$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/1d07058c-91e1-3e8c-b855-66b4e81e6476.roa File: 1d07058c-91e1-3e8c-b855-66b4e81e6476.roa (raw, json) Hash identifier: o0bc18LQn49wJ46ANA1RqFCohDwRsvEGRYb0pEYWlk4= Subject key identifier: DD:BC:92:D1:F8:AA:5B:56:34:1F:FC:27:EA:45:04:4B:0B:57:35:CB Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F43285844F7300CD1E51BF48C2B373D80 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/1d07058c-91e1-3e8c-b855-66b4e81e6476.roa Signing time: Wed 21 Feb 2024 14:00:32 +0000 ROA not before: Wed 21 Feb 2024 14:00:32 +0000 ROA not after: Tue 21 May 2024 13:00:32 +0000 asID: 14618 IP address blocks: 170.225.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f7:30:0c:d1:e5:1b:f4:8c:2b:37:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Feb 21 14:00:32 2024 GMT Not After : May 21 13:00:32 2024 GMT Subject: CN=7155205c-809f-4e88-9080-f21a4a1c6999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cf:8c:e8:cb:e7:6d:94:f2:67:e3:48:df:b1: e7:fb:5a:0a:44:db:6a:ee:30:35:be:52:37:ac:0f: 99:6f:cc:23:ce:de:f5:d2:a4:3d:c1:f2:2f:f1:b3: ab:4d:30:17:8b:04:8d:ac:1f:b8:88:de:42:7b:bc: 11:c2:34:7f:97:df:f1:bb:ff:6f:7d:ce:9f:9f:ff: 00:dc:f9:b1:58:62:b3:90:45:39:a3:33:5a:7f:3f: 91:ef:86:44:e3:68:be:76:41:e1:bb:91:91:11:0c: e3:2c:ab:14:ae:f9:7d:d7:e7:0e:02:55:de:dc:06: 22:60:02:b7:93:74:b6:83:16:1d:89:55:9b:4d:e9: aa:50:07:d2:1a:e2:ad:d3:9a:bc:5e:49:69:ad:ee: 39:81:e9:db:4c:33:7e:66:7f:da:f7:93:77:cc:2f: 98:28:34:5c:8b:83:a9:93:1c:f1:27:5b:37:c6:93: 72:4c:52:97:fc:7f:4e:7b:87:61:17:be:a8:c9:a9: aa:2e:a6:d5:01:40:f8:5c:e7:b2:e9:77:56:a8:75: 02:c8:e2:f6:b1:76:2f:06:27:30:a4:27:46:49:e0: 26:c1:cf:5e:b1:da:29:e4:b6:65:b9:9b:9c:d5:1b: 4c:69:04:7d:1d:ba:83:87:fe:1b:f7:cd:b0:27:58: 70:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BC:92:D1:F8:AA:5B:56:34:1F:FC:27:EA:45:04:4B:0B:57:35:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/1d07058c-91e1-3e8c-b855-66b4e81e6476.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:78:cc:41:c2:bf:e1:ca:ed:a3:fa:82:46:4b:86:b1:02:83: 60:7b:41:63:43:8c:23:75:40:ff:a0:34:9d:68:db:ca:3e:36: 5f:eb:bd:4f:41:c5:7f:a3:4e:fa:78:67:e1:1a:c8:be:e2:0d: 1e:3c:4d:ff:be:e8:e0:e7:2c:ea:2e:16:f9:b3:4a:be:58:f4: ef:e5:b8:2e:0c:eb:0f:ab:48:56:7d:ba:66:8d:0b:e0:a4:af: 30:56:84:7e:7d:4f:50:19:6d:e9:38:05:42:58:d3:f8:70:c5: d4:3a:b3:cc:08:25:f9:c9:34:60:0c:c6:c7:f2:b4:6f:5e:a5: f6:09:9c:d5:99:01:0c:9a:61:03:a9:e6:20:07:f7:60:4a:bd: a8:04:4c:15:78:0d:c6:7a:1b:37:9f:fd:67:5c:41:fa:29:b4: 64:01:dd:3d:33:7e:5f:1f:7f:ff:bd:40:43:57:bd:03:e9:b5: 12:3e:d5:38:30:3e:58:ac:76:80:46:a5:9c:2c:3c:47:ee:58: 92:6e:11:bf:dc:6b:03:17:c1:b8:04:a5:b3:e2:e3:38:81:79: 15:b7:51:f6:de:9d:0b:3e:b1:3c:ae:6f:e5:eb:ea:16:b5:15: 14:42:2f:70:84:5f:79:f7:9c:c8:12:ce:6a:33:a8:c1:78:23: c0:f1:f4:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET3MAzR5Rv0jCs3PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI0MDIyMTE0MDAzMloXDTI0MDUyMTEzMDAzMlowLzEtMCsGA1UEAxMk NzE1NTIwNWMtODA5Zi00ZTg4LTkwODAtZjIxYTRhMWM2OTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c+M6MvnbZTyZ+NI37Hn+1oKRNtq7jA1vlI3 rA+Zb8wjzt710qQ9wfIv8bOrTTAXiwSNrB+4iN5Ce7wRwjR/l9/xu/9vfc6fn/8A 3PmxWGKzkEU5ozNafz+R74ZE42i+dkHhu5GREQzjLKsUrvl91+cOAlXe3AYiYAK3 k3S2gxYdiVWbTemqUAfSGuKt05q8Xklpre45genbTDN+Zn/a95N3zC+YKDRci4Op kxzxJ1s3xpNyTFKX/H9Oe4dhF76oyamqLqbVAUD4XOey6XdWqHUCyOL2sXYvBicw pCdGSeAmwc9esdop5LZluZuc1RtMaQR9HbqDh/4b982wJ1hw+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN28ktH4qltWNB/8J+pFBEsLVzXLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvMWQwNzA1OGMtOTFlMS0z ZThjLWI4NTUtNjZiNGU4MWU2NDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGB4zEHCv+HK7aP6gkZLhrECg2B7QWNDjCN1QP+gNJ1o28o+Nl/rvU9B xX+jTvp4Z+EayL7iDR48Tf++6ODnLOouFvmzSr5Y9O/luC4M6w+rSFZ9umaNC+Ck rzBWhH59T1AZbek4BUJY0/hwxdQ6s8wIJfnJNGAMxsfytG9epfYJnNWZAQyaYQOp 5iAH92BKvagETBV4DcZ6Gzef/WdcQfoptGQB3T0zfl8ff/+9QENXvQPptRI+1Tgw PlisdoBGpZwsPEfuWJJuEb/cawMXwbgEpbPi4ziBeRW3UfbenQs+sTyub+Xr6ha1 FRRCL3CEX3n3nMgSzmozqMF4I8Dx9Bc= -----END CERTIFICATE-----Generated at Wed May 1 22:25:58 2024 by rpki-client on console-fra.rpki-client.org