$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa File: c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa (raw, json) Hash identifier: VTESk2ImPbqFMEo3O7GDZQhdB4sazYSqDLyqXQ+grcM= Subject key identifier: 29:1A:8A:F0:5B:F5:A5:88:D8:29:D4:12:F0:AA:C6:00:9B:85:AB:31 Certificate issuer: /CN=3767dced-4e89-4965-b8de-50e421201b4d Certificate serial: 010D0C9F4328584529528FF386E24D93928A71C0 Authority key identifier: 49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa Signing time: Sun 10 Mar 2024 13:00:31 +0000 ROA not before: Sun 10 Mar 2024 13:00:31 +0000 ROA not after: Sat 08 Jun 2024 13:00:31 +0000 asID: 11602 IP address blocks: 151.159.216.0/22 maxlen: 24 151.159.240.0/20 maxlen: 24 151.159.192.0/20 maxlen: 24 151.159.208.0/21 maxlen: 24 151.159.0.0/17 maxlen: 24 151.159.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:29:52:8f:f3:86:e2:4d:93:92:8a:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3767dced-4e89-4965-b8de-50e421201b4d Validity Not Before: Mar 10 13:00:31 2024 GMT Not After : Jun 8 13:00:31 2024 GMT Subject: CN=908cd0b0-e514-4775-ade3-7248a822077d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cb:d8:26:db:16:3b:6a:69:8a:a9:b0:8d:65: c4:d8:ef:e1:7c:1f:f7:7b:71:0e:7c:c9:90:9f:c8: 5a:22:3c:18:ee:a8:c2:86:a7:61:3d:0c:46:03:5d: c0:f6:58:83:66:1c:b6:ab:01:f1:d3:0f:b4:bf:d7: 96:83:a0:c7:17:bd:f9:04:bc:f6:82:22:7a:2d:a0: d5:41:cb:83:1e:2f:7e:6b:91:bd:e9:25:38:91:33: 0b:8c:e3:69:61:16:d9:23:9a:fc:a6:81:ad:2a:38: 60:bc:33:1c:ce:33:ac:13:33:54:12:d2:fa:fc:d3: 43:eb:53:cd:00:92:31:69:d0:43:77:7f:6a:70:66: 0e:5a:5f:e7:65:91:37:a8:0a:70:e6:cb:73:d7:20: 5c:35:13:14:31:5b:30:2d:b3:41:74:e4:de:01:a2: d6:e8:d1:52:5f:b8:dd:4a:a6:bd:7a:20:26:94:0c: 39:08:30:58:14:c5:db:46:06:65:b3:cd:4f:e1:9e: 7c:4b:4d:7a:03:df:21:3a:34:a5:df:a9:dc:17:4f: 1d:5d:cd:04:7a:2f:ab:4d:9d:b1:83:02:46:20:5b: 01:72:9a:1a:63:28:49:f6:49:2d:88:e8:73:e2:78: 5f:28:38:a0:66:3a:31:7d:60:d2:4c:cd:a2:50:df: 0d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1A:8A:F0:5B:F5:A5:88:D8:29:D4:12:F0:AA:C6:00:9B:85:AB:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.crl X509v3 Authority Key Identifier: keyid:49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer sbgp-ipAddrBlock: critical IPv4: 151.159.0.0-151.159.219.255 151.159.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:12:40:7b:68:09:8d:7c:74:fe:c3:ca:f3:5a:7a:df:f9:27: 06:0f:5d:39:42:b6:68:cd:00:8e:b1:ba:39:2b:71:c8:28:ab: 59:63:2b:d8:11:f6:d5:9a:e5:76:03:12:76:c5:66:f0:25:e1: 50:6a:a5:18:20:6d:00:d0:03:5d:aa:3a:8a:49:14:17:6e:59: 80:00:55:c1:7b:ab:3f:f7:5c:14:8d:a1:8b:f0:18:b6:e9:05: f7:ac:0b:39:5d:ed:4d:68:44:c6:d1:9c:65:af:a6:d3:26:3e: 5e:1b:a0:2e:a9:01:8c:e5:74:33:6e:0e:b1:39:1d:54:6b:58: 6c:d9:1f:8f:3a:40:d4:8e:90:65:8c:e2:42:e6:ff:93:81:d0: 67:83:36:f4:87:19:31:a2:f8:89:e6:6b:b1:36:fe:da:b9:e8: 46:c6:d9:9e:71:e1:20:cb:81:79:f9:ee:47:66:f3:7c:bd:f6: 02:ac:d9:3a:7e:b1:ba:dc:d3:f1:a3:2f:65:b3:ee:5b:52:86: eb:bf:00:72:4e:68:d1:9e:70:de:3d:2e:1a:ed:f2:e4:31:38: d9:da:52:01:60:76:af:5e:36:d1:a4:57:45:94:89:73:d6:f3: 3c:24:df:ef:6b:af:fc:b6:7a:9d:1b:46:cb:12:58:84:44:3c: d4:a5:4d:cd -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEUpUo/zhuJNk5KKccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc2N2RjZWQtNGU4OS00OTY1LWI4ZGUtNTBlNDIxMjAx YjRkMB4XDTI0MDMxMDEzMDAzMVoXDTI0MDYwODEzMDAzMVowLzEtMCsGA1UEAxMk OTA4Y2QwYjAtZTUxNC00Nzc1LWFkZTMtNzI0OGE4MjIwNzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMvYJtsWO2ppiqmwjWXE2O/hfB/3e3EOfMmQ n8haIjwY7qjChqdhPQxGA13A9liDZhy2qwHx0w+0v9eWg6DHF735BLz2giJ6LaDV QcuDHi9+a5G96SU4kTMLjONpYRbZI5r8poGtKjhgvDMczjOsEzNUEtL6/NND61PN AJIxadBDd39qcGYOWl/nZZE3qApw5stz1yBcNRMUMVswLbNBdOTeAaLW6NFSX7jd Sqa9eiAmlAw5CDBYFMXbRgZls81P4Z58S016A98hOjSl36ncF08dXc0Eei+rTZ2x gwJGIFsBcpoaYyhJ9kktiOhz4nhfKDigZjoxfWDSTM2iUN8NgQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCkaivBb9aWI2CnUEvCqxgCbhasxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNzY3 ZGNlZC00ZTg5LTQ5NjUtYjhkZS01MGU0MjEyMDFiNGQvYzRmMGU1MzctY2ZkZC0z NDM3LWI1YWQtZjYxM2EyNTliMjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzc2N2RjZWQtNGU4OS00OTY1LWI4 ZGUtNTBlNDIxMjAxYjRkLzM3NjdkY2VkLTRlODktNDk2NS1iOGRlLTUwZTQyMTIw MWI0ZC5jcmwwHwYDVR0jBBgwFoAUSSpaeqWs/SJY9eRGkJ0Fcu2mgMYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNzY3ZGNlZC00ZTg5LTQ5NjUtYjhkZS01MGU0 MjEyMDFiNGQuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATMAsDAwCXnwME Apef2AMEBJef8DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCnEkB7aAmNfHT+w8rzWnrf+ScGD105QrZozQCO sbo5K3HIKKtZYyvYEfbVmuV2AxJ2xWbwJeFQaqUYIG0A0ANdqjqKSRQXblmAAFXB e6s/91wUjaGL8Bi26QX3rAs5Xe1NaETG0Zxlr6bTJj5eG6AuqQGM5XQzbg6xOR1U a1hs2R+POkDUjpBljOJC5v+TgdBngzb0hxkxoviJ5muxNv7auehGxtmeceEgy4F5 +e5HZvN8vfYCrNk6frG63NPxoy9ls+5bUobrvwByTmjRnnDePS4a7fLkMTjZ2lIB YHavXjbRpFdFlIlz1vM8JN/va6/8tnqdG0bLEliERDzUpU3N -----END CERTIFICATE-----Generated at Wed May 15 15:09:00 2024 by rpki-client on console-fra.rpki-client.org