$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/d00129db-d5ad-33be-afac-2e76df39b2b2.roa File: d00129db-d5ad-33be-afac-2e76df39b2b2.roa (raw, json) Hash identifier: r4cUL9vpW31Mz2cuV2c+PoY87pxe4TSxwr+oijxrZA8= Subject key identifier: 9A:CC:40:03:A0:69:14:C1:21:96:D3:5C:35:A5:E9:AA:E6:14:25:48 Certificate issuer: /CN=0a4ce5e6-29f4-4552-bf3b-5510aa3b5052 Certificate serial: 010D0C9F43285845B64E0DAB34DE36E3E2F0B0BC Authority key identifier: 6F:D9:11:69:B9:73:1F:5C:48:7D:CE:11:8A:21:CE:B1:3F:F5:F9:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/d00129db-d5ad-33be-afac-2e76df39b2b2.roa Signing time: Tue 30 Apr 2024 01:00:25 +0000 ROA not before: Tue 30 Apr 2024 01:00:25 +0000 ROA not after: Mon 29 Jul 2024 01:00:25 +0000 asID: 6095 IP address blocks: 204.89.59.0/24 maxlen: 24 204.89.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b6:4e:0d:ab:34:de:36:e3:e2:f0:b0:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a4ce5e6-29f4-4552-bf3b-5510aa3b5052 Validity Not Before: Apr 30 01:00:25 2024 GMT Not After : Jul 29 01:00:25 2024 GMT Subject: CN=f73c3f52-1dff-45bb-bd95-807c2b57e1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:77:2a:72:3e:3a:5b:71:9e:51:e0:f2:48:72: 92:36:bd:ba:0d:28:6c:21:69:f2:2a:2e:1b:79:3c: 60:2f:cd:77:22:0e:dd:2e:a7:31:af:35:3c:03:c1: ce:87:76:9b:26:af:6b:2a:83:ca:b3:13:7b:bb:9b: 59:2d:35:9b:e6:58:84:dc:8c:72:21:0c:d4:2d:5e: b4:66:63:62:59:09:1e:71:33:84:2d:e5:9d:e1:9d: fc:f9:3f:43:a0:c1:02:5a:ad:8d:66:65:5a:34:9b: ae:8d:6c:c3:99:44:e7:74:23:3a:b1:96:22:17:08: 63:bd:21:fa:7e:10:62:b9:32:e3:9c:a9:c4:4e:65: 49:20:1a:a3:36:df:a1:c7:13:be:b1:28:4a:29:cc: 76:e5:3d:5d:7d:77:d0:a4:0c:54:f5:1c:5a:51:67: 60:04:79:21:26:54:75:4e:04:b6:98:17:d3:ca:d2: 43:e4:28:e6:5f:d6:f8:c3:a0:6f:69:61:5a:89:7b: 96:fc:98:f2:47:a4:bd:88:f3:30:d5:83:19:ef:c4: 0f:74:1d:5e:a6:59:9c:6f:d8:80:88:e8:07:d4:3c: e9:7b:bc:a0:40:1f:54:92:56:73:25:99:ce:36:07: b1:69:41:1d:8b:38:e1:5a:ef:5a:ea:4f:8d:e6:e3: 53:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CC:40:03:A0:69:14:C1:21:96:D3:5C:35:A5:E9:AA:E6:14:25:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/d00129db-d5ad-33be-afac-2e76df39b2b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.crl X509v3 Authority Key Identifier: keyid:6F:D9:11:69:B9:73:1F:5C:48:7D:CE:11:8A:21:CE:B1:3F:F5:F9:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.cer sbgp-ipAddrBlock: critical IPv4: 204.89.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:34:c2:6d:e8:7b:66:ab:08:b6:8d:a9:c6:93:23:d7:fb:c2: 58:c2:3b:0c:40:00:94:f3:19:53:23:19:3e:81:22:3f:f7:d2: 6e:c2:35:43:8c:d8:81:79:d7:27:d1:4c:c4:6c:9b:49:65:8b: 0c:f2:2a:ea:29:dd:02:cb:fd:e4:cb:ff:50:76:bc:68:86:1d: e9:f0:57:28:0c:48:8d:be:fd:bc:fa:68:29:32:d8:ab:03:a8: fb:f0:00:ac:bb:0b:b7:69:03:39:b2:1c:2d:de:87:8c:41:b7: da:f8:c6:cb:bf:75:e0:50:3b:e5:4f:d1:a3:0e:d5:62:cd:52: f5:5f:c3:5f:e6:e0:98:29:d8:d9:4b:9f:85:a9:50:97:32:64: f8:21:ea:75:b4:bc:7f:ab:13:2f:9b:ed:e8:91:67:ff:3b:83: ec:4c:2f:9a:a7:3c:f8:68:ed:b4:6a:b8:82:e8:ad:b9:a0:ec: ee:45:90:45:29:a9:0e:00:e7:53:2d:c4:fc:eb:a0:b3:67:db: 50:cf:7c:72:74:a7:36:de:26:11:f7:c0:86:aa:d5:38:1f:f9: 1c:7d:3e:5a:d6:c5:05:55:92:ba:c1:f8:02:87:5d:2d:1f:cf: 61:33:3d:d5:df:9b:4b:b6:d6:9a:38:7a:bf:ae:c2:5a:a4:a2: b1:93:43:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW2Tg2rNN424+LwsLwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE0Y2U1ZTYtMjlmNC00NTUyLWJmM2ItNTUxMGFhM2I1 MDUyMB4XDTI0MDQzMDAxMDAyNVoXDTI0MDcyOTAxMDAyNVowLzEtMCsGA1UEAxMk ZjczYzNmNTItMWRmZi00NWJiLWJkOTUtODA3YzJiNTdlMWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHcqcj46W3GeUeDySHKSNr26DShsIWnyKi4b eTxgL813Ig7dLqcxrzU8A8HOh3abJq9rKoPKsxN7u5tZLTWb5liE3IxyIQzULV60 ZmNiWQkecTOELeWd4Z38+T9DoMECWq2NZmVaNJuujWzDmUTndCM6sZYiFwhjvSH6 fhBiuTLjnKnETmVJIBqjNt+hxxO+sShKKcx25T1dfXfQpAxU9RxaUWdgBHkhJlR1 TgS2mBfTytJD5CjmX9b4w6BvaWFaiXuW/JjyR6S9iPMw1YMZ78QPdB1eplmcb9iA iOgH1Dzpe7ygQB9UklZzJZnONgexaUEdizjhWu9a6k+N5uNT4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrMQAOgaRTBIZbTXDWl6armFCVIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wYTRj ZTVlNi0yOWY0LTQ1NTItYmYzYi01NTEwYWEzYjUwNTIvZDAwMTI5ZGItZDVhZC0z M2JlLWFmYWMtMmU3NmRmMzliMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGE0Y2U1ZTYtMjlmNC00NTUyLWJm M2ItNTUxMGFhM2I1MDUyLzBhNGNlNWU2LTI5ZjQtNDU1Mi1iZjNiLTU1MTBhYTNi NTA1Mi5jcmwwHwYDVR0jBBgwFoAUb9kRablzH1xIfc4RiiHOsT/1+SUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wYTRjZTVlNi0yOWY0LTQ1NTItYmYzYi01NTEw YWEzYjUwNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzFk6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHc0wm3oe2arCLaNqcaTI9f7wljCOwxAAJTzGVMjGT6BIj/30m7CNUOM 2IF51yfRTMRsm0lliwzyKuop3QLL/eTL/1B2vGiGHenwVygMSI2+/bz6aCky2KsD qPvwAKy7C7dpAzmyHC3eh4xBt9r4xsu/deBQO+VP0aMO1WLNUvVfw1/m4Jgp2NlL n4WpUJcyZPgh6nW0vH+rEy+b7eiRZ/87g+xML5qnPPho7bRquILorbmg7O5FkEUp qQ4A51MtxPzroLNn21DPfHJ0pzbeJhH3wIaq1Tgf+Rx9PlrWxQVVkrrB+AKHXS0f z2EzPdXfm0u21po4er+uwlqkorGTQ0g= -----END CERTIFICATE-----Generated at Sat May 11 08:03:55 2024 by rpki-client on console-fra.rpki-client.org