$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa File: a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa (raw, json) Hash identifier: 06DcGZvJOv94wOKR+UEHznzfR3qM58UnBudAOoi8FNg= Subject key identifier: C4:B0:F1:2B:BD:7F:1D:06:15:1D:DB:4D:74:AD:4E:AF:A1:8A:39:09 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F432858455FC2FF62F43E4B196BCCE480 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa Signing time: Sat 30 Mar 2024 01:00:26 +0000 ROA not before: Sat 30 Mar 2024 01:00:26 +0000 ROA not after: Fri 28 Jun 2024 01:00:26 +0000 asID: 20115 IP address blocks: 172.220.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5f:c2:ff:62:f4:3e:4b:19:6b:cc:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Mar 30 01:00:26 2024 GMT Not After : Jun 28 01:00:26 2024 GMT Subject: CN=5f0f6bb2-d833-46fe-af40-438d775e5667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:79:68:69:bd:cb:42:fb:6c:2a:28:84:b7:88: c9:b1:c8:27:3a:25:c1:2c:33:09:88:5f:43:a6:24: da:db:69:59:33:d1:80:61:c9:db:bc:0c:fe:63:12: 8f:a8:6a:fa:e7:d4:e2:59:14:67:ac:64:8b:5f:81: 0a:99:0c:75:c5:cf:85:fe:41:fd:27:9d:70:94:a9: 02:42:1d:3c:8a:58:02:89:3c:67:d0:b8:52:d2:e5: 73:d3:4d:c4:e7:63:04:b5:c9:e9:cf:2b:99:3c:ac: 60:a2:68:02:31:d0:b2:48:ef:3c:a3:e4:ea:c9:2a: 30:03:3d:a3:e4:24:04:37:52:12:fe:e5:0a:a0:d4: fd:ce:8e:f3:62:8e:9b:59:6b:b8:61:bc:7f:d8:88: 81:6d:05:81:7a:e8:25:5a:fd:a5:c4:ad:92:e2:44: 16:1e:1f:b1:95:b1:98:fe:49:22:8d:74:7a:4b:f9: bd:9e:58:0f:19:5e:80:12:bb:c3:d8:13:85:c8:22: 28:7b:e1:78:57:2d:6e:ea:45:09:8e:ea:a3:7d:fd: 37:9b:03:55:66:e6:05:96:c7:9f:cb:4d:d6:d0:69: e1:21:82:42:03:86:77:e9:eb:d7:75:74:66:62:86: 16:18:98:51:6c:6a:de:27:fe:2a:9a:4f:13:79:79: 7d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B0:F1:2B:BD:7F:1D:06:15:1D:DB:4D:74:AD:4E:AF:A1:8A:39:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.220.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:bb:79:6d:a8:22:bf:58:a3:3c:f6:6a:b6:6c:29:2f:d6:62: f7:c7:cb:8e:f5:a6:c0:27:e9:b3:50:ef:7c:61:de:b3:82:7f: cf:66:af:70:53:80:2b:7e:10:67:e0:e2:7b:27:29:2b:04:86: ff:7b:a5:db:2d:c3:0f:ed:5f:2a:4e:8f:de:0a:5e:a5:58:a6: 23:e0:3b:ff:35:57:0d:b9:6c:8c:c0:95:db:e6:0f:a6:0f:a3: 36:56:74:fe:43:5c:65:25:d8:84:96:9f:e2:91:03:fc:fe:b1: 67:7d:2d:c8:dc:aa:a0:95:42:b8:94:4a:6f:b3:81:c9:26:61: e9:8d:91:e2:78:cb:d3:d8:15:ea:34:4b:a9:fa:ee:86:5f:27: 35:00:b5:3d:07:4d:27:91:c0:18:7e:fa:0e:01:a4:cf:ac:98: 71:1d:b1:27:d9:a1:49:6f:42:be:8f:86:ca:34:11:d1:13:30: 82:1b:b0:fe:e0:4a:19:d7:d9:b9:93:82:95:8c:44:e6:ed:89: 7e:df:38:b3:25:8b:4e:43:79:4a:8b:4f:00:1b:f0:87:4a:83: 89:8b:0f:4c:ac:38:49:33:da:87:11:96:f9:fc:e4:b2:fe:63: c3:56:83:d4:3b:fa:95:d9:73:43:af:63:c8:dc:49:35:e2:83: 30:12:c1:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVfwv9i9D5LGWvM5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI0MDMzMDAxMDAyNloXDTI0MDYyODAxMDAyNlowLzEtMCsGA1UEAxMk NWYwZjZiYjItZDgzMy00NmZlLWFmNDAtNDM4ZDc3NWU1NjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXloab3LQvtsKiiEt4jJscgnOiXBLDMJiF9D piTa22lZM9GAYcnbvAz+YxKPqGr659TiWRRnrGSLX4EKmQx1xc+F/kH9J51wlKkC Qh08ilgCiTxn0LhS0uVz003E52MEtcnpzyuZPKxgomgCMdCySO88o+TqySowAz2j 5CQEN1IS/uUKoNT9zo7zYo6bWWu4Ybx/2IiBbQWBeuglWv2lxK2S4kQWHh+xlbGY /kkijXR6S/m9nlgPGV6AErvD2BOFyCIoe+F4Vy1u6kUJjuqjff03mwNVZuYFlsef y03W0GnhIYJCA4Z36evXdXRmYoYWGJhRbGreJ/4qmk8TeXl9zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSw8Su9fx0GFR3bTXStTq+hijkJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTVlMGZlZDUtYWYwNi0z ZmRhLTk4ODgtZWZiY2NiY2JkNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrNzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADi7eW2oIr9Yozz2arZsKS/WYvfHy471psAn6bNQ73xh3rOCf89mr3BT gCt+EGfg4nsnKSsEhv97pdstww/tXypOj94KXqVYpiPgO/81Vw25bIzAldvmD6YP ozZWdP5DXGUl2ISWn+KRA/z+sWd9LcjcqqCVQriUSm+zgckmYemNkeJ4y9PYFeo0 S6n67oZfJzUAtT0HTSeRwBh++g4BpM+smHEdsSfZoUlvQr6Phso0EdETMIIbsP7g ShnX2bmTgpWMRObtiX7fOLMli05DeUqLTwAb8IdKg4mLD0ysOEkz2ocRlvn85LL+ Y8NWg9Q7+pXZc0OvY8jcSTXigzASweI= -----END CERTIFICATE-----Generated at Fri May 10 03:37:17 2024 by rpki-client on console-fra.rpki-client.org