$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa File: 28db5388-3028-3372-82b7-0e51f7f410ea.roa (raw, json) Hash identifier: s6sf1y48Kztr+xS19Hbn0nlYuxMkTcItIr9VkRMeNjc= Subject key identifier: 1A:2B:B5:7B:33:8A:78:48:22:E7:66:96:67:5B:0D:2D:32:CC:DC:C7 Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F4328584538AD482B8CECE24F505C5CE0 Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa Signing time: Sat 16 Mar 2024 01:00:25 +0000 ROA not before: Sat 16 Mar 2024 01:00:25 +0000 ROA not after: Fri 14 Jun 2024 01:00:25 +0000 asID: 400564 IP address blocks: 207.174.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:38:ad:48:2b:8c:ec:e2:4f:50:5c:5c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Mar 16 01:00:25 2024 GMT Not After : Jun 14 01:00:25 2024 GMT Subject: CN=29861d44-a043-413b-818d-80abbe379cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:63:6e:e1:b9:4f:14:f0:26:69:44:67:45:9c: 1f:d1:40:c4:95:e3:97:94:96:1b:3b:8c:a2:75:3b: b2:15:73:8c:a8:ea:8a:9e:a4:9c:3b:0b:42:e5:0d: d5:da:61:72:d0:59:d8:84:7d:50:cc:c2:7a:40:88: 15:59:51:a3:ae:2b:31:52:63:1e:86:43:fa:2f:ad: 6a:49:06:fe:9b:2e:8d:ca:90:ec:a4:53:25:ad:89: 3a:fd:f1:1d:e3:ab:cc:5f:64:6d:f0:24:95:ec:d9: 70:92:cd:94:a5:29:f5:b2:e2:3c:43:21:5d:3a:3a: d0:c4:32:f1:27:60:cf:14:df:b0:63:7c:c5:53:bb: 66:22:cb:ac:eb:7c:75:23:67:5b:e6:a1:5f:1f:87: 49:ac:b8:87:a3:ed:7d:6f:08:e7:a5:04:ff:32:cb: e2:22:4a:1c:97:ea:cb:a7:a5:f7:e5:32:62:71:70: 6c:2b:1c:de:2f:55:c4:99:aa:98:b5:91:59:e0:a4: 4b:57:6a:aa:b2:bd:f7:d4:b3:0d:3a:ac:58:f2:71: 61:aa:c3:96:ab:0a:da:08:35:0c:0d:72:0a:d6:6a: 17:9c:7d:d9:22:e8:7f:75:32:e0:48:0f:f4:0a:29: b2:a9:c0:79:84:3d:74:b1:c8:55:d9:81:c1:2e:95: 49:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2B:B5:7B:33:8A:78:48:22:E7:66:96:67:5B:0D:2D:32:CC:DC:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: 207.174.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ab:a0:b8:f6:79:18:7f:b9:3a:6a:a6:6e:c4:4f:14:e8:54: 02:b6:93:1f:7d:9a:dd:a1:77:d5:6f:55:69:55:91:9b:7b:2b: 00:bf:bc:cc:42:a1:ed:73:6e:a3:bd:61:9b:46:4e:5a:ad:79: b1:2f:8d:91:44:5d:a0:e5:dc:0c:29:7f:00:8b:75:2f:68:59: 06:7d:4a:64:3d:39:1d:f2:be:4b:61:d5:01:46:52:d8:6e:fc: 59:58:87:f8:47:6b:0b:6b:3d:32:65:49:3f:c0:2a:33:0e:e5: 10:60:f5:72:dc:2f:9e:30:c4:32:fe:45:f3:ad:15:30:5b:bb: 29:37:0b:10:6b:ed:94:d8:f4:58:43:a3:66:c3:b9:1c:51:14: a2:d5:f5:a5:1e:e8:51:ca:ce:c4:4d:28:27:ba:cc:f7:f5:0f: 3d:55:88:69:7f:78:b6:e2:c6:f1:bb:33:76:61:35:15:1d:e8: 96:d1:b0:ea:51:fd:27:da:3e:4c:2c:b5:d1:94:89:c6:2a:fa: 46:63:92:10:62:e5:e0:60:b5:16:1a:f4:56:5e:61:80:a6:00: 60:cb:3d:bb:35:3c:98:48:2c:ba:1c:e9:32:c7:59:07:12:78: 13:7d:ca:f2:da:eb:84:c5:ea:7e:43:53:f2:bf:d1:7d:43:26: c2:96:78:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU4rUgrjOziT1BcXOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI0MDMxNjAxMDAyNVoXDTI0MDYxNDAxMDAyNVowLzEtMCsGA1UEAxMk Mjk4NjFkNDQtYTA0My00MTNiLTgxOGQtODBhYmJlMzc5Y2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGNu4blPFPAmaURnRZwf0UDEleOXlJYbO4yi dTuyFXOMqOqKnqScOwtC5Q3V2mFy0FnYhH1QzMJ6QIgVWVGjrisxUmMehkP6L61q SQb+my6NypDspFMlrYk6/fEd46vMX2Rt8CSV7Nlwks2UpSn1suI8QyFdOjrQxDLx J2DPFN+wY3zFU7tmIsus63x1I2db5qFfH4dJrLiHo+19bwjnpQT/MsviIkocl+rL p6X35TJicXBsKxzeL1XEmaqYtZFZ4KRLV2qqsr331LMNOqxY8nFhqsOWqwraCDUM DXIK1moXnH3ZIuh/dTLgSA/0CimyqcB5hD10schV2YHBLpVJCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBortXszinhIIudmlmdbDS0yzNzHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvMjhkYjUzODgtMzAyOC0z MzcyLTgyYjctMGU1MWY3ZjQxMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz64UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSroLj2eRh/uTpqpm7ETxToVAK2kx99mt2hd9VvVWlVkZt7KwC/vMxC oe1zbqO9YZtGTlqtebEvjZFEXaDl3AwpfwCLdS9oWQZ9SmQ9OR3yvkth1QFGUthu /FlYh/hHawtrPTJlST/AKjMO5RBg9XLcL54wxDL+RfOtFTBbuyk3CxBr7ZTY9FhD o2bDuRxRFKLV9aUe6FHKzsRNKCe6zPf1Dz1ViGl/eLbixvG7M3ZhNRUd6JbRsOpR /SfaPkwstdGUicYq+kZjkhBi5eBgtRYa9FZeYYCmAGDLPbs1PJhILLoc6TLHWQcS eBN9yvLa64TF6n5DU/K/0X1DJsKWeD0= -----END CERTIFICATE-----Generated at Thu May 2 04:25:01 2024 by rpki-client on console-fra.rpki-client.org