$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/d024c0fe-f70d-3486-bd2c-a80515d83f4a.roa File: d024c0fe-f70d-3486-bd2c-a80515d83f4a.roa (raw, json) Hash identifier: wk/NenU3BegKgcfdAgdAnyUgVTQM42eM4hB6fWfEx2E= Subject key identifier: 97:3A:FF:E5:47:4A:1D:CD:5A:CD:80:CD:F8:E3:56:5E:D8:77:28:44 Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Certificate serial: 010D0C9F43285845068ABDB40E213CD713B49400 Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/d024c0fe-f70d-3486-bd2c-a80515d83f4a.roa Signing time: Tue 27 Feb 2024 02:00:26 +0000 ROA not before: Tue 27 Feb 2024 02:00:26 +0000 ROA not after: Mon 27 May 2024 01:00:26 +0000 asID: 16509 IP address blocks: 170.200.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:06:8a:bd:b4:0e:21:3c:d7:13:b4:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Validity Not Before: Feb 27 02:00:26 2024 GMT Not After : May 27 01:00:26 2024 GMT Subject: CN=8d8db743-3523-4101-bbbb-0a5723b7f2a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7f:0b:e3:25:c8:47:1c:54:e7:79:40:d3:8e: f5:54:2d:bf:ff:bf:87:9f:a9:08:66:d8:fa:24:ab: 54:5f:cc:d6:0b:f9:c7:23:66:3e:7c:86:5a:5c:ec: 6d:e1:5e:b1:52:b0:99:f1:73:68:de:00:17:dd:e1: 08:aa:1e:f6:ad:62:d5:00:e5:fa:3f:43:89:a0:ce: 53:bc:4c:c1:a4:ea:de:b1:34:3e:de:03:39:15:a3: 35:58:20:ec:fa:29:22:fe:91:69:fb:9d:91:a8:a7: e6:db:6e:2c:53:bf:5d:39:58:e0:89:f7:68:85:fd: 71:0e:48:d7:c4:d3:18:65:49:45:0e:13:33:d4:82: 43:ab:5a:6c:45:09:cd:1f:14:e9:26:41:2b:65:e2: 51:f8:b3:78:a3:8c:dd:3e:0c:53:c0:54:44:28:cc: 74:95:f9:29:ef:95:d3:05:23:88:f8:36:d3:43:3f: 24:68:48:9b:ad:bd:d5:73:4e:d1:3a:02:4c:31:d0: 42:bc:e9:d0:78:ae:4f:40:c7:b0:3b:a2:ee:e3:7e: ff:3a:76:ba:0c:16:8f:f9:3d:14:4c:9a:c9:1f:2d: d3:ca:c9:1e:e1:ab:cb:45:f0:85:13:e4:11:fa:ca: 3c:fe:46:19:da:4a:62:08:3f:e6:2c:15:5d:e1:cc: 15:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3A:FF:E5:47:4A:1D:CD:5A:CD:80:CD:F8:E3:56:5E:D8:77:28:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/d024c0fe-f70d-3486-bd2c-a80515d83f4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl X509v3 Authority Key Identifier: keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer sbgp-ipAddrBlock: critical IPv4: 170.200.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:72:9d:13:e3:f9:ba:dd:4a:8c:a0:f5:3e:cd:69:c8:40:07: 0a:85:5f:1c:01:02:38:43:e3:cd:7e:67:ec:65:99:47:2d:54: 22:1a:4b:3b:bc:70:79:11:8c:8e:b8:84:03:3b:da:25:81:60: 35:5e:56:45:3f:eb:84:61:94:6e:4a:92:8a:34:d3:37:39:ef: 17:fa:bf:6e:c6:c0:c1:21:62:9a:2f:27:f1:f8:54:fa:e6:d0: 7f:36:e7:5f:d1:1a:20:30:d7:b8:af:73:91:d3:70:17:6f:60: 46:aa:82:59:38:6d:9c:23:82:97:f6:67:86:84:5d:ce:0b:4d: 82:22:27:9b:95:66:27:58:2b:ac:35:53:f3:db:b7:fa:73:42: 44:8f:58:48:3b:f7:87:35:59:ee:cc:15:21:3f:c1:35:0f:17: bb:aa:bc:ad:30:c2:ef:98:57:da:c4:28:66:7a:c1:77:72:50: 9d:c5:ee:4c:5a:73:fb:72:50:df:7d:5d:ad:a4:1d:8f:f6:73: 94:29:22:95:b4:8c:82:d2:c5:b4:f7:49:17:06:d1:f3:9a:8f: a4:4e:7b:46:e0:1c:35:be:81:48:4b:3f:2d:ee:0e:5c:f4:b7: 4a:1d:0c:01:ea:e0:bc:86:cd:23:93:bf:59:1e:d3:ce:2c:6b: 2f:67:ea:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUGir20DiE81xO0lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk MGJkMB4XDTI0MDIyNzAyMDAyNloXDTI0MDUyNzAxMDAyNlowLzEtMCsGA1UEAxMk OGQ4ZGI3NDMtMzUyMy00MTAxLWJiYmItMGE1NzIzYjdmMmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn8L4yXIRxxU53lA0471VC2//7+Hn6kIZtj6 JKtUX8zWC/nHI2Y+fIZaXOxt4V6xUrCZ8XNo3gAX3eEIqh72rWLVAOX6P0OJoM5T vEzBpOresTQ+3gM5FaM1WCDs+iki/pFp+52RqKfm224sU79dOVjgifdohf1xDkjX xNMYZUlFDhMz1IJDq1psRQnNHxTpJkErZeJR+LN4o4zdPgxTwFREKMx0lfkp75XT BSOI+DbTQz8kaEibrb3Vc07ROgJMMdBCvOnQeK5PQMewO6Lu437/Ona6DBaP+T0U TJrJHy3Tyske4avLRfCFE+QR+so8/kYZ2kpiCD/mLBVd4cwVxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJc6/+VHSh3NWs2AzfjjVl7YdyhEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvZDAyNGMwZmUtZjcwZC0z NDg2LWJkMmMtYTgwNTE1ZDgzZjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqsi8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChynRPj+brdSoyg9T7NachABwqFXxwBAjhD481+Z+xlmUctVCIaSzu8 cHkRjI64hAM72iWBYDVeVkU/64RhlG5Kkoo00zc57xf6v27GwMEhYpovJ/H4VPrm 0H8251/RGiAw17ivc5HTcBdvYEaqglk4bZwjgpf2Z4aEXc4LTYIiJ5uVZidYK6w1 U/Pbt/pzQkSPWEg794c1We7MFSE/wTUPF7uqvK0wwu+YV9rEKGZ6wXdyUJ3F7kxa c/tyUN99Xa2kHY/2c5QpIpW0jILSxbT3SRcG0fOaj6ROe0bgHDW+gUhLPy3uDlz0 t0odDAHq4LyGzSOTv1ke084say9n6kk= -----END CERTIFICATE-----Generated at Thu May 2 14:57:37 2024 by rpki-client on console-fra.rpki-client.org