$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/d2b52252-d5a5-31a3-b33f-9ee44d111942.roa File: d2b52252-d5a5-31a3-b33f-9ee44d111942.roa (raw, json) Hash identifier: 5UdqTRGwsGXEUojEKOf/QreFjvgyubC+kZ2dU6a4iBw= Subject key identifier: D7:F1:83:5D:FE:C5:F1:F5:BE:9C:F1:13:63:97:86:5B:1E:46:33:66 Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F43285845A6F35C87F837C09966E49960 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/d2b52252-d5a5-31a3-b33f-9ee44d111942.roa Signing time: Wed 24 Apr 2024 13:00:33 +0000 ROA not before: Wed 24 Apr 2024 13:00:33 +0000 ROA not after: Tue 23 Jul 2024 13:00:33 +0000 asID: 16509 IP address blocks: 162.33.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a6:f3:5c:87:f8:37:c0:99:66:e4:99:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: Apr 24 13:00:33 2024 GMT Not After : Jul 23 13:00:33 2024 GMT Subject: CN=1a9bf64a-8560-4c8e-8080-f364504eadc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e2:a8:af:cb:0e:b1:52:55:a2:6b:1d:06:84: 91:f0:43:66:3e:32:36:1f:81:83:39:c1:26:5c:d4: d0:85:2d:f7:09:e0:8d:56:91:b9:12:82:fc:92:b2: 56:64:f2:63:00:32:14:5c:68:76:b7:3e:16:9c:0c: 16:66:2e:8b:89:18:d4:4c:65:32:ea:36:0e:02:d3: 9e:e8:cb:51:f5:34:ed:75:ec:78:8a:0a:66:3a:68: 88:f0:a4:ec:91:7f:b8:b5:59:0e:02:98:7f:2b:23: 99:e1:07:ef:39:2b:08:1f:8c:38:a6:7b:2c:7f:3f: e6:59:b6:76:02:38:9d:3f:d0:69:71:5d:bd:f9:ae: 17:2f:bb:9e:51:48:a3:a4:71:51:83:86:8b:95:9a: 52:6b:1e:51:62:bf:25:2c:80:c2:1c:a3:f9:f7:49: 48:3a:07:5e:7a:41:4f:6a:ee:d6:27:e4:62:5c:63: e1:01:84:03:d3:1e:2f:1e:0d:98:92:be:98:4a:4a: 80:6b:49:21:e3:e7:82:d0:11:69:13:1e:7d:e7:28: 86:2a:33:9e:16:db:e6:2f:29:f3:0f:15:1a:36:18: 97:e8:d3:ca:df:3a:30:8d:6b:57:56:6b:22:86:e9: 54:c0:7f:a1:87:90:a4:26:c0:83:65:0b:70:fa:8d: 62:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F1:83:5D:FE:C5:F1:F5:BE:9C:F1:13:63:97:86:5B:1E:46:33:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/d2b52252-d5a5-31a3-b33f-9ee44d111942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:57:b1:e3:b1:f1:93:8f:74:f8:35:7e:3a:30:4b:7e:a0:c7: 72:4f:20:11:8e:7e:f9:49:1a:35:14:d1:d3:da:87:27:f3:96: 8b:05:f4:83:21:78:74:aa:70:14:22:95:b5:0f:2f:d8:4b:68: a9:e4:27:26:3c:14:ec:39:dc:64:69:4c:f3:6d:14:63:9a:d6: ab:e3:8a:09:ee:86:1f:c6:5c:69:dd:a0:0d:36:8e:7b:48:bd: 4e:13:98:73:6b:d3:f8:9c:57:3d:dc:b5:49:3a:9f:45:23:ff: ae:67:05:af:11:02:e8:dd:ee:7f:98:99:69:3b:70:75:cd:e7: 1e:e1:45:4c:8b:89:51:57:99:23:b3:22:e8:c6:81:f6:1d:d7: 81:7d:3b:e0:5e:4a:09:73:50:8b:23:0a:06:e5:34:52:bc:2b: da:98:b6:fb:50:21:55:f3:07:72:73:39:32:85:66:1e:a8:5b: 73:44:15:62:9d:19:6f:80:4d:d7:e1:5d:2b:34:4e:66:2a:83: 54:0a:4d:ce:03:86:66:86:af:61:d5:78:88:c7:90:bb:eb:d6: 5a:98:d0:b5:4c:27:be:f6:bc:6f:a6:70:50:73:57:86:d2:32: 77:2c:9e:18:e6:95:78:08:49:df:fc:07:96:38:75:14:44:de: 4a:0d:80:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWm81yH+DfAmWbkmWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI0MDQyNDEzMDAzM1oXDTI0MDcyMzEzMDAzM1owLzEtMCsGA1UEAxMk MWE5YmY2NGEtODU2MC00YzhlLTgwODAtZjM2NDUwNGVhZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+Kor8sOsVJVomsdBoSR8ENmPjI2H4GDOcEm XNTQhS33CeCNVpG5EoL8krJWZPJjADIUXGh2tz4WnAwWZi6LiRjUTGUy6jYOAtOe 6MtR9TTtdex4igpmOmiI8KTskX+4tVkOAph/KyOZ4QfvOSsIH4w4pnssfz/mWbZ2 AjidP9BpcV29+a4XL7ueUUijpHFRg4aLlZpSax5RYr8lLIDCHKP590lIOgdeekFP au7WJ+RiXGPhAYQD0x4vHg2Ykr6YSkqAa0kh4+eC0BFpEx595yiGKjOeFtvmLynz DxUaNhiX6NPK3zowjWtXVmsihulUwH+hh5CkJsCDZQtw+o1iVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfxg13+xfH1vpzxE2OXhlseRjNmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvZDJiNTIyNTItZDVhNS0z MWEzLWIzM2YtOWVlNDRkMTExOTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpXseOx8ZOPdPg1fjowS36gx3JPIBGOfvlJGjUU0dPahyfzlosF9IMh eHSqcBQilbUPL9hLaKnkJyY8FOw53GRpTPNtFGOa1qvjignuhh/GXGndoA02jntI vU4TmHNr0/icVz3ctUk6n0Uj/65nBa8RAujd7n+YmWk7cHXN5x7hRUyLiVFXmSOz IujGgfYd14F9O+BeSglzUIsjCgblNFK8K9qYtvtQIVXzB3JzOTKFZh6oW3NEFWKd GW+ATdfhXSs0TmYqg1QKTc4DhmaGr2HVeIjHkLvr1lqY0LVMJ772vG+mcFBzV4bS MncsnhjmlXgISd/8B5Y4dRRE3koNgJk= -----END CERTIFICATE-----Generated at Thu May 2 14:54:27 2024 by rpki-client on console-fra.rpki-client.org