$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5863efda-fb1f-333c-9e74-1e8e0363fbe8.roa File: 5863efda-fb1f-333c-9e74-1e8e0363fbe8.roa (raw, json) Hash identifier: qBDPrz+picu6aEe+7YQqlpbuYuFgHcVZ/+P5JVPw8ZA= Subject key identifier: 04:0A:1D:B8:94:07:B3:A8:0F:4C:80:8B:3C:91:F7:3B:8A:6F:9D:21 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F43285845B38365BFFE320157875AE500 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5863efda-fb1f-333c-9e74-1e8e0363fbe8.roa Signing time: Mon 29 Apr 2024 01:00:25 +0000 ROA not before: Mon 29 Apr 2024 01:00:25 +0000 ROA not after: Sun 28 Jul 2024 01:00:25 +0000 asID: 16509 IP address blocks: 158.115.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b3:83:65:bf:fe:32:01:57:87:5a:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Apr 29 01:00:25 2024 GMT Not After : Jul 28 01:00:25 2024 GMT Subject: CN=5933a23f-f320-41cb-a97f-990a195217f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:70:cf:36:f3:f4:6e:8a:e5:82:32:06:90:ef: 3f:51:93:9d:10:9c:a9:c1:9b:01:1b:5c:f5:91:38: f5:7a:95:72:53:fd:72:7c:7e:b1:a3:21:df:d0:d3: 02:65:f2:f6:51:93:3c:29:8f:15:84:fb:92:4a:47: 13:a4:cf:b0:e3:be:28:3c:61:d1:02:5b:1d:11:33: 50:50:dd:05:10:7d:b9:fc:7a:46:c6:9f:0a:04:1d: 8d:32:3b:13:56:84:51:8f:25:75:f7:f5:d5:1a:16: c9:40:50:7d:28:52:94:88:2a:12:2d:85:cc:58:6b: 1a:68:6a:bc:c8:68:63:5f:b9:6b:5b:7d:be:ac:d8: aa:14:c5:16:85:c5:9f:5c:81:8a:84:2d:09:88:2c: 72:74:b5:dc:76:6c:56:10:7a:3b:d6:3d:b4:13:6e: a0:75:22:cf:8e:f1:18:be:4d:88:35:05:e0:86:75: 9f:e2:56:4c:18:f7:11:20:8c:96:6b:6f:7b:9a:60: e5:12:e3:b3:e9:b6:a7:a2:31:45:01:31:a5:99:d3: 99:67:34:9a:f6:ef:b0:2b:03:c3:27:8e:3b:8f:fe: 7d:55:54:ab:98:77:1c:88:df:1a:9c:f8:72:5b:7f: 03:c4:09:72:ac:44:cb:bf:e1:03:e5:32:9f:61:dd: 2d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0A:1D:B8:94:07:B3:A8:0F:4C:80:8B:3C:91:F7:3B:8A:6F:9D:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5863efda-fb1f-333c-9e74-1e8e0363fbe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:96:5c:69:f5:bf:b9:b6:cb:70:0a:1c:32:2a:62:3f:b9:45: 3c:27:cf:6c:0f:4a:8d:b6:c6:da:43:cb:ad:c0:14:31:79:7e: 64:ad:92:1a:fa:ef:e6:c9:94:13:e0:f7:f8:a6:b9:e6:ce:a1: 6b:65:9f:ac:32:0b:87:d8:cd:b5:9f:44:a0:60:77:d6:d1:c5: 60:34:09:1b:1b:90:7d:c9:5d:7b:ea:88:a1:85:0f:e5:d5:a4: b9:2e:00:78:6e:87:c8:9e:34:04:bf:4a:d4:86:15:fa:fd:93: 06:01:c2:cb:29:cb:96:d6:ca:d9:21:82:67:9c:8b:23:12:cf: 43:2c:15:bd:98:3e:88:30:6a:33:5c:03:2d:05:c3:d0:f7:17: 67:c4:a8:06:85:4b:7d:dd:8e:f3:75:60:43:c4:27:ea:49:9e: 3a:4d:5c:ba:3d:03:cd:4c:12:3a:03:64:94:55:44:b5:9e:0e: d6:3c:9c:22:08:38:0d:0c:a2:cd:aa:67:25:13:7f:49:cc:7d: 81:1b:f4:ef:b6:42:f9:0b:fb:30:1a:b6:2c:9f:3b:5e:84:d3: f0:37:81:42:1a:13:5f:56:bb:c9:dd:d2:af:3e:4d:94:01:d9: c5:ab:67:2c:bc:f9:d5:86:a0:26:1c:d3:15:45:03:bb:4b:22: 55:e2:55:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWzg2W//jIBV4da5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI0MDQyOTAxMDAyNVoXDTI0MDcyODAxMDAyNVowLzEtMCsGA1UEAxMk NTkzM2EyM2YtZjMyMC00MWNiLWE5N2YtOTkwYTE5NTIxN2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXDPNvP0borlgjIGkO8/UZOdEJypwZsBG1z1 kTj1epVyU/1yfH6xoyHf0NMCZfL2UZM8KY8VhPuSSkcTpM+w474oPGHRAlsdETNQ UN0FEH25/HpGxp8KBB2NMjsTVoRRjyV19/XVGhbJQFB9KFKUiCoSLYXMWGsaaGq8 yGhjX7lrW32+rNiqFMUWhcWfXIGKhC0JiCxydLXcdmxWEHo71j20E26gdSLPjvEY vk2INQXghnWf4lZMGPcRIIyWa297mmDlEuOz6banojFFATGlmdOZZzSa9u+wKwPD J447j/59VVSrmHcciN8anPhyW38DxAlyrETLv+ED5TKfYd0tLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQKHbiUB7OoD0yAizyR9zuKb50hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNTg2M2VmZGEtZmIxZi0z MzNjLTllNzQtMWU4ZTAzNjNmYmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSWXGn1v7m2y3AKHDIqYj+5RTwnz2wPSo22xtpDy63AFDF5fmStkhr6 7+bJlBPg9/imuebOoWtln6wyC4fYzbWfRKBgd9bRxWA0CRsbkH3JXXvqiKGFD+XV pLkuAHhuh8ieNAS/StSGFfr9kwYBwsspy5bWytkhgmeciyMSz0MsFb2YPogwajNc Ay0Fw9D3F2fEqAaFS33djvN1YEPEJ+pJnjpNXLo9A81MEjoDZJRVRLWeDtY8nCII OA0Mos2qZyUTf0nMfYEb9O+2QvkL+zAatiyfO16E0/A3gUIaE19Wu8nd0q8+TZQB 2cWrZyy8+dWGoCYc0xVFA7tLIlXiVQk= -----END CERTIFICATE-----Generated at Thu May 2 14:55:59 2024 by rpki-client on console-ams.rpki-client.org