$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/c70e9fda-4775-3e35-b953-e37e4d13808d.roa File: c70e9fda-4775-3e35-b953-e37e4d13808d.roa (raw, json) Hash identifier: aT4gWm7LZjNZAhmpROLNC5dqCYiJ+bIA60XerInpzUA= Subject key identifier: 42:62:1A:CC:A2:F9:7E:33:89:3C:9E:8C:98:36:62:D9:84:A1:A0:EA Certificate issuer: /CN=4c855281-0740-46c1-8432-9952688807bc Certificate serial: 010D0C9F43285845052579B2E14D13D740040AC0 Authority key identifier: 99:11:74:5F:71:9A:44:B4:E0:54:57:74:0E:1C:27:13:6F:FF:A3:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/c70e9fda-4775-3e35-b953-e37e4d13808d.roa Signing time: Mon 26 Feb 2024 14:00:31 +0000 ROA not before: Mon 26 Feb 2024 14:00:31 +0000 ROA not after: Sun 26 May 2024 13:00:31 +0000 asID: 14713 IP address blocks: 204.109.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/4c855281-0740-46c1-8432-9952688807bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/4c855281-0740-46c1-8432-9952688807bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:05:25:79:b2:e1:4d:13:d7:40:04:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c855281-0740-46c1-8432-9952688807bc Validity Not Before: Feb 26 14:00:31 2024 GMT Not After : May 26 13:00:31 2024 GMT Subject: CN=db6d88e1-51a4-445f-a39f-dcc1d220ea4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:af:0a:89:7e:7d:c2:0e:74:af:29:9c:87:37: 5c:73:ac:92:6b:03:6e:9a:7c:24:c4:60:1f:40:3d: 6f:98:75:56:91:16:bb:90:db:d7:94:d3:24:b5:96: c5:48:27:54:c2:84:e8:4c:1a:3c:d5:98:e2:ee:ca: a4:54:38:6e:a6:dc:a4:99:a2:84:48:4d:b1:76:70: 4c:df:a5:e6:81:34:91:5f:d5:ce:d3:e9:8f:54:02: 70:9c:6f:a2:9d:25:13:78:bd:46:e9:3b:5b:2e:2d: 07:f4:ff:7f:66:02:e1:40:e1:8e:4f:e7:b8:55:fa: f1:1f:05:fc:cf:9d:ea:e0:20:34:8c:4e:6e:f1:91: 8f:74:d2:11:7b:65:2e:4d:e0:30:ef:02:91:4e:b3: 53:c5:da:5f:3b:d7:29:1f:50:68:9a:66:a1:ad:3e: f7:41:40:46:7d:6f:b2:19:a3:70:53:c6:00:39:b8: 99:43:d7:11:fa:43:61:5a:55:f3:da:8f:85:5e:5c: 2b:d2:6c:89:dd:3a:ea:80:5c:44:82:4c:82:56:6e: 90:f8:8a:d7:16:1b:8b:a5:ca:bc:f0:a8:b4:e3:42: af:22:7d:e8:28:65:eb:c8:5b:d2:6c:4a:ef:0a:91: fa:78:79:06:cb:fc:89:65:93:7c:0b:dc:f7:22:e5: 0c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:62:1A:CC:A2:F9:7E:33:89:3C:9E:8C:98:36:62:D9:84:A1:A0:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/c70e9fda-4775-3e35-b953-e37e4d13808d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/4c855281-0740-46c1-8432-9952688807bc.crl X509v3 Authority Key Identifier: keyid:99:11:74:5F:71:9A:44:B4:E0:54:57:74:0E:1C:27:13:6F:FF:A3:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc.cer sbgp-ipAddrBlock: critical IPv4: 204.109.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:3b:88:75:d9:96:74:f3:d5:e5:4f:35:b0:e8:f5:7b:87:d8: dc:7b:90:aa:21:1c:fc:d9:df:b4:e1:32:ee:31:21:10:7c:4a: a5:61:e0:92:bc:1d:64:75:65:ec:d1:be:56:b5:8f:10:43:5f: 2f:3a:cf:84:b2:8f:d8:b2:39:cb:75:59:ba:4b:6c:c3:82:78: 11:d2:42:df:eb:c6:c5:d9:2b:73:f2:b7:21:2e:5c:6a:17:d2: 49:e4:48:cd:92:67:f7:b7:a7:35:a5:7d:a4:a4:de:7c:79:d7: d4:1b:0a:69:dd:d7:85:5d:f4:30:c8:01:ff:37:9f:f8:cd:1e: c4:ae:8c:d5:03:fa:58:fc:7c:90:72:31:86:c6:41:82:a6:89: 84:04:c1:98:af:e9:c8:ed:3a:83:8b:e3:5a:af:dd:79:c8:68: 29:2d:47:10:81:4c:77:b2:9f:39:0d:ff:8a:39:dd:52:b9:19: 21:b7:95:12:69:54:8b:7d:c4:c8:6a:91:55:74:29:44:02:04: f9:d2:43:93:8b:15:6c:f2:8d:f1:a4:8b:ba:6c:68:6a:9b:5b: fd:3e:89:f6:1d:64:04:60:f5:23:97:c1:ec:c5:b6:68:a1:6b: 6b:e1:8e:d8:29:fb:c2:bd:00:2c:c0:df:fc:20:e1:57:61:42: 85:65:5b:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUFJXmy4U0T10AECsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM4NTUyODEtMDc0MC00NmMxLTg0MzItOTk1MjY4ODgw N2JjMB4XDTI0MDIyNjE0MDAzMVoXDTI0MDUyNjEzMDAzMVowLzEtMCsGA1UEAxMk ZGI2ZDg4ZTEtNTFhNC00NDVmLWEzOWYtZGNjMWQyMjBlYTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK8KiX59wg50rymchzdcc6ySawNumnwkxGAf QD1vmHVWkRa7kNvXlNMktZbFSCdUwoToTBo81Zji7sqkVDhuptykmaKESE2xdnBM 36XmgTSRX9XO0+mPVAJwnG+inSUTeL1G6TtbLi0H9P9/ZgLhQOGOT+e4VfrxHwX8 z53q4CA0jE5u8ZGPdNIRe2UuTeAw7wKRTrNTxdpfO9cpH1BommahrT73QUBGfW+y GaNwU8YAObiZQ9cR+kNhWlXz2o+FXlwr0myJ3TrqgFxEgkyCVm6Q+IrXFhuLpcq8 8Ki040KvIn3oKGXryFvSbErvCpH6eHkGy/yJZZN8C9z3IuUMeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJiGsyi+X4ziTyejJg2YtmEoaDqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80Yzg1 NTI4MS0wNzQwLTQ2YzEtODQzMi05OTUyNjg4ODA3YmMvYzcwZTlmZGEtNDc3NS0z ZTM1LWI5NTMtZTM3ZTRkMTM4MDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGM4NTUyODEtMDc0MC00NmMxLTg0 MzItOTk1MjY4ODgwN2JjLzRjODU1MjgxLTA3NDAtNDZjMS04NDMyLTk5NTI2ODg4 MDdiYy5jcmwwHwYDVR0jBBgwFoAUmRF0X3GaRLTgVFd0DhwnE2//o4owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80Yzg1NTI4MS0wNzQwLTQ2YzEtODQzMi05OTUy Njg4ODA3YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzG00MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACI7iHXZlnTz1eVPNbDo9XuH2Nx7kKohHPzZ37ThMu4xIRB8SqVh4JK8 HWR1ZezRvla1jxBDXy86z4Syj9iyOct1WbpLbMOCeBHSQt/rxsXZK3PytyEuXGoX 0knkSM2SZ/e3pzWlfaSk3nx519QbCmnd14Vd9DDIAf83n/jNHsSujNUD+lj8fJBy MYbGQYKmiYQEwZiv6cjtOoOL41qv3XnIaCktRxCBTHeynzkN/4o53VK5GSG3lRJp VIt9xMhqkVV0KUQCBPnSQ5OLFWzyjfGki7psaGqbW/0+ifYdZARg9SOXwezFtmih a2vhjtgp+8K9ACzA3/wg4VdhQoVlW1o= -----END CERTIFICATE-----Generated at Wed May 15 17:50:32 2024 by rpki-client on console-fra.rpki-client.org