$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/d4586c07-e834-3712-8566-845eb39b828a.roa File: d4586c07-e834-3712-8566-845eb39b828a.roa (raw, json) Hash identifier: IkCpV4MdP6qC6DvosxnyuQeoqS/zHm4PjCAYS58fR48= Subject key identifier: 55:94:B2:17:C8:68:42:F4:63:6B:0D:2F:93:BE:39:D9:FB:D1:12:F2 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F43285845BA7E314BA078E9BD4FFA8280 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/d4586c07-e834-3712-8566-845eb39b828a.roa Signing time: Wed 01 May 2024 13:00:34 +0000 ROA not before: Wed 01 May 2024 13:00:34 +0000 ROA not after: Tue 30 Jul 2024 13:00:34 +0000 asID: 18594 IP address blocks: 204.90.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ba:7e:31:4b:a0:78:e9:bd:4f:fa:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: May 1 13:00:34 2024 GMT Not After : Jul 30 13:00:34 2024 GMT Subject: CN=f3da9a8b-2441-4ceb-a328-a1b196e13cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:68:42:de:62:69:79:91:74:3d:36:a4:e5:c5: c6:9d:12:cd:f9:16:15:a9:7b:e6:f7:a1:3b:78:51: 38:48:49:2f:92:30:90:78:9e:9d:3e:e6:1a:6a:97: 28:74:d0:c4:72:77:c5:d5:4e:3b:9d:3d:8e:1c:40: 62:83:6b:ef:e0:d7:0f:9b:9e:31:12:9d:2e:d4:b8: 54:d9:c0:f1:ed:55:40:13:d7:c2:fa:65:69:11:b2: 1f:41:9d:f0:cf:b4:db:4d:1c:38:29:b5:00:3c:cb: 42:c9:f6:83:60:35:d5:aa:14:c1:6f:de:07:18:95: f3:73:90:d4:ca:e3:48:bc:c5:a3:f6:65:5b:f8:40: ff:ab:eb:f2:29:ed:f0:e8:da:f7:c0:7a:d1:db:bb: 1d:ed:73:51:d8:aa:1a:9a:88:06:66:c1:35:96:30: 42:36:47:e3:b7:f6:ea:ba:77:f9:d5:a6:20:46:5f: 74:ce:eb:53:5a:9c:e2:51:15:60:ea:5a:21:7f:27: 7f:f1:1f:9a:76:41:31:1a:da:9e:4f:f4:74:30:5a: 3a:27:12:14:7f:67:d8:09:b3:eb:b5:1e:af:03:92: 32:fc:35:7d:e9:34:d2:6b:16:38:be:28:e0:90:5d: a7:f1:e2:76:70:c2:2e:7b:62:67:9e:45:79:44:12: f9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:94:B2:17:C8:68:42:F4:63:6B:0D:2F:93:BE:39:D9:FB:D1:12:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/d4586c07-e834-3712-8566-845eb39b828a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 204.90.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:78:15:5f:79:e9:63:10:bb:08:60:15:2e:aa:f2:77:59:d7: cc:09:20:10:1e:93:f5:cd:62:34:a3:6e:88:a6:e3:71:75:3a: 06:fd:f1:a9:ab:a4:44:6e:fc:85:10:d2:04:98:a2:04:db:37: 41:e2:bc:01:28:f5:3c:dd:40:1c:52:7a:80:19:9c:70:72:86: 46:88:9f:14:61:03:98:dc:b7:cd:54:24:9e:0b:7a:fe:71:c0: a4:36:3c:af:ac:f7:b4:0f:cb:4b:2d:a3:5d:11:1c:77:a8:21: 70:fb:22:39:73:1a:36:20:62:20:d1:37:44:81:54:60:aa:10: fb:ba:39:0c:70:d8:5e:3a:ef:fa:43:8b:33:ab:df:2e:f3:88: c1:16:0a:26:3f:4a:b7:2b:15:8d:e9:fc:54:19:99:8c:c6:f5: ee:18:c6:60:18:d4:38:c5:11:b6:44:81:05:91:f1:44:77:45: a4:4a:7d:ce:4e:a4:92:52:48:d1:89:f9:f9:88:68:22:2a:bc: 16:5d:58:8d:61:aa:9a:45:15:3f:aa:8b:c9:12:d0:5e:ec:e0: bb:40:3d:8b:0b:cd:85:8c:62:12:71:4c:43:f0:31:e2:a0:b9: 0c:d1:51:2e:80:9a:9c:f5:2a:50:f8:9e:cc:d7:6f:bb:27:9f: ff:52:22:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW6fjFLoHjpvU/6goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI0MDUwMTEzMDAzNFoXDTI0MDczMDEzMDAzNFowLzEtMCsGA1UEAxMk ZjNkYTlhOGItMjQ0MS00Y2ViLWEzMjgtYTFiMTk2ZTEzY2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2hC3mJpeZF0PTak5cXGnRLN+RYVqXvm96E7 eFE4SEkvkjCQeJ6dPuYaapcodNDEcnfF1U47nT2OHEBig2vv4NcPm54xEp0u1LhU 2cDx7VVAE9fC+mVpEbIfQZ3wz7TbTRw4KbUAPMtCyfaDYDXVqhTBb94HGJXzc5DU yuNIvMWj9mVb+ED/q+vyKe3w6Nr3wHrR27sd7XNR2KoamogGZsE1ljBCNkfjt/bq unf51aYgRl90zutTWpziURVg6lohfyd/8R+adkExGtqeT/R0MFo6JxIUf2fYCbPr tR6vA5Iy/DV96TTSaxY4vijgkF2n8eJ2cMIue2JnnkV5RBL5TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWUshfIaEL0Y2sNL5O+Odn70RLyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvZDQ1ODZjMDctZTgzNC0z NzEyLTg1NjYtODQ1ZWIzOWI4MjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFoCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZ4FV956WMQuwhgFS6q8ndZ18wJIBAek/XNYjSjboim43F1Ogb98amr pERu/IUQ0gSYogTbN0HivAEo9TzdQBxSeoAZnHByhkaInxRhA5jct81UJJ4Lev5x wKQ2PK+s97QPy0sto10RHHeoIXD7IjlzGjYgYiDRN0SBVGCqEPu6OQxw2F467/pD izOr3y7ziMEWCiY/SrcrFY3p/FQZmYzG9e4YxmAY1DjFEbZEgQWR8UR3RaRKfc5O pJJSSNGJ+fmIaCIqvBZdWI1hqppFFT+qi8kS0F7s4LtAPYsLzYWMYhJxTEPwMeKg uQzRUS6Ampz1KlD4nszXb7snn/9SIik= -----END CERTIFICATE-----Generated at Wed May 22 02:58:56 2024 by rpki-client on console-ams.rpki-client.org