$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8e99d649-0b3a-393d-a5cd-c7971cabfb82.roa File: 8e99d649-0b3a-393d-a5cd-c7971cabfb82.roa (raw, json) Hash identifier: IBkFmVWgZHFsKdIAiAf9csEt7tAhCt99Ons1Vtosqlg= Subject key identifier: F2:3E:7C:97:3F:09:F3:11:B7:B3:26:BB:F1:CE:E8:04:1E:DE:25:54 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F43285844EED001A147E32103D633CC80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8e99d649-0b3a-393d-a5cd-c7971cabfb82.roa Signing time: Sun 18 Feb 2024 14:00:30 +0000 ROA not before: Sun 18 Feb 2024 14:00:30 +0000 ROA not after: Sat 18 May 2024 13:00:30 +0000 asID: 11404 IP address blocks: 152.44.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:ee:d0:01:a1:47:e3:21:03:d6:33:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Feb 18 14:00:30 2024 GMT Not After : May 18 13:00:30 2024 GMT Subject: CN=4d7a91e7-5fd1-436e-b4c4-cfc5e8800bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c6:79:e9:82:52:4a:17:31:44:3c:d5:be:22: 3d:11:f4:d7:3a:0a:bd:e4:b5:3c:fc:d5:a8:42:9b: 33:b7:9e:d5:51:6f:7f:c9:49:7e:95:53:74:0d:1d: 68:a3:12:6d:a1:0a:8a:2b:1f:f7:9b:9b:61:85:0c: f1:de:30:b5:3e:14:14:61:99:df:f6:89:8c:17:45: 77:19:ac:80:98:a3:cf:07:d7:1a:bd:15:0f:8f:d1: d3:7d:4a:02:d2:08:47:b8:af:77:fc:00:5b:33:cf: 74:e7:ee:0a:1b:27:a4:61:ca:70:d0:d0:45:ef:41: 72:88:a5:79:a3:47:0c:d4:0b:66:8a:5b:87:02:de: f0:c4:5d:c8:01:07:ff:fc:4f:60:1b:76:fe:98:dd: 6d:1c:b1:01:9f:ee:f3:c6:e1:ba:94:83:19:f8:8a: d6:9a:c1:e4:df:0a:e1:dc:b3:a8:6b:c8:c1:45:61: 2a:9f:7c:9f:74:bf:9d:4e:31:58:13:df:a6:f3:ae: 4e:ab:33:d1:a2:14:05:98:0e:20:be:c6:fa:f8:e6: c5:16:b9:41:50:5a:39:31:26:e8:f7:a7:ba:4c:88: 7b:7b:23:be:a6:9a:4f:68:cd:04:cf:68:0e:19:55: e9:4e:cf:dc:c6:d4:04:a7:fe:68:c4:3e:42:59:cc: 25:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3E:7C:97:3F:09:F3:11:B7:B3:26:BB:F1:CE:E8:04:1E:DE:25:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8e99d649-0b3a-393d-a5cd-c7971cabfb82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 152.44.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:2a:b9:e8:dd:a5:c3:37:41:ee:2a:e9:8e:05:46:07:1b:5a: a3:2f:8c:f1:3f:20:e7:9b:c0:a7:93:2a:d7:06:89:4c:52:d2: 29:b5:5d:b0:02:02:f8:8e:bc:4e:89:d4:73:41:f1:d2:3c:b1: 0f:a7:fa:58:30:fa:53:39:59:6c:72:c4:1f:34:21:6b:b4:fd: 87:f1:54:9c:f3:3d:92:2b:a0:4d:73:9d:11:c4:95:22:c6:d4: 1c:82:cf:af:d3:de:cc:11:50:8e:f3:42:43:d7:d6:47:44:b8: 16:59:e4:fb:ae:42:9f:61:06:d3:08:41:a3:23:c2:57:9f:b8: 33:ec:3f:2f:c8:ef:37:49:d2:43:2b:0e:fe:da:ab:ae:2f:8c: ca:ef:f7:da:aa:3d:92:c2:36:40:90:51:99:c0:61:52:25:c5: 0a:a8:3a:51:c1:d8:91:8c:5b:d4:c6:53:30:04:33:12:a9:da: 72:08:1c:9c:bc:5c:e4:d9:bf:b9:83:0c:01:92:34:15:4b:d7: 67:97:bf:f2:89:da:5d:7b:ab:e9:56:89:cb:6b:a7:79:03:26: ff:79:20:4e:ea:e5:17:4c:84:ba:53:f3:51:9e:80:db:45:e3: a9:ac:a4:fd:30:93:42:87:46:16:b9:35:01:45:30:c2:4d:72: 15:c6:c6:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETu0AGhR+MhA9YzzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI0MDIxODE0MDAzMFoXDTI0MDUxODEzMDAzMFowLzEtMCsGA1UEAxMk NGQ3YTkxZTctNWZkMS00MzZlLWI0YzQtY2ZjNWU4ODAwYmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcZ56YJSShcxRDzVviI9EfTXOgq95LU8/NWo Qpszt57VUW9/yUl+lVN0DR1ooxJtoQqKKx/3m5thhQzx3jC1PhQUYZnf9omMF0V3 GayAmKPPB9cavRUPj9HTfUoC0ghHuK93/ABbM8905+4KGyekYcpw0NBF70FyiKV5 o0cM1AtmiluHAt7wxF3IAQf//E9gG3b+mN1tHLEBn+7zxuG6lIMZ+IrWmsHk3wrh 3LOoa8jBRWEqn3yfdL+dTjFYE9+m865OqzPRohQFmA4gvsb6+ObFFrlBUFo5MSbo 96e6TIh7eyO+pppPaM0Ez2gOGVXpTs/cxtQEp/5oxD5CWcwlMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPI+fJc/CfMRt7Mmu/HO6AQe3iVUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOGU5OWQ2NDktMGIzYS0z OTNkLWE1Y2QtYzc5NzFjYWJmYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmCyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQquejdpcM3Qe4q6Y4FRgcbWqMvjPE/IOebwKeTKtcGiUxS0im1XbAC AviOvE6J1HNB8dI8sQ+n+lgw+lM5WWxyxB80IWu0/YfxVJzzPZIroE1znRHElSLG 1ByCz6/T3swRUI7zQkPX1kdEuBZZ5PuuQp9hBtMIQaMjwlefuDPsPy/I7zdJ0kMr Dv7aq64vjMrv99qqPZLCNkCQUZnAYVIlxQqoOlHB2JGMW9TGUzAEMxKp2nIIHJy8 XOTZv7mDDAGSNBVL12eXv/KJ2l17q+lWictrp3kDJv95IE7q5RdMhLpT81GegNtF 46mspP0wk0KHRha5NQFFMMJNchXGxkY= -----END CERTIFICATE-----Generated at Thu May 2 14:57:52 2024 by rpki-client on console-fra.rpki-client.org