$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa File: 774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa (raw, json) Hash identifier: 5zmacJGdNsptUbqdZcc0lZSfP4eL0AWw8fiSJBBA/os= Subject key identifier: 53:9B:9D:20:03:FE:01:4D:DC:88:99:49:07:7C:6E:E2:89:D0:0A:E4 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F432858454C380EEF5764362F4BE43E20 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa Signing time: Sat 23 Mar 2024 01:00:24 +0000 ROA not before: Sat 23 Mar 2024 01:00:24 +0000 ROA not after: Fri 21 Jun 2024 01:00:24 +0000 asID: 16433 IP address blocks: 173.240.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:4c:38:0e:ef:57:64:36:2f:4b:e4:3e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Mar 23 01:00:24 2024 GMT Not After : Jun 21 01:00:24 2024 GMT Subject: CN=731c46d9-1aef-4433-89ab-a54161c68136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:64:8f:46:21:74:6f:2f:f6:eb:08:0f:18:82: d8:2e:af:6b:1a:cb:9b:92:74:c1:79:19:4b:53:77: b3:12:b5:ab:4f:c9:22:05:29:c3:67:73:43:24:32: f4:fc:7e:4b:9d:f2:04:a6:ff:ad:44:fc:c7:9d:b3: 91:9c:bb:b6:01:3c:3e:f8:26:39:dd:52:da:62:08: 8b:0e:02:2b:4b:db:8f:6f:24:e2:3f:92:76:76:bb: 2b:a5:a9:dc:82:c0:8e:61:fb:12:03:2a:5f:ab:4a: 4d:15:19:27:9f:e2:c8:7b:6e:f6:d1:55:8b:62:a4: 7c:33:25:3b:57:f4:02:37:8e:fb:c9:cf:ff:35:f9: c5:39:be:72:75:92:2c:c5:fe:30:3e:dc:dc:cd:4f: e8:06:dc:4b:e4:8e:c7:4c:0b:4f:d9:4b:99:cc:a7: b9:4f:8a:56:fc:78:aa:b9:2d:10:14:42:1a:24:30: 25:85:05:29:0a:df:39:76:3e:26:f9:f0:7a:7a:40: 91:86:c9:50:b3:12:c6:e0:82:1e:a3:a0:20:77:c4: 47:bb:33:40:b3:45:fb:cb:95:6a:81:d5:e7:9a:e2: 8e:a8:bd:8c:77:82:3b:a9:75:ac:ac:df:e6:18:67: c5:a8:70:e3:29:87:57:99:c7:5e:6e:44:e6:7c:3d: 2c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9B:9D:20:03:FE:01:4D:DC:88:99:49:07:7C:6E:E2:89:D0:0A:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 173.240.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:7f:6f:31:fa:98:61:4e:e4:82:6e:0a:0a:b8:94:c1:3a:a9: a1:2f:59:29:c9:8d:19:8b:19:65:de:f2:69:d1:ef:4e:58:e8: 52:fe:d4:9b:c0:e6:94:1a:2f:5d:5e:cf:3d:dd:3d:80:5c:5b: d8:0f:a7:df:61:a3:25:bb:43:90:4e:3f:fa:49:8f:ed:43:36: 82:14:ef:06:c7:c9:25:fc:77:61:04:73:ca:12:64:4c:a2:e4: b8:7a:4f:23:d9:c1:0b:4d:3f:76:58:c2:5e:fa:4d:1a:1e:1d: b9:ce:35:9e:58:bf:d4:9c:e3:15:0c:98:98:66:af:24:b6:70: 8f:8b:d5:c7:0e:3b:9d:d4:23:96:6f:bc:10:95:51:9a:b8:cf: 6d:ff:66:5d:a5:b3:fa:e1:96:4f:d8:2b:9b:e5:af:4c:f0:fa: c7:3c:d2:11:fd:ee:5f:ec:bb:9d:8b:43:3f:a4:bb:06:9c:82: e4:6b:98:57:f7:be:04:16:7d:34:32:bb:19:90:e2:72:90:4e: 40:81:74:f8:ff:f3:32:86:ff:b9:92:cf:d4:6e:2d:80:4a:fa: 76:8f:82:53:55:18:6a:87:3a:dc:5f:cd:79:f4:0f:35:19:a0: b7:b0:8c:db:9e:8a:46:08:ce:ec:72:f7:29:ef:a7:bb:ef:fe: 81:5f:6c:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVMOA7vV2Q2L0vkPiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI0MDMyMzAxMDAyNFoXDTI0MDYyMTAxMDAyNFowLzEtMCsGA1UEAxMk NzMxYzQ2ZDktMWFlZi00NDMzLTg5YWItYTU0MTYxYzY4MTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2SPRiF0by/26wgPGILYLq9rGsubknTBeRlL U3ezErWrT8kiBSnDZ3NDJDL0/H5LnfIEpv+tRPzHnbORnLu2ATw++CY53VLaYgiL DgIrS9uPbyTiP5J2drsrpancgsCOYfsSAypfq0pNFRknn+LIe2720VWLYqR8MyU7 V/QCN477yc//NfnFOb5ydZIsxf4wPtzczU/oBtxL5I7HTAtP2UuZzKe5T4pW/Hiq uS0QFEIaJDAlhQUpCt85dj4m+fB6ekCRhslQsxLG4IIeo6Agd8RHuzNAs0X7y5Vq gdXnmuKOqL2Md4I7qXWsrN/mGGfFqHDjKYdXmcdebkTmfD0s+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFObnSAD/gFN3IiZSQd8buKJ0ArkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvNzc0ZGI2ZjAtY2YyZC0z OTVlLWI1YTctNDBhNWQyMTEzNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp/bzH6mGFO5IJuCgq4lME6qaEvWSnJjRmLGWXe8mnR705Y6FL+1JvA 5pQaL11ezz3dPYBcW9gPp99hoyW7Q5BOP/pJj+1DNoIU7wbHySX8d2EEc8oSZEyi 5Lh6TyPZwQtNP3ZYwl76TRoeHbnONZ5Yv9Sc4xUMmJhmryS2cI+L1ccOO53UI5Zv vBCVUZq4z23/Zl2ls/rhlk/YK5vlr0zw+sc80hH97l/su52LQz+kuwacguRrmFf3 vgQWfTQyuxmQ4nKQTkCBdPj/8zKG/7mSz9RuLYBK+naPglNVGGqHOtxfzXn0DzUZ oLewjNueikYIzuxy9ynvp7vv/oFfbKQ= -----END CERTIFICATE-----Generated at Wed May 15 19:25:59 2024 by rpki-client on console-ams.rpki-client.org