$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a7efd87b-e805-3566-9129-053eadf2ca59.roa File: a7efd87b-e805-3566-9129-053eadf2ca59.roa (raw, json) Hash identifier: YvQkL9goZ3GLRzSVHnQhJT5mAmjifBgMOLD4rp1jrXo= Subject key identifier: 21:5A:E6:9D:BA:65:B3:0E:3A:95:CD:02:77:33:DD:CB:77:51:6A:14 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F43285845840DCE9C33F439661023DD80 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a7efd87b-e805-3566-9129-053eadf2ca59.roa Signing time: Fri 12 Apr 2024 01:00:26 +0000 ROA not before: Fri 12 Apr 2024 01:00:26 +0000 ROA not after: Thu 11 Jul 2024 01:00:26 +0000 asID: 21949 IP address blocks: 216.120.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:84:0d:ce:9c:33:f4:39:66:10:23:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Apr 12 01:00:26 2024 GMT Not After : Jul 11 01:00:26 2024 GMT Subject: CN=9b5e8853-7463-4897-83d4-31ee3e705ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:84:88:dd:2d:a2:91:eb:f4:19:0c:13:b1:05: 63:da:c1:15:9e:da:b7:4b:bb:4d:bc:fd:06:cb:19: b0:e3:28:70:ab:2f:a9:8a:d5:64:02:a3:90:e1:24: 51:b6:7e:a7:4b:d2:6b:99:aa:64:d8:1d:4f:56:29: d7:39:44:33:20:57:94:e4:a1:01:62:6d:0c:03:7c: 5e:7c:28:e1:d8:e1:83:60:e4:b1:d5:49:ec:8f:6d: ef:12:7b:81:90:49:fc:f1:45:90:e2:90:61:39:ee: 36:18:fe:e9:c3:86:7f:6e:c6:86:18:e5:95:17:27: ce:79:2c:df:9a:8f:e7:53:81:65:ac:07:83:fe:a2: 4d:17:b7:1f:57:c6:6d:8a:eb:04:5f:a6:6d:2a:9a: e1:e4:e0:3b:64:6b:a3:10:a2:38:97:99:63:5b:7a: bc:1b:ff:86:a8:66:68:4b:63:06:56:f3:34:4c:03: d1:22:de:16:2d:82:c6:8b:94:9a:aa:f4:2d:8b:e9: 6e:8f:97:00:d2:d6:e5:1b:be:4b:f7:96:e1:83:03: 61:13:06:95:d9:29:63:23:22:f4:8a:02:69:6c:a3: 4c:5f:40:60:a5:c2:35:c6:e3:91:3e:05:de:6b:00: d0:26:7c:7e:ce:11:36:cb:30:d9:41:ba:df:73:93: ff:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5A:E6:9D:BA:65:B3:0E:3A:95:CD:02:77:33:DD:CB:77:51:6A:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a7efd87b-e805-3566-9129-053eadf2ca59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 216.120.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:e1:e5:30:bb:47:55:b7:5d:d5:af:29:f0:c9:4b:a5:d8:43: be:8e:bd:e7:87:97:98:b5:75:58:42:d0:35:a8:2f:00:f9:fe: fe:82:c5:d9:4a:6a:5a:3a:69:86:13:60:f5:fa:48:31:63:26: 4f:6d:d6:6c:42:03:ee:fa:62:ae:67:e6:04:89:eb:b2:c6:27: 56:7b:cf:19:45:59:42:21:b2:4e:30:01:ec:5d:a1:65:21:ee: 5d:2c:36:01:4d:4b:40:2e:6c:de:15:b4:25:75:0e:a7:ca:db: 59:d7:56:eb:48:ab:5f:87:9b:98:55:e5:0a:37:28:e7:a0:ac: e8:4e:67:9b:82:59:a6:08:de:45:45:00:57:70:97:e5:49:6a: d8:b0:d4:a2:50:8b:c4:a4:68:27:3f:eb:30:8f:99:df:db:dd: cf:24:e4:20:c2:18:5c:38:c2:e5:3a:b5:3d:cb:6c:45:0a:d4: 52:16:3a:bf:dd:1d:23:dd:2c:9e:0e:5e:99:a3:f4:36:c0:e7: d7:b1:71:f1:f4:0c:7d:53:1e:aa:80:58:96:69:58:ff:6b:6b: 2b:84:43:02:3e:c6:d3:3e:92:9a:89:3f:f1:c5:90:11:3d:2b: b7:dc:d6:1d:5e:35:72:0d:6a:e1:5e:06:f1:be:36:c2:f5:31: be:6d:89:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWEDc6cM/Q5ZhAj3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI0MDQxMjAxMDAyNloXDTI0MDcxMTAxMDAyNlowLzEtMCsGA1UEAxMk OWI1ZTg4NTMtNzQ2My00ODk3LTgzZDQtMzFlZTNlNzA1Y2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4SI3S2ikev0GQwTsQVj2sEVntq3S7tNvP0G yxmw4yhwqy+pitVkAqOQ4SRRtn6nS9Jrmapk2B1PVinXOUQzIFeU5KEBYm0MA3xe fCjh2OGDYOSx1Unsj23vEnuBkEn88UWQ4pBhOe42GP7pw4Z/bsaGGOWVFyfOeSzf mo/nU4FlrAeD/qJNF7cfV8ZtiusEX6ZtKprh5OA7ZGujEKI4l5ljW3q8G/+GqGZo S2MGVvM0TAPRIt4WLYLGi5SaqvQti+luj5cA0tblG75L95bhgwNhEwaV2SljIyL0 igJpbKNMX0BgpcI1xuORPgXeawDQJnx+zhE2yzDZQbrfc5P/ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFa5p26ZbMOOpXNAncz3ct3UWoUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYTdlZmQ4N2ItZTgwNS0z NTY2LTkxMjktMDUzZWFkZjJjYTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2HjCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzh5TC7R1W3XdWvKfDJS6XYQ76OveeHl5i1dVhC0DWoLwD5/v6CxdlK alo6aYYTYPX6SDFjJk9t1mxCA+76Yq5n5gSJ67LGJ1Z7zxlFWUIhsk4wAexdoWUh 7l0sNgFNS0AubN4VtCV1DqfK21nXVutIq1+Hm5hV5Qo3KOegrOhOZ5uCWaYI3kVF AFdwl+VJatiw1KJQi8SkaCc/6zCPmd/b3c8k5CDCGFw4wuU6tT3LbEUK1FIWOr/d HSPdLJ4OXpmj9DbA59excfH0DH1THqqAWJZpWP9rayuEQwI+xtM+kpqJP/HFkBE9 K7fc1h1eNXINauFeBvG+NsL1Mb5tics= -----END CERTIFICATE-----Generated at Sat May 18 01:40:23 2024 by rpki-client on console-fra.rpki-client.org