$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3ffbb94c-c2ac-3005-bb52-81e2ce62be16.roa File: 3ffbb94c-c2ac-3005-bb52-81e2ce62be16.roa (raw, json) Hash identifier: qgPYGlKUkG+I3aWXfmCPGJPCu8NFEcPxJmfWvpqwfhE= Subject key identifier: E8:95:F7:BC:E5:BD:0E:A4:48:E3:19:8A:1A:C8:25:A8:BA:65:BB:E6 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F43285844EED007D6244A309ABFBCB770 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3ffbb94c-c2ac-3005-bb52-81e2ce62be16.roa Signing time: Sun 18 Feb 2024 14:00:30 +0000 ROA not before: Sun 18 Feb 2024 14:00:30 +0000 ROA not after: Sat 18 May 2024 13:00:30 +0000 asID: 11404 IP address blocks: 204.195.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:ee:d0:07:d6:24:4a:30:9a:bf:bc:b7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Feb 18 14:00:30 2024 GMT Not After : May 18 13:00:30 2024 GMT Subject: CN=365debdb-3735-4212-b6a4-d94757af889a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:07:9e:a3:cc:62:e0:7d:f2:4f:93:76:46:f3: 3e:67:6d:21:25:44:51:0f:a4:5e:19:a4:41:62:0b: 41:e9:85:2e:36:5c:a8:94:67:f7:98:19:b5:b9:cf: d6:01:7d:25:9e:29:5e:63:4e:d7:33:94:df:0b:9a: 09:2f:19:7f:1e:9b:ae:dd:87:09:12:62:16:1c:c9: 73:5a:39:ca:63:83:3c:d9:bc:a2:8c:ab:fa:38:98: 7d:86:5e:3b:ab:eb:0a:94:59:bb:ba:fb:33:b1:80: d0:c0:b7:7f:8d:bb:31:c7:57:3e:60:da:1b:60:59: a9:ba:a1:79:ef:45:99:42:05:ba:0a:21:0f:75:2e: a0:a2:e0:46:3e:ac:d2:6a:a0:fc:16:69:dc:59:0a: 05:4a:c0:39:3a:1e:e8:87:26:46:d6:28:2f:28:24: a6:4e:1b:c4:94:a1:a3:fd:df:9a:2a:c0:a6:ba:5d: dc:dd:08:48:2d:bc:98:b4:d0:32:2e:2d:1c:3c:82: 6b:33:38:53:dc:35:4e:a4:b2:c7:59:ad:a0:42:23: 5d:d8:4a:51:e8:dc:61:f3:be:fd:d0:f4:82:90:a3: 5e:1b:13:46:84:5e:af:00:60:67:52:76:dc:5e:71: 91:b1:5d:f1:06:2f:fc:21:7c:ac:1d:02:3a:c0:91: 38:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:95:F7:BC:E5:BD:0E:A4:48:E3:19:8A:1A:C8:25:A8:BA:65:BB:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3ffbb94c-c2ac-3005-bb52-81e2ce62be16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 204.195.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:12:90:17:c5:70:57:d7:a8:90:8f:b4:5b:b2:54:ea:42:c4: 2a:44:4d:97:bf:f0:c7:53:0b:72:a9:53:d1:19:d5:2f:e8:4b: 5c:bf:5b:0b:95:60:70:27:7d:d0:f2:60:3b:6d:0c:1d:8b:c2: b7:63:96:29:bc:f5:9e:66:35:bc:d4:a5:46:56:8d:7f:69:0d: 7f:92:82:ee:ca:01:27:bb:ba:f9:3f:b9:33:68:b5:3f:a2:19: 4e:d2:29:ab:a9:f4:ac:6a:47:21:14:92:a1:01:1c:d0:ca:5c: d9:32:bd:3f:cc:ed:07:52:84:dc:ff:d0:a8:32:df:50:18:64: 67:42:7d:cb:92:fc:37:18:e0:c6:de:a3:16:ce:4c:a4:12:30: 8b:4d:f9:82:97:73:e4:53:8e:18:04:85:c8:4f:66:5e:4c:8f: a1:88:ae:06:27:f6:1f:d2:29:80:ee:8a:e0:50:91:e0:0c:27: d3:4c:c9:f4:b3:b1:7b:d6:05:f3:bc:9d:c4:65:84:0c:25:27: 16:51:bf:88:df:33:44:04:5c:4a:87:fd:41:98:5a:27:b3:3f: 8b:97:bf:b4:9e:b6:b2:59:39:cb:d3:c1:4f:28:c6:11:31:34: 35:37:2e:5b:19:d8:cf:7f:38:a9:70:06:8c:2a:00:4a:d2:d7: f0:30:4e:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETu0AfWJEowmr+8t3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI0MDIxODE0MDAzMFoXDTI0MDUxODEzMDAzMFowLzEtMCsGA1UEAxMk MzY1ZGViZGItMzczNS00MjEyLWI2YTQtZDk0NzU3YWY4ODlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAeeo8xi4H3yT5N2RvM+Z20hJURRD6ReGaRB YgtB6YUuNlyolGf3mBm1uc/WAX0lnileY07XM5TfC5oJLxl/Hpuu3YcJEmIWHMlz WjnKY4M82byijKv6OJh9hl47q+sKlFm7uvszsYDQwLd/jbsxx1c+YNobYFmpuqF5 70WZQgW6CiEPdS6gouBGPqzSaqD8FmncWQoFSsA5Oh7ohyZG1igvKCSmThvElKGj /d+aKsCmul3c3QhILbyYtNAyLi0cPIJrMzhT3DVOpLLHWa2gQiNd2EpR6Nxh8779 0PSCkKNeGxNGhF6vAGBnUnbcXnGRsV3xBi/8IXysHQI6wJE4FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiV97zlvQ6kSOMZihrIJai6ZbvmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvM2ZmYmI5NGMtYzJhYy0z MDA1LWJiNTItODFlMmNlNjJiZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzMMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcSkBfFcFfXqJCPtFuyVOpCxCpETZe/8MdTC3KpU9EZ1S/oS1y/WwuV YHAnfdDyYDttDB2Lwrdjlim89Z5mNbzUpUZWjX9pDX+Sgu7KASe7uvk/uTNotT+i GU7SKaup9KxqRyEUkqEBHNDKXNkyvT/M7QdShNz/0Kgy31AYZGdCfcuS/DcY4Mbe oxbOTKQSMItN+YKXc+RTjhgEhchPZl5Mj6GIrgYn9h/SKYDuiuBQkeAMJ9NMyfSz sXvWBfO8ncRlhAwlJxZRv4jfM0QEXEqH/UGYWiezP4uXv7SetrJZOcvTwU8oxhEx NDU3LlsZ2M9/OKlwBowqAErS1/AwTmk= -----END CERTIFICATE-----Generated at Thu May 2 14:57:52 2024 by rpki-client on console-fra.rpki-client.org