$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/14d37da2-852f-3765-ab9a-cb7854b7be23.roa File: 14d37da2-852f-3765-ab9a-cb7854b7be23.roa (raw, json) Hash identifier: Yp3C+9qunFx5/Dw+Zjc4QmzD1+6PghZ8qYlPu/Wz3yw= Subject key identifier: 97:2A:64:52:FE:D6:EB:DE:9B:48:13:98:B0:CE:22:55:54:33:CA:F6 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584568499BF235C33FB3BF2DF500 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/14d37da2-852f-3765-ab9a-cb7854b7be23.roa Signing time: Tue 02 Apr 2024 02:18:27 +0000 ROA not before: Tue 02 Apr 2024 02:18:27 +0000 ROA not after: Mon 01 Jul 2024 02:18:27 +0000 asID: 834 IP address blocks: 45.40.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:68:49:9b:f2:35:c3:3f:b3:bf:2d:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Apr 2 02:18:27 2024 GMT Not After : Jul 1 02:18:27 2024 GMT Subject: CN=6d5031be-7785-4e4d-b9dd-9f4847267ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d4:8a:f2:3e:28:85:cd:12:89:13:1d:75:9f: a1:c2:af:c5:ce:d9:a0:f2:41:fc:36:2f:e5:93:50: a4:33:16:3d:be:be:f5:73:ea:5d:07:f8:55:12:54: 2e:65:96:44:31:56:be:2e:df:ad:d5:22:85:45:c8: 79:01:a7:89:94:76:81:68:7f:20:fd:74:2e:1f:e7: c3:7b:a9:19:76:57:73:17:dd:87:fb:c2:46:22:e5: 2f:30:47:39:2e:b5:b1:09:2b:a9:fe:c0:19:d9:5c: 45:60:66:08:98:45:35:f4:60:b6:3a:4c:30:92:a2: 3f:95:69:f2:59:ae:5a:e2:d8:6e:fb:87:17:76:bc: a9:eb:87:09:d4:1b:5d:b8:5a:38:1e:cc:66:2e:b8: a7:68:ee:7d:77:1b:29:44:93:cf:dc:b8:c4:d1:ca: 46:7a:c0:38:df:e1:64:34:73:c3:85:2f:85:4d:1c: 69:c8:29:4b:ef:2d:98:76:30:dd:a6:61:27:18:91: dc:b1:9e:17:11:1c:d2:9f:43:63:fa:2e:f2:9d:7f: 10:db:51:8b:d7:45:5c:5d:69:00:85:3f:9c:9f:8f: 9c:83:b2:d7:75:b8:4b:7b:cd:4f:45:b5:c8:31:a0: e4:02:7d:a3:58:99:af:c1:57:d2:34:49:32:4c:bb: 95:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2A:64:52:FE:D6:EB:DE:9B:48:13:98:B0:CE:22:55:54:33:CA:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/14d37da2-852f-3765-ab9a-cb7854b7be23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 45.40.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:ed:8d:84:6e:08:fa:bb:a9:89:c0:fa:a5:3d:39:d3:71:de: bd:2b:24:67:fd:03:8c:68:9a:3b:e5:0c:13:02:41:61:ef:bc: 70:cf:55:5e:04:51:d7:d6:c1:e3:ba:aa:17:e3:fb:9d:bb:16: 93:d1:18:8b:49:7c:7a:0c:cb:f2:99:33:74:ef:9a:3b:a0:6f: 22:28:cf:8d:a5:03:58:15:2f:70:0d:53:63:ed:45:e9:87:05: 81:b6:6c:f9:fb:b7:ad:93:46:0b:af:de:01:d5:aa:cc:23:38: 25:00:c4:0b:6c:80:d4:1e:94:5e:e3:83:94:fd:62:87:06:07: 1e:33:3c:22:ab:fb:e3:b4:4b:4e:5f:ba:fb:13:09:5a:49:3c: 8e:99:48:91:36:ed:a2:6c:6c:ae:63:05:d6:8b:a8:b7:66:53: 8f:0d:4a:13:9a:37:27:70:21:66:75:59:e1:6d:e9:f4:fc:6b: 07:44:89:38:58:62:19:96:02:10:83:c8:fa:d2:c4:88:00:17: 12:b7:22:b1:99:c1:31:d5:98:f1:9d:3b:cd:25:13:16:d1:52: a0:b5:82:3e:8f:81:2c:f1:c9:e7:f6:0c:28:5c:fa:f4:ea:cc: 2e:18:fe:80:3d:b3:1b:8a:77:22:4d:45:f0:ce:1d:7a:f2:15: 1c:25:af:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVoSZvyNcM/s78t9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI0MDQwMjAyMTgyN1oXDTI0MDcwMTAyMTgyN1owLzEtMCsGA1UEAxMk NmQ1MDMxYmUtNzc4NS00ZTRkLWI5ZGQtOWY0ODQ3MjY3ZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNSK8j4ohc0SiRMddZ+hwq/Fztmg8kH8Ni/l k1CkMxY9vr71c+pdB/hVElQuZZZEMVa+Lt+t1SKFRch5AaeJlHaBaH8g/XQuH+fD e6kZdldzF92H+8JGIuUvMEc5LrWxCSup/sAZ2VxFYGYImEU19GC2OkwwkqI/lWny Wa5a4thu+4cXdryp64cJ1BtduFo4HsxmLrinaO59dxspRJPP3LjE0cpGesA43+Fk NHPDhS+FTRxpyClL7y2YdjDdpmEnGJHcsZ4XERzSn0Nj+i7ynX8Q21GL10VcXWkA hT+cn4+cg7LXdbhLe81PRbXIMaDkAn2jWJmvwVfSNEkyTLuVwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcqZFL+1uvem0gTmLDOIlVUM8r2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMTRkMzdkYTItODUyZi0z NzY1LWFiOWEtY2I3ODU0YjdiZTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSh1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL3tjYRuCPq7qYnA+qU9OdNx3r0rJGf9A4xomjvlDBMCQWHvvHDPVV4E UdfWweO6qhfj+527FpPRGItJfHoMy/KZM3TvmjugbyIoz42lA1gVL3ANU2PtRemH BYG2bPn7t62TRguv3gHVqswjOCUAxAtsgNQelF7jg5T9YocGBx4zPCKr++O0S05f uvsTCVpJPI6ZSJE27aJsbK5jBdaLqLdmU48NShOaNydwIWZ1WeFt6fT8awdEiThY YhmWAhCDyPrSxIgAFxK3IrGZwTHVmPGdO80lExbRUqC1gj6PgSzxyef2DChc+vTq zC4Y/oA9sxuKdyJNRfDOHXryFRwlr/E= -----END CERTIFICATE-----Generated at Thu May 2 21:10:42 2024 by rpki-client on console-fra.rpki-client.org