$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/f854f6fa-ca87-34d9-91ec-6a0888ad198a.roa File: f854f6fa-ca87-34d9-91ec-6a0888ad198a.roa (raw, json) Hash identifier: la6q+JQddBoQuxNlxKO6H0njvDBHkp/tsSw8oGESGuw= Subject key identifier: C0:C6:D4:A2:8F:C1:06:64:80:23:BC:62:3D:AE:A5:81:4B:80:9F:32 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584563F313F1C4C28A77826AAC00 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/f854f6fa-ca87-34d9-91ec-6a0888ad198a.roa Signing time: Sun 31 Mar 2024 13:00:36 +0000 ROA not before: Sun 31 Mar 2024 13:00:36 +0000 ROA not after: Sat 29 Jun 2024 13:00:36 +0000 asID: 398210 IP address blocks: 207.211.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:63:f3:13:f1:c4:c2:8a:77:82:6a:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Mar 31 13:00:36 2024 GMT Not After : Jun 29 13:00:36 2024 GMT Subject: CN=7b201269-0f3d-40c5-8432-723c940a09d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d1:d1:f3:1d:43:60:70:19:c2:2b:80:31:26: c4:f6:d8:b2:fd:ea:89:19:ba:5c:19:10:ce:c9:a6: df:29:9c:86:82:26:9a:99:8a:84:cc:72:9a:d0:4d: 2d:e6:92:8e:51:0c:60:17:fc:ff:63:66:71:6d:07: 94:9d:f3:08:2b:12:bb:d4:3d:14:57:b4:7e:40:37: 01:98:26:37:9a:7f:e6:bd:64:94:aa:9e:0f:16:bc: 2a:74:f2:65:63:01:8d:55:fa:5a:b1:5e:1b:c6:31: 66:8d:c1:95:0a:4a:a2:87:be:86:17:fb:ea:13:42: 3e:ff:57:8c:01:79:44:bf:ab:4d:84:35:2a:28:77: 67:10:13:8a:91:b5:5f:5f:a2:ab:df:a7:f0:fb:5e: f8:46:3f:3d:c9:5c:95:7d:07:e6:bf:d2:a7:fb:36: 0e:44:ba:55:09:4b:58:0a:1a:ec:89:41:5f:b7:da: 2b:b2:7f:80:fb:9b:ae:7c:f6:26:8e:21:72:0d:37: 58:05:f1:9d:b9:09:2d:ce:12:f3:ef:d4:e8:61:d2: c3:6b:da:f1:4a:bf:b9:1f:1a:c9:60:cb:59:14:4d: d5:96:65:fa:3a:d2:49:d0:03:a3:98:c5:bb:ba:11: da:7c:98:55:71:33:49:6d:35:48:72:2b:3d:e8:97: 20:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C6:D4:A2:8F:C1:06:64:80:23:BC:62:3D:AE:A5:81:4B:80:9F:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/f854f6fa-ca87-34d9-91ec-6a0888ad198a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:1c:52:dc:ed:43:6c:34:02:e6:cd:20:5e:0f:30:bf:e7:aa: fb:bc:2c:57:76:04:7f:cb:a9:e8:bb:07:e3:47:f6:0e:bc:10: 50:f3:57:ac:f6:18:d0:7f:9a:11:d3:97:98:91:11:14:2c:4d: b6:3d:4a:ce:a0:e7:f3:e6:e0:22:bc:5f:70:3d:e5:a8:c2:bd: a3:13:3a:55:a2:bb:ff:ce:e1:ab:2e:e0:77:bd:a3:b4:d6:ea: 43:ad:03:a8:c1:e0:74:ef:01:49:47:45:7b:8c:86:f5:1f:d7: 0b:f1:94:9e:77:35:36:35:89:d5:d1:7d:85:8d:f1:0a:12:38: dd:44:c8:9e:8d:75:96:91:58:e8:51:f8:c4:77:7d:14:86:2b: be:ed:78:ef:7c:7f:a9:d1:a3:bc:f8:70:32:0b:75:31:c6:20: ed:17:61:c5:3b:43:22:5f:96:e2:f6:72:9d:3b:da:3b:48:77: 17:54:0c:2d:0f:db:c2:0e:49:db:96:ab:d4:9b:ab:ad:22:9d: 5f:5d:7e:d6:48:70:c2:e7:b9:81:83:75:a8:da:50:2d:79:27: 0e:fd:95:bc:5a:85:24:02:c2:ab:30:4b:54:21:db:81:1b:8f: e8:01:95:de:9a:0b:1a:45:71:9e:fa:b7:f4:67:c9:28:2e:69: a5:f4:6c:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVj8xPxxMKKd4JqrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI0MDMzMTEzMDAzNloXDTI0MDYyOTEzMDAzNlowLzEtMCsGA1UEAxMk N2IyMDEyNjktMGYzZC00MGM1LTg0MzItNzIzYzk0MGEwOWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptHR8x1DYHAZwiuAMSbE9tiy/eqJGbpcGRDO yabfKZyGgiaamYqEzHKa0E0t5pKOUQxgF/z/Y2ZxbQeUnfMIKxK71D0UV7R+QDcB mCY3mn/mvWSUqp4PFrwqdPJlYwGNVfpasV4bxjFmjcGVCkqih76GF/vqE0I+/1eM AXlEv6tNhDUqKHdnEBOKkbVfX6Kr36fw+174Rj89yVyVfQfmv9Kn+zYORLpVCUtY ChrsiUFft9orsn+A+5uufPYmjiFyDTdYBfGduQktzhLz79ToYdLDa9rxSr+5HxrJ YMtZFE3VlmX6OtJJ0AOjmMW7uhHafJhVcTNJbTVIcis96JcgawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDG1KKPwQZkgCO8Yj2upYFLgJ8yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvZjg1NGY2ZmEtY2E4Ny0z NGQ5LTkxZWMtNmEwODg4YWQxOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz9PwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0cUtztQ2w0AubNIF4PML/nqvu8LFd2BH/Lqei7B+NH9g68EFDzV6z2 GNB/mhHTl5iRERQsTbY9Ss6g5/Pm4CK8X3A95ajCvaMTOlWiu//O4asu4He9o7TW 6kOtA6jB4HTvAUlHRXuMhvUf1wvxlJ53NTY1idXRfYWN8QoSON1EyJ6NdZaRWOhR +MR3fRSGK77teO98f6nRo7z4cDILdTHGIO0XYcU7QyJfluL2cp072jtIdxdUDC0P 28IOSduWq9Sbq60inV9dftZIcMLnuYGDdajaUC15Jw79lbxahSQCwqswS1Qh24Eb j+gBld6aCxpFcZ76t/RnySguaaX0bJM= -----END CERTIFICATE-----Generated at Wed May 8 18:23:43 2024 by rpki-client on console-fra.rpki-client.org