$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/940897aa-37fe-3fcf-805a-63ddb933a32a.roa File: 940897aa-37fe-3fcf-805a-63ddb933a32a.roa (raw, json) Hash identifier: qMwVpKcPtPzurT6VbtUTj+ecuTTfuo3WmyTV3GAXAmI= Subject key identifier: FE:2A:AB:A9:FE:31:03:2E:41:28:7B:30:54:98:11:D0:84:65:C1:32 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F43285845CE09146176874FB14E8DBA80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/940897aa-37fe-3fcf-805a-63ddb933a32a.roa Signing time: Wed 08 May 2024 13:00:34 +0000 ROA not before: Wed 08 May 2024 13:00:34 +0000 ROA not after: Tue 06 Aug 2024 13:00:34 +0000 asID: 54858 IP address blocks: 208.52.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ce:09:14:61:76:87:4f:b1:4e:8d:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: May 8 13:00:34 2024 GMT Not After : Aug 6 13:00:34 2024 GMT Subject: CN=19a09e16-96ae-42b9-b80a-78a73cfcac21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:29:39:c0:79:f2:13:1b:30:5e:fc:5f:8c:18: 8e:bd:d4:ab:bc:19:e5:db:e7:56:9e:c9:92:6e:f6: 4f:87:34:1f:f3:d5:bb:41:93:07:f5:c3:9c:2f:07: 34:39:9c:69:11:d0:9e:20:13:4c:44:79:30:23:f2: da:07:ff:fb:38:58:f7:22:58:c5:0f:3b:55:77:f1: 09:28:1b:e1:21:d4:4e:2c:0a:d7:96:04:73:dc:75: 7f:27:bc:49:37:c7:1c:09:15:f3:6e:e2:35:c3:6f: b7:5e:c3:9d:94:29:03:d2:c6:d4:7a:d5:ed:01:1a: 8a:88:d5:39:66:cd:96:ab:4a:5a:b1:6a:01:8a:ca: 95:42:86:0a:e2:d0:c6:dd:29:1a:2e:b5:b2:1b:2b: 2a:7e:11:d8:2c:78:e9:4a:de:7f:c3:b3:af:c1:25: 23:f2:c4:55:30:66:a7:16:54:07:ff:f9:c2:86:74: bb:8a:1a:2e:4c:c3:5a:ea:07:14:4b:2a:c5:42:8e: a0:a6:37:f0:22:ce:1a:19:93:2c:1c:93:80:85:f7: 2e:6c:fc:72:68:4d:a6:b4:f0:1e:56:ab:1e:8e:0c: 2a:87:fd:7c:ce:23:90:da:2b:a8:64:fe:7e:80:b2: 30:1c:f0:ee:7f:c1:2e:44:7c:2c:fb:59:5d:57:45: 4f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2A:AB:A9:FE:31:03:2E:41:28:7B:30:54:98:11:D0:84:65:C1:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/940897aa-37fe-3fcf-805a-63ddb933a32a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 208.52.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:52:87:d4:63:c1:63:3d:a6:00:32:e0:41:a0:dc:f5:ca:15: 9c:3f:ae:31:3d:f2:8b:f9:85:1e:b2:0d:7a:3a:10:6c:2a:e9: 16:f2:20:67:5c:2f:f9:49:9d:8e:de:25:cc:47:fd:ae:75:66: 8b:04:e0:1e:8b:92:f7:8e:4e:c4:e6:42:27:33:03:92:bb:75: 71:72:00:86:3d:f4:8b:7e:67:78:4c:6b:c0:a2:a3:cc:8e:70: a3:45:c0:69:14:71:aa:c8:92:b0:1a:24:19:6e:16:29:db:34: 94:6d:6e:06:49:ce:8e:a7:8b:e6:30:f2:c2:2c:1d:2d:27:a7: 1c:de:cb:a7:4c:f3:67:77:bf:36:a9:c0:58:a7:16:af:37:26: 63:19:47:58:96:8b:01:03:20:90:13:28:c4:9d:24:11:6e:9d: 4c:86:9c:a4:36:ec:cd:6f:e3:08:d6:f1:06:07:78:62:b8:4e: 03:90:ec:f2:56:bb:e7:68:18:9b:fd:6c:e5:e1:34:2b:87:3c: 14:9a:c0:78:96:06:46:b9:8a:18:1b:4a:c3:3e:09:6c:c8:79: c1:d2:66:56:e3:73:6f:09:3d:77:e6:18:7a:f1:d1:2b:fe:9b: e1:41:ed:95:8e:bd:df:65:fe:fb:30:c8:0b:e2:4e:a0:3c:2a: 73:75:a5:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXOCRRhdodPsU6NuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI0MDUwODEzMDAzNFoXDTI0MDgwNjEzMDAzNFowLzEtMCsGA1UEAxMk MTlhMDllMTYtOTZhZS00MmI5LWI4MGEtNzhhNzNjZmNhYzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSk5wHnyExswXvxfjBiOvdSrvBnl2+dWnsmS bvZPhzQf89W7QZMH9cOcLwc0OZxpEdCeIBNMRHkwI/LaB//7OFj3IljFDztVd/EJ KBvhIdROLArXlgRz3HV/J7xJN8ccCRXzbuI1w2+3XsOdlCkD0sbUetXtARqKiNU5 Zs2Wq0pasWoBisqVQoYK4tDG3SkaLrWyGysqfhHYLHjpSt5/w7OvwSUj8sRVMGan FlQH//nChnS7ihouTMNa6gcUSyrFQo6gpjfwIs4aGZMsHJOAhfcubPxyaE2mtPAe Vqsejgwqh/18ziOQ2iuoZP5+gLIwHPDuf8EuRHws+1ldV0VPUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4qq6n+MQMuQSh7MFSYEdCEZcEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOTQwODk3YWEtMzdmZS0z ZmNmLTgwNWEtNjNkZGI5MzNhMzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0DQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBSh9RjwWM9pgAy4EGg3PXKFZw/rjE98ov5hR6yDXo6EGwq6RbyIGdc L/lJnY7eJcxH/a51ZosE4B6LkveOTsTmQiczA5K7dXFyAIY99It+Z3hMa8Cio8yO cKNFwGkUcarIkrAaJBluFinbNJRtbgZJzo6ni+Yw8sIsHS0npxzey6dM82d3vzap wFinFq83JmMZR1iWiwEDIJATKMSdJBFunUyGnKQ27M1v4wjW8QYHeGK4TgOQ7PJW u+doGJv9bOXhNCuHPBSawHiWBka5ihgbSsM+CWzIecHSZlbjc28JPXfmGHrx0Sv+ m+FB7ZWOvd9l/vswyAviTqA8KnN1pZI= -----END CERTIFICATE-----Generated at Sat May 18 01:57:36 2024 by rpki-client on console-ams.rpki-client.org