$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/42017b9c-7ea7-3f9a-8686-04d01900fd20.roa File: 42017b9c-7ea7-3f9a-8686-04d01900fd20.roa (raw, json) Hash identifier: 0xgd4XlEQT5w6a59hueCHdtblyc4BVIadnW0NqHuFqw= Subject key identifier: 95:B4:6E:92:EC:7F:A0:8F:45:11:07:78:BB:3C:5B:96:56:5D:B8:20 Certificate issuer: /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Certificate serial: 010D0C9F43285845A428CF4C4B03C46F70683900 Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/42017b9c-7ea7-3f9a-8686-04d01900fd20.roa Signing time: Tue 23 Apr 2024 13:00:34 +0000 ROA not before: Tue 23 Apr 2024 13:00:34 +0000 ROA not after: Mon 22 Jul 2024 13:00:34 +0000 asID: 19905 IP address blocks: 155.254.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a4:28:cf:4c:4b:03:c4:6f:70:68:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Validity Not Before: Apr 23 13:00:34 2024 GMT Not After : Jul 22 13:00:34 2024 GMT Subject: CN=4c186790-a863-436b-a5c6-572efeeba54e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:40:c8:b4:e2:95:75:d2:19:c0:0a:42:8c:bf: b3:f5:e6:31:d5:40:1b:7f:e1:f9:4c:22:76:06:d3: 80:d3:82:2a:9e:2b:82:c0:c6:4d:b1:e6:62:d6:16: 09:01:f5:2b:5c:51:da:b8:60:43:cf:f5:a3:9a:dd: 9c:8e:e0:3b:ac:b1:5d:c0:97:c3:75:e5:3f:09:4c: f5:6a:3d:d8:6f:1c:fe:bc:52:3c:c3:7f:5b:74:d3: 28:17:24:f0:08:34:2b:c9:b0:b0:08:0c:5a:f9:49: c9:96:e7:85:74:f7:c3:8e:d7:b9:a1:81:61:2e:60: 85:f5:0a:c4:ba:49:c8:06:7f:39:16:74:0a:9f:39: e0:99:3e:7b:ef:46:81:4d:ff:e1:b4:3f:68:52:e4: 3d:ce:96:c2:7a:6c:25:af:c1:69:1a:51:66:06:a1: f6:63:3a:94:c3:70:51:b0:f5:14:c8:60:cf:b4:bf: ce:bd:73:c2:85:e1:53:00:e3:d9:3a:b6:62:94:43: f6:0e:62:a7:81:bf:12:12:3e:f5:6f:ef:06:ae:d1: 3a:6e:b8:e4:98:a5:af:35:c8:c8:44:d1:ad:d2:04: 06:60:ad:ab:a1:62:41:be:6f:19:68:32:7b:b9:8a: 40:cc:06:79:92:f3:33:9e:76:b9:db:c4:61:bf:8c: f3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B4:6E:92:EC:7F:A0:8F:45:11:07:78:BB:3C:5B:96:56:5D:B8:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/42017b9c-7ea7-3f9a-8686-04d01900fd20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl X509v3 Authority Key Identifier: keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer sbgp-ipAddrBlock: critical IPv4: 155.254.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:64:02:c2:83:2a:bf:6c:53:c8:b0:83:84:81:39:10:21:52: db:dc:e0:54:c6:bf:a4:3f:59:55:3b:97:43:5b:21:0b:41:cd: b1:2a:18:97:5c:69:fd:c6:b8:a8:23:90:de:08:2d:c3:c7:86: cd:45:55:43:a1:c8:f8:ec:e5:3f:8a:e3:7d:73:2c:73:7c:3b: 78:98:81:f4:bb:d2:1f:fd:46:73:fb:05:7c:7a:74:4f:d1:41: d8:fa:34:77:d8:6c:15:7e:fd:ca:ec:54:a1:9d:69:d2:51:97: c9:34:82:e1:2c:2f:c3:95:bb:0a:79:c5:44:a9:53:74:3f:dc: cd:59:cd:35:6a:ea:cb:44:03:d9:8e:55:be:a3:94:36:86:4e: c1:e7:37:b3:92:fe:23:60:e8:df:5e:e6:e9:12:5a:e7:73:50: b4:0a:fa:f1:a4:1a:6b:0b:68:f7:0d:b1:40:db:ac:a1:29:21: a8:66:72:1c:3e:60:ec:5d:41:e7:b5:0d:9e:7b:88:0b:ff:a4: 28:a5:6e:88:e6:5a:ac:42:53:20:2f:2c:02:9b:cc:db:e7:c4: 14:29:98:c7:41:58:c2:34:3b:b3:5e:9d:11:27:d2:d2:e1:1a: a4:46:4c:1f:8f:34:2e:41:17:ab:93:25:d4:68:6f:fc:6f:77: e0:08:6b:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWkKM9MSwPEb3BoOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0 OTQwMB4XDTI0MDQyMzEzMDAzNFoXDTI0MDcyMjEzMDAzNFowLzEtMCsGA1UEAxMk NGMxODY3OTAtYTg2My00MzZiLWE1YzYtNTcyZWZlZWJhNTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikDItOKVddIZwApCjL+z9eYx1UAbf+H5TCJ2 BtOA04IqniuCwMZNseZi1hYJAfUrXFHauGBDz/Wjmt2cjuA7rLFdwJfDdeU/CUz1 aj3Ybxz+vFI8w39bdNMoFyTwCDQrybCwCAxa+UnJlueFdPfDjte5oYFhLmCF9QrE uknIBn85FnQKnzngmT5770aBTf/htD9oUuQ9zpbCemwlr8FpGlFmBqH2YzqUw3BR sPUUyGDPtL/OvXPCheFTAOPZOrZilEP2DmKngb8SEj71b+8GrtE6brjkmKWvNcjI RNGt0gQGYK2roWJBvm8ZaDJ7uYpAzAZ5kvMznna528Rhv4zzXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJW0bpLsf6CPRREHeLs8W5ZWXbggMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUy OTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvNDIwMTdiOWMtN2VhNy0z ZjlhLTg2ODYtMDRkMDE5MDBmZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTVlMjkyODktNmYxYy00YzJmLTg0 ZjQtYzk0NGU5ZTU0OTQwLzk1ZTI5Mjg5LTZmMWMtNGMyZi04NGY0LWM5NDRlOWU1 NDk0MC5jcmwwHwYDVR0jBBgwFoAUTbpFqqu5h2Ol5m+zCcVulzCUmp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0 ZTllNTQ5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm/6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxkAsKDKr9sU8iwg4SBORAhUtvc4FTGv6Q/WVU7l0NbIQtBzbEqGJdc af3GuKgjkN4ILcPHhs1FVUOhyPjs5T+K431zLHN8O3iYgfS70h/9RnP7BXx6dE/R Qdj6NHfYbBV+/crsVKGdadJRl8k0guEsL8OVuwp5xUSpU3Q/3M1ZzTVq6stEA9mO Vb6jlDaGTsHnN7OS/iNg6N9e5ukSWudzULQK+vGkGmsLaPcNsUDbrKEpIahmchw+ YOxdQee1DZ57iAv/pCilbojmWqxCUyAvLAKbzNvnxBQpmMdBWMI0O7NenREn0tLh GqRGTB+PNC5BF6uTJdRob/xvd+AIa/Y= -----END CERTIFICATE-----Generated at Thu May 2 21:10:59 2024 by rpki-client on console-fra.rpki-client.org