$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/1a4b085c-0288-32b1-87fe-0eb35b30283b.roa File: 1a4b085c-0288-32b1-87fe-0eb35b30283b.roa (raw, json) Hash identifier: EvlO2Pzj/fEWxIcTbTqMQlLkyL0TLYrO2LAYRu0NSzU= Subject key identifier: 88:5D:D9:B3:D9:45:31:B8:07:0F:34:92:C9:A1:4C:25:75:D7:BA:86 Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F432858454629DAF5830D07359529F380 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/1a4b085c-0288-32b1-87fe-0eb35b30283b.roa Signing time: Wed 20 Mar 2024 20:57:00 +0000 ROA not before: Wed 20 Mar 2024 20:57:00 +0000 ROA not after: Tue 18 Jun 2024 20:57:00 +0000 asID: 36040 IP address blocks: 208.117.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:29:da:f5:83:0d:07:35:95:29:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Mar 20 20:57:00 2024 GMT Not After : Jun 18 20:57:00 2024 GMT Subject: CN=6212c646-a417-4214-ab26-26a32259d1c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e1:14:15:b6:88:1c:da:19:c9:55:04:57:79: 76:9d:81:19:9c:81:06:cb:da:15:b3:84:13:b9:7b: f9:10:90:da:63:02:a8:6a:a5:fe:cf:ec:10:cb:b2: 98:26:4e:7d:1e:a7:bf:cb:30:48:02:ae:bf:88:aa: 35:39:ae:72:e2:96:0b:36:fe:6b:ab:a4:cf:32:4c: c2:50:75:e6:4f:24:2f:fc:ba:85:91:fe:a4:f1:e5: db:ed:c0:ed:16:62:d0:4b:e4:19:89:e0:76:7d:c5: d9:0b:f9:5c:b8:21:a1:0a:50:e9:8f:67:15:cc:19: a4:5d:21:b2:fa:33:41:cc:a7:d7:89:55:4e:c4:31: 91:f3:72:45:c0:cd:53:65:55:71:3e:03:58:13:5d: 62:57:29:1c:7a:ee:c2:b5:d2:92:69:64:9d:1c:bf: cc:44:16:d3:73:16:2a:69:7c:fd:52:15:fd:f9:7c: 79:21:09:46:47:d9:ad:24:29:ee:b3:72:13:59:85: 43:33:83:a6:d8:75:01:ec:d9:2f:4e:92:ff:d2:65: 35:ab:01:61:a3:f2:18:e9:da:20:a9:1b:a9:93:1f: 68:1c:61:a0:17:b8:84:46:b3:cb:3b:4f:45:43:bf: 0f:f3:e2:a7:0b:2d:7f:31:c0:b3:d1:50:10:cf:64: f5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5D:D9:B3:D9:45:31:B8:07:0F:34:92:C9:A1:4C:25:75:D7:BA:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/1a4b085c-0288-32b1-87fe-0eb35b30283b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 208.117.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:81:bc:55:28:16:28:d8:33:d6:97:c6:39:d0:39:97:3f:d4: 27:b5:e9:fb:d1:95:f8:96:ef:64:3f:0f:25:64:8e:24:ec:a1: da:e1:97:05:0a:c0:15:e0:13:c0:8f:25:d4:c7:4b:c5:d9:c6: 07:50:74:66:53:32:7a:7f:21:96:20:e6:2a:82:ae:a3:03:cf: e1:8c:9f:f5:16:e1:0d:4d:5c:6f:05:36:2e:22:92:aa:50:61: 35:a9:1d:a2:48:cf:4f:cd:15:84:6f:af:44:d4:f7:d2:cb:45: 0d:52:e5:e9:62:e2:81:1c:1b:7d:17:60:9a:11:2a:f0:e2:7a: 3b:a9:2e:cb:97:b4:39:df:90:32:99:cd:22:81:f1:6b:55:90: 94:3b:e1:71:51:a0:fb:9e:5d:32:af:90:4e:63:ef:73:f4:42: 06:9a:4f:1b:20:91:fc:ec:b1:36:4c:bd:62:95:a7:84:31:82: c6:57:9b:ec:11:ce:84:69:25:7b:a7:25:d7:69:6f:69:4b:1c: 25:64:3a:d3:0e:f8:be:d8:3c:96:50:3d:0b:50:e3:3e:bc:57: c3:ae:34:82:e8:84:06:5e:b4:4c:46:2c:23:8a:df:80:5b:10: f5:ad:cb:13:9b:6d:30:30:a7:19:24:c0:60:97:f8:d8:02:df: 5b:db:f1:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGKdr1gw0HNZUp84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI0MDMyMDIwNTcwMFoXDTI0MDYxODIwNTcwMFowLzEtMCsGA1UEAxMk NjIxMmM2NDYtYTQxNy00MjE0LWFiMjYtMjZhMzIyNTlkMWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+EUFbaIHNoZyVUEV3l2nYEZnIEGy9oVs4QT uXv5EJDaYwKoaqX+z+wQy7KYJk59Hqe/yzBIAq6/iKo1Oa5y4pYLNv5rq6TPMkzC UHXmTyQv/LqFkf6k8eXb7cDtFmLQS+QZieB2fcXZC/lcuCGhClDpj2cVzBmkXSGy +jNBzKfXiVVOxDGR83JFwM1TZVVxPgNYE11iVykceu7CtdKSaWSdHL/MRBbTcxYq aXz9UhX9+Xx5IQlGR9mtJCnus3ITWYVDM4Om2HUB7NkvTpL/0mU1qwFho/IY6dog qRupkx9oHGGgF7iERrPLO09FQ78P8+KnCy1/McCz0VAQz2T1ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhd2bPZRTG4Bw80ksmhTCV117qGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvMWE0YjA4NWMtMDI4OC0z MmIxLTg3ZmUtMGViMzViMzAyODNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0HXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOBvFUoFijYM9aXxjnQOZc/1Ce16fvRlfiW72Q/DyVkjiTsodrhlwUK wBXgE8CPJdTHS8XZxgdQdGZTMnp/IZYg5iqCrqMDz+GMn/UW4Q1NXG8FNi4ikqpQ YTWpHaJIz0/NFYRvr0TU99LLRQ1S5eli4oEcG30XYJoRKvDiejupLsuXtDnfkDKZ zSKB8WtVkJQ74XFRoPueXTKvkE5j73P0QgaaTxsgkfzssTZMvWKVp4QxgsZXm+wR zoRpJXunJddpb2lLHCVkOtMO+L7YPJZQPQtQ4z68V8OuNILohAZetExGLCOK34Bb EPWtyxObbTAwpxkkwGCX+NgC31vb8cM= -----END CERTIFICATE-----Generated at Sun May 19 01:55:09 2024 by rpki-client on console-fra.rpki-client.org