$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/a80f3319-a1a9-3f01-8d00-4f5d083b6ff6.roa File: a80f3319-a1a9-3f01-8d00-4f5d083b6ff6.roa (raw, json) Hash identifier: 3mCP65waF5pkQ3VBllfC9+sLuHmyjUUzgF+g69/bWoo= Subject key identifier: 3E:C6:9E:92:36:99:C9:29:FF:C1:4F:F1:B6:D2:98:B5:DC:B0:01:9E Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584503C017740098037AB5E1EE80 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/a80f3319-a1a9-3f01-8d00-4f5d083b6ff6.roa Signing time: Mon 26 Feb 2024 02:00:26 +0000 ROA not before: Mon 26 Feb 2024 02:00:26 +0000 ROA not after: Sun 26 May 2024 01:00:26 +0000 asID: 13536 IP address blocks: 208.20.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:03:c0:17:74:00:98:03:7a:b5:e1:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Feb 26 02:00:26 2024 GMT Not After : May 26 01:00:26 2024 GMT Subject: CN=36a88559-5a1e-4e66-a7f7-4fe96a0f19bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:85:50:8b:30:3d:13:04:32:f7:22:93:43:72: 40:f9:a4:4a:ed:94:a1:67:f7:f9:44:98:8d:c2:29: bf:89:37:5c:a5:e5:42:c0:25:dc:98:a1:2a:40:f1: bb:af:c8:45:cd:da:be:23:f4:bb:6a:24:23:d6:f0: ea:c3:23:a3:0e:73:41:a1:d0:7a:8c:8a:e3:2e:30: 3e:0e:02:23:f7:97:c2:8a:03:93:d4:88:01:d9:26: dd:d4:dc:cb:49:eb:a1:65:46:78:a1:8c:f1:68:12: 48:a2:1e:8f:28:cc:ac:b2:6c:75:40:30:f5:ad:5a: 51:b9:0c:d3:5f:7c:c1:60:80:8c:56:d7:b2:a9:47: 5b:1b:48:c3:2a:dc:b5:20:ed:79:0b:07:d8:a8:65: f9:fa:c5:a6:5e:f6:70:98:60:c1:1e:bc:50:25:44: bb:8a:9b:0c:f6:a0:e5:fc:f3:99:18:ba:d1:fe:4d: 9f:5b:cf:e6:35:06:84:7a:07:64:05:48:19:d2:74: a3:6a:1a:24:5d:06:ab:45:e4:01:8b:3b:d3:43:98: 30:e1:3e:fe:2c:e1:09:58:77:d6:4b:49:7e:c6:cb: af:59:2b:12:95:d4:e5:7a:be:04:db:19:51:74:e7: 01:4f:0f:a2:5a:3b:56:4a:d0:32:9c:1e:3a:de:3a: 1b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C6:9E:92:36:99:C9:29:FF:C1:4F:F1:B6:D2:98:B5:DC:B0:01:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/a80f3319-a1a9-3f01-8d00-4f5d083b6ff6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.20.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:03:4f:4e:78:8c:69:bb:c2:44:7f:7c:1c:b4:81:ab:ae:35: 32:82:76:2b:32:cb:7b:16:41:e9:cf:6f:0d:a4:9c:bb:bd:28: c6:d3:6d:f2:4e:07:48:2c:79:6f:89:8d:58:1b:b3:f6:53:88: 6b:13:8e:30:f6:4e:71:a9:69:12:87:30:9e:bb:d6:0a:03:a2: d5:ed:7e:94:9a:50:1e:fc:22:0d:9e:71:72:5c:2b:cf:a6:1e: 28:a6:fe:1e:57:05:29:74:48:c5:1c:36:ab:8a:e6:c8:03:b0: 62:28:8e:eb:1b:64:66:b4:32:cc:21:76:ea:87:4b:95:29:8a: e2:59:aa:fa:c6:19:02:c4:1e:43:59:e2:fb:92:2a:26:72:be: b3:c4:88:ca:a5:cd:f3:1d:ae:e0:dc:69:6d:a6:d6:ac:1e:1a: f7:43:7e:fa:8b:58:63:39:cf:8c:8e:e2:d5:5d:b3:39:ed:a0: 5c:2d:23:5c:18:d9:0c:1f:24:05:b1:4e:f0:d1:3e:5a:14:a3: 67:07:77:fe:83:a3:6b:1b:3d:d7:c0:c5:d5:6d:56:fa:e4:be: cc:89:b9:74:dd:0b:53:46:15:79:9c:2e:1e:b7:61:61:28:97: df:fa:8d:04:04:eb:17:e0:15:f8:42:96:b2:b9:55:94:9f:42: 49:dd:d6:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUDwBd0AJgDerXh7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI0MDIyNjAyMDAyNloXDTI0MDUyNjAxMDAyNlowLzEtMCsGA1UEAxMk MzZhODg1NTktNWExZS00ZTY2LWE3ZjctNGZlOTZhMGYxOWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4VQizA9EwQy9yKTQ3JA+aRK7ZShZ/f5RJiN wim/iTdcpeVCwCXcmKEqQPG7r8hFzdq+I/S7aiQj1vDqwyOjDnNBodB6jIrjLjA+ DgIj95fCigOT1IgB2Sbd1NzLSeuhZUZ4oYzxaBJIoh6PKMyssmx1QDD1rVpRuQzT X3zBYICMVteyqUdbG0jDKty1IO15CwfYqGX5+sWmXvZwmGDBHrxQJUS7ipsM9qDl /POZGLrR/k2fW8/mNQaEegdkBUgZ0nSjahokXQarReQBizvTQ5gw4T7+LOEJWHfW S0l+xsuvWSsSldTler4E2xlRdOcBTw+iWjtWStAynB463jobGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7GnpI2mckp/8FP8bbSmLXcsAGeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvYTgwZjMzMTktYTFhOS0z ZjAxLThkMDAtNGY1ZDA4M2I2ZmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0BQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkDT054jGm7wkR/fBy0gauuNTKCdisyy3sWQenPbw2knLu9KMbTbfJO B0gseW+JjVgbs/ZTiGsTjjD2TnGpaRKHMJ671goDotXtfpSaUB78Ig2ecXJcK8+m Hiim/h5XBSl0SMUcNquK5sgDsGIojusbZGa0MswhduqHS5UpiuJZqvrGGQLEHkNZ 4vuSKiZyvrPEiMqlzfMdruDcaW2m1qweGvdDfvqLWGM5z4yO4tVdszntoFwtI1wY 2QwfJAWxTvDRPloUo2cHd/6Do2sbPdfAxdVtVvrkvsyJuXTdC1NGFXmcLh63YWEo l9/6jQQE6xfgFfhClrK5VZSfQknd1qQ= -----END CERTIFICATE-----Generated at Fri May 3 15:12:22 2024 by rpki-client on console-fra.rpki-client.org