$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/41138728-4b0a-33e7-a5bd-ea7cb42a601e.roa File: 41138728-4b0a-33e7-a5bd-ea7cb42a601e.roa (raw, json) Hash identifier: o+nWFI92GNlAkZ2jITko7vYmC/yEABQFgkJU61+CNDE= Subject key identifier: 48:E9:31:E3:9B:68:40:11:F4:B8:4F:C0:01:74:77:1A:71:94:A4:DC Certificate issuer: /CN=70ddad33-55eb-4125-9221-0129168a645b Certificate serial: 010D0C9F432858459A63400C7DFE5FD423D38A00 Authority key identifier: 7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/41138728-4b0a-33e7-a5bd-ea7cb42a601e.roa Signing time: Sat 20 Apr 2024 01:00:26 +0000 ROA not before: Sat 20 Apr 2024 01:00:26 +0000 ROA not after: Fri 19 Jul 2024 01:00:26 +0000 asID: 400341 IP address blocks: 165.140.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:9a:63:40:0c:7d:fe:5f:d4:23:d3:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70ddad33-55eb-4125-9221-0129168a645b Validity Not Before: Apr 20 01:00:26 2024 GMT Not After : Jul 19 01:00:26 2024 GMT Subject: CN=53f5b84e-d634-464b-b00d-9605f01791e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d9:ca:5a:ff:9c:99:4e:f0:ff:50:b5:1e:36: 98:54:00:ad:31:a8:50:92:51:8b:bd:f9:ad:8f:8e: 98:b7:b2:9b:48:5c:3c:42:dd:ad:85:a6:10:2d:b4: b4:90:c0:00:d0:3b:06:f8:93:cb:eb:64:ef:ef:76: ac:d9:6c:67:4a:25:60:23:2c:32:bf:4d:1d:3e:78: 5f:47:ed:4e:90:88:ee:1d:bb:b2:5d:6e:8c:36:2b: 72:c7:27:41:44:25:18:70:7a:ab:2b:17:ab:58:fc: 46:ee:61:87:d1:32:67:fd:c1:a7:d4:db:27:81:b7: 59:1d:c1:e9:88:9f:64:4a:19:80:5c:ef:a5:45:84: f8:7c:b1:3c:13:39:a0:a0:13:73:25:88:da:a8:d2: fb:9a:a3:cd:8b:47:44:1a:87:27:f2:f6:de:31:26: 8a:e6:81:ca:87:fd:7b:66:e0:b3:7f:14:55:74:10: 3c:69:62:0e:1a:8d:34:0c:44:db:fd:97:cc:3d:7b: 9e:cb:a3:fd:be:9b:cf:9a:71:48:86:df:5c:25:09: e8:d3:5d:e1:8b:ae:07:7c:3e:0a:5c:e5:d8:ad:9c: 65:2e:c1:c6:ed:45:5c:9f:dc:e3:c6:37:75:36:2d: 15:39:d8:9f:06:4d:aa:5b:31:b0:1e:3f:75:3b:b1: 32:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E9:31:E3:9B:68:40:11:F4:B8:4F:C0:01:74:77:1A:71:94:A4:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/41138728-4b0a-33e7-a5bd-ea7cb42a601e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl X509v3 Authority Key Identifier: keyid:7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer sbgp-ipAddrBlock: critical IPv4: 165.140.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:f3:12:39:a5:14:cc:6d:c4:f8:36:13:1d:02:06:48:cc:54: b8:8c:0c:44:5f:2c:d2:1e:d8:08:d5:f4:15:0d:6c:97:6d:77: cd:1c:0b:d0:35:c0:d1:6b:36:43:97:da:c5:f4:fc:53:70:d9: 31:df:f6:6d:f1:70:3b:27:10:ef:7f:69:65:4e:16:d9:b6:11: 04:37:0d:02:b4:81:57:31:41:f0:5b:8a:20:72:46:13:e4:6b: ff:f2:07:28:5c:15:41:7a:f6:b6:4f:ea:da:86:79:45:c0:88: 85:a8:5a:68:bd:a3:5c:b1:81:bd:59:8d:1b:20:b2:80:65:33: e1:97:dc:a7:72:44:be:c3:83:03:ba:d6:3a:02:3f:50:ce:7c: 9a:5e:bc:6f:03:8a:61:7e:ad:ff:5d:f2:98:41:5e:a3:64:d1: 89:86:ae:da:27:92:4a:83:8e:0a:a0:1a:38:f6:29:c9:97:8f: ca:c2:d8:15:30:ff:68:df:73:52:e4:f7:e0:98:f8:89:d5:fa: a6:af:af:c4:82:ed:64:4c:45:10:a1:8f:da:03:f9:6c:b6:aa: b5:86:50:ad:fa:f7:9c:9f:0b:81:97:e1:a9:8f:39:bd:25:48: cc:7d:2e:9b:3a:71:7b:f7:ce:fa:91:da:02:84:c3:c1:e6:74: 41:e9:73:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWaY0AMff5f1CPTigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBkZGFkMzMtNTVlYi00MTI1LTkyMjEtMDEyOTE2OGE2 NDViMB4XDTI0MDQyMDAxMDAyNloXDTI0MDcxOTAxMDAyNlowLzEtMCsGA1UEAxMk NTNmNWI4NGUtZDYzNC00NjRiLWIwMGQtOTYwNWYwMTc5MWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNnKWv+cmU7w/1C1HjaYVACtMahQklGLvfmt j46Yt7KbSFw8Qt2thaYQLbS0kMAA0DsG+JPL62Tv73as2WxnSiVgIywyv00dPnhf R+1OkIjuHbuyXW6MNityxydBRCUYcHqrKxerWPxG7mGH0TJn/cGn1NsngbdZHcHp iJ9kShmAXO+lRYT4fLE8EzmgoBNzJYjaqNL7mqPNi0dEGocn8vbeMSaK5oHKh/17 ZuCzfxRVdBA8aWIOGo00DETb/ZfMPXuey6P9vpvPmnFIht9cJQno013hi64HfD4K XOXYrZxlLsHG7UVcn9zjxjd1Ni0VOdifBk2qWzGwHj91O7EyLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjpMeObaEAR9LhPwAF0dxpxlKTcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MGRk YWQzMy01NWViLTQxMjUtOTIyMS0wMTI5MTY4YTY0NWIvNDExMzg3MjgtNGIwYS0z M2U3LWE1YmQtZWE3Y2I0MmE2MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzBkZGFkMzMtNTVlYi00MTI1LTky MjEtMDEyOTE2OGE2NDViLzcwZGRhZDMzLTU1ZWItNDEyNS05MjIxLTAxMjkxNjhh NjQ1Yi5jcmwwHwYDVR0jBBgwFoAUf0ykIqPLu6XWd5wlAfN/5dkOtL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MGRkYWQzMy01NWViLTQxMjUtOTIyMS0wMTI5 MTY4YTY0NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpYzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnzEjmlFMxtxPg2Ex0CBkjMVLiMDERfLNIe2AjV9BUNbJdtd80cC9A1 wNFrNkOX2sX0/FNw2THf9m3xcDsnEO9/aWVOFtm2EQQ3DQK0gVcxQfBbiiByRhPk a//yByhcFUF69rZP6tqGeUXAiIWoWmi9o1yxgb1ZjRsgsoBlM+GX3KdyRL7DgwO6 1joCP1DOfJpevG8DimF+rf9d8phBXqNk0YmGrtonkkqDjgqgGjj2KcmXj8rC2BUw /2jfc1Lk9+CY+InV+qavr8SC7WRMRRChj9oD+Wy2qrWGUK3695yfC4GX4amPOb0l SMx9Lps6cXv3zvqR2gKEw8HmdEHpc7o= -----END CERTIFICATE-----Generated at Wed May 15 16:06:07 2024 by rpki-client on console-ams.rpki-client.org