$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/0077d0e6-3054-34f9-b282-d9e73da3017f.roa File: 0077d0e6-3054-34f9-b282-d9e73da3017f.roa (raw, json) Hash identifier: iKPQRSsM/Eeso+T0JurSMcsTDm9QvQvmasQGqAY3DP4= Subject key identifier: 9D:C5:21:28:6A:4B:23:DC:15:D9:41:10:31:6C:86:F7:A0:98:94:F3 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285845569A42977A39C851E3864180 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/0077d0e6-3054-34f9-b282-d9e73da3017f.roa Signing time: Tue 26 Mar 2024 18:16:24 +0000 ROA not before: Tue 26 Mar 2024 18:16:24 +0000 ROA not after: Mon 24 Jun 2024 18:16:24 +0000 asID: 36549 IP address blocks: 204.180.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:56:9a:42:97:7a:39:c8:51:e3:86:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Mar 26 18:16:24 2024 GMT Not After : Jun 24 18:16:24 2024 GMT Subject: CN=3246a04f-b700-474d-8ae1-7cfda8893101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d6:82:dc:0d:bc:f4:88:7f:1f:a5:46:79:82: d8:e2:a9:b0:8d:ce:00:b5:b9:82:bc:7d:03:ff:16: a0:a6:92:b3:19:91:bf:91:68:05:71:be:1e:06:e9: e6:ec:1e:fd:48:7a:59:ad:1b:12:32:02:2f:20:d8: 62:c1:ea:99:0e:7b:0d:bf:a0:7e:86:28:05:41:9e: af:59:99:1a:be:5a:06:4d:86:df:3a:08:be:6b:cc: 23:53:ba:c0:9c:a5:ba:70:57:95:55:b9:32:56:3d: 3f:8c:4c:03:e9:47:aa:3c:05:a3:b3:a0:96:9b:43: 52:ad:c3:5e:f0:d2:a1:70:7b:78:36:fb:8e:b4:12: 82:28:bb:8f:0a:34:27:18:08:51:fe:ac:f5:64:7c: 65:23:48:59:45:02:10:03:9f:dc:a3:e7:9c:ce:0b: 51:47:b8:0c:4c:89:af:19:d5:ec:5e:7f:ed:b5:30: 85:88:b3:3a:2f:ff:9b:e0:8f:f1:ac:b2:39:45:b1: c5:b7:35:e6:b8:d0:8a:d3:76:ff:a0:3c:2a:76:e4: 1f:ec:60:dc:ea:fb:13:d7:36:ec:d5:fd:ce:32:37: b3:e6:9e:d8:f9:7c:40:a0:24:c1:23:59:04:32:06: af:51:3b:5a:48:ce:09:b2:8e:12:73:46:91:c0:37: 74:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C5:21:28:6A:4B:23:DC:15:D9:41:10:31:6C:86:F7:A0:98:94:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/0077d0e6-3054-34f9-b282-d9e73da3017f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 204.180.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:4b:b0:1c:79:81:3e:37:86:98:32:ea:76:96:b1:83:5d:af: 80:9b:8a:2f:39:72:35:cb:2d:2d:89:ea:ad:56:7a:33:dc:ba: 87:ae:30:44:f7:b5:37:40:84:5c:97:06:4c:e7:3c:11:24:1f: 5c:c8:09:5d:0e:69:9a:24:2e:37:5c:6f:2d:06:75:51:1f:2e: f4:a8:9c:52:85:2a:4f:17:d3:01:7f:51:49:9f:37:29:75:82: 07:d1:fc:82:7a:fd:87:d6:2a:f9:68:56:88:9d:28:11:03:23: 2e:58:69:13:1c:05:e8:c2:03:f0:47:67:2d:97:de:37:a3:3e: 8d:c8:d4:77:a1:7a:db:59:84:f9:05:ea:aa:b3:f6:34:6b:e2: 5a:92:fa:3c:2f:4b:5b:e1:05:b5:db:f0:c7:b5:ad:4a:9a:d9: 50:ce:cc:b3:44:c6:df:f2:db:c4:f5:1f:70:4e:bc:fe:4c:bb: 2e:e9:ab:c3:14:6a:79:7f:a7:2a:8b:0a:cf:85:0a:6b:51:7b: 46:f1:e5:55:df:21:63:ff:e8:52:51:67:84:8f:6e:cd:0d:c5: 07:f3:07:02:c8:e6:74:44:68:72:94:22:50:58:2b:41:13:60: 7f:71:c2:a5:39:00:d1:65:43:29:31:10:b9:42:28:4e:0d:c8: c9:1e:d2:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVWmkKXejnIUeOGQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI0MDMyNjE4MTYyNFoXDTI0MDYyNDE4MTYyNFowLzEtMCsGA1UEAxMk MzI0NmEwNGYtYjcwMC00NzRkLThhZTEtN2NmZGE4ODkzMTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdaC3A289Ih/H6VGeYLY4qmwjc4AtbmCvH0D /xagppKzGZG/kWgFcb4eBunm7B79SHpZrRsSMgIvINhiweqZDnsNv6B+higFQZ6v WZkavloGTYbfOgi+a8wjU7rAnKW6cFeVVbkyVj0/jEwD6UeqPAWjs6CWm0NSrcNe 8NKhcHt4NvuOtBKCKLuPCjQnGAhR/qz1ZHxlI0hZRQIQA5/co+eczgtRR7gMTImv GdXsXn/ttTCFiLM6L/+b4I/xrLI5RbHFtzXmuNCK03b/oDwqduQf7GDc6vsT1zbs 1f3OMjez5p7Y+XxAoCTBI1kEMgavUTtaSM4Jso4Sc0aRwDd0/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3FIShqSyPcFdlBEDFshvegmJTzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMDA3N2QwZTYtMzA1NC0z NGY5LWIyODItZDllNzNkYTMwMTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzLQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdLsBx5gT43hpgy6naWsYNdr4Cbii85cjXLLS2J6q1WejPcuoeuMET3 tTdAhFyXBkznPBEkH1zICV0OaZokLjdcby0GdVEfLvSonFKFKk8X0wF/UUmfNyl1 ggfR/IJ6/YfWKvloVoidKBEDIy5YaRMcBejCA/BHZy2X3jejPo3I1HehettZhPkF 6qqz9jRr4lqS+jwvS1vhBbXb8Me1rUqa2VDOzLNExt/y28T1H3BOvP5Muy7pq8MU anl/pyqLCs+FCmtRe0bx5VXfIWP/6FJRZ4SPbs0NxQfzBwLI5nREaHKUIlBYK0ET YH9xwqU5ANFlQykxELlCKE4NyMke0q8= -----END CERTIFICATE-----Generated at Fri May 3 15:12:22 2024 by rpki-client on console-fra.rpki-client.org