$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/29a955ce-5759-3b14-b6e2-a31c4567f553.roa File: 29a955ce-5759-3b14-b6e2-a31c4567f553.roa (raw, json) Hash identifier: 8BYexnZ15Bx8vt436GejX1mPuz7auKLx8F44d7QM30g= Subject key identifier: 52:FA:F1:21:2C:23:5B:88:3C:EE:F2:90:D7:75:1C:09:42:B9:9B:6B Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584529528B938A233777B7864220 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/29a955ce-5759-3b14-b6e2-a31c4567f553.roa Signing time: Sun 10 Mar 2024 13:00:31 +0000 ROA not before: Sun 10 Mar 2024 13:00:31 +0000 ROA not after: Sat 08 Jun 2024 13:00:31 +0000 asID: 1239 IP address blocks: 198.68.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:29:52:8b:93:8a:23:37:77:b7:86:42:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Mar 10 13:00:31 2024 GMT Not After : Jun 8 13:00:31 2024 GMT Subject: CN=a14c2b58-e697-484a-9059-0b88e52e5a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ec:46:c8:a4:c0:1b:fe:ae:1a:1b:f5:14:ef: 27:6f:64:5c:cf:05:3c:ea:58:9f:88:0e:24:a6:f3: 41:fe:af:a3:6f:a4:e8:c1:eb:a5:63:72:c1:e1:9c: a7:99:54:45:4c:f2:63:a7:6d:f1:e5:a4:2b:1c:b1: 4b:94:23:f6:98:7f:26:dc:b9:c3:d3:88:8b:a8:2e: 49:25:01:00:47:98:6f:00:c6:9b:c7:a0:aa:e1:9e: d7:86:48:13:e9:3c:98:46:cb:4b:6d:0c:1d:56:f3: d1:ed:1e:87:c6:80:7c:1a:79:a3:81:4f:ed:5e:a4: 84:e8:37:44:c7:8d:22:25:b8:37:35:3d:6a:41:27: 04:43:98:85:37:d0:3b:4f:fe:f7:6e:7a:ea:76:88: 87:a9:3e:09:4f:3f:95:08:2c:e9:a7:a6:36:e3:a1: 9a:84:7b:f1:1d:60:ca:ea:98:9c:46:34:31:ed:be: 30:dd:89:04:ec:21:c6:8c:21:1e:b8:88:63:36:da: da:01:e5:06:9a:e7:50:54:83:11:c1:1c:8d:38:9c: 8b:ac:b1:89:10:7a:f9:55:ba:99:b3:79:61:79:d9: e5:25:fe:08:96:59:3a:7a:6b:ba:87:ac:31:78:9b: b0:d3:54:94:4a:15:c6:13:35:10:02:0a:a5:90:60: da:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FA:F1:21:2C:23:5B:88:3C:EE:F2:90:D7:75:1C:09:42:B9:9B:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/29a955ce-5759-3b14-b6e2-a31c4567f553.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 198.68.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:88:65:e4:89:5b:01:23:d9:28:3a:5a:a9:0e:3b:8a:44:42: d9:cc:33:3e:13:0a:4c:e6:92:ec:b4:42:2b:f5:39:24:e3:87: f6:52:7d:58:42:a3:5f:97:70:c9:5b:b2:d8:07:0f:c1:74:6b: 58:46:bd:03:f9:ae:a4:46:1a:ec:cb:31:6b:6e:ae:d4:85:3d: ab:81:b7:f1:a8:83:9f:1c:94:07:a4:56:04:d4:df:5f:50:c1: 42:64:38:e6:e3:41:32:d6:10:36:4b:3b:38:37:06:64:25:dc: 94:17:99:37:db:3e:b2:29:d7:16:5d:d3:14:c0:fb:ef:e2:5b: a6:d1:3b:b1:c5:b7:81:64:f5:d0:d5:dc:fd:40:6f:6b:38:ae: 39:99:00:ac:18:c3:b9:4f:78:84:14:0a:22:3b:88:10:6e:50: b0:d0:d7:ac:3a:0e:69:b2:e1:05:15:36:9b:32:7d:a3:87:ba: 38:d1:af:8a:f1:f2:43:03:26:e5:89:d7:d8:16:93:4c:f7:3d: a0:f3:bf:50:43:28:41:84:1b:f4:4d:50:ab:a6:57:21:06:44: 65:0f:35:f9:52:10:e7:31:56:ae:d8:bd:92:85:f7:cb:e4:71: 5b:b9:01:8f:47:6b:0d:c3:65:70:71:ab:4f:7c:bd:ce:8c:4f: 01:88:97:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUpUouTiiM3d7eGQiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI0MDMxMDEzMDAzMVoXDTI0MDYwODEzMDAzMVowLzEtMCsGA1UEAxMk YTE0YzJiNTgtZTY5Ny00ODRhLTkwNTktMGI4OGU1MmU1YTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+xGyKTAG/6uGhv1FO8nb2RczwU86lifiA4k pvNB/q+jb6ToweulY3LB4ZynmVRFTPJjp23x5aQrHLFLlCP2mH8m3LnD04iLqC5J JQEAR5hvAMabx6Cq4Z7XhkgT6TyYRstLbQwdVvPR7R6HxoB8GnmjgU/tXqSE6DdE x40iJbg3NT1qQScEQ5iFN9A7T/73bnrqdoiHqT4JTz+VCCzpp6Y246GahHvxHWDK 6picRjQx7b4w3YkE7CHGjCEeuIhjNtraAeUGmudQVIMRwRyNOJyLrLGJEHr5VbqZ s3lhednlJf4Illk6emu6h6wxeJuw01SUShXGEzUQAgqlkGDawwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFL68SEsI1uIPO7ykNd1HAlCuZtrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMjlhOTU1Y2UtNTc1OS0z YjE0LWI2ZTItYTMxYzQ1NjdmNTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkSrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKIZeSJWwEj2Sg6WqkOO4pEQtnMMz4TCkzmkuy0Qiv1OSTjh/ZSfVhC o1+XcMlbstgHD8F0a1hGvQP5rqRGGuzLMWturtSFPauBt/Gog58clAekVgTU319Q wUJkOObjQTLWEDZLOzg3BmQl3JQXmTfbPrIp1xZd0xTA++/iW6bRO7HFt4Fk9dDV 3P1Ab2s4rjmZAKwYw7lPeIQUCiI7iBBuULDQ16w6Dmmy4QUVNpsyfaOHujjRr4rx 8kMDJuWJ19gWk0z3PaDzv1BDKEGEG/RNUKumVyEGRGUPNflSEOcxVq7YvZKF98vk cVu5AY9Haw3DZXBxq098vc6MTwGIl7E= -----END CERTIFICATE-----Generated at Fri Apr 19 01:25:00 2024 by rpki-client on console-fra.rpki-client.org