$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/c3177fb6-decc-3b5e-8ece-859075b2f441.roa File: c3177fb6-decc-3b5e-8ece-859075b2f441.roa (raw, json) Hash identifier: fIa7ezo6/7NaSo3/mFqm36rcdNOoBr46TP8bs8I6RX8= Subject key identifier: 67:14:6D:ED:BA:67:BB:2F:75:04:E7:47:A3:6E:15:70:AF:32:95:9D Certificate issuer: /CN=b24224ba-8340-4a2e-986a-5e1f9b2c2182 Certificate serial: 010D0C9F432858452AB7E6421201AF7F22310980 Authority key identifier: F3:D3:ED:75:10:95:A0:58:67:73:5A:61:EF:97:F9:D6:F3:16:94:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/c3177fb6-decc-3b5e-8ece-859075b2f441.roa Signing time: Mon 11 Mar 2024 01:00:26 +0000 ROA not before: Mon 11 Mar 2024 01:00:26 +0000 ROA not after: Sun 09 Jun 2024 01:00:26 +0000 asID: 397913 IP address blocks: 204.108.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/b24224ba-8340-4a2e-986a-5e1f9b2c2182.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/b24224ba-8340-4a2e-986a-5e1f9b2c2182.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:2a:b7:e6:42:12:01:af:7f:22:31:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b24224ba-8340-4a2e-986a-5e1f9b2c2182 Validity Not Before: Mar 11 01:00:26 2024 GMT Not After : Jun 9 01:00:26 2024 GMT Subject: CN=7381a7d2-b259-4499-93cd-90b0f5f6317d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:30:06:34:a5:46:12:b9:b0:de:5f:9e:5f:48: 69:6a:cb:e4:db:5e:a7:fa:bc:1e:58:85:44:af:6a: c8:44:94:9e:14:b0:4a:de:c2:d5:67:8c:7a:d1:33: 3a:55:a8:d9:27:3f:2b:28:82:e7:55:a5:bb:3b:cc: 31:ce:9d:c7:bb:80:37:8a:59:cd:ea:d2:a8:20:bc: a7:f8:7d:01:64:52:ee:49:db:12:e5:ae:74:67:b8: ba:3f:21:44:14:05:0e:e7:b2:4f:d0:7b:93:c6:58: a8:d5:c5:b2:f3:53:fb:4a:65:b2:fd:15:e7:7f:9e: 0d:09:d1:57:a0:3c:07:c7:5b:a9:a5:12:fe:7a:cd: dd:6a:d1:f9:3c:ce:aa:d3:47:1d:8a:d7:90:e0:0f: 23:00:60:dd:1a:1b:f1:6a:a9:34:36:8d:fb:66:e0: 82:7c:38:bf:28:7b:2e:ec:7a:17:11:0e:c8:0c:1f: 8a:c3:df:50:84:22:32:e6:7b:44:2a:78:11:3c:c2: f7:0f:05:85:0a:63:d5:91:7f:46:f3:8c:11:a9:84: 72:07:60:ea:ab:ff:7f:60:ae:0b:98:fa:9e:17:73: f1:d3:47:22:dd:0d:f1:78:8a:d4:ff:c9:89:95:f4: 88:62:14:19:ad:a6:a1:30:99:db:dc:87:65:24:1b: 4d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:14:6D:ED:BA:67:BB:2F:75:04:E7:47:A3:6E:15:70:AF:32:95:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/c3177fb6-decc-3b5e-8ece-859075b2f441.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/b24224ba-8340-4a2e-986a-5e1f9b2c2182.crl X509v3 Authority Key Identifier: keyid:F3:D3:ED:75:10:95:A0:58:67:73:5A:61:EF:97:F9:D6:F3:16:94:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182.cer sbgp-ipAddrBlock: critical IPv4: 204.108.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:b0:37:f2:9c:38:78:1a:2f:de:ca:28:df:c8:e5:eb:6c:4c: 41:5e:a0:49:d1:42:fc:e2:e2:79:40:b1:f3:35:31:12:44:2a: a7:76:f1:d9:89:5b:e3:2f:69:1a:19:bd:ba:f1:b8:1f:40:5d: 68:b2:52:26:cd:12:e7:04:3d:1c:68:ec:50:e8:0f:00:a5:a1: 00:02:45:f6:6c:9c:39:b3:f7:ba:ca:11:7b:f8:d9:a7:c7:c8: a4:6e:2f:8f:41:fd:ab:e5:50:4a:a4:60:4c:6f:d9:85:d8:5e: 54:7e:26:9a:a0:7f:a0:0e:70:f8:33:f1:3b:28:80:00:6d:ed: 93:0d:6e:f6:e0:4f:e6:5f:cf:08:6d:38:c2:40:31:bd:34:a8: 16:2d:03:2c:75:81:c3:c1:fc:d5:33:8a:6e:d4:4a:0f:d6:35: 41:c9:bd:2f:8d:25:73:5d:91:90:d8:98:47:4c:6d:5d:f5:ca: bd:6f:59:10:dd:5f:ef:85:a7:74:60:9a:c8:7e:12:5d:ae:e1: ee:4f:71:dc:c0:b9:be:61:3c:c4:ed:7f:d7:21:91:de:40:e7: 35:d3:82:dc:79:4b:ac:dd:0c:e0:8a:f1:b2:ae:68:e1:04:46: 0c:bc:50:b9:79:71:93:1b:54:c3:5a:66:bc:fd:5e:57:c4:e4: 8a:2e:cc:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUqt+ZCEgGvfyIxCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI0MjI0YmEtODM0MC00YTJlLTk4NmEtNWUxZjliMmMy MTgyMB4XDTI0MDMxMTAxMDAyNloXDTI0MDYwOTAxMDAyNlowLzEtMCsGA1UEAxMk NzM4MWE3ZDItYjI1OS00NDk5LTkzY2QtOTBiMGY1ZjYzMTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDAGNKVGErmw3l+eX0hpasvk216n+rweWIVE r2rIRJSeFLBK3sLVZ4x60TM6VajZJz8rKILnVaW7O8wxzp3Hu4A3ilnN6tKoILyn +H0BZFLuSdsS5a50Z7i6PyFEFAUO57JP0HuTxlio1cWy81P7SmWy/RXnf54NCdFX oDwHx1uppRL+es3datH5PM6q00cditeQ4A8jAGDdGhvxaqk0No37ZuCCfDi/KHsu 7HoXEQ7IDB+Kw99QhCIy5ntEKngRPML3DwWFCmPVkX9G84wRqYRyB2Dqq/9/YK4L mPqeF3Px00ci3Q3xeIrU/8mJlfSIYhQZraahMJnb3IdlJBtNCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcUbe26Z7svdQTnR6NuFXCvMpWdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMjQy MjRiYS04MzQwLTRhMmUtOTg2YS01ZTFmOWIyYzIxODIvYzMxNzdmYjYtZGVjYy0z YjVlLThlY2UtODU5MDc1YjJmNDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjI0MjI0YmEtODM0MC00YTJlLTk4 NmEtNWUxZjliMmMyMTgyL2IyNDIyNGJhLTgzNDAtNGEyZS05ODZhLTVlMWY5YjJj MjE4Mi5jcmwwHwYDVR0jBBgwFoAU89PtdRCVoFhnc1ph75f51vMWlLwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMjQyMjRiYS04MzQwLTRhMmUtOTg2YS01ZTFm OWIyYzIxODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGy2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCwN/KcOHgaL97KKN/I5etsTEFeoEnRQvzi4nlAsfM1MRJEKqd28dmJ W+MvaRoZvbrxuB9AXWiyUibNEucEPRxo7FDoDwCloQACRfZsnDmz97rKEXv42afH yKRuL49B/avlUEqkYExv2YXYXlR+Jpqgf6AOcPgz8TsogABt7ZMNbvbgT+Zfzwht OMJAMb00qBYtAyx1gcPB/NUzim7USg/WNUHJvS+NJXNdkZDYmEdMbV31yr1vWRDd X++Fp3Rgmsh+El2u4e5PcdzAub5hPMTtf9chkd5A5zXTgtx5S6zdDOCK8bKuaOEE Rgy8ULl5cZMbVMNaZrz9XlfE5IouzMg= -----END CERTIFICATE-----Generated at Wed May 15 16:06:13 2024 by rpki-client on console-ams.rpki-client.org