$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a03db81e-4e1b-3802-b95c-a47c09b9a421.roa File: a03db81e-4e1b-3802-b95c-a47c09b9a421.roa (raw, json) Hash identifier: HfK3z/XesRsBLyBy7Qc3yn6k3Y3YmMmqNG5gcekLzEI= Subject key identifier: 55:7A:FB:CA:59:8A:70:03:63:97:AF:AA:59:6A:7F:F5:C6:BF:8A:EF Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F432858459D2DEE27397A1E1F5F9A0840 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a03db81e-4e1b-3802-b95c-a47c09b9a421.roa Signing time: Sun 21 Apr 2024 01:00:25 +0000 ROA not before: Sun 21 Apr 2024 01:00:25 +0000 ROA not after: Sat 20 Jul 2024 01:00:25 +0000 asID: 53737 IP address blocks: 159.18.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:9d:2d:ee:27:39:7a:1e:1f:5f:9a:08:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: Apr 21 01:00:25 2024 GMT Not After : Jul 20 01:00:25 2024 GMT Subject: CN=0a05d6f1-befb-4aa0-a1e7-8d033a16718d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ed:13:e0:1b:0a:68:61:db:20:4c:11:34:37: 85:4d:89:44:ab:29:34:0f:ed:16:0b:72:07:aa:af: a3:1f:c6:63:bf:13:40:42:d4:df:66:be:29:01:13: 2c:53:61:48:e1:e9:30:3f:a2:64:2c:ef:f3:e8:70: a6:16:4b:5a:b4:cc:4e:fc:72:71:18:2c:7c:fb:04: c9:aa:07:83:b4:a7:37:b3:f2:32:bd:d1:33:cb:2e: a4:09:ca:10:2c:d2:64:b9:f0:a6:05:4b:7a:92:28: 2d:27:99:ed:d5:25:3b:5a:c2:e4:b9:cc:7c:80:7a: 02:c0:01:5f:5c:e3:32:67:cc:23:7d:1b:82:5a:dd: 5a:8a:89:07:a5:fe:2b:f9:9b:62:90:59:76:50:1e: 84:94:a7:f8:05:96:c0:8f:ab:28:46:33:43:71:30: 3e:26:db:d9:36:77:d0:b9:da:f9:f1:48:a0:b9:83: b2:ab:87:2b:a0:2a:26:6a:bf:cd:2f:65:d7:5f:d5: d1:59:59:76:3e:f4:94:80:cf:6a:1f:48:fe:47:ca: 9d:fd:88:61:02:33:14:94:2e:30:48:6a:9d:89:26: 0e:13:3b:e7:70:02:a4:66:12:a4:8b:05:d4:84:31: ec:c1:92:85:df:c1:9c:9a:e9:91:9b:f2:1b:cb:5c: 5a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7A:FB:CA:59:8A:70:03:63:97:AF:AA:59:6A:7F:F5:C6:BF:8A:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a03db81e-4e1b-3802-b95c-a47c09b9a421.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 159.18.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:ab:14:b2:09:a5:41:11:52:7c:d9:fe:e5:9a:0b:ab:63:9b: cc:72:b2:c8:cc:14:9f:9c:6a:8a:8b:b6:d3:b3:0a:89:1d:52: 10:39:62:e4:8d:5f:c5:a7:be:05:fb:e8:9e:d0:2c:84:4c:d0: bb:19:3b:c7:6c:1d:0a:48:92:f7:9d:85:32:de:cc:7e:38:27: 72:24:63:42:09:e3:f7:e5:00:02:38:49:a8:d4:e2:bf:07:66: 87:cb:d8:c0:35:14:a7:a9:cb:8b:66:86:e7:d7:74:e9:6a:1e: 14:e9:63:6d:d8:ba:be:d2:60:39:79:3d:41:a7:81:ae:c8:82: f9:f1:bc:b5:b4:7f:f5:ac:fd:61:bd:46:1d:87:32:aa:2f:e3: c5:cb:2e:46:8f:44:22:82:0d:7e:09:9a:c9:b3:e5:cf:a2:8a: 20:ad:0e:cb:65:17:7a:54:a6:ae:93:63:f8:25:14:51:e3:05: 8f:55:6d:6d:c1:20:f4:23:31:a9:92:a9:21:22:ab:ff:3d:8c: d2:47:dd:a1:82:70:7f:4e:09:b9:0b:98:df:b8:be:1f:fe:d5: d1:e6:74:2e:ec:cf:ec:3b:38:01:e9:47:1a:c4:b2:f2:c7:de: d3:55:f8:67:62:f0:0a:10:05:54:e2:2c:b1:b9:70:e4:0b:ac: b9:90:e4:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWdLe4nOXoeH1+aCEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI0MDQyMTAxMDAyNVoXDTI0MDcyMDAxMDAyNVowLzEtMCsGA1UEAxMk MGEwNWQ2ZjEtYmVmYi00YWEwLWExZTctOGQwMzNhMTY3MThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+0T4BsKaGHbIEwRNDeFTYlEqyk0D+0WC3IH qq+jH8ZjvxNAQtTfZr4pARMsU2FI4ekwP6JkLO/z6HCmFktatMxO/HJxGCx8+wTJ qgeDtKc3s/IyvdEzyy6kCcoQLNJkufCmBUt6kigtJ5nt1SU7WsLkucx8gHoCwAFf XOMyZ8wjfRuCWt1aiokHpf4r+ZtikFl2UB6ElKf4BZbAj6soRjNDcTA+JtvZNnfQ udr58UiguYOyq4croComar/NL2XXX9XRWVl2PvSUgM9qH0j+R8qd/YhhAjMUlC4w SGqdiSYOEzvncAKkZhKkiwXUhDHswZKF38GcmumRm/Iby1xajwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFV6+8pZinADY5evqllqf/XGv4rvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvYTAzZGI4MWUtNGUxYi0z ODAyLWI5NWMtYTQ3YzA5YjlhNDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnxKaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKrFLIJpUERUnzZ/uWaC6tjm8xyssjMFJ+caoqLttOzCokdUhA5YuSN X8WnvgX76J7QLIRM0LsZO8dsHQpIkvedhTLezH44J3IkY0IJ4/flAAI4SajU4r8H ZofL2MA1FKepy4tmhufXdOlqHhTpY23Yur7SYDl5PUGnga7IgvnxvLW0f/Ws/WG9 Rh2HMqov48XLLkaPRCKCDX4Jmsmz5c+iiiCtDstlF3pUpq6TY/glFFHjBY9VbW3B IPQjMamSqSEiq/89jNJH3aGCcH9OCbkLmN+4vh/+1dHmdC7sz+w7OAHpRxrEsvLH 3tNV+Gdi8AoQBVTiLLG5cOQLrLmQ5NM= -----END CERTIFICATE-----Generated at Sun May 19 17:19:19 2024 by rpki-client on console-ams.rpki-client.org