$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/59392e2a-7cc4-32fc-840e-7383dc8b4959.roa File: 59392e2a-7cc4-32fc-840e-7383dc8b4959.roa (raw, json) Hash identifier: dqvzUF86csowQxLcfeC+uPoORKoNA+le1bh8kooQrYE= Subject key identifier: 12:86:6C:27:03:AA:F5:CB:2C:F8:13:2A:30:3D:7F:1B:94:12:3A:8E Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285845E45E7D5F5824778C516C5B00 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/59392e2a-7cc4-32fc-840e-7383dc8b4959.roa Signing time: Thu 16 May 2024 13:00:35 +0000 ROA not before: Thu 16 May 2024 13:00:35 +0000 ROA not after: Wed 14 Aug 2024 13:00:35 +0000 asID: 13536 IP address blocks: 208.20.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:e4:5e:7d:5f:58:24:77:8c:51:6c:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: May 16 13:00:35 2024 GMT Not After : Aug 14 13:00:35 2024 GMT Subject: CN=68d3e377-ed01-49a4-ad91-41d932795068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f2:a4:a7:82:a7:36:5a:ab:ed:7d:90:90:b9: 9a:d8:62:b7:94:c3:a2:c7:d4:f6:6c:09:73:20:73: 6a:49:32:9e:0e:23:4c:be:23:0b:9d:d8:9d:ff:41: ca:6f:8d:7a:99:47:68:88:ed:a1:e5:98:20:ab:e2: fa:96:ef:71:72:de:78:c3:e6:71:0f:cc:c3:86:97: 5e:34:5a:c1:43:ba:d0:b0:d5:98:b4:da:9c:22:cb: 89:55:84:e2:4e:e6:51:aa:13:52:d8:3f:1e:c0:99: e1:70:58:5a:3f:2a:e5:ba:c5:32:c3:26:e3:34:8d: f7:95:af:1c:d0:5e:77:4a:a1:97:8c:9b:1f:b1:ac: 4d:fe:d5:49:13:3a:01:92:9c:1d:f3:b1:6a:19:9f: 1a:ab:08:ce:e1:60:30:ce:ad:fd:ef:6b:4c:4f:69: 52:1a:3a:60:f4:e4:3e:19:be:f9:e0:fe:62:8c:72: 9a:47:a8:56:8d:26:42:82:9f:98:c0:ae:82:65:14: 90:c5:52:63:83:e2:23:c4:a5:f2:77:b5:aa:7d:60: 59:4f:0f:22:6d:db:dd:17:2b:7b:7b:1e:ea:0e:a7: f4:5c:c5:d9:d1:7d:09:6f:2e:c6:ee:89:55:20:9f: fa:e1:86:b9:9b:ac:00:86:e2:3f:d1:31:fe:94:69: 78:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:86:6C:27:03:AA:F5:CB:2C:F8:13:2A:30:3D:7F:1B:94:12:3A:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/59392e2a-7cc4-32fc-840e-7383dc8b4959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.20.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:4e:92:17:b0:ca:73:33:6f:3f:e5:93:f9:29:15:a7:15:10: b3:4f:0d:13:c2:de:97:2d:36:f3:28:37:2b:9f:75:48:54:e8: 76:2d:cb:60:78:68:a8:94:b1:c2:e3:67:f8:54:78:5c:2d:3a: 51:9d:96:c1:2a:b4:9d:b0:81:66:94:db:0e:9b:a7:32:cd:1d: 93:cc:dd:54:65:55:42:61:e7:dd:bd:0d:fb:8b:f1:3e:3c:96: ca:4a:e0:19:e7:de:7d:75:25:1f:17:96:a1:5f:de:3a:92:12: 2e:de:f8:54:8b:5c:f0:64:50:07:2c:f1:d5:c8:21:6e:89:e1: ef:ec:06:a6:84:e7:c7:e0:3f:41:77:c8:9a:24:a2:05:0b:db: 04:a8:d8:75:27:68:91:73:7a:7f:cb:c2:d9:b2:6d:14:84:a6: 89:65:6e:9c:8f:f4:f5:38:36:3c:17:e1:ad:6e:8f:20:73:9b: 26:6f:38:1f:f8:49:4b:84:91:e8:df:17:6b:33:b4:11:5a:2d: 44:f0:a3:01:85:65:fa:4a:e2:02:b9:8d:e9:9b:20:25:7b:7a: e8:e2:c2:8c:83:5e:6c:c0:03:69:15:52:ce:25:7a:0d:a6:59: 57:6a:1f:b5:1b:31:77:84:4d:8e:76:8b:13:3f:c1:00:1f:f3: 01:fb:c0:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXkXn1fWCR3jFFsWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI0MDUxNjEzMDAzNVoXDTI0MDgxNDEzMDAzNVowLzEtMCsGA1UEAxMk NjhkM2UzNzctZWQwMS00OWE0LWFkOTEtNDFkOTMyNzk1MDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/Kkp4KnNlqr7X2QkLma2GK3lMOix9T2bAlz IHNqSTKeDiNMviMLndid/0HKb416mUdoiO2h5Zggq+L6lu9xct54w+ZxD8zDhpde NFrBQ7rQsNWYtNqcIsuJVYTiTuZRqhNS2D8ewJnhcFhaPyrlusUywybjNI33la8c 0F53SqGXjJsfsaxN/tVJEzoBkpwd87FqGZ8aqwjO4WAwzq3972tMT2lSGjpg9OQ+ Gb754P5ijHKaR6hWjSZCgp+YwK6CZRSQxVJjg+IjxKXyd7WqfWBZTw8ibdvdFyt7 ex7qDqf0XMXZ0X0Jby7G7olVIJ/64Ya5m6wAhuI/0TH+lGl47QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKGbCcDqvXLLPgTKjA9fxuUEjqOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvNTkzOTJlMmEtN2NjNC0z MmZjLTg0MGUtNzM4M2RjOGI0OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0BQiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNOkhewynMzbz/lk/kpFacVELNPDRPC3pctNvMoNyufdUhU6HYty2B4 aKiUscLjZ/hUeFwtOlGdlsEqtJ2wgWaU2w6bpzLNHZPM3VRlVUJh5929DfuL8T48 lspK4Bnn3n11JR8XlqFf3jqSEi7e+FSLXPBkUAcs8dXIIW6J4e/sBqaE58fgP0F3 yJokogUL2wSo2HUnaJFzen/LwtmybRSEpollbpyP9PU4NjwX4a1ujyBzmyZvOB/4 SUuEkejfF2sztBFaLUTwowGFZfpK4gK5jembICV7eujiwoyDXmzAA2kVUs4leg2m WVdqH7UbMXeETY52ixM/wQAf8wH7wFQ= -----END CERTIFICATE-----Generated at Sat May 18 16:10:17 2024 by rpki-client on console-ams.rpki-client.org