$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/be6d32c9-5027-388b-bee4-2efe6a8db1f0.roa File: be6d32c9-5027-388b-bee4-2efe6a8db1f0.roa (raw, json) Hash identifier: auCjWdUChAFF3dgxV6o3VbW4dQLMwJdpbvkFz12dJgo= Subject key identifier: 4A:32:F2:4A:F2:B3:96:66:E2:01:19:5F:82:4B:61:A4:0F:4A:03:C8 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858453B77F6FE0C0560B416D1BA40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/be6d32c9-5027-388b-bee4-2efe6a8db1f0.roa Signing time: Sun 17 Mar 2024 01:00:26 +0000 ROA not before: Sun 17 Mar 2024 01:00:26 +0000 ROA not after: Sat 15 Jun 2024 01:00:26 +0000 asID: 852 IP address blocks: 173.181.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:3b:77:f6:fe:0c:05:60:b4:16:d1:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 17 01:00:26 2024 GMT Not After : Jun 15 01:00:26 2024 GMT Subject: CN=d015a2d8-7e39-46f7-8ef6-b786f2878c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:93:3b:a8:2a:70:19:ee:61:38:50:da:c3:55: cd:dd:ae:e8:a6:e8:b5:4e:fd:b5:8e:61:ae:3e:53: c3:26:fc:20:84:e8:a0:09:8f:08:b9:43:fa:50:36: 1f:8d:b0:15:04:70:16:03:9f:39:8b:62:9d:79:82: 15:11:2c:76:bf:b9:be:f3:e5:2b:3a:99:d4:0e:cb: 2a:d6:29:a2:97:bf:92:c8:78:e1:38:cf:6c:b9:df: c5:87:a4:5d:08:02:e7:31:14:22:73:d0:f2:ac:33: b2:f4:34:4a:d2:3e:b4:fc:79:94:09:cf:c1:7a:91: 37:e7:b5:f0:e4:5a:77:e8:03:7f:3b:f0:e1:4f:40: 3e:e3:db:7c:13:38:e5:07:07:85:14:ea:7c:9b:cd: 31:56:32:b4:67:93:a5:15:39:7c:dd:ae:55:4b:41: 0c:4b:dc:f0:7c:a0:0a:a2:6c:60:12:7f:fd:1f:23: bb:34:4a:e0:21:b8:c7:03:f4:0a:6c:4d:17:1c:a2: 06:0b:f2:bf:5f:64:f8:9b:19:c0:c4:d1:be:4a:6e: 58:b4:bd:f5:4c:72:53:e5:a4:dd:20:c4:96:3b:5f: 65:1e:20:a3:57:aa:68:2d:3b:25:56:a6:ae:dc:2e: 67:eb:fa:35:9f:6b:d2:e8:52:05:85:60:62:95:85: a9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:32:F2:4A:F2:B3:96:66:E2:01:19:5F:82:4B:61:A4:0F:4A:03:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/be6d32c9-5027-388b-bee4-2efe6a8db1f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 173.181.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:19:a8:2a:9b:d1:13:4a:49:c4:54:d5:be:6e:7c:55:c3:19: 56:71:1e:0d:1a:07:43:50:5d:f8:22:48:1c:d6:7a:98:31:c7: 3b:22:1b:3b:d2:82:17:a0:4d:0c:bf:df:7a:53:7f:e2:ad:ab: b0:e1:ad:f6:c3:b9:47:b2:76:8f:2d:19:d8:97:f8:97:d6:c7: 7d:13:52:38:38:98:dc:44:3e:8d:94:e3:d9:fa:17:7e:90:a4: 9c:0b:96:c8:75:56:7b:74:f7:a9:b8:f7:50:e0:6b:f6:f2:9a: 82:e8:ab:a1:24:2d:78:43:de:06:58:56:bb:ef:00:fe:8c:7e: b5:56:bb:fb:18:da:3f:2e:39:75:84:90:73:46:c9:04:5a:ae: 8d:06:38:f9:b5:ad:e1:3d:df:4e:72:e2:45:ed:01:f2:32:33: 87:02:50:63:66:59:3b:0c:0d:2d:84:e2:31:14:ab:45:87:30: af:1e:6e:57:6c:35:36:f7:f4:7d:0a:09:74:4d:cc:ac:0a:7a: a1:e3:4f:37:4a:6c:24:f9:17:fe:28:15:b9:1e:49:03:2c:62: 4e:97:3f:44:49:5b:9c:47:fc:1e:84:60:40:25:45:13:01:a8: 88:be:ba:d0:1d:70:43:c2:92:fc:b9:5a:88:34:05:4d:fd:ad: 27:9b:40:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU7d/b+DAVgtBbRukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MDMxNzAxMDAyNloXDTI0MDYxNTAxMDAyNlowLzEtMCsGA1UEAxMk ZDAxNWEyZDgtN2UzOS00NmY3LThlZjYtYjc4NmYyODc4YzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpM7qCpwGe5hOFDaw1XN3a7opui1Tv21jmGu PlPDJvwghOigCY8IuUP6UDYfjbAVBHAWA585i2KdeYIVESx2v7m+8+UrOpnUDssq 1imil7+SyHjhOM9sud/Fh6RdCALnMRQic9DyrDOy9DRK0j60/HmUCc/BepE357Xw 5Fp36AN/O/DhT0A+49t8EzjlBweFFOp8m80xVjK0Z5OlFTl83a5VS0EMS9zwfKAK omxgEn/9HyO7NErgIbjHA/QKbE0XHKIGC/K/X2T4mxnAxNG+Sm5YtL31THJT5aTd IMSWO19lHiCjV6poLTslVqau3C5n6/o1n2vS6FIFhWBilYWpBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoy8krys5Zm4gEZX4JLYaQPSgPIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYmU2ZDMyYzktNTAyNy0z ODhiLWJlZTQtMmVmZTZhOGRiMWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALsZqCqb0RNKScRU1b5ufFXDGVZxHg0aB0NQXfgiSBzWepgxxzsiGzvS ghegTQy/33pTf+Ktq7DhrfbDuUeydo8tGdiX+JfWx30TUjg4mNxEPo2U49n6F36Q pJwLlsh1Vnt096m491Dga/bymoLoq6EkLXhD3gZYVrvvAP6MfrVWu/sY2j8uOXWE kHNGyQRaro0GOPm1reE9305y4kXtAfIyM4cCUGNmWTsMDS2E4jEUq0WHMK8eblds NTb39H0KCXRNzKwKeqHjTzdKbCT5F/4oFbkeSQMsYk6XP0RJW5xH/B6EYEAlRRMB qIi+utAdcEPCkvy5Wog0BU39rSebQJk= -----END CERTIFICATE-----Generated at Sun May 19 01:55:04 2024 by rpki-client on console-fra.rpki-client.org