$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/450f767d-7295-3de2-b7c9-42d59cf71f78.roa File: 450f767d-7295-3de2-b7c9-42d59cf71f78.roa (raw, json) Hash identifier: pzFmL2Adga+/W4EA0i2g62rIMLYmoI7NEX6KaJrWfOU= Subject key identifier: FE:D7:49:F0:27:6C:74:9D:E0:BE:6D:A1:02:04:B5:E3:0F:47:A9:73 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F43285846309EE74CEFCCA27184032880 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/450f767d-7295-3de2-b7c9-42d59cf71f78.roa Signing time: Wed 12 Jun 2024 20:31:59 +0000 ROA not before: Wed 12 Jun 2024 20:31:59 +0000 ROA not after: Tue 10 Sep 2024 20:31:59 +0000 asID: 396982 IP address blocks: 152.38.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Jun 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:30:9e:e7:4c:ef:cc:a2:71:84:03:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Jun 12 20:31:59 2024 GMT Not After : Sep 10 20:31:59 2024 GMT Subject: CN=36039d60-3e4f-4816-a4bf-38566e381be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ae:1c:57:72:8e:ae:ce:2c:34:de:79:52:f0: 38:4f:f2:f3:d7:7b:c1:c8:14:af:31:d0:a4:a9:33: b4:c6:bf:dd:c5:51:ec:0e:10:de:b8:bd:19:47:49: 03:0b:17:43:4d:18:f2:80:73:c0:05:fa:ef:c7:8a: aa:88:8b:8c:dd:8e:f6:5d:6b:4d:59:05:8c:19:a9: 88:d1:51:ad:9a:a6:43:e3:04:26:45:2a:e4:01:78: 7a:04:1c:3e:42:16:6a:0a:6d:8f:dd:9a:8c:4f:86: eb:1b:5a:4d:08:ef:f3:49:99:51:38:48:0f:fc:e3: 80:d1:a2:11:7d:8e:df:ae:eb:3f:20:2a:43:20:d1: b9:04:a3:43:66:73:5c:53:d6:0c:93:20:ff:d6:ba: af:68:ff:b3:a9:e2:8a:6e:38:1b:ac:41:3e:8f:b2: 6c:fc:71:50:49:c0:ff:e1:c8:91:0a:8d:de:66:30: 65:e2:64:b2:34:ee:3f:f2:8b:ec:fb:42:92:68:38: c4:1c:45:26:1b:91:41:08:14:78:41:6f:73:a1:7b: 10:ce:72:0e:79:27:73:a9:d1:60:43:4f:fb:ba:a0: b5:d8:ac:c8:e7:e3:0a:ab:70:bb:69:00:c4:23:95: 25:3f:5d:4c:16:80:d1:7c:38:55:a2:f5:03:eb:3e: 68:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D7:49:F0:27:6C:74:9D:E0:BE:6D:A1:02:04:B5:E3:0F:47:A9:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/450f767d-7295-3de2-b7c9-42d59cf71f78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:43:63:da:c8:93:dd:5a:a8:39:b0:b9:dd:f3:f3:91:f1:f2: cd:e3:b1:18:6f:e1:70:6f:90:b2:8e:a0:0b:42:ee:16:7d:10: 35:40:51:b1:88:01:23:4d:33:2e:68:df:bc:70:d1:b8:f4:01: 27:2b:7b:66:e2:e5:80:87:1a:1e:c1:a6:2d:7a:65:25:4b:61: 53:85:23:ec:b9:bc:cf:4d:02:8d:3e:e0:3a:78:2d:a0:f3:00: fa:2e:7e:13:1d:86:e5:e0:fa:9a:64:1d:70:39:d5:ff:fb:1b: db:3f:75:2d:20:04:9e:01:04:c1:94:f3:38:d4:50:af:bd:98: 96:57:ca:c4:92:bb:7f:e0:d8:61:34:20:73:b8:8f:48:51:5f: db:7b:cb:dd:7f:06:83:ff:d3:72:0e:61:02:ae:c4:56:5e:78: 50:aa:ea:24:9f:ff:fa:1e:fd:bc:35:2a:b9:45:22:53:eb:74: 6b:6b:23:ae:36:97:3e:1b:fc:57:82:73:95:fe:26:35:51:ff: 00:d0:ac:2e:db:92:27:64:3e:a6:56:4a:f0:ca:c2:d6:89:a7: ca:65:c2:2a:44:d0:af:16:c7:b3:cd:7b:b6:43:3e:f8:5f:3a: 57:eb:8b:d9:f7:2e:8c:35:19:f6:03:71:b7:8f:ec:47:89:7d: 25:1a:6a:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYwnudM78yicYQDKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI0MDYxMjIwMzE1OVoXDTI0MDkxMDIwMzE1OVowLzEtMCsGA1UEAxMk MzYwMzlkNjAtM2U0Zi00ODE2LWE0YmYtMzg1NjZlMzgxYmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAga4cV3KOrs4sNN55UvA4T/Lz13vByBSvMdCk qTO0xr/dxVHsDhDeuL0ZR0kDCxdDTRjygHPABfrvx4qqiIuM3Y72XWtNWQWMGamI 0VGtmqZD4wQmRSrkAXh6BBw+QhZqCm2P3ZqMT4brG1pNCO/zSZlROEgP/OOA0aIR fY7frus/ICpDING5BKNDZnNcU9YMkyD/1rqvaP+zqeKKbjgbrEE+j7Js/HFQScD/ 4ciRCo3eZjBl4mSyNO4/8ovs+0KSaDjEHEUmG5FBCBR4QW9zoXsQznIOeSdzqdFg Q0/7uqC12KzI5+MKq3C7aQDEI5UlP11MFoDRfDhVovUD6z5oNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7XSfAnbHSd4L5toQIEteMPR6lzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvNDUwZjc2N2QtNzI5NS0z ZGUyLWI3YzktNDJkNTljZjcxZjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCadMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxDY9rIk91aqDmwud3z85Hx8s3jsRhv4XBvkLKOoAtC7hZ9EDVAUbGI ASNNMy5o37xw0bj0AScre2bi5YCHGh7Bpi16ZSVLYVOFI+y5vM9NAo0+4Dp4LaDz APoufhMdhuXg+ppkHXA51f/7G9s/dS0gBJ4BBMGU8zjUUK+9mJZXysSSu3/g2GE0 IHO4j0hRX9t7y91/BoP/03IOYQKuxFZeeFCq6iSf//oe/bw1KrlFIlPrdGtrI642 lz4b/FeCc5X+JjVR/wDQrC7bkidkPqZWSvDKwtaJp8plwipE0K8Wx7PNe7ZDPvhf Olfri9n3Low1GfYDcbeP7EeJfSUaarg= -----END CERTIFICATE-----Generated at Mon Jun 17 15:08:13 2024 by rpki-client on console-ams.rpki-client.org