$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/dd40db55-eee3-3dfa-b796-7f59b5bdd108.roa File: dd40db55-eee3-3dfa-b796-7f59b5bdd108.roa (raw, json) Hash identifier: fhdnkq56M4I4dPlv83YOoWSJCyqLiZ+IH2WEq99bBm4= Subject key identifier: DE:C9:68:35:2F:C1:A0:81:D0:EC:F9:04:8F:C0:6D:A4:EC:0B:AD:6F Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285845280AF3E6ABD9025DF347E980 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/dd40db55-eee3-3dfa-b796-7f59b5bdd108.roa Signing time: Sun 10 Mar 2024 02:00:25 +0000 ROA not before: Sun 10 Mar 2024 02:00:25 +0000 ROA not after: Sat 08 Jun 2024 01:00:25 +0000 asID: 1239 IP address blocks: 198.67.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:28:0a:f3:e6:ab:d9:02:5d:f3:47:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Mar 10 02:00:25 2024 GMT Not After : Jun 8 01:00:25 2024 GMT Subject: CN=7368e300-e37b-4d87-a5da-78299973ec75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0b:9b:d2:72:1d:81:fd:c4:3d:b5:d0:de:0a: eb:b2:b8:3a:57:fc:6c:dc:1c:a8:da:f4:b7:70:cd: fc:36:98:2c:8d:d2:94:32:be:1a:58:e2:ad:1c:e2: a5:fe:27:ac:a3:eb:24:34:92:58:97:ac:09:f9:4a: a6:4b:20:75:4d:ca:69:11:14:cb:07:a8:1c:96:04: 78:dc:18:c2:c0:22:84:ef:ea:f5:58:98:40:92:73: e5:60:c7:ae:3d:87:20:a9:45:b6:41:42:02:43:1d: 77:26:aa:61:b9:4c:d7:cf:c9:09:92:e3:57:1f:a9: e8:58:94:f6:7d:1f:8d:f7:b1:55:4b:93:29:cc:9a: 1e:bf:f8:80:f3:13:5b:58:90:9a:f6:b4:a9:d6:33: 2c:8e:4e:48:76:28:02:d8:98:11:6d:f4:77:e3:9b: 03:1d:56:df:3b:73:1a:42:c1:cf:71:5e:ec:1d:66: ab:c1:19:e4:85:a5:c8:c7:c9:1b:91:9b:9d:55:0d: 8e:bc:9e:cc:74:44:fd:ae:6e:a7:fb:60:3b:b3:8d: 66:66:b7:9e:66:40:e5:19:d4:eb:8d:16:1b:29:10: 0f:e9:eb:88:3b:39:cc:a6:e8:ab:bb:c9:7a:28:71: ca:27:3c:ac:45:c7:5a:6b:39:71:e8:a9:8b:13:fd: d6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C9:68:35:2F:C1:A0:81:D0:EC:F9:04:8F:C0:6D:A4:EC:0B:AD:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/dd40db55-eee3-3dfa-b796-7f59b5bdd108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 198.67.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:bc:b7:28:db:62:49:3a:40:fc:6c:e3:c6:55:18:78:08:e3: 79:5a:94:90:70:e6:ad:ea:c8:bf:bd:e5:35:1f:75:5c:02:17: c9:de:e3:f7:4a:83:f1:9b:d2:19:e6:e9:bb:96:4b:e0:14:2f: 44:01:5a:75:62:64:86:78:42:d2:dc:2a:bd:39:16:c4:08:8f: 1a:70:77:d2:48:47:64:f9:0c:2a:12:42:6a:ad:e4:b4:9c:e8: b5:3c:12:1b:9f:d6:11:6c:74:02:4b:85:c4:d2:9d:35:d1:ba: 7e:66:77:44:9f:e3:8f:7e:8d:b8:23:aa:c1:99:45:0e:a2:0a: d5:47:51:fc:bf:04:bc:c2:53:0f:93:0f:e5:8a:11:f8:18:43: 4b:a0:75:85:cf:38:c2:a7:97:7b:9c:62:e6:f7:b1:76:cd:5a: c4:81:e7:35:ae:3e:b3:0f:17:ea:c3:27:80:4b:97:8d:f8:fa: 60:b7:2d:73:63:1b:11:a7:8c:32:2d:3a:43:16:5e:16:92:6a: 63:b6:17:9c:ae:0e:74:0a:6a:17:87:66:4d:f3:2b:71:77:75: 58:d8:c9:2e:38:a0:fa:3a:f4:08:f3:5e:bf:68:95:fc:ac:71: 07:92:d1:aa:b5:81:ea:36:0e:07:62:fb:06:0e:c5:74:27:9e: 9e:f4:1e:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUoCvPmq9kCXfNH6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI0MDMxMDAyMDAyNVoXDTI0MDYwODAxMDAyNVowLzEtMCsGA1UEAxMk NzM2OGUzMDAtZTM3Yi00ZDg3LWE1ZGEtNzgyOTk5NzNlYzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQub0nIdgf3EPbXQ3grrsrg6V/xs3Byo2vS3 cM38NpgsjdKUMr4aWOKtHOKl/ieso+skNJJYl6wJ+UqmSyB1TcppERTLB6gclgR4 3BjCwCKE7+r1WJhAknPlYMeuPYcgqUW2QUICQx13JqphuUzXz8kJkuNXH6noWJT2 fR+N97FVS5MpzJoev/iA8xNbWJCa9rSp1jMsjk5IdigC2JgRbfR345sDHVbfO3Ma QsHPcV7sHWarwRnkhaXIx8kbkZudVQ2OvJ7MdET9rm6n+2A7s41mZreeZkDlGdTr jRYbKRAP6euIOznMpuiru8l6KHHKJzysRcdaazlx6KmLE/3WtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7JaDUvwaCB0Oz5BI/AbaTsC61vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvZGQ0MGRiNTUtZWVlMy0z ZGZhLWI3OTYtN2Y1OWI1YmRkMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkMrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE68tyjbYkk6QPxs48ZVGHgI43lalJBw5q3qyL+95TUfdVwCF8ne4/dK g/Gb0hnm6buWS+AUL0QBWnViZIZ4QtLcKr05FsQIjxpwd9JIR2T5DCoSQmqt5LSc 6LU8Ehuf1hFsdAJLhcTSnTXRun5md0Sf449+jbgjqsGZRQ6iCtVHUfy/BLzCUw+T D+WKEfgYQ0ugdYXPOMKnl3ucYub3sXbNWsSB5zWuPrMPF+rDJ4BLl434+mC3LXNj GxGnjDItOkMWXhaSamO2F5yuDnQKaheHZk3zK3F3dVjYyS44oPo69AjzXr9olfys cQeS0aq1geo2Dgdi+wYOxXQnnp70HsA= -----END CERTIFICATE-----Generated at Fri May 24 07:27:49 2024 by rpki-client on console-fra.rpki-client.org