$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/ddae4220-ff86-3265-b4ee-0e6bfe06369f.roa File: ddae4220-ff86-3265-b4ee-0e6bfe06369f.roa (raw, json) Hash identifier: E7eaixTZDh0Qfqrddqq2H2wCbhqFbpOl3E+zOwQO9bQ= Subject key identifier: 01:0D:9D:1A:7A:B2:C4:F2:D9:79:D4:57:B6:64:A7:25:E2:74:EB:F4 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584548081A4381522A5B5FDC4C90 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/ddae4220-ff86-3265-b4ee-0e6bfe06369f.roa Signing time: Thu 21 Mar 2024 13:00:33 +0000 ROA not before: Thu 21 Mar 2024 13:00:33 +0000 ROA not after: Wed 19 Jun 2024 13:00:33 +0000 asID: 3356 IP address blocks: 199.0.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:48:08:1a:43:81:52:2a:5b:5f:dc:4c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Mar 21 13:00:33 2024 GMT Not After : Jun 19 13:00:33 2024 GMT Subject: CN=a51fd158-bb69-47f1-9478-5b86c54adc47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8b:3d:43:1c:68:22:92:8f:3b:26:5b:74:95: 2a:3e:1b:26:6a:aa:6c:69:d5:a5:88:14:d3:9e:ce: 93:ba:11:4f:e0:3e:8f:06:21:63:49:78:29:a7:6d: fd:99:0f:ba:d6:2d:51:71:1a:d2:6e:7a:b3:b2:5f: 63:49:46:c0:7c:6d:f3:0c:9a:0d:e8:d5:1b:05:54: 57:e9:74:e0:0e:3d:35:f4:a1:30:59:7a:f4:26:48: 48:53:66:53:20:83:20:19:71:4f:88:85:82:75:26: 52:33:aa:3c:d1:37:97:76:df:40:8b:39:b3:38:5b: 80:43:a2:10:a6:b9:12:33:0b:17:81:bc:76:bc:2d: e1:bc:be:eb:c2:0b:72:67:a3:86:a6:a0:40:cc:24: e0:d4:1a:8e:82:f3:95:38:86:56:6e:ba:01:23:0e: 9c:2b:ff:ae:77:70:ce:20:3d:b8:ed:de:77:2b:c9: f2:9a:1b:12:d5:04:e6:34:21:ee:38:a2:12:2a:67: 29:0c:49:4d:09:61:10:20:ab:2e:cc:cc:4d:4b:16: 96:5f:d6:f8:eb:9b:bc:b9:a1:5a:25:dd:46:8c:4e: 54:de:e3:0e:de:54:8d:b9:87:6e:4b:c9:f3:24:6c: 82:cc:8c:c1:db:35:80:66:61:eb:a8:0a:8a:08:49: d8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0D:9D:1A:7A:B2:C4:F2:D9:79:D4:57:B6:64:A7:25:E2:74:EB:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/ddae4220-ff86-3265-b4ee-0e6bfe06369f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 199.0.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:32:36:89:7c:0c:a4:eb:48:25:a3:67:32:23:07:4d:24:84: 9e:06:92:42:ef:d0:7c:07:3e:9e:79:d4:0e:15:b5:8c:9d:dc: 51:75:dd:9c:59:b0:13:79:b6:e8:7c:23:8f:46:49:e2:6d:1b: af:6f:c4:6d:53:6a:40:a1:dc:19:07:b1:14:df:18:1a:08:c4: cf:24:1f:02:97:99:be:5b:a0:73:df:5f:e1:67:c9:c5:1e:7b: 27:32:8f:8a:a6:c9:3e:01:5a:e0:c2:29:4a:41:ef:75:77:da: 04:c3:bd:5d:54:06:fb:91:bc:09:c5:53:b2:01:d9:78:64:bf: 76:b7:07:3c:86:2a:a1:b1:a4:34:84:ba:55:62:e8:58:c9:22: da:3a:23:ec:03:2c:12:58:3b:58:6f:f8:2e:8d:ac:64:15:5a: 22:1a:fb:6c:f7:e7:26:24:7e:86:58:e2:ab:97:14:ac:43:0d: 73:50:c3:c8:40:bf:b2:cc:8d:de:ee:78:48:8d:44:cf:75:4c: 86:c4:1c:9c:0a:0c:2d:f5:1b:ac:54:d5:5a:b5:b9:ca:1c:78: 9f:73:83:ae:6b:af:91:9e:bb:9c:71:bd:e6:42:82:c6:ec:4d: a9:5e:12:07:80:ee:39:18:d7:4f:cc:1c:97:5e:34:60:b6:91: 20:f9:be:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVICBpDgVIqW1/cTJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI0MDMyMTEzMDAzM1oXDTI0MDYxOTEzMDAzM1owLzEtMCsGA1UEAxMk YTUxZmQxNTgtYmI2OS00N2YxLTk0NzgtNWI4NmM1NGFkYzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAios9QxxoIpKPOyZbdJUqPhsmaqpsadWliBTT ns6TuhFP4D6PBiFjSXgpp239mQ+61i1RcRrSbnqzsl9jSUbAfG3zDJoN6NUbBVRX 6XTgDj019KEwWXr0JkhIU2ZTIIMgGXFPiIWCdSZSM6o80TeXdt9AizmzOFuAQ6IQ prkSMwsXgbx2vC3hvL7rwgtyZ6OGpqBAzCTg1BqOgvOVOIZWbroBIw6cK/+ud3DO ID247d53K8nymhsS1QTmNCHuOKISKmcpDElNCWEQIKsuzMxNSxaWX9b465u8uaFa Jd1GjE5U3uMO3lSNuYduS8nzJGyCzIzB2zWAZmHrqAqKCEnYMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAENnRp6ssTy2XnUV7ZkpyXidOv0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvZGRhZTQyMjAtZmY4Ni0z MjY1LWI0ZWUtMGU2YmZlMDYzNjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwC6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUyNol8DKTrSCWjZzIjB00khJ4GkkLv0HwHPp551A4VtYyd3FF13ZxZ sBN5tuh8I49GSeJtG69vxG1TakCh3BkHsRTfGBoIxM8kHwKXmb5boHPfX+FnycUe eycyj4qmyT4BWuDCKUpB73V32gTDvV1UBvuRvAnFU7IB2Xhkv3a3BzyGKqGxpDSE ulVi6FjJIto6I+wDLBJYO1hv+C6NrGQVWiIa+2z35yYkfoZY4quXFKxDDXNQw8hA v7LMjd7ueEiNRM91TIbEHJwKDC31G6xU1Vq1ucoceJ9zg65rr5Geu5xxveZCgsbs TaleEgeA7jkY10/MHJdeNGC2kSD5vgw= -----END CERTIFICATE-----Generated at Thu May 2 14:54:28 2024 by rpki-client on console-fra.rpki-client.org