$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8578f51c-1b6a-3105-b746-5bdf914f63b4.roa File: 8578f51c-1b6a-3105-b746-5bdf914f63b4.roa (raw, json) Hash identifier: PATyR7p0WYapiVJrNWezoPShJUUAeB4UgVP9wKv0FyE= Subject key identifier: 43:4B:6E:97:5B:60:C7:58:8D:5A:C6:12:47:2C:82:3A:87:61:0E:FF Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F432858457A488A05D3F33D628D054680 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8578f51c-1b6a-3105-b746-5bdf914f63b4.roa Signing time: Mon 08 Apr 2024 13:00:34 +0000 ROA not before: Mon 08 Apr 2024 13:00:34 +0000 ROA not after: Sun 07 Jul 2024 13:00:34 +0000 asID: 1280 IP address blocks: 149.20.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:7a:48:8a:05:d3:f3:3d:62:8d:05:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Apr 8 13:00:34 2024 GMT Not After : Jul 7 13:00:34 2024 GMT Subject: CN=d812faa3-5257-47b7-a0a6-1853df7a1205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9f:ab:ea:a3:22:b6:bc:98:af:0f:97:f3:09: 54:f2:08:e2:dd:ee:5a:13:6e:a8:b4:ba:bd:74:c0: 5e:20:55:0c:32:9a:69:fa:10:17:49:5a:ea:af:ef: a8:df:d8:b6:76:39:e9:d9:83:76:80:c7:d3:c0:d2: 53:0e:c8:10:2c:df:90:dc:a8:d8:17:ca:2d:b1:70: 5e:42:15:dd:f2:98:6a:8a:3b:44:97:45:7d:8d:4a: 97:59:8c:39:e7:88:7f:a9:91:21:c0:46:ba:bb:75: 3b:89:61:0f:5b:32:57:c2:ad:86:72:ca:31:f0:9a: 70:5f:7f:a2:73:8b:f5:56:7b:c5:ba:bf:e4:b2:8c: 63:f9:7f:a7:34:e3:bb:4d:76:49:61:73:be:22:ae: aa:b4:f6:85:d7:46:a0:0c:80:eb:88:45:f6:f7:9c: 84:12:82:1c:fb:6a:44:2d:e4:fc:a4:89:9c:dc:71: b2:29:37:24:05:59:a8:6c:3d:3d:20:73:a3:3d:75: d0:c4:41:73:cf:0a:fb:e4:6f:02:cb:ca:be:cb:3a: 66:32:1c:76:b8:50:8d:59:23:7d:86:91:a8:a8:55: ba:18:ee:03:65:9c:a3:29:26:b0:00:6a:b0:a9:bd: d0:68:14:41:5d:2b:49:6f:85:0e:f6:ba:0e:08:b2: 73:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4B:6E:97:5B:60:C7:58:8D:5A:C6:12:47:2C:82:3A:87:61:0E:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8578f51c-1b6a-3105-b746-5bdf914f63b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:9f:a0:c5:9b:e6:72:63:ba:1c:c1:b8:21:ad:53:1e:11:56: de:7c:bb:cc:9e:f7:fa:b5:f0:1d:97:f1:1f:b8:1c:60:c6:d7: 44:5d:13:7f:7d:36:70:f9:1a:49:d5:0e:38:20:f3:a5:c4:5c: aa:c8:f4:eb:8f:8b:f1:45:2c:04:52:37:a2:c7:c8:7f:76:e3: 19:e2:b1:a6:ac:f7:91:ce:ae:0d:97:1d:25:05:23:4f:c3:05: 4d:0a:86:e0:9d:91:e3:31:5e:9a:77:53:03:1e:6a:59:33:8b: 40:7d:e6:a1:f5:81:ea:c8:20:ab:36:33:ca:8e:51:05:c5:46: 50:89:ef:1d:30:99:f7:ac:9d:28:24:0c:84:6f:e4:fe:e1:4e: 44:a0:05:09:3d:4b:0e:83:0c:32:4e:49:99:ea:aa:23:03:f1: 6c:54:80:38:16:e0:30:9e:b0:9b:ff:61:cb:43:f9:7e:90:87: 4f:ea:bf:ed:db:ab:35:d6:7e:2c:ee:48:92:1d:36:2b:d3:0a: 3e:72:4e:8a:ff:57:f8:d4:da:01:92:4a:6f:77:df:5b:e1:cc: 68:ca:21:c1:00:19:cf:ab:56:2c:0b:83:15:56:1c:a1:da:64: bb:21:ab:c9:06:99:8e:fe:49:4d:4c:36:c9:44:8d:07:6f:21: 2c:12:1a:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV6SIoF0/M9Yo0FRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI0MDQwODEzMDAzNFoXDTI0MDcwNzEzMDAzNFowLzEtMCsGA1UEAxMk ZDgxMmZhYTMtNTI1Ny00N2I3LWEwYTYtMTg1M2RmN2ExMjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Z+r6qMitryYrw+X8wlU8gji3e5aE26otLq9 dMBeIFUMMppp+hAXSVrqr++o39i2djnp2YN2gMfTwNJTDsgQLN+Q3KjYF8otsXBe QhXd8phqijtEl0V9jUqXWYw554h/qZEhwEa6u3U7iWEPWzJXwq2Gcsox8JpwX3+i c4v1VnvFur/ksoxj+X+nNOO7TXZJYXO+Iq6qtPaF10agDIDriEX295yEEoIc+2pE LeT8pImc3HGyKTckBVmobD09IHOjPXXQxEFzzwr75G8Cy8q+yzpmMhx2uFCNWSN9 hpGoqFW6GO4DZZyjKSawAGqwqb3QaBRBXStJb4UO9roOCLJzLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENLbpdbYMdYjVrGEkcsgjqHYQ7/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvODU3OGY1MWMtMWI2YS0z MTA1LWI3NDYtNWJkZjkxNGY2M2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQ7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCfoMWb5nJjuhzBuCGtUx4RVt58u8ye9/q18B2X8R+4HGDG10RdE399 NnD5GknVDjgg86XEXKrI9OuPi/FFLARSN6LHyH924xnisaas95HOrg2XHSUFI0/D BU0KhuCdkeMxXpp3UwMealkzi0B95qH1gerIIKs2M8qOUQXFRlCJ7x0wmfesnSgk DIRv5P7hTkSgBQk9Sw6DDDJOSZnqqiMD8WxUgDgW4DCesJv/YctD+X6Qh0/qv+3b qzXWfizuSJIdNivTCj5yTor/V/jU2gGSSm9331vhzGjKIcEAGc+rViwLgxVWHKHa ZLshq8kGmY7+SU1MNslEjQdvISwSGok= -----END CERTIFICATE-----Generated at Wed May 15 16:05:26 2024 by rpki-client on console-ams.rpki-client.org