: 8a:fe:af:2a:bf:45:d1:7e:3a:b1:ca:a0:91:92:68:bf:8a:5b: 3e:be:ec:9d:a4:cd:50:0b:11:fb:27:63:3e:15:71:fe:6a:9d: e8:36:28:07:1f:57:6b:54:98:75:ef:8c:41:b6:e9:f7:e8:24: 61:c7:58:8c:70:76:7d:47:34:ac:3a:d5:20:a5:9b:0c:da:36: ce:1b:b6:15:91:6e:83:bf:4d:3a:25:49:33:03:b6:b7:48:aa: 0b:37:a6:10:8f:33:34:da:e6:88:46:1f:a0:92:bd:0c:5f:a6: d7:f1:cd:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWm82HTxrfwlwCPeGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U3MGEyODctYWQ5Ny00YzFlLTk1NjQtOWNhMDY5ZjU3 YjE3MB4XDTI0MDQyNDEzMDAzM1oXDTI0MDcyMzEzMDAzM1owLzEtMCsGA1UEAxMk Njc2ZWNkYWMtNjkyZi00NTE0LWFkYzctMzVmYTUxZTY3MTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswOy+9SaX6M3oMQDOoUth0FLXXDjO7GUn4Aw hEDm8TczIEifZnfr+VdR8BTh6VDcNulnTlY1MTzmkDMjfqjib5V7jPKS8iv9c/6y /w2DYmaGN+jZYFMb6MAwK2gnFSVb703OhbSuA0ntb0BVX+zuMj8HCekpIy7VY7t3 woCBQ8rLYu/gyh5MRUQFS6HSHIU9HB3n7r4idx5YAox59qLzpmqEdF8x/Bb3p3v0 OGUfrHsP6wfWltt6gIFzi57/hIfdcPVu7P4afEY4MGX0c4FV8SP8N4/+nqGxXN3v 7w65jC8pkywVgb8v1Fq7LFLmTm2WtIzxr9pqfuk8/Ooro27XKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjChKa+4frkmsfOrfwIvx7Rz9/yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTcw YTI4Ny1hZDk3LTRjMWUtOTU2NC05Y2EwNjlmNTdiMTcvNWUwMDg1OWYtYmYyMC0z ODhkLWE0MDAtOTRlNGMwOWUzMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U3MGEyODctYWQ5Ny00YzFlLTk1 NjQtOWNhMDY5ZjU3YjE3LzdlNzBhMjg3LWFkOTctNGMxZS05NTY0LTljYTA2OWY1 N2IxNy5jcmwwHwYDVR0jBBgwFoAUIRirvVv0Lhj3Bj0fRT81E1Sa+WAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTcwYTI4Ny1hZDk3LTRjMWUtOTU2NC05Y2Ew NjlmNTdiMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLS2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxPWZq9jwuj6jmhdea5iF5M2jTvW+QI4TXCqGIXU+XCJMI1vX+hn+CH s7D69UWEXjRm8D4Jo+rTNgerOuQHjWuwcfXdbudzwZfIXIB/5cgorKPbB0nyjHTh wujRlDYalub1rrCyP7ovwY8BsaGBMNcwY5F31rxHKdiL9ZtSe3aRvLIVATQF0Wf8 9dqOfQy+bYr+ryq/RdF+OrHKoJGSaL+KWz6+7J2kzVALEfsnYz4Vcf5qneg2KAcf V2tUmHXvjEG26ffoJGHHWIxwdn1HNKw61SClmwzaNs4bthWRboO/TTolSTMDtrdI qgs3phCPMzTa5ohGH6CSvQxfptfxzUA= -----END CERTIFICATE-----Generated at Thu May 23 10:19:20 2024 by rpki-client on console-ams.rpki-client.org