$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a25873ed-8451-344c-af7e-66515db40f53.roa File: a25873ed-8451-344c-af7e-66515db40f53.roa (raw, json) Hash identifier: 2JoDZSxN7V2UDqZ+VxmpDhnGj9QOiV0MplLkfHKhuGc= Subject key identifier: 0C:61:70:42:78:32:D5:AC:08:5D:74:8F:E1:A2:BB:EC:1B:50:B9:03 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F432858450FF9115100B5E65655513C80 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a25873ed-8451-344c-af7e-66515db40f53.roa Signing time: Fri 01 Mar 2024 11:05:02 +0000 ROA not before: Fri 01 Mar 2024 11:05:02 +0000 ROA not after: Thu 30 May 2024 10:05:02 +0000 asID: 30132 IP address blocks: 149.20.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:0f:f9:11:51:00:b5:e6:56:55:51:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Mar 1 11:05:02 2024 GMT Not After : May 30 10:05:02 2024 GMT Subject: CN=0b9a1050-6b0e-4b0a-bf4e-b238326acaf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:85:f4:1b:17:04:b9:78:6d:34:02:52:b8:7a: 0c:e1:19:31:3c:ad:fa:ab:5b:d4:c7:5f:d2:06:43: 3e:08:b9:cc:9a:15:7a:f9:e2:42:9a:55:b3:47:88: 48:41:0b:87:83:fb:a7:9d:f7:98:dc:33:3e:26:b6: 94:82:12:b8:0e:02:71:4d:ad:c4:a6:72:0b:69:57: e1:20:98:92:87:99:43:71:00:0a:59:f3:43:2b:de: e9:2e:3e:a0:9f:d0:93:39:e1:da:d3:6e:a1:ef:db: 03:e8:69:07:c7:1f:84:cb:e7:18:46:b4:64:38:c1: d6:b7:ae:cd:f4:98:c4:fb:ee:0d:c6:fa:11:1f:f4: f7:04:1f:9c:80:bd:62:53:93:b0:3a:e9:e8:01:60: 2a:8c:9d:85:0e:95:30:80:8e:ac:d4:bb:25:f6:ff: 78:eb:6a:c5:90:e9:0d:c9:b6:d9:f4:aa:f0:31:54: e8:00:5a:cc:de:ed:ad:a8:98:f9:52:4b:1a:88:ba: 1f:10:e1:f3:29:fa:b2:50:40:fd:8b:09:da:7b:27: 59:bd:b8:11:42:4b:bf:04:52:4e:ce:4a:67:31:8c: c7:30:c0:c3:60:80:96:20:c0:68:dc:2b:b9:b9:d1: 3d:85:5c:d3:3a:d5:d0:e8:78:c4:d8:11:ae:83:57: b0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:61:70:42:78:32:D5:AC:08:5D:74:8F:E1:A2:BB:EC:1B:50:B9:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a25873ed-8451-344c-af7e-66515db40f53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f3:24:d9:c4:09:3d:d3:f0:5d:cf:be:aa:17:cf:9c:b6:4f: 02:81:3f:4c:88:c2:15:5c:92:8f:1a:7e:48:5c:73:2b:eb:fc: f5:25:ba:02:dd:51:d0:6f:91:8b:d4:35:ab:27:5b:6d:9f:ff: 8b:34:60:22:cf:2f:25:a3:01:68:cd:bb:3b:8d:76:b2:2e:94: 51:e3:c8:4a:80:e4:63:ca:ee:78:1a:4d:29:a7:8d:b2:fb:05: 06:26:84:04:a4:40:76:ee:fa:7d:b0:57:a3:41:39:80:d7:d0: 7c:a6:77:dc:e1:af:3a:e3:c6:d3:fe:e3:98:4d:ce:a0:0c:2d: f8:65:4d:9e:29:6a:86:b6:30:c6:32:9f:ad:b2:b5:12:6b:3c: 1a:6b:a4:42:4a:42:57:4d:e0:87:41:53:d5:37:9c:a6:d2:c1: 20:cf:0d:21:d5:85:f4:01:8a:a2:4e:72:0b:c3:19:9f:f1:36: 8a:83:b6:72:2a:7e:d8:d7:21:ab:35:1b:0f:bf:1e:41:d4:42: 17:f1:2a:71:45:2e:fe:f1:c0:c7:eb:eb:0f:f3:53:8e:32:ea: 24:ea:7a:c6:12:52:d5:24:63:67:14:19:55:ba:55:8e:81:df: 01:13:16:20:82:09:e1:ee:e3:c3:3f:d7:6b:49:6a:ee:46:e4: c8:e6:6d:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUP+RFRALXmVlVRPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI0MDMwMTExMDUwMloXDTI0MDUzMDEwMDUwMlowLzEtMCsGA1UEAxMk MGI5YTEwNTAtNmIwZS00YjBhLWJmNGUtYjIzODMyNmFjYWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYX0GxcEuXhtNAJSuHoM4RkxPK36q1vUx1/S BkM+CLnMmhV6+eJCmlWzR4hIQQuHg/unnfeY3DM+JraUghK4DgJxTa3EpnILaVfh IJiSh5lDcQAKWfNDK97pLj6gn9CTOeHa026h79sD6GkHxx+Ey+cYRrRkOMHWt67N 9JjE++4NxvoRH/T3BB+cgL1iU5OwOunoAWAqjJ2FDpUwgI6s1Lsl9v9462rFkOkN ybbZ9KrwMVToAFrM3u2tqJj5UksaiLofEOHzKfqyUED9iwnaeydZvbgRQku/BFJO zkpnMYzHMMDDYICWIMBo3Cu5udE9hVzTOtXQ6HjE2BGug1ewTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxhcEJ4MtWsCF10j+Giu+wbULkDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvYTI1ODczZWQtODQ1MS0z NDRjLWFmN2UtNjY1MTVkYjQwZjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXzJNnECT3T8F3PvqoXz5y2TwKBP0yIwhVcko8afkhccyvr/PUlugLd UdBvkYvUNasnW22f/4s0YCLPLyWjAWjNuzuNdrIulFHjyEqA5GPK7ngaTSmnjbL7 BQYmhASkQHbu+n2wV6NBOYDX0Hymd9zhrzrjxtP+45hNzqAMLfhlTZ4paoa2MMYy n62ytRJrPBprpEJKQldN4IdBU9U3nKbSwSDPDSHVhfQBiqJOcgvDGZ/xNoqDtnIq ftjXIas1Gw+/HkHUQhfxKnFFLv7xwMfr6w/zU44y6iTqesYSUtUkY2cUGVW6VY6B 3wETFiCCCeHu48M/12tJau5G5MjmbTc= -----END CERTIFICATE-----Generated at Wed May 15 15:08:16 2024 by rpki-client on console-fra.rpki-client.org