$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/8ce1e820-3f43-3a8d-a5c7-5c4821226427.roa File: 8ce1e820-3f43-3a8d-a5c7-5c4821226427.roa (raw, json) Hash identifier: uNWWyY+WS9vdbBMPyoYNFnGn5257Efqy47U7DpkwVhg= Subject key identifier: 68:BA:D1:03:67:B7:D7:C0:AB:BC:1C:D9:49:5F:25:FC:53:7C:79:18 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F432858456F1DCA7A2FC3A86F573C2BC0 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/8ce1e820-3f43-3a8d-a5c7-5c4821226427.roa Signing time: Thu 04 Apr 2024 13:00:36 +0000 ROA not before: Thu 04 Apr 2024 13:00:36 +0000 ROA not after: Wed 03 Jul 2024 13:00:36 +0000 asID: 13325 IP address blocks: 204.24.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6f:1d:ca:7a:2f:c3:a8:6f:57:3c:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Apr 4 13:00:36 2024 GMT Not After : Jul 3 13:00:36 2024 GMT Subject: CN=d45d4568-ba28-46d4-9d70-8b7830e8e2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:24:e7:82:51:46:e1:49:8d:e4:4c:06:ea:b9: 8b:bc:2b:5f:56:e3:98:07:f0:b8:cd:16:dc:ac:dc: db:f4:71:cd:a6:a6:07:5d:c2:16:ad:33:d2:8f:92: 2a:04:ed:90:4b:fe:7f:73:93:23:8a:88:0d:95:54: bb:e1:4d:16:a5:cc:a1:e7:79:13:66:83:a9:5e:ca: bb:4d:f6:d6:67:77:79:a5:27:92:cd:f5:19:d9:4f: 43:c5:5c:61:77:d5:e6:0b:b5:4d:dd:62:54:04:ac: 5c:95:f1:f4:a3:11:0a:d1:d2:e5:35:05:6b:22:6d: 5a:0c:42:9c:f6:c7:79:2e:6f:6b:78:d7:ba:63:69: 32:64:b4:df:19:82:39:05:c7:34:92:18:0d:6b:64: 37:56:30:d6:0f:a5:2b:98:dd:5a:01:a8:a1:12:75: 84:ac:15:7b:c2:66:39:e3:6b:df:86:b2:9f:a6:d3: 6a:1e:45:f5:fb:54:4e:b0:a9:b0:28:d5:53:08:07: 44:8e:11:7a:e2:82:ed:7c:8c:65:32:c2:9d:3c:06: 9e:dd:e1:3c:70:d6:dd:9f:c7:f5:14:54:b2:87:86: ee:cc:b3:45:92:29:50:a6:fe:81:bb:c9:4e:29:e1: 5d:f8:dd:9f:8c:76:3c:7f:c7:a8:90:80:6e:75:88: 9d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BA:D1:03:67:B7:D7:C0:AB:BC:1C:D9:49:5F:25:FC:53:7C:79:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/8ce1e820-3f43-3a8d-a5c7-5c4821226427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 204.24.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a8:47:ec:9e:92:07:94:0e:73:c5:2a:b2:27:70:6a:e7:2a: 7b:34:5b:1e:c9:17:df:c6:f7:09:c3:65:32:f2:d6:b6:ee:92: 0b:aa:04:28:19:4c:f4:ea:80:9b:cb:96:ae:b2:2c:ec:00:c8: fb:47:27:f9:2b:80:2d:86:d3:d9:fd:72:92:20:2b:5f:d5:af: bc:6c:99:81:96:7e:41:4b:59:a0:c8:10:5a:a9:c5:ba:a9:54: ea:09:8d:9b:be:f3:75:36:62:1a:5c:92:42:45:da:61:65:16: c3:1e:d6:34:af:a1:71:fc:e1:c3:fd:28:c7:d9:83:48:80:9c: 1b:7f:50:b0:7d:06:d6:a0:b1:67:d4:1f:e5:16:c8:91:3d:68: ea:d5:80:f6:ba:ca:3b:91:43:a8:a6:c6:57:69:ac:f6:09:3c: 84:29:d2:d2:88:54:f1:93:19:ce:56:bb:82:b1:4d:d0:f9:ab: f2:cc:f7:5e:35:76:97:ef:a3:65:9e:e3:1c:57:21:77:5b:11: b3:f7:3d:d1:92:d0:40:dc:bb:c7:9e:f9:49:4d:ba:c8:f4:92: 0e:47:f9:2b:59:ed:e7:5c:1c:c3:65:58:12:93:9f:77:ba:95: 2a:ca:b2:d3:a2:99:c8:1d:85:05:10:a1:2d:2a:c5:0f:53:a7: 51:50:da:01 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEVvHcp6L8Oob1c8K8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI0MDQwNDEzMDAzNloXDTI0MDcwMzEzMDAzNlowLzEtMCsGA1UEAxMk ZDQ1ZDQ1NjgtYmEyOC00NmQ0LTlkNzAtOGI3ODMwZThlMmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiTnglFG4UmN5EwG6rmLvCtfVuOYB/C4zRbc rNzb9HHNpqYHXcIWrTPSj5IqBO2QS/5/c5MjiogNlVS74U0Wpcyh53kTZoOpXsq7 TfbWZ3d5pSeSzfUZ2U9DxVxhd9XmC7VN3WJUBKxclfH0oxEK0dLlNQVrIm1aDEKc 9sd5Lm9reNe6Y2kyZLTfGYI5Bcc0khgNa2Q3VjDWD6UrmN1aAaihEnWErBV7wmY5 42vfhrKfptNqHkX1+1ROsKmwKNVTCAdEjhF64oLtfIxlMsKdPAae3eE8cNbdn8f1 FFSyh4buzLNFkilQpv6Bu8lOKeFd+N2fjHY8f8eokIBudYidWwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGi60QNnt9fAq7wc2UlfJfxTfHkYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvOGNlMWU4MjAtM2Y0My0z YThkLWE1YzctNWM0ODIxMjI2NDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzBgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEADahH7J6SB5QOc8UqsidwaucqezRbHskX38b3CcNlMvLWtu6SC6oEKBlM 9OqAm8uWrrIs7ADI+0cn+SuALYbT2f1ykiArX9WvvGyZgZZ+QUtZoMgQWqnFuqlU 6gmNm77zdTZiGlySQkXaYWUWwx7WNK+hcfzhw/0ox9mDSICcG39QsH0G1qCxZ9Qf 5RbIkT1o6tWA9rrKO5FDqKbGV2ms9gk8hCnS0ohU8ZMZzla7grFN0Pmr8sz3XjV2 l++jZZ7jHFchd1sRs/c90ZLQQNy7x575SU26yPSSDkf5K1nt51wcw2VYEpOfd7qV Ksqy06KZyB2FBRChLSrFD1OnUVDaAQ== -----END CERTIFICATE-----Generated at Wed May 15 15:09:02 2024 by rpki-client on console-fra.rpki-client.org