$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/acf0070a-bcf1-31f7-b9b5-03e6b40f4c06.roa File: acf0070a-bcf1-31f7-b9b5-03e6b40f4c06.roa (raw, json) Hash identifier: AEgI8ea6hHcf6becFWOu3FxQ/iiabHLEW8nOV/X1bXw= Subject key identifier: BC:48:94:53:B7:AB:2F:00:D5:3F:25:F7:E8:C4:6E:CE:DD:CE:32:00 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285845E45E6E929744C322C2A6E6C0 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/acf0070a-bcf1-31f7-b9b5-03e6b40f4c06.roa Signing time: Thu 16 May 2024 13:00:35 +0000 ROA not before: Thu 16 May 2024 13:00:35 +0000 ROA not after: Wed 14 Aug 2024 13:00:35 +0000 asID: 13536 IP address blocks: 208.20.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:e4:5e:6e:92:97:44:c3:22:c2:a6:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: May 16 13:00:35 2024 GMT Not After : Aug 14 13:00:35 2024 GMT Subject: CN=bd8f6b9d-d166-4eee-939b-a0dd61871fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:37:eb:52:9b:c7:16:28:ac:e8:d2:2e:c0:21: d5:45:ba:29:2d:48:a0:99:f0:4c:56:d6:88:83:02: d1:2e:6e:f5:94:2a:36:82:dd:56:7d:95:e4:48:f4: ec:f2:28:e4:b5:7c:1f:8c:a5:e9:5d:e9:38:b0:cf: 5c:8d:d6:5b:78:10:45:f3:cd:ea:92:c2:b6:92:9d: 58:ca:c7:44:d3:66:d0:ab:63:cd:47:72:0b:00:84: 8c:32:1f:29:ab:82:33:db:9c:ba:fd:09:83:a9:e2: 27:00:86:8c:7f:2e:6c:c0:99:b7:23:93:4a:ba:47: eb:94:40:4c:5e:ed:d2:ea:38:bf:47:43:0c:06:8d: 0d:cd:bc:c6:5a:c9:30:41:83:02:ff:0a:af:dc:28: be:35:c4:d1:15:95:11:0a:8d:56:c1:57:d1:33:04: ac:56:32:29:76:e7:b3:a3:6e:2e:cd:87:97:81:d9: 92:fa:0b:26:29:8a:fb:34:aa:ad:bc:d2:b9:2c:21: 99:bc:63:5a:49:66:13:33:6b:a0:a2:73:81:7a:9e: ea:a6:4c:b6:76:84:70:81:fb:02:48:8b:06:c1:de: 9a:f4:30:16:7d:81:fd:a9:42:cd:b0:9a:13:06:c0: 17:bd:97:1d:f3:13:70:ce:04:1c:3a:5d:85:44:0a: f2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:48:94:53:B7:AB:2F:00:D5:3F:25:F7:E8:C4:6E:CE:DD:CE:32:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/acf0070a-bcf1-31f7-b9b5-03e6b40f4c06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.20.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:3f:fe:93:a6:ac:31:dd:53:8e:2d:ae:8c:d8:70:4b:4c:2f: 5b:48:27:5d:2e:42:eb:1f:eb:62:32:81:6a:d9:70:08:98:bc: bc:89:5d:6a:9a:03:de:bd:e3:80:73:ce:75:5b:14:89:55:57: 8e:23:6a:eb:18:11:2e:63:dd:5e:61:e2:6c:63:fd:f8:d9:d6: 87:42:ca:c7:ca:c8:5a:d9:35:65:e4:86:cf:1d:5b:f6:9f:b9: 95:3f:17:29:84:7f:8a:57:00:36:49:a6:a4:4a:6d:71:6c:af: 03:ff:3e:9b:d0:14:92:84:39:e4:19:56:38:11:d6:f3:41:56: 67:82:6c:ed:dc:c8:bd:3d:01:3a:10:13:85:d0:91:95:5f:74: 27:cb:0f:e9:16:17:19:ca:e3:36:d8:b5:d1:8e:c9:13:93:eb: f3:51:57:a5:98:d4:04:7a:78:67:36:d6:fa:25:b0:0d:ee:20: 8d:66:44:a3:30:72:29:07:d6:b9:bc:d5:4f:3e:3e:75:05:a3: 02:5c:d1:4a:35:aa:6d:93:3d:af:3b:d7:13:72:ab:09:76:a6: a9:47:3d:fd:93:83:8b:46:0f:35:0a:3c:4f:d6:76:38:0d:65: 8f:e6:85:41:a2:fc:31:6c:24:85:66:91:cc:27:a8:f2:22:82: e6:e9:56:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXkXm6Sl0TDIsKm5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI0MDUxNjEzMDAzNVoXDTI0MDgxNDEzMDAzNVowLzEtMCsGA1UEAxMk YmQ4ZjZiOWQtZDE2Ni00ZWVlLTkzOWItYTBkZDYxODcxZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjfrUpvHFiis6NIuwCHVRbopLUigmfBMVtaI gwLRLm71lCo2gt1WfZXkSPTs8ijktXwfjKXpXek4sM9cjdZbeBBF883qksK2kp1Y ysdE02bQq2PNR3ILAISMMh8pq4Iz25y6/QmDqeInAIaMfy5swJm3I5NKukfrlEBM Xu3S6ji/R0MMBo0NzbzGWskwQYMC/wqv3Ci+NcTRFZURCo1WwVfRMwSsVjIpduez o24uzYeXgdmS+gsmKYr7NKqtvNK5LCGZvGNaSWYTM2ugonOBep7qpky2doRwgfsC SIsGwd6a9DAWfYH9qULNsJoTBsAXvZcd8xNwzgQcOl2FRAryNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxIlFO3qy8A1T8l9+jEbs7dzjIAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvYWNmMDA3MGEtYmNmMS0z MWY3LWI5YjUtMDNlNmI0MGY0YzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0BQhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEs//pOmrDHdU44trozYcEtML1tIJ10uQusf62IygWrZcAiYvLyJXWqa A96944BzznVbFIlVV44jausYES5j3V5h4mxj/fjZ1odCysfKyFrZNWXkhs8dW/af uZU/FymEf4pXADZJpqRKbXFsrwP/PpvQFJKEOeQZVjgR1vNBVmeCbO3cyL09AToQ E4XQkZVfdCfLD+kWFxnK4zbYtdGOyROT6/NRV6WY1AR6eGc21volsA3uII1mRKMw cikH1rm81U8+PnUFowJc0Uo1qm2TPa871xNyqwl2pqlHPf2Tg4tGDzUKPE/WdjgN ZY/mhUGi/DFsJIVmkcwnqPIigubpVv0= -----END CERTIFICATE-----Generated at Sat May 18 15:35:46 2024 by rpki-client on console-fra.rpki-client.org