$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/16b704f1-00d2-3275-b255-32b4eae3f37c.roa File: 16b704f1-00d2-3275-b255-32b4eae3f37c.roa (raw, json) Hash identifier: xpPAwE5yIXCxLEd1F+t7Tc9cY9zB7F4nPXHmllivQF0= Subject key identifier: CD:65:70:F3:F4:E0:81:5B:3E:90:12:E3:63:62:B0:47:65:FE:64:89 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285845CF6E3C18B75450BB8A1C3600 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/16b704f1-00d2-3275-b255-32b4eae3f37c.roa Signing time: Thu 09 May 2024 01:00:26 +0000 ROA not before: Thu 09 May 2024 01:00:26 +0000 ROA not after: Wed 07 Aug 2024 01:00:26 +0000 asID: 1239 IP address blocks: 204.119.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:cf:6e:3c:18:b7:54:50:bb:8a:1c:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: May 9 01:00:26 2024 GMT Not After : Aug 7 01:00:26 2024 GMT Subject: CN=c8fd3546-d8f4-401d-969e-550b9e9b186d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9b:30:13:d4:db:b6:72:74:90:2e:c9:14:2d: 12:e7:ec:52:71:88:4c:dd:00:40:be:f1:36:37:6b: a0:ce:77:ae:41:48:b2:6f:8d:0f:05:26:6b:73:e4: 25:40:ab:38:73:63:c9:be:57:22:6a:13:ca:74:16: f2:ef:05:ce:20:86:71:98:c5:ff:dd:cb:cd:08:4b: ab:c0:ad:9b:19:1e:7f:2c:ce:d6:2a:01:1f:8a:6d: 32:00:f7:fe:d1:d5:a1:8f:93:10:da:34:75:45:4e: 83:a1:7b:a4:dc:bd:9c:94:b7:e6:cd:91:65:d8:a7: c8:e8:00:72:a7:22:47:19:0e:1e:2b:44:3a:c4:73: 52:5f:6c:f0:0b:13:c8:75:2b:b0:1b:ba:87:c5:c6: 65:9a:a4:1a:7e:a2:6e:5f:7b:8f:1b:b7:91:ed:6f: 67:04:cb:78:64:51:58:8a:9a:13:47:19:47:0d:2c: e9:f1:36:63:82:56:30:dd:09:1e:c9:23:18:d8:3c: 49:2c:4c:fe:37:c9:f8:f6:6a:ac:07:94:9d:40:e9: d8:b4:57:82:7c:14:b8:dd:e9:c5:58:70:85:69:86: f5:8e:1d:43:b1:b1:33:42:a6:16:19:ed:2c:a4:5b: ee:a8:0e:87:2e:72:c0:b5:fb:b9:c7:9b:85:04:c8: 57:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:65:70:F3:F4:E0:81:5B:3E:90:12:E3:63:62:B0:47:65:FE:64:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/16b704f1-00d2-3275-b255-32b4eae3f37c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 204.119.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:03:d1:f2:9c:81:3e:c4:a4:ab:41:45:db:79:5e:fc:3b:d3: 71:b5:5b:5b:ee:7f:76:e9:a6:72:8b:45:b9:39:6b:9b:a1:7f: 5d:e7:26:9e:39:a9:da:6e:6c:97:50:3d:8c:1f:4e:9a:41:da: ac:48:7f:a7:3e:6d:da:fe:52:02:fb:31:f5:f2:9a:bf:38:05: b8:22:f3:f9:4c:1d:16:4a:0d:ce:24:8d:9b:9f:13:b4:66:66: d1:fe:f0:64:01:64:25:dd:53:af:c7:20:09:1c:b2:70:f5:6c: d5:82:0b:9c:a5:06:3c:58:bd:1b:64:06:9b:da:7a:37:8a:4c: 43:5b:93:49:08:b9:33:3f:a6:9c:28:48:46:1e:8e:f0:9d:e3: a3:ae:14:c5:1c:fc:6c:ad:56:57:cd:24:2a:7b:b6:3b:bf:1c: 08:ee:08:9e:b9:1d:68:7f:a9:84:a3:36:f0:a1:de:e2:cd:a7: f7:ba:a0:6c:a1:95:31:eb:54:55:9f:bb:0a:ce:01:00:27:3c: e6:65:d5:f6:e6:a7:94:12:cd:15:72:1c:70:bb:83:5b:f5:4e: a0:63:8c:a4:c2:94:92:ff:cf:5e:e4:68:fb:8a:9e:79:b8:b0: b0:54:8a:50:44:64:80:4a:7a:f6:37:97:20:37:d4:db:a5:f9: ba:9a:f2:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXPbjwYt1RQu4ocNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI0MDUwOTAxMDAyNloXDTI0MDgwNzAxMDAyNlowLzEtMCsGA1UEAxMk YzhmZDM1NDYtZDhmNC00MDFkLTk2OWUtNTUwYjllOWIxODZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZswE9TbtnJ0kC7JFC0S5+xScYhM3QBAvvE2 N2ugzneuQUiyb40PBSZrc+QlQKs4c2PJvlciahPKdBby7wXOIIZxmMX/3cvNCEur wK2bGR5/LM7WKgEfim0yAPf+0dWhj5MQ2jR1RU6DoXuk3L2clLfmzZFl2KfI6ABy pyJHGQ4eK0Q6xHNSX2zwCxPIdSuwG7qHxcZlmqQafqJuX3uPG7eR7W9nBMt4ZFFY ipoTRxlHDSzp8TZjglYw3QkeySMY2DxJLEz+N8n49mqsB5SdQOnYtFeCfBS43enF WHCFaYb1jh1DsbEzQqYWGe0spFvuqA6HLnLAtfu5x5uFBMhXMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1lcPP04IFbPpAS42NisEdl/mSJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMTZiNzA0ZjEtMDBkMi0z Mjc1LWIyNTUtMzJiNGVhZTNmMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzHfpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUD0fKcgT7EpKtBRdt5Xvw703G1W1vuf3bppnKLRbk5a5uhf13nJp45 qdpubJdQPYwfTppB2qxIf6c+bdr+UgL7MfXymr84Bbgi8/lMHRZKDc4kjZufE7Rm ZtH+8GQBZCXdU6/HIAkcsnD1bNWCC5ylBjxYvRtkBpvaejeKTENbk0kIuTM/ppwo SEYejvCd46OuFMUc/GytVlfNJCp7tju/HAjuCJ65HWh/qYSjNvCh3uLNp/e6oGyh lTHrVFWfuwrOAQAnPOZl1fbmp5QSzRVyHHC7g1v1TqBjjKTClJL/z17kaPuKnnm4 sLBUilBEZIBKevY3lyA31Nul+bqa8hg= -----END CERTIFICATE-----Generated at Fri May 24 13:40:56 2024 by rpki-client on console-fra.rpki-client.org