$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/b98046e9-e215-3beb-b627-8d082108f26e.roa File: b98046e9-e215-3beb-b627-8d082108f26e.roa (raw, json) Hash identifier: ZpJz5ECRu+7wFc9BRHz2kontphUzRCxF/BbIBaMcOmk= Subject key identifier: DD:1B:CF:05:CD:6E:91:57:64:57:17:AD:7A:D3:EE:CA:BB:DD:1E:95 Certificate issuer: /CN=52ef44c2-b190-4c91-a394-c8a96856e595 Certificate serial: 010D0C9F43285844FCC56A129B0392AAF620FB00 Authority key identifier: 15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/b98046e9-e215-3beb-b627-8d082108f26e.roa Signing time: Fri 23 Feb 2024 14:00:31 +0000 ROA not before: Fri 23 Feb 2024 14:00:31 +0000 ROA not after: Thu 23 May 2024 13:00:31 +0000 asID: 16509 IP address blocks: 170.203.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:fc:c5:6a:12:9b:03:92:aa:f6:20:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ef44c2-b190-4c91-a394-c8a96856e595 Validity Not Before: Feb 23 14:00:31 2024 GMT Not After : May 23 13:00:31 2024 GMT Subject: CN=e51555d7-34fb-490b-b346-3e2144afa60b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b7:ea:de:a2:ba:ea:fe:d4:f6:97:03:13:67: 95:a3:e8:59:26:45:8c:92:4b:da:91:d9:1a:57:93: 12:4c:15:74:cc:57:86:0b:09:19:b9:b7:59:e1:54: 24:07:e1:c2:1d:e7:c2:24:c2:4a:5b:da:f3:41:73: 03:85:72:34:42:69:08:4a:19:96:9b:28:99:c5:5a: 78:1d:bc:9f:01:7b:fe:59:c2:65:f3:cd:ce:e2:a6: 95:5d:12:2b:83:65:51:67:be:79:f3:8c:c7:1b:ee: 15:3c:62:9a:06:6e:95:c3:c1:94:fc:62:ad:e0:fc: e7:61:b9:5d:b9:1e:a6:b4:f0:a0:58:01:72:e2:07: d8:34:80:ba:5a:11:6b:15:82:bc:51:9b:2c:7d:e6: b8:24:1e:25:d1:bc:14:14:d2:87:26:a5:c3:40:a5: 25:c0:db:59:51:b7:1d:19:2b:f3:4a:8a:be:4a:5f: 6c:dd:a4:6c:09:d8:d7:bc:57:b0:4a:f2:b2:9a:e0: 28:7a:79:74:7a:e5:33:8d:5a:51:70:3c:30:1f:11: 51:49:4f:29:4b:61:56:f1:52:2a:b9:b9:05:6d:74: 28:32:20:0f:30:b5:81:28:00:77:59:25:2a:44:8e: bd:51:5f:97:a7:14:19:db:00:92:0b:c0:6d:32:f2: 14:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1B:CF:05:CD:6E:91:57:64:57:17:AD:7A:D3:EE:CA:BB:DD:1E:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/b98046e9-e215-3beb-b627-8d082108f26e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl X509v3 Authority Key Identifier: keyid:15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer sbgp-ipAddrBlock: critical IPv4: 170.203.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:86:46:60:6e:a1:3c:e0:30:8f:a7:65:60:42:f6:ab:9b:4e: 9f:ce:13:bc:1b:c1:12:79:53:85:84:81:4c:41:3e:1e:a9:52: ac:16:24:eb:68:cf:30:7b:43:aa:73:fc:4d:26:45:9a:d7:ab: 5e:63:70:c9:72:4c:0a:e3:ef:ec:22:d8:ca:c1:c4:6d:8f:33: 99:2e:74:38:0e:36:b3:21:93:21:cf:fd:9c:e9:00:2c:02:30: c8:55:7f:0d:14:cc:bf:09:8a:d1:1e:69:0d:1b:22:d5:88:84: 16:7d:e5:5f:52:19:e5:37:24:ae:ff:43:e3:b0:d5:41:70:ba: 25:b9:3f:1b:a3:74:73:76:54:b8:d6:dc:28:58:bc:5c:39:4d: ef:3b:12:75:82:0d:ec:8a:d7:4b:a7:07:98:fd:19:01:f6:ed: 9c:0e:9e:21:7a:4b:8e:e5:01:51:6d:98:3f:a4:67:72:b8:5a: a4:4c:3f:af:e7:92:48:41:cd:37:2a:4d:9c:01:c5:55:02:f1: 98:4c:ae:75:a2:21:f6:fb:76:d9:97:64:6d:07:d9:ed:7d:4a: 75:f0:77:ea:fd:23:d0:b2:09:1a:3d:25:60:31:28:b9:56:f4: 4a:a1:54:b8:6d:d0:37:92:69:cd:21:a3:2e:0b:61:5e:76:ec: 3f:f6:cf:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET8xWoSmwOSqvYg+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlZjQ0YzItYjE5MC00YzkxLWEzOTQtYzhhOTY4NTZl NTk1MB4XDTI0MDIyMzE0MDAzMVoXDTI0MDUyMzEzMDAzMVowLzEtMCsGA1UEAxMk ZTUxNTU1ZDctMzRmYi00OTBiLWIzNDYtM2UyMTQ0YWZhNjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbfq3qK66v7U9pcDE2eVo+hZJkWMkkvakdka V5MSTBV0zFeGCwkZubdZ4VQkB+HCHefCJMJKW9rzQXMDhXI0QmkIShmWmyiZxVp4 HbyfAXv+WcJl883O4qaVXRIrg2VRZ75584zHG+4VPGKaBm6Vw8GU/GKt4PznYbld uR6mtPCgWAFy4gfYNIC6WhFrFYK8UZssfea4JB4l0bwUFNKHJqXDQKUlwNtZUbcd GSvzSoq+Sl9s3aRsCdjXvFewSvKymuAoenl0euUzjVpRcDwwHxFRSU8pS2FW8VIq ubkFbXQoMiAPMLWBKAB3WSUqRI69UV+XpxQZ2wCSC8BtMvIUMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0bzwXNbpFXZFcXrXrT7sq73R6VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmVm NDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5Njg1NmU1OTUvYjk4MDQ2ZTktZTIxNS0z YmViLWI2MjctOGQwODIxMDhmMjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlZjQ0YzItYjE5MC00YzkxLWEz OTQtYzhhOTY4NTZlNTk1LzUyZWY0NGMyLWIxOTAtNGM5MS1hMzk0LWM4YTk2ODU2 ZTU5NS5jcmwwHwYDVR0jBBgwFoAUFd8ax2dbQcZdK6SdgoxFFInSjBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmVmNDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5 Njg1NmU1OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqssQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2GRmBuoTzgMI+nZWBC9qubTp/OE7wbwRJ5U4WEgUxBPh6pUqwWJOto zzB7Q6pz/E0mRZrXq15jcMlyTArj7+wi2MrBxG2PM5kudDgONrMhkyHP/ZzpACwC MMhVfw0UzL8JitEeaQ0bItWIhBZ95V9SGeU3JK7/Q+Ow1UFwuiW5PxujdHN2VLjW 3ChYvFw5Te87EnWCDeyK10unB5j9GQH27ZwOniF6S47lAVFtmD+kZ3K4WqRMP6/n kkhBzTcqTZwBxVUC8ZhMrnWiIfb7dtmXZG0H2e19SnXwd+r9I9CyCRo9JWAxKLlW 9EqhVLht0DeSac0hoy4LYV527D/2z7M= -----END CERTIFICATE-----Generated at Thu May 2 21:10:27 2024 by rpki-client on console-fra.rpki-client.org