$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/6241454b-e755-3d24-ad03-d265d7e3e201.roa File: 6241454b-e755-3d24-ad03-d265d7e3e201.roa (raw, json) Hash identifier: POcoClYa5omJ6fFBJW1TB2UWU5jF6zVac78kaUZLCIE= Subject key identifier: 97:0B:FC:73:07:5F:31:E8:DB:13:CD:7C:A2:55:95:0D:68:50:39:29 Certificate issuer: /CN=c3927d26-c229-496a-8940-c88a834f5196 Certificate serial: 010D0C9F4328584515E58AAB98BA29CB56ECDFC0 Authority key identifier: DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/6241454b-e755-3d24-ad03-d265d7e3e201.roa Signing time: Sun 03 Mar 2024 14:00:31 +0000 ROA not before: Sun 03 Mar 2024 14:00:31 +0000 ROA not after: Sat 01 Jun 2024 13:00:31 +0000 asID: 12119 IP address blocks: 140.177.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:15:e5:8a:ab:98:ba:29:cb:56:ec:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3927d26-c229-496a-8940-c88a834f5196 Validity Not Before: Mar 3 14:00:31 2024 GMT Not After : Jun 1 13:00:31 2024 GMT Subject: CN=0f70eeec-3a21-4679-a13b-6b2ae3d7c870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0c:c1:cb:2c:78:ae:0e:c6:2a:58:90:d7:09: 4d:f7:7f:1f:6a:9e:a3:0c:9a:26:3c:6e:e5:e1:f4: 4a:67:af:40:20:a8:32:d1:8f:81:26:02:fc:e1:db: 24:01:f8:54:f6:dc:cb:6b:b3:88:43:a1:e1:5a:bb: 43:12:77:2c:0c:f3:3b:bc:5f:e7:5e:b4:53:91:cf: 6c:74:42:24:10:99:36:11:2c:3b:9a:14:cb:4d:5f: a5:1e:b4:e3:9c:c2:6a:d7:aa:37:68:8d:4d:76:b3: 0c:80:6d:db:a8:1e:34:a3:58:04:3e:81:8b:d8:81: 3c:6e:37:ea:55:0a:9f:85:98:08:e5:e4:c7:9c:3d: c4:b3:1d:2b:5f:e7:98:12:54:32:f3:c4:eb:9c:1a: db:3f:6a:da:9a:63:e1:fc:d8:b3:aa:1f:6a:7e:82: b9:02:7e:74:ab:7a:51:50:ea:5e:29:f4:f9:3c:d7: dc:01:c3:a7:c5:8c:d3:3e:af:14:56:94:16:49:bd: 61:63:6a:54:c3:15:1c:00:67:83:2a:c6:8b:7b:64: 0a:d2:6e:6d:84:71:aa:30:65:6f:13:da:c6:8e:74: ab:ff:15:38:2e:ce:20:46:50:b5:23:b7:0d:b2:86: a6:5e:b9:38:f3:60:52:75:0b:2f:ac:1c:86:e0:5d: 83:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0B:FC:73:07:5F:31:E8:DB:13:CD:7C:A2:55:95:0D:68:50:39:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/6241454b-e755-3d24-ad03-d265d7e3e201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl X509v3 Authority Key Identifier: keyid:DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer sbgp-ipAddrBlock: critical IPv4: 140.177.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:fe:55:38:06:f8:e6:75:31:c2:ab:e3:68:de:47:4f:32:26: b6:f6:e5:d9:23:a7:4a:b1:35:91:fb:9d:6b:80:2d:53:56:6a: 50:1e:45:5f:ea:e9:a1:62:86:b6:67:d7:26:fe:a5:ea:1b:b0: f8:a0:d7:7f:59:9d:5f:41:2c:19:4c:0e:d3:6d:58:b2:bd:2c: fd:76:21:4a:4b:b3:c3:86:b6:70:94:35:df:a6:ba:47:ab:e2: 31:f7:a4:04:0c:37:9c:16:08:20:39:87:bd:0b:c9:5b:00:23: 6d:80:0c:06:0c:9a:28:4e:6c:e5:f6:8a:9e:aa:81:57:7e:33: ff:58:07:45:9e:9e:46:31:1a:a3:96:d2:b9:81:06:0c:da:8f: d6:21:45:7e:b3:be:a5:c0:c5:05:09:ce:33:0a:4b:65:37:c6: f4:9d:66:af:a7:94:01:21:4e:b0:13:82:42:cc:30:8b:e9:e6: a9:f0:1a:da:76:21:19:6b:55:3b:84:cf:94:f9:74:59:fd:b8: a8:1d:61:ae:34:a4:ba:5f:e1:cc:12:d7:10:4c:b5:67:e8:0c: 03:6a:11:a2:e5:ad:a9:bb:44:47:22:60:12:77:ff:a3:e4:5c: 19:b3:79:cd:ee:a0:cf:48:72:81:10:49:5a:17:33:b4:51:1f: be:0f:6c:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUV5YqrmLopy1bs38AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM5MjdkMjYtYzIyOS00OTZhLTg5NDAtYzg4YTgzNGY1 MTk2MB4XDTI0MDMwMzE0MDAzMVoXDTI0MDYwMTEzMDAzMVowLzEtMCsGA1UEAxMk MGY3MGVlZWMtM2EyMS00Njc5LWExM2ItNmIyYWUzZDdjODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QzByyx4rg7GKliQ1wlN938fap6jDJomPG7l 4fRKZ69AIKgy0Y+BJgL84dskAfhU9tzLa7OIQ6HhWrtDEncsDPM7vF/nXrRTkc9s dEIkEJk2ESw7mhTLTV+lHrTjnMJq16o3aI1NdrMMgG3bqB40o1gEPoGL2IE8bjfq VQqfhZgI5eTHnD3Esx0rX+eYElQy88TrnBrbP2rammPh/Nizqh9qfoK5An50q3pR UOpeKfT5PNfcAcOnxYzTPq8UVpQWSb1hY2pUwxUcAGeDKsaLe2QK0m5thHGqMGVv E9rGjnSr/xU4Ls4gRlC1I7cNsoamXrk482BSdQsvrByG4F2DewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcL/HMHXzHo2xPNfKJVlQ1oUDkpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMzky N2QyNi1jMjI5LTQ5NmEtODk0MC1jODhhODM0ZjUxOTYvNjI0MTQ1NGItZTc1NS0z ZDI0LWFkMDMtZDI2NWQ3ZTNlMjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzM5MjdkMjYtYzIyOS00OTZhLTg5 NDAtYzg4YTgzNGY1MTk2L2MzOTI3ZDI2LWMyMjktNDk2YS04OTQwLWM4OGE4MzRm NTE5Ni5jcmwwHwYDVR0jBBgwFoAU3iC7Zcii3YxtAozJJDHZDGDF51owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jMzkyN2QyNi1jMjI5LTQ5NmEtODk0MC1jODhh ODM0ZjUxOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGjLFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABf+VTgG+OZ1McKr42jeR08yJrb25dkjp0qxNZH7nWuALVNWalAeRV/q 6aFihrZn1yb+peobsPig139ZnV9BLBlMDtNtWLK9LP12IUpLs8OGtnCUNd+muker 4jH3pAQMN5wWCCA5h70LyVsAI22ADAYMmihObOX2ip6qgVd+M/9YB0WenkYxGqOW 0rmBBgzaj9YhRX6zvqXAxQUJzjMKS2U3xvSdZq+nlAEhTrATgkLMMIvp5qnwGtp2 IRlrVTuEz5T5dFn9uKgdYa40pLpf4cwS1xBMtWfoDANqEaLlram7REciYBJ3/6Pk XBmzec3uoM9IcoEQSVoXM7RRH74PbKk= -----END CERTIFICATE-----Generated at Wed May 15 15:09:09 2024 by rpki-client on console-fra.rpki-client.org