$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/56a2efe2-bf6a-3116-82d0-5ab8387bbd0e.roa File: 56a2efe2-bf6a-3116-82d0-5ab8387bbd0e.roa (raw, json) Hash identifier: ZGhGdX7cZqqkVxrAqrhdyFYe4AcgvAItVTA5oqrI0RQ= Subject key identifier: 1E:8A:6F:D9:47:00:F9:21:90:C8:5E:AF:EA:DB:22:2E:D9:BA:B2:F8 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285844E23FD5D2968D5C3B9957D680 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/56a2efe2-bf6a-3116-82d0-5ab8387bbd0e.roa Signing time: Wed 14 Feb 2024 02:00:25 +0000 ROA not before: Wed 14 Feb 2024 02:00:25 +0000 ROA not after: Tue 14 May 2024 01:00:25 +0000 asID: 400317 IP address blocks: 204.117.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:e2:3f:d5:d2:96:8d:5c:3b:99:57:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Feb 14 02:00:25 2024 GMT Not After : May 14 01:00:25 2024 GMT Subject: CN=681677e3-0d9b-4a77-b718-153320891b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:aa:47:98:bc:81:e6:d9:bb:a0:35:71:82:e5: 27:1e:e3:e7:16:dd:9d:5a:85:8d:0a:63:06:3e:40: 88:81:fe:45:52:9f:a3:1f:db:2c:1d:6f:0d:e3:f1: 06:77:db:e9:7f:2f:24:d2:10:10:6c:45:7f:d3:8a: a5:79:1d:8c:35:15:91:60:45:01:3b:89:64:e9:db: 88:8a:75:19:a1:53:e8:a4:cf:3b:03:12:e4:1c:c4: 9e:fd:77:9c:76:39:82:77:09:6f:00:51:fb:67:ee: 97:e7:38:95:56:fb:1b:28:20:43:75:67:8a:56:60: e1:83:a6:73:3d:78:39:82:cc:26:af:db:68:1e:18: 57:9c:53:ff:a7:0e:58:23:08:a1:11:13:0f:aa:61: 76:9e:c8:f8:28:41:37:cc:1a:73:77:a3:d1:c4:eb: 98:f2:8f:fd:a7:dd:6e:08:61:8e:35:2b:4f:70:2b: 4b:d2:c9:a3:94:e7:9a:e8:cd:8a:89:7d:d8:8f:88: 1e:ee:d7:5a:0c:d2:89:e7:a5:b8:e7:c3:f9:b6:24: 18:68:d8:b2:2b:4a:c1:3f:c1:bf:3d:06:63:2e:8d: 9b:e4:5a:bf:5e:14:f6:db:94:40:2e:71:b4:d1:0d: eb:c8:40:14:db:62:92:53:07:15:83:00:ba:43:a7: 44:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:8A:6F:D9:47:00:F9:21:90:C8:5E:AF:EA:DB:22:2E:D9:BA:B2:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/56a2efe2-bf6a-3116-82d0-5ab8387bbd0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 204.117.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:16:8e:18:2b:ed:28:70:0d:77:18:fc:c5:ff:ae:69:a1:6b: af:1d:66:bd:b0:e2:d0:a5:cf:8e:be:0a:25:df:88:1b:d6:ef: 28:1c:41:1b:ea:eb:be:9b:19:53:fb:49:cf:07:01:a6:09:97: 5a:09:ab:13:09:a7:95:c4:a0:c1:10:a1:98:46:4f:d9:10:37: 0b:3b:43:2b:9b:25:71:bb:37:86:07:e7:8f:a1:4b:60:7f:76: 0f:42:67:4b:2f:a2:20:28:7a:9e:aa:9a:e0:8f:af:69:a5:5e: 6c:e4:07:ab:11:9a:c1:a0:df:f3:19:38:72:fd:61:64:93:eb: 6b:86:11:05:99:87:c6:d7:46:f8:65:91:c7:70:6c:ff:e8:dd: 42:fc:56:f1:59:86:99:f6:c7:e8:80:f0:c1:1e:e5:f2:c1:bf: e2:38:47:20:24:3a:ae:8e:87:79:47:9a:d6:ab:aa:8e:1f:bf: 73:12:bd:66:13:c3:83:9c:f5:27:a5:f4:c2:78:54:4a:65:0b: ea:68:90:2b:3e:08:1a:30:f0:06:c2:4b:e8:dd:89:d9:61:68: 26:1f:81:71:42:26:21:ba:ba:f3:c2:df:a9:a4:34:74:98:c4: 15:ad:fd:6b:2c:be:ad:8c:08:fa:3d:3f:70:83:a8:21:42:c1: b6:26:c4:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETiP9XSlo1cO5lX1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI0MDIxNDAyMDAyNVoXDTI0MDUxNDAxMDAyNVowLzEtMCsGA1UEAxMk NjgxNjc3ZTMtMGQ5Yi00YTc3LWI3MTgtMTUzMzIwODkxYjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKpHmLyB5tm7oDVxguUnHuPnFt2dWoWNCmMG PkCIgf5FUp+jH9ssHW8N4/EGd9vpfy8k0hAQbEV/04qleR2MNRWRYEUBO4lk6duI inUZoVPopM87AxLkHMSe/XecdjmCdwlvAFH7Z+6X5ziVVvsbKCBDdWeKVmDhg6Zz PXg5gswmr9toHhhXnFP/pw5YIwihERMPqmF2nsj4KEE3zBpzd6PRxOuY8o/9p91u CGGONStPcCtL0smjlOea6M2KiX3Yj4ge7tdaDNKJ56W458P5tiQYaNiyK0rBP8G/ PQZjLo2b5Fq/XhT225RALnG00Q3ryEAU22KSUwcVgwC6Q6dEawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6Kb9lHAPkhkMher+rbIi7ZurL4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvNTZhMmVmZTItYmY2YS0z MTE2LTgyZDAtNWFiODM4N2JiZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzHUBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMWjhgr7ShwDXcY/MX/rmmha68dZr2w4tClz46+CiXfiBvW7ygcQRvq 676bGVP7Sc8HAaYJl1oJqxMJp5XEoMEQoZhGT9kQNws7QyubJXG7N4YH54+hS2B/ dg9CZ0svoiAoep6qmuCPr2mlXmzkB6sRmsGg3/MZOHL9YWST62uGEQWZh8bXRvhl kcdwbP/o3UL8VvFZhpn2x+iA8MEe5fLBv+I4RyAkOq6Oh3lHmtarqo4fv3MSvWYT w4Oc9Sel9MJ4VEplC+pokCs+CBow8AbCS+jdidlhaCYfgXFCJiG6uvPC36mkNHSY xBWt/Wssvq2MCPo9P3CDqCFCwbYmxLo= -----END CERTIFICATE-----Generated at Thu Apr 25 22:42:55 2024 by rpki-client on console-fra.rpki-client.org