$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/649189b4-bfc0-35b4-931b-45e2843949b0.roa File: 649189b4-bfc0-35b4-931b-45e2843949b0.roa (raw, json) Hash identifier: VF1RVQtIuyFAKTb23QyAF50ELtfbyWQ9+IyLHiiXKIQ= Subject key identifier: C9:3D:51:48:80:D4:E7:AF:F3:06:3A:86:06:3C:FC:8E:EF:3E:1D:B2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858455E5D9BEC56BF0ACD53221680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/649189b4-bfc0-35b4-931b-45e2843949b0.roa Signing time: Fri 29 Mar 2024 13:00:37 +0000 ROA not before: Fri 29 Mar 2024 13:00:37 +0000 ROA not after: Thu 27 Jun 2024 13:00:37 +0000 asID: 36183 IP address blocks: 172.225.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5e:5d:9b:ec:56:bf:0a:cd:53:22:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 29 13:00:37 2024 GMT Not After : Jun 27 13:00:37 2024 GMT Subject: CN=a4f241db-ab8e-4545-a9b2-38bb2f57ee11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:68:af:a3:3f:0c:fa:6b:b2:58:54:29:4d:ec: c2:c2:e9:5f:dc:09:dc:39:a3:1d:0b:4c:4c:b1:5e: 62:00:aa:11:b8:c8:74:f6:c6:b8:26:f3:15:a9:c4: a9:9e:54:8a:c8:ee:23:31:16:ca:b0:68:6a:90:83: 23:25:52:7f:10:c0:1c:0c:e5:c3:36:e9:6a:43:d0: 3f:c3:27:41:e6:d9:b8:e1:39:bf:5a:f1:05:e9:5d: 0c:14:ed:18:ee:87:40:0b:70:15:5a:da:3c:6e:bd: d8:78:ae:76:1d:57:4f:4d:cf:28:a6:0e:2b:24:0a: d2:89:a2:2c:6c:5e:73:44:80:bd:49:2a:ce:bb:45: 43:d2:7f:ae:6d:f8:0c:ef:cb:8b:d9:a4:30:1f:d8: a9:0e:f3:27:2c:70:64:d3:c2:51:19:7a:7b:7b:92: 04:03:29:0f:4d:77:67:ad:0e:3d:84:4e:27:18:31: ed:17:52:ab:f6:3f:26:55:d0:e1:82:9d:63:57:8c: 43:a9:6a:d9:7f:28:62:bd:32:d0:c8:9a:dd:19:79: 05:36:aa:7d:e6:82:90:95:f5:25:9f:2b:7a:3b:9b: 58:19:10:02:f7:81:e2:ec:12:db:2e:bb:69:c6:f8: 90:b9:c8:6a:33:88:97:27:0d:67:c0:6c:1c:c6:a4: 65:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3D:51:48:80:D4:E7:AF:F3:06:3A:86:06:3C:FC:8E:EF:3E:1D:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/649189b4-bfc0-35b4-931b-45e2843949b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:c9:a1:65:86:ca:bb:32:9c:18:b9:30:e6:bc:a1:62:e2:ab: 37:56:89:1b:a9:15:16:cc:aa:1e:30:64:a8:cf:4a:b2:2f:0b: be:10:25:60:17:a1:d5:b5:a8:1b:10:0e:24:a1:13:bf:7e:0f: 01:ef:ad:bc:65:0c:92:45:4e:89:db:d3:9a:c0:f8:8c:27:e1: 69:89:83:c3:68:4b:b3:21:08:87:89:75:89:1a:0e:13:e2:b4: e7:9b:41:f4:ea:a0:23:04:6e:f9:eb:72:ab:46:ef:ce:50:ca: 54:97:6a:b9:7a:c8:a1:0c:70:ae:f8:84:3b:8c:f4:bd:23:45: 53:cf:85:70:0d:f3:cd:f5:c5:16:7a:ce:9a:1a:f9:fa:33:21: c5:36:35:4e:54:22:96:f4:4a:65:a6:19:f3:b3:18:38:e7:46: 75:4e:77:1d:a9:7f:74:5d:85:d9:bc:f8:2b:74:0b:6b:65:23: e3:8c:e9:7e:3b:cd:e9:fb:c9:1c:5b:0d:4b:0e:a1:e5:5c:48: a4:73:7b:c6:0c:17:76:2c:81:b0:f2:f0:72:53:26:a7:f2:73: 28:fe:e8:e8:19:5f:fd:e5:13:dd:87:5f:ec:fc:70:76:e9:86: 8c:39:af:ff:db:37:d7:44:7e:31:74:cb:2a:94:5f:63:17:2b: 1a:d9:9c:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVeXZvsVr8KzVMiFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDMyOTEzMDAzN1oXDTI0MDYyNzEzMDAzN1owLzEtMCsGA1UEAxMk YTRmMjQxZGItYWI4ZS00NTQ1LWE5YjItMzhiYjJmNTdlZTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGivoz8M+muyWFQpTezCwulf3AncOaMdC0xM sV5iAKoRuMh09sa4JvMVqcSpnlSKyO4jMRbKsGhqkIMjJVJ/EMAcDOXDNulqQ9A/ wydB5tm44Tm/WvEF6V0MFO0Y7odAC3AVWto8br3YeK52HVdPTc8opg4rJArSiaIs bF5zRIC9SSrOu0VD0n+ubfgM78uL2aQwH9ipDvMnLHBk08JRGXp7e5IEAykPTXdn rQ49hE4nGDHtF1Kr9j8mVdDhgp1jV4xDqWrZfyhivTLQyJrdGXkFNqp95oKQlfUl nyt6O5tYGRAC94Hi7BLbLrtpxviQuchqM4iXJw1nwGwcxqRlqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMk9UUiA1Oev8wY6hgY8/I7vPh2yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjQ5MTg5YjQtYmZjMC0z NWI0LTkzMWItNDVlMjg0Mzk0OWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPJoWWGyrsynBi5MOa8oWLiqzdWiRupFRbMqh4wZKjPSrIvC74QJWAX odW1qBsQDiShE79+DwHvrbxlDJJFTonb05rA+Iwn4WmJg8NoS7MhCIeJdYkaDhPi tOebQfTqoCMEbvnrcqtG785QylSXarl6yKEMcK74hDuM9L0jRVPPhXAN8831xRZ6 zpoa+fozIcU2NU5UIpb0SmWmGfOzGDjnRnVOdx2pf3Rdhdm8+Ct0C2tlI+OM6X47 zen7yRxbDUsOoeVcSKRze8YMF3YsgbDy8HJTJqfycyj+6OgZX/3lE92HX+z8cHbp how5r//bN9dEfjF0yyqUX2MXKxrZnLY= -----END CERTIFICATE-----Generated at Fri May 17 21:41:13 2024 by rpki-client on console-fra.rpki-client.org