$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/5acde123-8b2a-32d5-8223-e6b8a8424390.roa File: 5acde123-8b2a-32d5-8223-e6b8a8424390.roa (raw, json) Hash identifier: Wfg0AboP4883DB9E+Ifi3zm3ZxbaoVaCkSXBcTUKnk4= Subject key identifier: C5:FF:0F:5E:4C:39:77:13:F1:98:2A:49:91:D9:9F:69:B5:C7:01:DE Certificate issuer: /CN=a05c180d-6db0-4307-bc39-264e11bb765c Certificate serial: 010D0C9F43285844EA9FEEC39D9BE49CC3DD64C0 Authority key identifier: FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/5acde123-8b2a-32d5-8223-e6b8a8424390.roa Signing time: Sat 17 Feb 2024 02:00:27 +0000 ROA not before: Sat 17 Feb 2024 02:00:27 +0000 ROA not after: Fri 17 May 2024 01:00:27 +0000 asID: 27768 IP address blocks: 66.249.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Apr 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:ea:9f:ee:c3:9d:9b:e4:9c:c3:dd:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a05c180d-6db0-4307-bc39-264e11bb765c Validity Not Before: Feb 17 02:00:27 2024 GMT Not After : May 17 01:00:27 2024 GMT Subject: CN=38b444fe-c224-4218-9388-e7e8e7d31bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1e:6f:4f:bc:fb:2e:1c:e9:9e:6c:dd:2f:29: 6b:aa:17:b8:95:dd:44:e0:2c:fa:5b:c3:16:ae:18: 39:f3:52:a3:75:54:0e:94:11:a3:12:d5:46:31:45: 8e:ab:c2:61:e0:6a:33:7c:53:c1:ce:35:58:91:a2: a1:f8:ed:8d:d9:7c:3b:bb:03:4a:5d:ea:fd:d2:6d: 86:11:21:78:15:54:0a:b1:d7:9a:1b:54:63:cc:71: 46:cb:31:88:4b:3f:36:5f:5a:93:41:bd:f4:2a:4b: e8:b4:d8:de:d9:cf:1d:f9:e1:90:2f:d6:d2:da:4b: 2b:9f:f7:f1:59:b3:8e:52:18:03:12:12:f9:cb:02: e9:47:5c:91:26:cc:ed:ec:4b:4e:f6:92:7a:7f:5f: 51:54:e9:42:2e:88:29:e2:9a:3a:06:1b:b2:b5:e4: 01:55:bb:b7:0d:ab:dc:e2:0a:60:2c:f2:6b:5e:17: 4a:32:f6:78:5e:e1:99:9e:87:20:ea:0e:46:d6:df: 1a:e8:c1:6f:44:a4:33:13:2a:1b:4a:0d:ab:cd:f1: 7c:cd:64:02:66:87:d1:95:2c:ae:f1:fa:79:93:0b: f7:a1:b4:f4:51:7d:44:26:e4:1c:5e:ef:c2:7c:0e: f1:78:0b:49:8d:ff:87:ba:41:51:23:02:c9:29:e0: 92:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FF:0F:5E:4C:39:77:13:F1:98:2A:49:91:D9:9F:69:B5:C7:01:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/5acde123-8b2a-32d5-8223-e6b8a8424390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl X509v3 Authority Key Identifier: keyid:FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer sbgp-ipAddrBlock: critical IPv4: 66.249.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:a4:8c:e9:23:19:d6:e0:0c:00:f5:19:56:6b:59:4b:a1:17: 8b:ca:ca:c6:3a:5c:f2:5f:e7:ce:d9:20:e7:06:b3:7f:c7:64: c8:d5:be:9d:4a:4e:4f:b3:40:79:b5:0b:0e:a0:13:c3:75:b3: 7b:66:b4:1b:7a:4f:56:94:ca:60:d2:20:7a:59:72:b8:ec:4c: e9:7a:de:13:16:64:68:5f:df:1d:3b:aa:2c:76:ab:7d:96:50: 26:7b:f7:96:7f:82:fb:9e:c3:ba:52:a8:82:5e:7d:28:04:14: 1a:1b:ba:3b:ec:d6:0a:c2:7e:21:c8:e8:d9:e1:c1:c4:d3:57: fd:fb:c3:c8:43:23:f9:1a:9b:c9:28:4e:1d:ff:f5:d4:d3:70: f5:e9:1c:11:1e:0f:52:dc:85:cf:72:1b:c0:2a:b9:80:ac:57: 31:87:81:8a:e2:38:a6:a6:e4:49:a3:20:4f:f3:a4:1c:c3:4f: 70:25:11:ea:11:7e:99:46:fb:74:a8:87:0c:b8:34:a9:cd:30: f8:d2:19:35:e0:29:c0:eb:17:a4:ae:e6:e4:60:6c:f8:fb:ad: e0:9a:5f:0d:f5:91:01:40:5c:07:84:05:e2:69:73:9b:0f:15: 55:0d:e4:a8:d4:d7:8d:d0:8d:55:4e:7d:1c:90:f0:7c:15:64: f5:e9:28:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETqn+7DnZvknMPdZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA1YzE4MGQtNmRiMC00MzA3LWJjMzktMjY0ZTExYmI3 NjVjMB4XDTI0MDIxNzAyMDAyN1oXDTI0MDUxNzAxMDAyN1owLzEtMCsGA1UEAxMk MzhiNDQ0ZmUtYzIyNC00MjE4LTkzODgtZTdlOGU3ZDMxYmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB5vT7z7LhzpnmzdLylrqhe4ld1E4Cz6W8MW rhg581KjdVQOlBGjEtVGMUWOq8Jh4GozfFPBzjVYkaKh+O2N2Xw7uwNKXer90m2G ESF4FVQKsdeaG1RjzHFGyzGISz82X1qTQb30KkvotNje2c8d+eGQL9bS2ksrn/fx WbOOUhgDEhL5ywLpR1yRJszt7EtO9pJ6f19RVOlCLogp4po6BhuyteQBVbu3Davc 4gpgLPJrXhdKMvZ4XuGZnocg6g5G1t8a6MFvRKQzEyobSg2rzfF8zWQCZofRlSyu 8fp5kwv3obT0UX1EJuQcXu/CfA7xeAtJjf+HukFRIwLJKeCSgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMX/D15MOXcT8ZgqSZHZn2m1xwHeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMDVj MTgwZC02ZGIwLTQzMDctYmMzOS0yNjRlMTFiYjc2NWMvNWFjZGUxMjMtOGIyYS0z MmQ1LTgyMjMtZTZiOGE4NDI0MzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTA1YzE4MGQtNmRiMC00MzA3LWJj MzktMjY0ZTExYmI3NjVjL2EwNWMxODBkLTZkYjAtNDMwNy1iYzM5LTI2NGUxMWJi NzY1Yy5jcmwwHwYDVR0jBBgwFoAU+pb0gpyNY4Nb+8DqdIVg9ekxZVgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMDVjMTgwZC02ZGIwLTQzMDctYmMzOS0yNjRl MTFiYjc2NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQvncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6kjOkjGdbgDAD1GVZrWUuhF4vKysY6XPJf587ZIOcGs3/HZMjVvp1K Tk+zQHm1Cw6gE8N1s3tmtBt6T1aUymDSIHpZcrjsTOl63hMWZGhf3x07qix2q32W UCZ795Z/gvuew7pSqIJefSgEFBobujvs1grCfiHI6NnhwcTTV/37w8hDI/kam8ko Th3/9dTTcPXpHBEeD1Lchc9yG8AquYCsVzGHgYriOKam5EmjIE/zpBzDT3AlEeoR fplG+3Sohwy4NKnNMPjSGTXgKcDrF6Su5uRgbPj7reCaXw31kQFAXAeEBeJpc5sP FVUN5KjU143QjVVOfRyQ8HwVZPXpKA0= -----END CERTIFICATE-----Generated at Sun Apr 28 16:15:39 2024 by rpki-client on console-fra.rpki-client.org