$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/59392e2a-7cc4-32fc-840e-7383dc8b4959.roa File: 59392e2a-7cc4-32fc-840e-7383dc8b4959.roa (raw, json) Hash identifier: OhM30m1OVWbX0UlUBj7sa2fmL5bABt7ugxLoazYQw2A= Subject key identifier: D4:C3:AF:7B:61:6B:66:EE:37:E0:D4:F5:35:D3:7F:57:36:49:CE:E8 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285845052576BBEE6F6AB1F702EEC4 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/59392e2a-7cc4-32fc-840e-7383dc8b4959.roa Signing time: Mon 26 Feb 2024 14:00:31 +0000 ROA not before: Mon 26 Feb 2024 14:00:31 +0000 ROA not after: Sun 26 May 2024 13:00:31 +0000 asID: 13536 IP address blocks: 208.20.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:05:25:76:bb:ee:6f:6a:b1:f7:02:ee:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Feb 26 14:00:31 2024 GMT Not After : May 26 13:00:31 2024 GMT Subject: CN=a41902ee-c882-4333-9f15-7465d894579b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:30:c6:9b:b1:a3:8c:1a:3a:b0:a7:6f:76:d3: 42:26:77:cb:01:10:f6:2f:4f:a5:e8:c2:f9:a4:6a: da:2e:de:d9:39:2d:60:96:20:49:56:bb:23:30:dd: 80:ad:d9:d9:21:73:ad:8a:a7:e3:31:a1:93:25:c3: 39:97:6b:3a:32:8f:3e:a3:0e:a2:7e:e7:2e:e2:eb: 61:68:c6:a4:d2:bb:d7:62:13:91:39:4f:81:76:8b: 34:c9:bb:40:93:f5:70:1e:e6:09:04:54:31:d2:3d: 55:92:bc:04:d7:65:2a:94:2c:20:b3:66:c8:8c:32: 0e:24:db:c8:bf:72:b1:cf:b0:a3:ce:86:10:5f:86: ee:07:60:87:78:b2:65:47:8f:da:87:fc:3b:f6:c8: 55:e9:3c:bc:bb:7c:fc:45:2a:58:fd:87:f7:e0:d0: 45:d0:12:9c:47:e7:62:d3:bc:2e:0b:0b:85:d5:c4: 41:24:91:67:3e:e8:a0:a1:84:1a:19:57:97:d5:6c: ae:b4:ae:cf:9a:46:96:a1:5d:2e:46:bb:53:0f:61: 4e:e4:67:72:d0:e6:17:5b:c3:ff:71:a3:c8:54:9e: 69:d7:11:3d:5e:c3:30:40:52:d6:8d:16:9e:5d:63: 47:f3:f1:11:5d:9f:b2:6f:3f:e6:34:d6:a9:b8:8a: d2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C3:AF:7B:61:6B:66:EE:37:E0:D4:F5:35:D3:7F:57:36:49:CE:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/59392e2a-7cc4-32fc-840e-7383dc8b4959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.20.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:ce:e9:22:86:d9:c1:91:f7:2d:ca:09:ef:10:4c:09:87:81: 56:14:96:45:f7:48:89:ce:1f:41:64:69:e2:69:d2:58:2e:f9: 40:9b:5f:67:93:83:64:c2:c2:9b:e5:c6:13:a7:ac:d2:03:bf: e2:46:57:8b:bf:e6:52:a7:27:f4:f0:41:53:83:07:1e:ba:86: 3c:74:7c:12:bc:39:1c:22:b7:2f:66:46:28:39:b9:1b:c2:00: ea:0b:a4:a1:ed:27:07:f9:9f:43:6c:d5:56:c9:c5:9a:bf:fe: 2a:66:27:0c:7b:92:42:ad:a3:d1:a2:43:be:1e:8e:34:35:23: a1:c2:99:88:ba:62:93:56:6a:f8:9f:4a:63:cc:64:74:ac:92: 85:c2:87:71:db:90:fd:5c:83:3c:d3:30:fa:c5:ba:55:35:55: 46:8b:aa:b5:82:ac:79:ac:e0:82:4c:d5:e2:c3:6f:29:b3:9b: 6d:69:97:0a:5d:f8:65:e1:b6:f8:da:e0:10:84:e0:87:70:8c: 84:e8:45:47:3d:00:a1:61:0f:ff:e9:44:45:21:88:76:93:79: 65:64:da:31:9c:86:05:fb:e0:5a:23:6c:46:9f:45:29:92:c7: 7f:65:5a:28:96:dd:05:b5:1a:fd:fc:df:f2:df:1e:cd:5e:dc: ca:ba:33:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUFJXa77m9qsfcC7sQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI0MDIyNjE0MDAzMVoXDTI0MDUyNjEzMDAzMVowLzEtMCsGA1UEAxMk YTQxOTAyZWUtYzg4Mi00MzMzLTlmMTUtNzQ2NWQ4OTQ1NzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDDGm7GjjBo6sKdvdtNCJnfLARD2L0+l6ML5 pGraLt7ZOS1gliBJVrsjMN2ArdnZIXOtiqfjMaGTJcM5l2s6Mo8+ow6ifucu4uth aMak0rvXYhOROU+Bdos0ybtAk/VwHuYJBFQx0j1VkrwE12UqlCwgs2bIjDIOJNvI v3Kxz7CjzoYQX4buB2CHeLJlR4/ah/w79shV6Ty8u3z8RSpY/Yf34NBF0BKcR+di 07wuCwuF1cRBJJFnPuigoYQaGVeX1WyutK7PmkaWoV0uRrtTD2FO5Gdy0OYXW8P/ caPIVJ5p1xE9XsMwQFLWjRaeXWNH8/ERXZ+ybz/mNNapuIrStQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTDr3tha2buN+DU9TXTf1c2Sc7oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvNTkzOTJlMmEtN2NjNC0z MmZjLTg0MGUtNzM4M2RjOGI0OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0BQiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALfO6SKG2cGR9y3KCe8QTAmHgVYUlkX3SInOH0FkaeJp0lgu+UCbX2eT g2TCwpvlxhOnrNIDv+JGV4u/5lKnJ/TwQVODBx66hjx0fBK8ORwity9mRig5uRvC AOoLpKHtJwf5n0Ns1VbJxZq//ipmJwx7kkKto9GiQ74ejjQ1I6HCmYi6YpNWavif SmPMZHSskoXCh3HbkP1cgzzTMPrFulU1VUaLqrWCrHms4IJM1eLDbymzm21plwpd +GXhtvja4BCE4IdwjIToRUc9AKFhD//pREUhiHaTeWVk2jGchgX74FojbEafRSmS x39lWiiW3QW1Gv383/LfHs1e3Mq6M6o= -----END CERTIFICATE-----Generated at Fri May 3 15:12:22 2024 by rpki-client on console-fra.rpki-client.org