$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/f580b67a-767d-31bd-8089-26fba68e71a7.roa File: f580b67a-767d-31bd-8089-26fba68e71a7.roa (raw, json) Hash identifier: 3Z/YWY/7HKoSGyE6CEIaACbJ3Z6bCIawpsALN2W/x/Y= Subject key identifier: 3B:10:20:70:27:59:B6:BA:34:D7:F5:23:AF:34:16:E5:E9:63:B1:B9 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F43285845AA4C56015A25F7CFAACBEE8E Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/f580b67a-767d-31bd-8089-26fba68e71a7.roa Signing time: Thu 25 Apr 2024 17:47:18 +0000 ROA not before: Thu 25 Apr 2024 17:47:18 +0000 ROA not after: Wed 24 Jul 2024 17:47:18 +0000 asID: 396982 IP address blocks: 152.38.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:aa:4c:56:01:5a:25:f7:cf:aa:cb:ee:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Apr 25 17:47:18 2024 GMT Not After : Jul 24 17:47:18 2024 GMT Subject: CN=fbf69004-6a9f-4788-9221-01e18405567b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:30:0f:82:f2:cf:27:26:0c:44:a5:b6:de:cb: ee:b7:2a:fe:04:97:2f:4e:3f:85:23:bb:59:f8:41: f9:cc:54:32:08:f5:a4:a8:3a:a9:fc:b7:99:77:77: ec:d3:12:9a:78:e6:19:be:43:37:69:65:96:40:e0: e9:87:b7:fc:1a:33:08:68:a1:16:c5:8d:11:4a:48: 1a:bb:07:a6:a8:3b:b9:21:0a:84:cd:59:a4:74:7e: e6:ff:c0:d9:08:8d:0f:26:d5:de:07:73:d4:fb:d6: ff:89:4c:77:96:d3:28:ca:fc:17:a6:91:65:3f:45: b3:54:84:a4:4d:90:ac:5c:7f:37:ba:3d:33:70:84: 97:71:11:b8:46:41:b2:d7:d5:40:01:0c:1c:9f:14: a9:51:80:f3:74:16:4f:e1:be:b1:bc:27:72:f9:13: e8:65:f6:3c:cc:a7:30:e9:79:05:66:9a:c1:3f:30: 8a:62:4f:99:bc:3f:52:f9:25:bf:f6:0b:30:d6:77: ad:03:91:2e:a2:e8:49:73:68:da:51:db:91:88:da: a4:11:ab:cd:2d:57:db:15:46:72:13:f3:de:b9:fc: c2:b7:19:ab:a9:81:9f:0f:da:66:aa:f9:0d:44:3a: 8f:51:17:7e:31:45:f7:c1:85:30:27:b0:9c:11:bc: c1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:10:20:70:27:59:B6:BA:34:D7:F5:23:AF:34:16:E5:E9:63:B1:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/f580b67a-767d-31bd-8089-26fba68e71a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:76:13:29:81:62:d6:ba:ac:40:8c:f2:58:ab:44:50:65:e6: aa:42:e9:a1:d3:ba:04:7a:3a:ae:72:b9:f8:dc:70:54:40:75: 94:99:38:14:1d:f5:22:3e:e7:6e:30:78:d2:7f:1d:82:64:74: 82:e4:dc:7c:44:86:2a:49:6a:24:de:c7:f4:ab:e1:c5:bf:dd: aa:f5:29:4d:e3:2b:cf:42:db:d2:23:da:f0:ab:cd:fb:86:94: b8:c8:61:3b:7b:bf:dd:fb:2c:7f:e3:a0:41:f9:63:f8:4a:cb: 56:5a:3c:73:fb:9b:2e:e7:aa:8d:32:8f:86:91:29:0e:41:1a: a4:d3:49:d7:c6:49:98:a4:1d:48:72:90:df:69:7c:83:e1:79: fd:7d:42:9f:76:d9:be:31:40:9e:c9:1f:be:f3:a6:0e:75:6a: 25:85:a9:db:b8:6f:20:b6:ee:ba:69:fd:f1:1d:18:3b:4e:ee: 36:9a:b6:1b:c5:58:05:72:3e:9a:92:0a:1c:ee:ae:5b:22:e0: 7b:aa:55:73:33:e9:7c:5f:42:56:4f:88:f5:5d:48:05:05:d9: cf:9b:f2:07:d7:7f:24:6f:5d:d5:f1:a8:d9:f8:45:04:ad:6d: 87:1e:b8:bf:74:4e:e3:5b:4d:2d:0c:30:99:4e:4b:38:33:98: 88:ea:9f:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWqTFYBWiX3z6rL7o4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI0MDQyNTE3NDcxOFoXDTI0MDcyNDE3NDcxOFowLzEtMCsGA1UEAxMk ZmJmNjkwMDQtNmE5Zi00Nzg4LTkyMjEtMDFlMTg0MDU1NjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTAPgvLPJyYMRKW23svutyr+BJcvTj+FI7tZ +EH5zFQyCPWkqDqp/LeZd3fs0xKaeOYZvkM3aWWWQODph7f8GjMIaKEWxY0RSkga uwemqDu5IQqEzVmkdH7m/8DZCI0PJtXeB3PU+9b/iUx3ltMoyvwXppFlP0WzVISk TZCsXH83uj0zcISXcRG4RkGy19VAAQwcnxSpUYDzdBZP4b6xvCdy+RPoZfY8zKcw 6XkFZprBPzCKYk+ZvD9S+SW/9gsw1netA5EuouhJc2jaUduRiNqkEavNLVfbFUZy E/PeufzCtxmrqYGfD9pmqvkNRDqPURd+MUX3wYUwJ7CcEbzBKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsQIHAnWba6NNf1I680FuXpY7G5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvZjU4MGI2N2EtNzY3ZC0z MWJkLTgwODktMjZmYmE2OGU3MWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmCaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAx2EymBYta6rECM8lirRFBl5qpC6aHTugR6Oq5yufjccFRAdZSZOBQd 9SI+524weNJ/HYJkdILk3HxEhipJaiTex/Sr4cW/3ar1KU3jK89C29Ij2vCrzfuG lLjIYTt7v937LH/joEH5Y/hKy1ZaPHP7my7nqo0yj4aRKQ5BGqTTSdfGSZikHUhy kN9pfIPhef19Qp922b4xQJ7JH77zpg51aiWFqdu4byC27rpp/fEdGDtO7jaathvF WAVyPpqSChzurlsi4HuqVXMz6XxfQlZPiPVdSAUF2c+b8gfXfyRvXdXxqNn4RQSt bYceuL90TuNbTS0MMJlOSzgzmIjqn7I= -----END CERTIFICATE-----Generated at Sat May 18 13:31:29 2024 by rpki-client on console-fra.rpki-client.org