$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e231d0a-b1d6-3b7b-957c-430eafda0f9f.roa File: 2e231d0a-b1d6-3b7b-957c-430eafda0f9f.roa (raw, json) Hash identifier: 0a3xu90kmkrWM5yUHm2TpUHSmKy7qA/LWHix+k1DmSg= Subject key identifier: FC:7B:E9:EE:3C:6A:50:3D:A3:D0:4E:59:E8:8E:54:ED:EC:B2:23:EA Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858459E9358BCF4C520C584491680 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e231d0a-b1d6-3b7b-957c-430eafda0f9f.roa Signing time: Sun 21 Apr 2024 13:00:35 +0000 ROA not before: Sun 21 Apr 2024 13:00:35 +0000 ROA not after: Sat 20 Jul 2024 13:00:35 +0000 asID: 20940 IP address blocks: 204.141.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:9e:93:58:bc:f4:c5:20:c5:84:49:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 21 13:00:35 2024 GMT Not After : Jul 20 13:00:35 2024 GMT Subject: CN=accfa651-14b1-476a-8374-5d4c34815872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9e:6e:49:0d:19:f5:33:40:79:36:22:e1:ea: f9:42:56:a6:fa:0a:bc:df:0f:74:4c:0a:a4:80:48: 28:1a:ad:30:8d:06:96:79:5a:d0:b6:fe:5a:8d:7c: 7b:9c:ec:7a:7c:89:be:a5:83:e3:7d:0d:44:1c:ef: 51:2e:bf:bb:bf:83:1c:3b:b2:29:78:6a:6e:5e:63: 4a:fe:b9:ea:7f:ab:d8:c6:c4:d2:a9:2a:eb:08:c8: 43:10:1d:ba:fc:a6:f8:9f:db:09:5b:d1:a6:cf:1f: 1e:65:be:b1:f6:de:36:3d:30:1d:9c:73:c7:d6:34: b3:e3:96:17:9c:e8:d2:14:ab:2a:16:04:67:d1:07: ab:28:df:3a:4a:13:9d:e9:70:78:67:30:d5:dc:50: 48:ee:9b:b8:02:2b:55:f1:f4:2f:f9:8c:04:51:1a: ea:df:95:f5:e2:5c:86:5a:f1:56:2d:db:a7:11:0d: 47:d4:52:55:bf:08:5e:bc:04:fa:5b:84:2d:e1:c1: 13:63:38:3c:17:5c:1f:56:7d:70:11:6a:25:63:8f: a9:e7:7d:91:09:d1:56:d0:f5:6f:fa:a9:8d:85:4d: 37:6d:47:a5:4d:c7:a5:13:1d:5b:a0:9f:49:c3:b3: c1:f9:18:b8:07:39:c4:43:51:47:63:1f:61:8f:ea: 03:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7B:E9:EE:3C:6A:50:3D:A3:D0:4E:59:E8:8E:54:ED:EC:B2:23:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e231d0a-b1d6-3b7b-957c-430eafda0f9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.141.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:1b:c9:1e:6c:de:41:b6:16:b4:f3:a0:55:52:fc:d2:a6:e4: 50:a0:a7:7d:f4:aa:8c:dc:47:4f:61:ea:13:4f:76:ef:01:c1: 45:b9:a9:b6:4b:a3:42:95:7a:ee:6b:4b:af:27:6f:c7:b8:9d: 39:2c:94:c0:98:0a:fc:5d:07:82:c2:46:a4:85:db:b3:6b:b4: 1d:cc:fc:c5:01:da:8a:11:d0:f6:01:af:52:21:11:5d:a9:99: ff:63:8c:a9:a3:fe:25:12:8b:a6:4c:bb:28:cf:17:a9:ba:bd: e8:a8:f5:42:86:c4:3a:d0:8a:64:9d:a0:33:9f:30:1a:e0:1f: 71:bd:8f:b1:79:0e:20:60:fa:d5:ee:9b:71:01:1a:ba:5b:2a: f9:e6:62:8c:f1:f2:b7:85:1a:f4:79:e0:ec:2e:32:e3:15:d6: a6:a5:87:cd:d9:90:b7:01:c7:3a:8b:d0:99:96:cb:2a:c7:d2: 4e:42:90:34:27:d1:e0:10:90:41:2d:73:7e:b5:ff:90:22:f0: df:2a:6a:81:9f:01:93:85:31:9a:d0:d0:fa:fd:70:fa:a3:83: 99:4d:56:9a:3e:18:5e:7e:59:a2:f2:6b:0a:66:9f:36:45:f9: 22:21:c7:39:3d:58:61:50:c9:2b:d7:e9:31:17:2f:9c:51:89: 76:d3:56:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWek1i89MUgxYRJFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI0MDQyMTEzMDAzNVoXDTI0MDcyMDEzMDAzNVowLzEtMCsGA1UEAxMk YWNjZmE2NTEtMTRiMS00NzZhLTgzNzQtNWQ0YzM0ODE1ODcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ5uSQ0Z9TNAeTYi4er5Qlam+gq83w90TAqk gEgoGq0wjQaWeVrQtv5ajXx7nOx6fIm+pYPjfQ1EHO9RLr+7v4McO7IpeGpuXmNK /rnqf6vYxsTSqSrrCMhDEB26/Kb4n9sJW9Gmzx8eZb6x9t42PTAdnHPH1jSz45YX nOjSFKsqFgRn0QerKN86ShOd6XB4ZzDV3FBI7pu4AitV8fQv+YwEURrq35X14lyG WvFWLdunEQ1H1FJVvwhevAT6W4Qt4cETYzg8F1wfVn1wEWolY4+p532RCdFW0PVv +qmNhU03bUelTcelEx1boJ9Jw7PB+Ri4BznEQ1FHYx9hj+oDmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPx76e48alA9o9BOWeiOVO3ssiPqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMmUyMzFkMGEtYjFkNi0z YjdiLTk1N2MtNDMwZWFmZGEwZjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzI3vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMbyR5s3kG2FrTzoFVS/NKm5FCgp330qozcR09h6hNPdu8BwUW5qbZL o0KVeu5rS68nb8e4nTkslMCYCvxdB4LCRqSF27NrtB3M/MUB2ooR0PYBr1IhEV2p mf9jjKmj/iUSi6ZMuyjPF6m6veio9UKGxDrQimSdoDOfMBrgH3G9j7F5DiBg+tXu m3EBGrpbKvnmYozx8reFGvR54OwuMuMV1qalh83ZkLcBxzqL0JmWyyrH0k5CkDQn 0eAQkEEtc361/5Ai8N8qaoGfAZOFMZrQ0Pr9cPqjg5lNVpo+GF5+WaLyawpmnzZF +SIhxzk9WGFQySvX6TEXL5xRiXbTVjI= -----END CERTIFICATE-----Generated at Mon May 6 01:56:09 2024 by rpki-client on console-fra.rpki-client.org