$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/940897aa-37fe-3fcf-805a-63ddb933a32a.roa File: 940897aa-37fe-3fcf-805a-63ddb933a32a.roa (raw, json) Hash identifier: vYpg02asyqYWaMI0P6Oxy2xPaCA5RGBK8VVmTSMzqvA= Subject key identifier: 1D:63:F9:40:4C:F9:23:5D:A2:40:A4:EC:D4:13:E4:71:14:83:30:7C Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F43285844EED0056C2CF483A57BEA3100 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/940897aa-37fe-3fcf-805a-63ddb933a32a.roa Signing time: Sun 18 Feb 2024 14:00:30 +0000 ROA not before: Sun 18 Feb 2024 14:00:30 +0000 ROA not after: Sat 18 May 2024 13:00:30 +0000 asID: 54858 IP address blocks: 208.52.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:ee:d0:05:6c:2c:f4:83:a5:7b:ea:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Feb 18 14:00:30 2024 GMT Not After : May 18 13:00:30 2024 GMT Subject: CN=77b3594c-cc06-4de3-bfa4-75015a2e5247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ee:65:dd:69:0f:db:e2:b9:97:02:0e:91:dd: bf:70:c7:bb:3b:f2:2e:00:d2:2a:4a:d3:09:5b:c4: 00:f8:4f:86:bc:06:23:a4:21:20:30:70:c8:00:17: a8:7b:ff:cb:9f:ae:be:1e:3c:4e:58:ca:a9:60:37: 40:14:2a:e5:44:08:9f:cb:c0:a9:72:09:29:1b:60: 05:86:d2:ac:9c:f5:a8:20:2a:df:cb:9a:51:19:ca: fe:35:73:f6:88:39:9b:67:95:77:5d:e1:7c:36:43: 6d:b6:97:1a:11:74:42:a8:36:42:a5:71:52:4b:18: c4:41:79:4d:44:56:67:ff:73:89:c1:4a:89:7f:4c: 35:9f:f0:f0:f5:52:15:b3:e7:97:80:bf:5d:32:c8: cc:b2:5f:d2:b4:fc:13:80:3c:c4:fa:af:ad:b7:11: 88:a5:8e:20:97:ac:8e:4e:9a:d5:ff:1e:01:1f:ff: 78:72:75:1b:51:72:99:85:fb:53:52:66:95:80:62: 0b:67:bd:02:f3:61:ee:1d:84:83:5c:50:35:64:12: d8:8b:6f:94:e6:bb:fc:b4:37:7b:16:3f:7b:c8:14: 94:ad:35:db:c0:b6:92:6b:ea:cc:d2:ed:26:7c:77: 63:49:e5:97:be:b5:9a:3e:65:17:6c:3e:bb:3e:4d: ca:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:63:F9:40:4C:F9:23:5D:A2:40:A4:EC:D4:13:E4:71:14:83:30:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/940897aa-37fe-3fcf-805a-63ddb933a32a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 208.52.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:b5:c8:0d:d1:b5:7b:79:8a:49:b9:ea:2a:3c:cd:5b:7d:5c: c6:c2:4b:86:ce:c4:b8:f3:d4:3b:30:03:3f:3c:a9:b4:ab:07: 8d:47:63:45:88:cc:bb:70:bd:4d:1a:e5:55:96:a9:ae:3b:3c: 28:87:3d:1d:14:63:b8:99:67:23:e4:b5:22:0a:65:25:04:c2: 8a:d6:d5:ad:a7:77:e9:d8:fe:59:79:a2:cf:a1:18:c2:c6:91: 5d:80:bf:c1:71:8e:41:68:03:0e:00:f8:d0:19:49:f7:4d:93: a6:b5:97:6d:ae:98:6e:03:41:b5:2d:82:90:fc:9f:62:4a:f9: c9:69:ac:40:68:cf:63:91:4e:2f:75:6a:7a:4c:07:fb:2d:0e: f6:48:8c:b9:e0:77:e1:ad:27:41:f1:af:a8:1f:19:d0:55:6e: 3a:81:48:b6:8b:76:44:cb:2d:ff:13:2a:c6:e2:be:70:bd:a2: 55:9d:e1:8f:f5:07:8b:72:05:97:36:19:2c:d0:55:ec:b8:d8: ac:4b:da:84:65:24:b2:ce:07:69:dd:70:1c:b4:f5:c0:87:97: 67:ed:c7:18:3a:3f:38:27:0a:31:7e:e0:23:9f:80:e4:ad:05: 8d:bc:2b:62:75:51:69:ee:f9:eb:28:32:45:92:eb:78:96:60: 1d:e6:2a:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETu0AVsLPSDpXvqMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI0MDIxODE0MDAzMFoXDTI0MDUxODEzMDAzMFowLzEtMCsGA1UEAxMk NzdiMzU5NGMtY2MwNi00ZGUzLWJmYTQtNzUwMTVhMmU1MjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO5l3WkP2+K5lwIOkd2/cMe7O/IuANIqStMJ W8QA+E+GvAYjpCEgMHDIABeoe//Ln66+HjxOWMqpYDdAFCrlRAify8CpcgkpG2AF htKsnPWoICrfy5pRGcr+NXP2iDmbZ5V3XeF8NkNttpcaEXRCqDZCpXFSSxjEQXlN RFZn/3OJwUqJf0w1n/Dw9VIVs+eXgL9dMsjMsl/StPwTgDzE+q+ttxGIpY4gl6yO TprV/x4BH/94cnUbUXKZhftTUmaVgGILZ70C82HuHYSDXFA1ZBLYi2+U5rv8tDd7 Fj97yBSUrTXbwLaSa+rM0u0mfHdjSeWXvrWaPmUXbD67Pk3KGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1j+UBM+SNdokCk7NQT5HEUgzB8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOTQwODk3YWEtMzdmZS0z ZmNmLTgwNWEtNjNkZGI5MzNhMzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0DQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGa1yA3RtXt5ikm56io8zVt9XMbCS4bOxLjz1DswAz88qbSrB41HY0WI zLtwvU0a5VWWqa47PCiHPR0UY7iZZyPktSIKZSUEworW1a2nd+nY/ll5os+hGMLG kV2Av8FxjkFoAw4A+NAZSfdNk6a1l22umG4DQbUtgpD8n2JK+clprEBoz2ORTi91 anpMB/stDvZIjLngd+GtJ0Hxr6gfGdBVbjqBSLaLdkTLLf8TKsbivnC9olWd4Y/1 B4tyBZc2GSzQVey42KxL2oRlJLLOB2ndcBy09cCHl2ftxxg6PzgnCjF+4COfgOSt BY28K2J1UWnu+esoMkWS63iWYB3mKmg= -----END CERTIFICATE-----Generated at Thu May 2 23:49:47 2024 by rpki-client on console-fra.rpki-client.org