$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/3d8b42a3-eae4-3fe6-b365-6bf888dd670d.roa File: 3d8b42a3-eae4-3fe6-b365-6bf888dd670d.roa (raw, json) Hash identifier: mQM9+jwTancSpnlbBvcgTdIThNfBZ+iX4xZo9IPwQJg= Subject key identifier: D2:FB:74:09:D5:EF:81:76:6D:0A:46:B8:D0:46:74:B6:4E:3E:E4:29 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F432858457A48702D783E99C24EFDD580 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/3d8b42a3-eae4-3fe6-b365-6bf888dd670d.roa Signing time: Mon 08 Apr 2024 13:00:34 +0000 ROA not before: Mon 08 Apr 2024 13:00:34 +0000 ROA not after: Sun 07 Jul 2024 13:00:34 +0000 asID: 1280 IP address blocks: 149.20.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:7a:48:70:2d:78:3e:99:c2:4e:fd:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Apr 8 13:00:34 2024 GMT Not After : Jul 7 13:00:34 2024 GMT Subject: CN=45d2c6c2-ab5d-49da-ba95-dbec2ff9f95e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:de:0d:53:1f:60:31:a9:dc:05:6c:70:77:5d: 56:82:a6:18:c6:5f:f5:5e:29:2e:c7:5f:5b:f9:a9: 0b:da:8a:77:92:54:a7:76:03:39:15:b4:b1:f7:8e: b9:d5:f1:7d:a0:b5:39:db:42:c3:e8:49:ac:13:22: 1d:9a:d1:1b:03:57:74:f7:18:76:3d:ef:38:39:bc: 6d:56:aa:31:c0:b0:45:a8:f2:98:99:4c:f1:2e:50: 4a:56:b8:8e:03:ee:18:71:25:04:e6:15:0c:3c:c0: e1:05:14:8f:5c:d7:4a:3f:02:6a:28:84:32:82:48: 08:a7:0a:d4:ad:22:39:9f:06:0e:fe:84:f6:b8:83: 15:ed:78:f3:c6:93:3f:d7:67:c1:19:0a:e7:63:26: c2:bf:29:30:c1:cd:df:98:a7:bb:6a:38:bb:4d:c3: 20:e0:5c:01:dc:d8:37:4c:59:c0:e2:cd:8c:f4:45: 57:5e:7c:99:1f:4b:50:ed:d8:f0:8a:60:9f:5f:6a: e8:b6:69:4f:78:c6:34:ce:f0:fe:5a:cf:18:0e:c4: 22:67:a2:86:78:f8:66:ff:ab:be:2f:42:f0:77:11: 38:d5:99:2c:73:8f:fc:0f:2d:d2:bc:55:18:a8:78: 96:41:af:4e:bf:f3:9d:31:57:d2:82:9d:de:70:5b: b6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FB:74:09:D5:EF:81:76:6D:0A:46:B8:D0:46:74:B6:4E:3E:E4:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/3d8b42a3-eae4-3fe6-b365-6bf888dd670d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:1a:6b:41:95:65:91:66:f7:b0:08:cd:7f:5b:42:07:bd:fc: 25:5c:88:c4:68:6e:de:0a:63:54:b5:09:8c:3d:64:c9:71:f5: af:00:69:9c:e6:cc:67:42:8e:21:72:81:16:45:62:59:3b:2a: 12:f7:47:e7:b6:ee:0b:ea:c1:6c:79:1e:4e:e4:da:23:2e:d8: ed:ce:27:78:45:c2:c9:32:e2:97:53:0e:fc:22:3d:1a:b6:a8: 9a:99:db:32:b4:cd:1c:2f:8f:62:3e:de:52:89:97:c6:f7:c2: cc:2b:ea:64:18:e9:2d:1a:87:9e:61:b2:b4:73:92:2f:4f:e6: cf:cb:23:12:b1:b9:34:a9:f2:a0:39:dc:8c:ff:66:76:d7:e8: d0:6c:b1:d7:19:53:29:bd:cb:4d:f0:e6:9b:48:a9:94:cd:9d: 68:c5:7b:23:71:0c:15:19:3c:58:0f:e8:6a:1a:d6:42:e1:43: 60:74:92:48:2b:c2:5f:c5:70:71:62:9a:83:59:a2:8f:17:f9: f2:a4:f1:43:3b:86:98:b7:d1:9d:19:90:eb:aa:18:af:91:6b: 86:04:b8:dd:23:1d:dd:86:4d:5d:f8:6e:69:18:39:f3:36:91: c3:d5:5d:b9:0c:78:03:f9:01:87:6c:8b:6a:20:99:3d:0d:82: 61:4c:25:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV6SHAteD6Zwk791YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI0MDQwODEzMDAzNFoXDTI0MDcwNzEzMDAzNFowLzEtMCsGA1UEAxMk NDVkMmM2YzItYWI1ZC00OWRhLWJhOTUtZGJlYzJmZjlmOTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd4NUx9gMancBWxwd11WgqYYxl/1Xikux19b +akL2op3klSndgM5FbSx94651fF9oLU520LD6EmsEyIdmtEbA1d09xh2Pe84Obxt VqoxwLBFqPKYmUzxLlBKVriOA+4YcSUE5hUMPMDhBRSPXNdKPwJqKIQygkgIpwrU rSI5nwYO/oT2uIMV7XjzxpM/12fBGQrnYybCvykwwc3fmKe7aji7TcMg4FwB3Ng3 TFnA4s2M9EVXXnyZH0tQ7djwimCfX2rotmlPeMY0zvD+Ws8YDsQiZ6KGePhm/6u+ L0LwdxE41Zksc4/8Dy3SvFUYqHiWQa9Ov/OdMVfSgp3ecFu2MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNL7dAnV74F2bQpGuNBGdLZOPuQpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvM2Q4YjQyYTMtZWFlNC0z ZmU2LWIzNjUtNmJmODg4ZGQ2NzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClRRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoaa0GVZZFm97AIzX9bQge9/CVciMRobt4KY1S1CYw9ZMlx9a8AaZzm zGdCjiFygRZFYlk7KhL3R+e27gvqwWx5Hk7k2iMu2O3OJ3hFwsky4pdTDvwiPRq2 qJqZ2zK0zRwvj2I+3lKJl8b3wswr6mQY6S0ah55hsrRzki9P5s/LIxKxuTSp8qA5 3Iz/ZnbX6NBssdcZUym9y03w5ptIqZTNnWjFeyNxDBUZPFgP6Goa1kLhQ2B0kkgr wl/FcHFimoNZoo8X+fKk8UM7hpi30Z0ZkOuqGK+Ra4YEuN0jHd2GTV34bmkYOfM2 kcPVXbkMeAP5AYdsi2ogmT0NgmFMJQE= -----END CERTIFICATE-----Generated at Wed May 15 15:08:16 2024 by rpki-client on console-fra.rpki-client.org