$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa File: 800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa (raw, json) Hash identifier: hL9ySpQaweJTgXltKZx8LlWOqeuUKS3hRTspV2Oj5G8= Subject key identifier: 1A:63:3E:1D:17:1F:F5:77:DE:F6:7B:DD:4C:48:86:6C:BC:8D:94:71 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F432858453317E5920C12671E4FCE0EC0 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa Signing time: Thu 14 Mar 2024 01:00:25 +0000 ROA not before: Thu 14 Mar 2024 01:00:25 +0000 ROA not after: Wed 12 Jun 2024 01:00:25 +0000 asID: 27321 IP address blocks: 149.20.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:33:17:e5:92:0c:12:67:1e:4f:ce:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Mar 14 01:00:25 2024 GMT Not After : Jun 12 01:00:25 2024 GMT Subject: CN=89af429b-29df-46f3-bcbc-61652be0b329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5a:d5:3e:cc:1e:ff:66:f4:75:87:10:d2:68: da:48:49:75:21:18:d2:5e:06:b0:ad:4f:a9:2a:fb: 86:7b:9d:26:31:84:f0:e7:72:93:6d:76:e0:1d:e7: 49:c7:6f:bd:cb:54:24:f9:ac:41:2b:cf:4d:eb:1c: 3f:86:e4:da:07:97:eb:54:32:96:5c:d9:2b:8b:41: 99:9a:73:63:3a:9c:c4:c2:41:5a:b4:5b:10:4b:f0: 93:ee:24:7f:ca:ca:29:a2:1e:b0:83:3e:dd:13:89: e1:6a:e0:99:27:e9:ed:2b:39:97:9e:d9:37:43:de: 64:a5:88:ab:3c:f2:ec:34:0e:cd:08:7a:02:a7:d0: b2:cd:53:29:a3:a7:e0:e5:ac:42:f2:e7:dd:8a:b5: de:e2:5d:9f:07:34:ef:3a:c1:5b:4b:f8:e8:8c:d1: 7d:69:7a:b5:88:d9:ba:58:c0:a1:d6:10:32:63:6b: a5:47:9f:72:bc:ae:68:83:e3:3e:03:1a:fa:e3:f9: dd:64:17:51:ad:a0:2e:8c:fc:49:ae:15:80:ec:d3: fc:97:e9:16:b9:4b:af:19:9f:31:09:a1:82:47:77: 1d:8b:6d:f6:75:e3:20:53:ce:26:f0:90:e4:ab:91: e6:36:25:e9:24:a7:8f:54:f3:73:0c:fb:9e:b4:65: 6e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:63:3E:1D:17:1F:F5:77:DE:F6:7B:DD:4C:48:86:6C:BC:8D:94:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b1:81:08:6a:65:bd:55:48:84:39:a4:e7:8c:37:47:cb:de: 76:44:f0:e6:de:e3:5f:d5:d1:9a:38:64:3c:b3:dd:bc:04:70: fa:de:15:bc:f4:80:d3:b1:25:dd:a4:8c:83:45:ab:7d:d7:e3: 35:47:2b:2f:e2:38:ec:e1:2e:2d:60:5b:6b:6d:f0:b1:db:44: ed:81:a4:82:99:8a:8a:a2:6b:ca:f5:73:9e:61:a7:57:c8:49: c6:76:7b:e8:1d:96:3e:8c:a2:53:35:80:9b:6c:f0:8d:96:29: a0:89:62:4b:4d:2f:17:64:ab:aa:c0:0a:ef:3c:1c:98:b6:36: 1c:32:b4:c2:59:b8:fb:54:ef:62:2a:a5:92:d9:49:5d:30:c0: a7:a0:65:53:3f:d4:82:21:e9:f8:af:96:00:5a:b1:a9:d8:2b: d4:93:9e:4d:ec:2b:c5:6a:ec:6c:0a:e9:ce:ad:5e:3a:3e:5d: e9:2d:ac:9d:86:8e:39:66:22:55:94:cc:31:3d:cd:fe:ec:37: 56:9f:03:75:38:0a:90:c3:80:6d:f3:85:2c:6b:c2:f3:38:84: a5:af:24:e5:cc:af:24:5f:55:22:61:95:06:e7:0f:bf:53:f4: c8:66:fe:ea:e3:ec:2e:ec:48:be:8a:b0:8b:59:ac:66:1e:40: 97:6b:f6:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUzF+WSDBJnHk/ODsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI0MDMxNDAxMDAyNVoXDTI0MDYxMjAxMDAyNVowLzEtMCsGA1UEAxMk ODlhZjQyOWItMjlkZi00NmYzLWJjYmMtNjE2NTJiZTBiMzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVrVPswe/2b0dYcQ0mjaSEl1IRjSXgawrU+p KvuGe50mMYTw53KTbXbgHedJx2+9y1Qk+axBK89N6xw/huTaB5frVDKWXNkri0GZ mnNjOpzEwkFatFsQS/CT7iR/ysopoh6wgz7dE4nhauCZJ+ntKzmXntk3Q95kpYir PPLsNA7NCHoCp9CyzVMpo6fg5axC8ufdirXe4l2fBzTvOsFbS/jojNF9aXq1iNm6 WMCh1hAyY2ulR59yvK5og+M+Axr64/ndZBdRraAujPxJrhWA7NP8l+kWuUuvGZ8x CaGCR3cdi232deMgU84m8JDkq5HmNiXpJKePVPNzDPuetGVuzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpjPh0XH/V33vZ73UxIhmy8jZRxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvODAwYzVmMmQtMWVmMi0z NTE5LThhODItMzMwM2QxZTBjMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSxgQhqZb1VSIQ5pOeMN0fL3nZE8Obe41/V0Zo4ZDyz3bwEcPreFbz0 gNOxJd2kjINFq33X4zVHKy/iOOzhLi1gW2tt8LHbRO2BpIKZioqia8r1c55hp1fI ScZ2e+gdlj6MolM1gJts8I2WKaCJYktNLxdkq6rACu88HJi2NhwytMJZuPtU72Iq pZLZSV0wwKegZVM/1IIh6fivlgBasanYK9STnk3sK8Vq7GwK6c6tXjo+XektrJ2G jjlmIlWUzDE9zf7sN1afA3U4CpDDgG3zhSxrwvM4hKWvJOXMryRfVSJhlQbnD79T 9Mhm/urj7C7sSL6KsItZrGYeQJdr9hY= -----END CERTIFICATE-----Generated at Wed May 15 15:08:16 2024 by rpki-client on console-fra.rpki-client.org