$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2c1d0885-1b62-30c7-a746-4364a48c8a20.roa File: 2c1d0885-1b62-30c7-a746-4364a48c8a20.roa (raw, json) Hash identifier: /LfKDWgWP93lgfgxQoQi4jJLzqvAgRsCKeirnTNg5vI= Subject key identifier: 8B:E6:F0:F1:1D:12:25:0F:66:29:80:28:47:54:73:02:AC:55:A5:5F Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F43285845F02816F1B1CBCC7C4E0AE490 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2c1d0885-1b62-30c7-a746-4364a48c8a20.roa Signing time: Mon 20 May 2024 18:20:51 +0000 ROA not before: Mon 20 May 2024 18:20:51 +0000 ROA not after: Sun 18 Aug 2024 18:20:51 +0000 asID: 53356 IP address blocks: 200.229.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:f0:28:16:f1:b1:cb:cc:7c:4e:0a:e4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: May 20 18:20:51 2024 GMT Not After : Aug 18 18:20:51 2024 GMT Subject: CN=8d621961-ff65-4a9f-9569-56501b5054a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:cc:0b:e8:f4:f0:28:bf:1a:bf:b2:d1:8c: 14:bf:4e:01:12:b4:5c:dd:11:b2:c2:f6:3b:88:f6: 6e:6c:6c:0c:de:9b:47:4e:eb:2f:2a:91:73:b3:7b: 86:f6:d0:ce:42:84:29:17:b7:37:4f:21:b6:36:43: 1e:8c:57:ae:d1:22:e7:1b:39:1c:12:b4:7d:9e:43: 70:35:ad:18:0a:da:53:7e:99:06:db:56:36:2a:9d: bb:41:e6:af:e2:0f:02:2a:2b:26:f0:95:39:45:93: 31:28:90:52:70:c7:2b:1a:d8:28:0a:3d:b3:4b:f6: 0c:d3:d0:9f:ea:49:52:c0:7f:09:da:04:82:e1:93: 96:ee:64:b4:a7:25:b6:86:dd:24:0f:52:16:e2:7b: 49:5a:bf:c4:a3:52:59:b7:b6:88:10:8e:8b:67:b5: d5:67:bc:2b:9e:73:e7:0a:0b:b3:d3:fd:23:74:cc: 7b:b5:a3:7f:a7:03:c3:84:42:16:3c:01:e4:9f:cc: 70:c9:8e:49:95:b4:e4:c7:a9:2b:68:57:39:29:8b: 4e:c9:f8:7e:bd:ac:4e:ff:c1:be:c0:e3:0b:fc:7f: b5:e1:0a:19:46:e9:92:80:3b:97:fa:85:b9:06:f3: f9:88:4f:94:1a:ca:71:9c:04:5e:aa:bb:4b:a9:eb: 70:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E6:F0:F1:1D:12:25:0F:66:29:80:28:47:54:73:02:AC:55:A5:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2c1d0885-1b62-30c7-a746-4364a48c8a20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 200.229.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:0a:03:6c:bd:fc:39:6d:f6:83:a9:34:bb:6d:e1:4d:79:a7: 80:85:79:77:9d:f7:da:21:61:eb:77:ff:1f:ce:cc:c5:8f:e7: e1:21:56:a6:7e:ab:7c:98:ba:01:1c:42:8c:4a:65:d5:af:06: f6:c6:7f:4c:ab:ba:f9:55:c3:3e:ba:17:d7:9b:41:9e:86:c8: 59:28:ae:cc:89:47:32:41:05:d6:12:25:74:42:2a:a0:ac:bd: a7:b7:25:71:49:bb:cf:bb:61:be:7d:af:54:e8:3f:26:c8:d0: 6e:9e:8e:a3:e8:0d:29:50:21:4e:d3:b7:78:6a:56:e1:9b:81: 7d:c2:e2:7c:6a:87:55:a8:45:0b:3b:85:7a:bc:85:ef:51:ce: 71:02:35:15:15:1e:3b:7e:19:1f:66:27:52:b1:f3:6f:8b:35: bd:15:80:27:81:88:b2:29:71:3d:33:90:42:a9:ce:74:70:4a: 29:69:78:fa:40:26:60:c1:a2:ed:ad:7f:4f:12:e0:70:c8:63: 4d:90:04:1d:b0:87:3c:ed:01:8b:67:fa:79:05:d5:83:64:99: c7:49:cf:96:1a:5c:28:46:05:ef:c5:8d:99:d8:4e:06:d8:ef: 17:8e:82:a3:ae:e4:5f:58:7d:48:e2:3f:3b:4b:31:eb:f9:ab: a3:33:b9:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXwKBbxscvMfE4K5JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI0MDUyMDE4MjA1MVoXDTI0MDgxODE4MjA1MVowLzEtMCsGA1UEAxMk OGQ2MjE5NjEtZmY2NS00YTlmLTk1NjktNTY1MDFiNTA1NGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6fMC+j08Ci/Gr+y0YwUv04BErRc3RGywvY7 iPZubGwM3ptHTusvKpFzs3uG9tDOQoQpF7c3TyG2NkMejFeu0SLnGzkcErR9nkNw Na0YCtpTfpkG21Y2Kp27Qeav4g8CKism8JU5RZMxKJBScMcrGtgoCj2zS/YM09Cf 6klSwH8J2gSC4ZOW7mS0pyW2ht0kD1IW4ntJWr/Eo1JZt7aIEI6LZ7XVZ7wrnnPn Cguz0/0jdMx7taN/pwPDhEIWPAHkn8xwyY5JlbTkx6kraFc5KYtOyfh+vaxO/8G+ wOML/H+14QoZRumSgDuX+oW5BvP5iE+UGspxnAReqrtLqetwvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvm8PEdEiUPZimAKEdUcwKsVaVfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvMmMxZDA4ODUtMWI2Mi0z MGM3LWE3NDYtNDM2NGE0OGM4YTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyOUZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0KA2y9/Dlt9oOpNLtt4U15p4CFeXed99ohYet3/x/OzMWP5+EhVqZ+ q3yYugEcQoxKZdWvBvbGf0yruvlVwz66F9ebQZ6GyFkorsyJRzJBBdYSJXRCKqCs vae3JXFJu8+7Yb59r1ToPybI0G6ejqPoDSlQIU7Tt3hqVuGbgX3C4nxqh1WoRQs7 hXq8he9RznECNRUVHjt+GR9mJ1Kx82+LNb0VgCeBiLIpcT0zkEKpznRwSilpePpA JmDBou2tf08S4HDIY02QBB2whzztAYtn+nkF1YNkmcdJz5YaXChGBe/FjZnYTgbY 7xeOgqOu5F9YfUjiPztLMev5q6MzuQU= -----END CERTIFICATE-----Generated at Mon Jun 3 06:45:52 2024 by rpki-client on console-fra.rpki-client.org