$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa File: 720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa (raw, json) Hash identifier: Ox+uIhv03IotkGVLwyq1gyv2yZAQf0+7EQ+/ZxC7hOQ= Subject key identifier: 76:62:75:E2:BA:94:98:6C:8E:8F:04:D8:73:55:EC:08:22:E5:0A:90 Certificate issuer: /CN=b118eb4a-df16-4ce5-adf1-adaaea128c50 Certificate serial: 010D0C9F43285845C5A8F501031719F857A1F180 Authority key identifier: AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa Signing time: Sun 05 May 2024 13:00:34 +0000 ROA not before: Sun 05 May 2024 13:00:34 +0000 ROA not after: Sat 03 Aug 2024 13:00:34 +0000 asID: 833 IP address blocks: 165.140.201.0/24 maxlen: 24 165.140.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c5:a8:f5:01:03:17:19:f8:57:a1:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b118eb4a-df16-4ce5-adf1-adaaea128c50 Validity Not Before: May 5 13:00:34 2024 GMT Not After : Aug 3 13:00:34 2024 GMT Subject: CN=636a4d56-29ff-4f80-8062-8133efddd36b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b9:83:53:05:ce:6e:42:10:44:87:82:2a:c0: 98:3a:71:f3:07:60:87:d5:0e:d2:b1:81:5e:ea:7e: fb:22:c6:9b:00:5c:35:e6:b3:84:4c:5b:e1:f5:a0: d9:fd:cb:61:83:91:30:c8:84:00:c8:9d:51:b5:f9: 86:e1:c1:13:aa:95:f3:53:23:e8:fb:e3:17:29:39: 5e:18:1b:99:30:15:e7:83:11:4a:23:bc:d5:84:08: bf:e2:85:36:f1:d1:91:39:01:08:40:d5:ab:af:be: 26:c8:06:da:38:70:3b:97:04:1b:3c:e2:54:a9:f6: c7:e0:df:99:b9:3b:50:24:77:e6:f7:ea:2a:05:86: a4:dc:1d:7c:59:b2:25:2a:e9:8b:87:1c:b9:d8:68: 24:d8:5c:b9:af:36:d3:bc:2e:af:a8:bd:50:8e:67: 89:44:b0:d5:d5:1d:2b:97:8b:25:b2:87:f7:b4:94: c0:a2:c5:4e:91:0c:89:87:9e:2b:dc:a7:df:00:e7: c5:de:7e:84:f5:cd:4e:6c:1c:73:e7:e5:a6:6e:e0: f7:fa:74:b6:35:14:fd:a9:85:7a:30:fb:ee:dd:87: fc:29:9a:23:8c:5c:05:3b:af:8a:eb:92:07:3f:1b: 49:69:7d:26:c5:4b:e6:cf:6c:11:3f:ab:df:bd:f0: 63:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:62:75:E2:BA:94:98:6C:8E:8F:04:D8:73:55:EC:08:22:E5:0A:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl X509v3 Authority Key Identifier: keyid:AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer sbgp-ipAddrBlock: critical IPv4: 165.140.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:b6:84:c6:29:8d:1b:be:a6:9b:f3:2c:a7:6f:10:b9:86:69: 9d:8e:65:2a:f9:a4:eb:33:bf:82:51:95:ae:9e:a3:72:a7:c3: e6:da:4a:62:a7:05:a0:1f:62:2c:65:89:a1:ca:41:43:9f:54: e1:fd:c9:2e:ed:4b:09:12:a4:4a:9f:f0:f4:2b:f0:7c:d7:61: 00:cf:79:1d:39:b6:0b:d8:e3:a7:df:85:f9:53:99:cf:6c:b3: 32:d0:ae:40:97:2e:4c:ce:ce:7d:8e:2c:62:6f:80:bb:6f:df: ac:ef:03:b2:ff:ff:01:e3:1f:48:c3:f2:61:8f:5d:f1:93:52: 66:2a:65:72:16:7d:9d:be:8d:37:a0:8d:8e:6a:6e:7b:1d:23: 43:e4:91:9a:17:38:b6:31:08:72:38:d3:29:b8:7c:53:81:23: 9a:21:0f:0f:cd:4a:4b:dd:fb:1d:f1:6a:3a:ef:07:14:ef:9e: 58:8d:6b:76:e2:53:40:a4:d6:54:f0:f9:cf:4b:df:9e:c8:e9: da:e8:a5:63:86:ec:c1:8c:bc:05:64:81:54:04:de:d2:be:26: 65:ac:02:9e:a2:2b:ac:8d:06:41:bc:3c:26:0b:8e:6d:45:76: 4a:1c:96:93:ad:74:b0:cd:20:d9:da:02:ac:27:ac:7a:58:23: 89:b2:36:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXFqPUBAxcZ+Feh8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjExOGViNGEtZGYxNi00Y2U1LWFkZjEtYWRhYWVhMTI4 YzUwMB4XDTI0MDUwNTEzMDAzNFoXDTI0MDgwMzEzMDAzNFowLzEtMCsGA1UEAxMk NjM2YTRkNTYtMjlmZi00ZjgwLTgwNjItODEzM2VmZGRkMzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7mDUwXObkIQRIeCKsCYOnHzB2CH1Q7SsYFe 6n77IsabAFw15rOETFvh9aDZ/cthg5EwyIQAyJ1RtfmG4cETqpXzUyPo++MXKTle GBuZMBXngxFKI7zVhAi/4oU28dGROQEIQNWrr74myAbaOHA7lwQbPOJUqfbH4N+Z uTtQJHfm9+oqBYak3B18WbIlKumLhxy52Ggk2Fy5rzbTvC6vqL1QjmeJRLDV1R0r l4slsof3tJTAosVOkQyJh54r3KffAOfF3n6E9c1ObBxz5+WmbuD3+nS2NRT9qYV6 MPvu3Yf8KZojjFwFO6+K65IHPxtJaX0mxUvmz2wRP6vfvfBjNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZideK6lJhsjo8E2HNV7Agi5QqQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4 ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFhZWExMjhjNTAvNzIwZDNlOWMtZTgwYi0z OTg5LWE5ZDctNGIzNWYxZDEwMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjExOGViNGEtZGYxNi00Y2U1LWFk ZjEtYWRhYWVhMTI4YzUwL2IxMThlYjRhLWRmMTYtNGNlNS1hZGYxLWFkYWFlYTEy OGM1MC5jcmwwHwYDVR0jBBgwFoAUr6JYQ6l/axWnraxW2DHKWIf9Dc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFh ZWExMjhjNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpYzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHy2hMYpjRu+ppvzLKdvELmGaZ2OZSr5pOszv4JRla6eo3Knw+baSmKn BaAfYixliaHKQUOfVOH9yS7tSwkSpEqf8PQr8HzXYQDPeR05tgvY46ffhflTmc9s szLQrkCXLkzOzn2OLGJvgLtv36zvA7L//wHjH0jD8mGPXfGTUmYqZXIWfZ2+jTeg jY5qbnsdI0PkkZoXOLYxCHI40ym4fFOBI5ohDw/NSkvd+x3xajrvBxTvnliNa3bi U0Ck1lTw+c9L357I6dropWOG7MGMvAVkgVQE3tK+JmWsAp6iK6yNBkG8PCYLjm1F dkoclpOtdLDNINnaAqwnrHpYI4myNsA= -----END CERTIFICATE-----Generated at Thu May 9 15:21:19 2024 by rpki-client on console-ams.rpki-client.org