$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/809f7e04-e2b2-3be1-adc7-5bcc6f27a7bc.roa File: 809f7e04-e2b2-3be1-adc7-5bcc6f27a7bc.roa (raw, json) Hash identifier: YbluGNN8cuPX3+Wqv1rriiuQ7Qt5UtH8e/nxbBm+WNU= Subject key identifier: 6B:5D:1F:6C:E9:30:B1:C9:45:73:6F:04:2D:4A:3A:5D:2C:B6:CA:92 Certificate issuer: /CN=52ef44c2-b190-4c91-a394-c8a96856e595 Certificate serial: 010D0C9F43285844FCC56669CFA75A602FC83470 Authority key identifier: 15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/809f7e04-e2b2-3be1-adc7-5bcc6f27a7bc.roa Signing time: Fri 23 Feb 2024 14:00:31 +0000 ROA not before: Fri 23 Feb 2024 14:00:31 +0000 ROA not after: Thu 23 May 2024 13:00:31 +0000 asID: 14618 IP address blocks: 170.203.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:fc:c5:66:69:cf:a7:5a:60:2f:c8:34:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ef44c2-b190-4c91-a394-c8a96856e595 Validity Not Before: Feb 23 14:00:31 2024 GMT Not After : May 23 13:00:31 2024 GMT Subject: CN=82e067f8-4ffd-4b85-a37f-c37f1500b5f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a9:c6:c5:2f:80:5f:c6:a4:cb:2f:c6:46:be: 92:47:d1:71:35:c4:1b:b7:58:56:6c:56:94:a2:c8: 9b:4c:90:50:b9:1b:41:ad:7a:b9:59:36:ec:73:c7: 44:34:fc:00:44:65:ea:51:0f:a1:58:63:fe:56:ad: f6:2c:f6:2a:8c:ce:f4:6e:29:5d:fd:48:5f:41:f3: 81:20:44:ff:7f:6d:c8:a1:34:c1:2c:21:fc:3a:fe: aa:de:a0:89:4f:4c:7c:a1:8e:d9:ea:46:10:f3:a6: 97:21:aa:13:d8:85:3b:c6:4f:9d:27:ed:42:6b:64: 10:bf:0d:ee:5f:4d:62:1b:1f:22:e0:f9:af:4f:c7: 9f:75:1d:bb:ec:f7:f8:40:6e:de:ca:57:8f:70:a4: 01:23:ad:ec:08:96:41:51:e8:78:a2:82:64:e1:0e: 86:04:7f:05:99:e7:85:37:b3:a1:02:aa:ed:b4:be: cb:00:67:39:eb:47:61:f7:e8:a9:57:6d:fc:81:3f: 48:03:6e:4c:b7:de:d1:13:84:7f:86:98:81:34:7f: 40:57:51:79:bb:14:c8:03:d3:ee:30:27:0a:ed:0e: 6b:82:e5:03:67:86:72:68:bc:00:c0:4c:5d:3c:c3: 7e:b6:9e:59:fd:0e:a5:41:63:42:72:a1:49:66:01: 8e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5D:1F:6C:E9:30:B1:C9:45:73:6F:04:2D:4A:3A:5D:2C:B6:CA:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/809f7e04-e2b2-3be1-adc7-5bcc6f27a7bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl X509v3 Authority Key Identifier: keyid:15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer sbgp-ipAddrBlock: critical IPv4: 170.203.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:10:12:93:8c:1b:8e:a4:47:5b:c1:21:b1:db:e8:ea:e4:6d: 65:43:c0:0d:ed:a5:01:70:20:7f:1b:8a:81:6d:39:66:a1:64: df:a2:61:82:55:aa:41:2e:ad:48:c5:93:04:e5:18:c8:ed:2d: 47:1a:06:34:87:ad:d8:3f:a5:6e:91:b3:8d:b6:fb:9c:bf:c8: 54:44:2f:91:88:a4:34:6f:08:1f:d6:80:67:f6:2e:e1:86:9a: dd:01:d1:7d:05:cd:76:d5:70:43:4b:8d:4d:bc:14:9b:5d:76: 17:7c:d6:5e:24:c4:6d:f1:0a:16:98:69:9c:9a:04:55:d0:a8: b9:11:5c:ae:49:5b:03:ff:d1:38:81:a0:0e:f5:45:61:da:68: 34:68:6c:49:4e:59:a1:30:0f:e7:76:7c:e4:20:50:53:dd:9f: 72:6f:bf:ca:f4:ac:b6:17:11:f1:d1:b2:18:eb:7e:57:f4:4c: c8:5e:64:00:32:6d:08:a9:19:61:ee:fa:b6:be:e4:f4:45:59: cf:99:9c:19:15:19:fe:5f:ad:01:37:ee:91:cb:7d:e8:c3:6b: 39:72:8f:3c:f1:a7:4e:58:11:e1:cf:6f:b1:e2:8e:3b:ce:6b: 69:ff:58:9c:5f:44:8a:73:81:84:71:26:34:3d:02:53:d6:00: f2:1f:c8:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET8xWZpz6daYC/INHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlZjQ0YzItYjE5MC00YzkxLWEzOTQtYzhhOTY4NTZl NTk1MB4XDTI0MDIyMzE0MDAzMVoXDTI0MDUyMzEzMDAzMVowLzEtMCsGA1UEAxMk ODJlMDY3ZjgtNGZmZC00Yjg1LWEzN2YtYzM3ZjE1MDBiNWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06nGxS+AX8akyy/GRr6SR9FxNcQbt1hWbFaU osibTJBQuRtBrXq5WTbsc8dENPwARGXqUQ+hWGP+Vq32LPYqjM70bild/UhfQfOB IET/f23IoTTBLCH8Ov6q3qCJT0x8oY7Z6kYQ86aXIaoT2IU7xk+dJ+1Ca2QQvw3u X01iGx8i4PmvT8efdR277Pf4QG7eylePcKQBI63sCJZBUeh4ooJk4Q6GBH8FmeeF N7OhAqrttL7LAGc560dh9+ipV238gT9IA25Mt97RE4R/hpiBNH9AV1F5uxTIA9Pu MCcK7Q5rguUDZ4ZyaLwAwExdPMN+tp5Z/Q6lQWNCcqFJZgGOwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtdH2zpMLHJRXNvBC1KOl0stsqSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmVm NDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5Njg1NmU1OTUvODA5ZjdlMDQtZTJiMi0z YmUxLWFkYzctNWJjYzZmMjdhN2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlZjQ0YzItYjE5MC00YzkxLWEz OTQtYzhhOTY4NTZlNTk1LzUyZWY0NGMyLWIxOTAtNGM5MS1hMzk0LWM4YTk2ODU2 ZTU5NS5jcmwwHwYDVR0jBBgwFoAUFd8ax2dbQcZdK6SdgoxFFInSjBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmVmNDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5 Njg1NmU1OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqssQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUQEpOMG46kR1vBIbHb6OrkbWVDwA3tpQFwIH8bioFtOWahZN+iYYJV qkEurUjFkwTlGMjtLUcaBjSHrdg/pW6Rs422+5y/yFREL5GIpDRvCB/WgGf2LuGG mt0B0X0FzXbVcENLjU28FJtddhd81l4kxG3xChaYaZyaBFXQqLkRXK5JWwP/0TiB oA71RWHaaDRobElOWaEwD+d2fOQgUFPdn3Jvv8r0rLYXEfHRshjrflf0TMheZAAy bQipGWHu+ra+5PRFWc+ZnBkVGf5frQE37pHLfejDazlyjzzxp05YEeHPb7HijjvO a2n/WJxfRIpzgYRxJjQ9AlPWAPIfyFQ= -----END CERTIFICATE-----Generated at Thu May 2 03:26:08 2024 by rpki-client on console-ams.rpki-client.org