$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa File: 388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa (raw, json) Hash identifier: vuxnQBLUt3KpuHhfMnhrJDJ4TBkOCRKeqw81lVIHmeA= Subject key identifier: 6A:2C:E0:BF:E3:5E:80:D7:BB:79:EA:74:C7:12:C1:13:B0:88:8B:68 Certificate issuer: /CN=52ef44c2-b190-4c91-a394-c8a96856e595 Certificate serial: 010D0C9F4328584563F312AAE2437910436E8500 Authority key identifier: 15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa Signing time: Sun 31 Mar 2024 13:00:36 +0000 ROA not before: Sun 31 Mar 2024 13:00:36 +0000 ROA not after: Sat 29 Jun 2024 13:00:36 +0000 asID: 16509 IP address blocks: 207.211.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:63:f3:12:aa:e2:43:79:10:43:6e:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ef44c2-b190-4c91-a394-c8a96856e595 Validity Not Before: Mar 31 13:00:36 2024 GMT Not After : Jun 29 13:00:36 2024 GMT Subject: CN=2c297d0d-afd0-44e4-85d7-97843f0a3ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:21:4e:07:ab:bc:f7:0b:dc:f1:52:60:a3:b7: 5b:09:9b:e5:99:2c:94:97:54:0c:d4:cc:24:5e:29: 7b:52:16:62:5a:03:bb:51:a2:eb:a1:c9:08:3d:bf: bd:34:7a:59:d5:a0:ea:6b:2f:8f:f1:50:7c:dc:d0: d1:db:fa:c3:ed:99:b8:cf:c3:66:1f:56:c8:6f:c6: e6:f5:33:41:8d:2e:44:4b:34:72:c8:c9:ce:35:c4: e5:95:d9:4a:f7:d5:fb:ef:53:e4:ec:c6:7f:f3:20: ab:e3:7a:3c:58:75:b1:89:ec:a5:0b:51:62:04:2d: 87:3c:f1:50:34:d4:eb:e8:42:c6:36:22:b6:2a:d6: be:d1:dc:b8:63:f7:b0:6e:6d:7e:12:b5:d4:82:7d: 23:a7:2c:25:f6:3f:67:b6:fe:7b:fc:94:cc:91:0d: a5:f8:2c:07:b1:0d:90:ef:54:0f:aa:12:34:ce:0a: f0:27:bd:1b:ac:af:4e:0c:17:7d:e6:f0:7f:6f:56: 7f:17:bc:20:b6:cf:8a:43:70:65:e7:d1:5f:83:71: e9:93:f0:e7:68:72:93:ee:51:5d:b9:01:7e:bb:89: bb:bc:53:8c:32:3e:13:7e:36:c2:50:f5:56:c8:e1: d7:bb:b0:90:23:47:a9:c0:b6:af:b9:6c:ef:c3:ef: d4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2C:E0:BF:E3:5E:80:D7:BB:79:EA:74:C7:12:C1:13:B0:88:8B:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl X509v3 Authority Key Identifier: keyid:15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer sbgp-ipAddrBlock: critical IPv4: 207.211.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:1a:d1:c1:3d:03:40:73:93:6c:55:b5:5e:e0:a8:d3:e8:cb: 22:08:0d:9c:c0:b2:e1:e3:fa:18:0b:80:bd:77:d2:8f:95:dd: 3a:65:81:bd:cc:59:0a:ed:c3:98:c6:30:7a:6a:a4:b9:62:46: f4:5f:c5:86:9a:0f:6e:69:35:dd:93:a4:75:46:79:89:65:22: f7:6a:7c:c2:90:7f:49:1e:2e:f7:d3:2c:93:c4:db:af:56:21: 71:92:12:3e:98:a5:0b:75:e1:d4:d1:17:fb:9a:6b:bc:a4:a3: e2:4e:23:1d:66:d3:aa:cc:3a:64:15:ad:17:d9:c4:0f:74:46: 93:bc:09:50:b1:95:f3:d9:67:5e:86:e0:61:cc:85:9f:48:29: 42:05:c9:60:1b:68:72:07:21:49:df:12:c7:0a:45:02:7a:26: e3:94:65:73:5e:c8:ab:ba:a4:78:1c:3d:15:e4:6f:8b:ac:38: 4a:8a:84:b4:d8:62:d1:8b:e7:90:75:c9:f5:96:25:eb:67:72: 1f:a7:0c:06:39:a5:fd:d3:18:4f:4d:87:a9:3d:98:b1:88:8c: 14:ad:b1:64:b8:d2:82:de:51:69:d8:d0:60:ef:f0:31:b3:96: b6:e9:6c:16:23:e4:10:f5:29:ca:1c:e0:2f:c4:6c:fa:15:4d: 65:a1:c7:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVj8xKq4kN5EENuhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlZjQ0YzItYjE5MC00YzkxLWEzOTQtYzhhOTY4NTZl NTk1MB4XDTI0MDMzMTEzMDAzNloXDTI0MDYyOTEzMDAzNlowLzEtMCsGA1UEAxMk MmMyOTdkMGQtYWZkMC00NGU0LTg1ZDctOTc4NDNmMGEzZWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSFOB6u89wvc8VJgo7dbCZvlmSyUl1QM1Mwk Xil7UhZiWgO7UaLrockIPb+9NHpZ1aDqay+P8VB83NDR2/rD7Zm4z8NmH1bIb8bm 9TNBjS5ESzRyyMnONcTlldlK99X771Pk7MZ/8yCr43o8WHWxieylC1FiBC2HPPFQ NNTr6ELGNiK2Kta+0dy4Y/ewbm1+ErXUgn0jpywl9j9ntv57/JTMkQ2l+CwHsQ2Q 71QPqhI0zgrwJ70brK9ODBd95vB/b1Z/F7wgts+KQ3Bl59Ffg3Hpk/DnaHKT7lFd uQF+u4m7vFOMMj4TfjbCUPVWyOHXu7CQI0epwLavuWzvw+/UVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGos4L/jXoDXu3nqdMcSwROwiItoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmVm NDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5Njg1NmU1OTUvMzg4Y2U5NWEtMGU1ZC0z MzlkLWI4MTAtY2Y1OWIxYjAwZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlZjQ0YzItYjE5MC00YzkxLWEz OTQtYzhhOTY4NTZlNTk1LzUyZWY0NGMyLWIxOTAtNGM5MS1hMzk0LWM4YTk2ODU2 ZTU5NS5jcmwwHwYDVR0jBBgwFoAUFd8ax2dbQcZdK6SdgoxFFInSjBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmVmNDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5 Njg1NmU1OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz9PAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHca0cE9A0Bzk2xVtV7gqNPoyyIIDZzAsuHj+hgLgL130o+V3Tplgb3M WQrtw5jGMHpqpLliRvRfxYaaD25pNd2TpHVGeYllIvdqfMKQf0keLvfTLJPE269W IXGSEj6YpQt14dTRF/uaa7yko+JOIx1m06rMOmQVrRfZxA90RpO8CVCxlfPZZ16G 4GHMhZ9IKUIFyWAbaHIHIUnfEscKRQJ6JuOUZXNeyKu6pHgcPRXkb4usOEqKhLTY YtGL55B1yfWWJetnch+nDAY5pf3TGE9Nh6k9mLGIjBStsWS40oLeUWnY0GDv8DGz lrbpbBYj5BD1Kcoc4C/EbPoVTWWhx30= -----END CERTIFICATE-----Generated at Thu May 2 14:53:56 2024 by rpki-client on console-fra.rpki-client.org