$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/20065a80-fc1c-313d-bc55-ba7100fda1b9.roa File: 20065a80-fc1c-313d-bc55-ba7100fda1b9.roa (raw, json) Hash identifier: iPTqYJ10JLw/AmR7ckNJUGH7IwxV9/yTWp41e400ch0= Subject key identifier: F2:F9:F5:5E:2C:79:CC:47:52:2E:60:49:1C:B5:45:BB:E1:D7:10:F0 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F43285845612858FFB4EA57B03B87AA40 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/20065a80-fc1c-313d-bc55-ba7100fda1b9.roa Signing time: Sat 30 Mar 2024 13:00:38 +0000 ROA not before: Sat 30 Mar 2024 13:00:38 +0000 ROA not after: Fri 28 Jun 2024 13:00:38 +0000 asID: 4005 IP address blocks: 204.59.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:61:28:58:ff:b4:ea:57:b0:3b:87:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Mar 30 13:00:38 2024 GMT Not After : Jun 28 13:00:38 2024 GMT Subject: CN=60799c23-4ed4-4117-b524-0fbc4d750964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f1:36:be:51:3a:f0:83:e4:3e:e1:20:37:ea: 25:07:d2:f7:da:91:a0:cd:a4:89:0a:ed:e2:41:e3: 04:5a:a0:4b:92:14:d1:4f:87:00:32:2c:c5:4b:fc: cb:aa:0d:02:c6:4b:6d:10:54:60:e6:72:d7:f7:a0: 61:84:57:b9:9d:a0:d1:d3:75:b5:54:9d:76:17:24: 4d:d5:11:a4:56:89:df:5f:b2:79:af:61:f0:56:e1: 75:ee:9f:03:03:1c:aa:29:fa:a3:b3:7e:cd:a1:55: 60:21:b7:3e:f1:ba:c6:19:84:f7:e5:fa:c8:0d:b1: 3f:b0:06:cd:6b:bf:6c:19:08:e4:22:a9:e6:9e:80: 1b:ec:c7:14:c4:f5:63:2a:f0:9c:21:69:84:fe:80: ec:d4:3e:e2:47:23:63:07:60:af:8b:6e:e6:fd:21: 87:d0:9f:f3:04:23:99:6c:a8:18:04:23:ec:37:30: d6:b8:bd:92:68:94:ae:f3:14:ba:14:8e:03:f8:4f: e5:54:f6:db:3a:73:cf:9a:1a:19:50:82:69:23:57: 6c:57:41:fa:49:5a:4e:e6:07:f0:c7:49:7e:ab:31: 16:a2:38:ba:48:bb:89:f3:bd:c5:7b:13:7f:f0:f7: dc:d5:bf:60:ca:6c:2f:37:fd:7d:b7:61:d1:d0:59: 50:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F9:F5:5E:2C:79:CC:47:52:2E:60:49:1C:B5:45:BB:E1:D7:10:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/20065a80-fc1c-313d-bc55-ba7100fda1b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 204.59.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:97:9a:bf:c4:e6:d6:6b:e2:2b:28:18:76:3d:37:d5:97:9b: 37:bc:89:b4:9f:38:f5:22:d7:09:6b:93:18:3b:ff:4d:ac:dd: 9e:37:14:3b:53:a7:eb:02:94:f4:81:ac:a3:c8:7b:20:2a:93: c6:4e:55:dc:e1:03:39:57:0d:5a:c6:61:03:77:30:6f:66:09: 6d:11:91:e8:46:01:a0:6e:9f:d6:b8:ad:b5:30:c7:d1:e4:22: ff:1e:d7:5f:25:a9:1a:3a:44:7c:53:84:ce:01:e3:b5:f1:87: 4d:c2:44:8b:1f:cb:18:2f:ae:28:7b:73:cc:b4:76:de:f4:e9: 05:49:1c:80:c3:fe:67:14:73:34:cb:db:ad:52:ef:80:aa:0a: 36:89:1f:ed:ad:94:59:8d:b6:ca:f8:36:95:2d:70:9b:e5:39: e7:61:b8:3a:71:f4:e6:e7:3a:9f:fe:53:88:3e:ed:99:65:82: 6c:db:28:82:cb:6f:94:32:52:62:2a:9c:3e:11:0f:bd:c4:18: 54:c4:14:51:17:84:bc:a5:cd:45:43:5d:21:1b:9a:9d:b1:d5: 5d:30:0e:e4:7d:34:7c:9f:43:50:b3:b3:fc:8a:ad:f9:4c:91: 57:30:24:67:1c:b5:60:35:a7:ee:cd:db:19:8e:8d:34:f8:fd: 85:f7:cb:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVhKFj/tOpXsDuHqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI0MDMzMDEzMDAzOFoXDTI0MDYyODEzMDAzOFowLzEtMCsGA1UEAxMk NjA3OTljMjMtNGVkNC00MTE3LWI1MjQtMGZiYzRkNzUwOTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfE2vlE68IPkPuEgN+olB9L32pGgzaSJCu3i QeMEWqBLkhTRT4cAMizFS/zLqg0CxkttEFRg5nLX96BhhFe5naDR03W1VJ12FyRN 1RGkVonfX7J5r2HwVuF17p8DAxyqKfqjs37NoVVgIbc+8brGGYT35frIDbE/sAbN a79sGQjkIqnmnoAb7McUxPVjKvCcIWmE/oDs1D7iRyNjB2Cvi27m/SGH0J/zBCOZ bKgYBCPsNzDWuL2SaJSu8xS6FI4D+E/lVPbbOnPPmhoZUIJpI1dsV0H6SVpO5gfw x0l+qzEWoji6SLuJ873FexN/8Pfc1b9gymwvN/19t2HR0FlQKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPL59V4secxHUi5gSRy1Rbvh1xDwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvMjAwNjVhODAtZmMxYy0z MTNkLWJjNTUtYmE3MTAwZmRhMWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMqXmr/E5tZr4isoGHY9N9WXmze8ibSfOPUi1wlrkxg7/02s3Z43FDtT p+sClPSBrKPIeyAqk8ZOVdzhAzlXDVrGYQN3MG9mCW0RkehGAaBun9a4rbUwx9Hk Iv8e118lqRo6RHxThM4B47Xxh03CRIsfyxgvrih7c8y0dt706QVJHIDD/mcUczTL 261S74CqCjaJH+2tlFmNtsr4NpUtcJvlOedhuDpx9ObnOp/+U4g+7ZllgmzbKILL b5QyUmIqnD4RD73EGFTEFFEXhLylzUVDXSEbmp2x1V0wDuR9NHyfQ1Czs/yKrflM kVcwJGcctWA1p+7N2xmOjTT4/YX3y3k= -----END CERTIFICATE-----Generated at Sat May 11 15:25:44 2024 by rpki-client on console-ams.rpki-client.org