$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/de36c969-26a6-3a23-8675-3c257b34ddbc.roa File: de36c969-26a6-3a23-8675-3c257b34ddbc.roa (raw, json) Hash identifier: znJsPzx0qJl2k2aLFuIuqGEsbOBYQL0Pll6PlY4rsvA= Subject key identifier: E7:00:EC:58:13:88:15:43:55:51:3E:F3:DF:04:E8:70:B5:0B:6D:15 Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Certificate serial: 010D0C9F432858424E609490A644B1317AE3D4A0 Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/de36c969-26a6-3a23-8675-3c257b34ddbc.roa Signing time: Wed 21 Jun 2023 12:00:00 +0000 ROA not before: Wed 21 Jun 2023 12:00:00 +0000 ROA not after: Sat 09 Aug 2025 04:00:00 +0000 asID: 11892 IP address blocks: 159.182.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:4e:60:94:90:a6:44:b1:31:7a:e3:d4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Validity Not Before: Jun 21 12:00:00 2023 GMT Not After : Aug 9 04:00:00 2025 GMT Subject: CN=94a9adfc-1b8f-4145-8287-2320b7211c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3c:8f:83:f4:1d:0b:9c:5a:fd:63:6a:4a:73: 56:8d:98:b3:ea:a4:cc:34:aa:5f:aa:c7:9f:ae:5c: 5e:04:67:e9:69:fe:b0:5e:c6:43:34:7b:83:59:ce: c5:7e:77:81:43:c1:7d:cf:31:9f:8b:77:f6:a5:28: 57:5c:a6:14:00:e3:f2:c0:6f:cf:b0:0c:dd:67:a7: 1d:a9:c2:6c:c9:cd:50:ed:a5:3b:f1:e4:49:34:ab: b5:69:36:bf:49:e4:bd:48:37:a8:2b:3c:81:1f:c2: ba:41:a6:d5:44:95:66:8d:b7:06:25:66:20:c2:a8: f4:30:fd:37:f1:4e:04:00:51:d3:fa:92:05:1a:e9: 41:aa:95:ec:dd:3e:97:62:68:48:e7:e6:c7:37:e5: e6:fa:68:49:7d:98:c9:36:eb:07:05:21:69:93:67: 42:50:72:fd:9c:5e:6e:65:2e:1b:11:80:67:82:93: 70:90:73:b6:fa:13:0f:d5:a9:71:4f:73:df:b4:e8: 5f:c2:2a:50:75:84:04:64:bf:d8:77:42:af:d8:1f: 1d:17:68:f8:cd:f5:10:55:7f:1c:c1:12:6e:7b:87: 71:4b:fa:3b:56:67:db:ba:35:95:f8:fe:6e:44:e0: 3f:3a:6b:24:57:60:bc:e2:6b:1b:e8:03:5f:2a:b4: 3e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:00:EC:58:13:88:15:43:55:51:3E:F3:DF:04:E8:70:B5:0B:6D:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/de36c969-26a6-3a23-8675-3c257b34ddbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl X509v3 Authority Key Identifier: keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer sbgp-ipAddrBlock: critical IPv4: 159.182.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:70:d6:1e:80:52:4a:39:33:0b:e6:8c:1b:cc:e6:49:2a:35: 78:64:10:de:cd:55:83:28:0b:8a:9c:73:19:10:f9:af:cd:26: a1:8f:2a:f2:d4:ce:59:61:9f:28:cb:a9:fb:fc:75:bd:13:c0: b5:d5:9d:40:c9:3d:be:d5:ce:64:60:de:d2:3b:85:1b:ea:b8: 1f:97:88:7f:fd:2e:b7:9c:14:c3:0f:9d:da:4c:6c:33:7c:de: 2d:59:dc:99:8c:d2:d2:5e:7b:11:1b:02:06:db:d2:0e:59:f9: 06:df:2b:7d:04:63:e7:67:bc:a6:31:7e:03:a7:dc:47:76:e3: ec:68:62:6a:81:e5:7e:65:3e:2c:71:a3:b5:92:96:0b:aa:49: 0b:64:58:4b:b9:d8:6e:a3:9b:75:9e:a5:be:52:4a:2d:ab:6e: 68:a7:0f:0e:20:d2:c5:5d:0d:cf:ce:9e:ca:64:ca:23:4a:4c: 33:60:4c:1c:f9:5f:b4:f9:dd:da:3b:4e:0d:b4:d5:27:c9:8b: 8a:4b:05:ef:33:df:25:ba:16:05:e6:b5:74:9a:ba:c9:67:d6: 11:ac:87:52:76:c4:7c:bc:76:90:d2:3b:14:c6:f0:2f:a6:4d: 67:d3:40:7f:3a:b2:73:0d:49:ba:7d:21:13:28:75:00:9e:9b: 30:d4:d0:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJOYJSQpkSxMXrj1KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw ZDhlMB4XDTIzMDYyMTEyMDAwMFoXDTI1MDgwOTA0MDAwMFowLzEtMCsGA1UEAxMk OTRhOWFkZmMtMWI4Zi00MTQ1LTgyODctMjMyMGI3MjExYzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzyPg/QdC5xa/WNqSnNWjZiz6qTMNKpfqsef rlxeBGfpaf6wXsZDNHuDWc7FfneBQ8F9zzGfi3f2pShXXKYUAOPywG/PsAzdZ6cd qcJsyc1Q7aU78eRJNKu1aTa/SeS9SDeoKzyBH8K6QabVRJVmjbcGJWYgwqj0MP03 8U4EAFHT+pIFGulBqpXs3T6XYmhI5+bHN+Xm+mhJfZjJNusHBSFpk2dCUHL9nF5u ZS4bEYBngpNwkHO2+hMP1alxT3PftOhfwipQdYQEZL/Yd0Kv2B8dF2j4zfUQVX8c wRJue4dxS/o7VmfbujWV+P5uROA/OmskV2C84msb6ANfKrQ+NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcA7FgTiBVDVVE+898E6HC1C20VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvZGUzNmM5NjktMjZhNi0z YTIzLTg2NzUtM2MyNTdiMzRkZGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2 MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk NDJmNjBkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBn7YUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5w1h6AUko5MwvmjBvM5kkqNXhkEN7NVYMoC4qccxkQ+a/NJqGPKvLU zllhnyjLqfv8db0TwLXVnUDJPb7VzmRg3tI7hRvquB+XiH/9LrecFMMPndpMbDN8 3i1Z3JmM0tJeexEbAgbb0g5Z+QbfK30EY+dnvKYxfgOn3Ed24+xoYmqB5X5lPixx o7WSlguqSQtkWEu52G6jm3Wepb5SSi2rbminDw4g0sVdDc/OnspkyiNKTDNgTBz5 X7T53do7Tg201SfJi4pLBe8z3yW6FgXmtXSausln1hGsh1J2xHy8dpDSOxTG8C+m TWfTQH86snMNSbp9IRModQCemzDU0A4= -----END CERTIFICATE-----Generated at Mon May 13 15:46:26 2024 by rpki-client on console-fra.rpki-client.org