$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d3dbc1d1-07b4-37bd-b097-bce911bfb095.roa File: d3dbc1d1-07b4-37bd-b097-bce911bfb095.roa (raw, json) Hash identifier: cSSWAVRVe1xdPmKubsOhJxsDKm6VYrZLDj0KwzWH71U= Subject key identifier: 73:34:00:CE:35:BE:CF:B1:2E:C4:FB:BE:68:21:C7:73:D8:A1:7A:26 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F43285844EED00152AF3BE495EA45AF80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d3dbc1d1-07b4-37bd-b097-bce911bfb095.roa Signing time: Sun 18 Feb 2024 14:00:30 +0000 ROA not before: Sun 18 Feb 2024 14:00:30 +0000 ROA not after: Sat 18 May 2024 13:00:30 +0000 asID: 11404 IP address blocks: 107.190.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:ee:d0:01:52:af:3b:e4:95:ea:45:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Feb 18 14:00:30 2024 GMT Not After : May 18 13:00:30 2024 GMT Subject: CN=3899ba33-7bfe-41a4-b040-8eeda3a1bc86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:47:c8:4c:4e:58:c2:0e:ba:c3:46:d2:64:e6: db:20:33:07:5a:de:25:3d:75:28:9c:be:93:13:3b: 46:ea:1e:be:6a:1d:8e:df:d3:54:ae:e4:d2:0a:da: db:cf:e7:63:70:67:d9:e5:14:78:4c:b9:e2:b9:cf: 51:ae:a8:2c:b7:2e:06:b6:12:3c:9c:fa:45:e0:1d: 91:66:c0:d4:17:f7:72:cd:63:6b:45:c2:32:43:bc: 73:0b:83:d6:29:ba:14:1e:24:55:a9:aa:0b:c8:46: da:1f:f9:11:ec:ba:b4:4d:c3:45:1d:a6:39:08:8a: ac:91:dc:7b:f8:5a:48:a6:c4:2a:1c:30:f3:97:91: df:69:eb:12:0f:27:bb:63:e9:e2:42:47:86:7f:f4: 73:f8:4d:ad:11:94:1d:52:4d:44:d5:6c:52:76:dc: e3:43:c4:05:03:98:a0:4d:6d:1c:0f:14:c2:7b:0c: 31:d3:b5:55:50:1d:2b:d1:11:e2:7c:24:b8:f3:67: e6:c2:00:4a:a9:c6:67:2e:6d:92:b8:3a:a2:ef:03: 37:01:d6:a7:c2:9a:fb:26:4a:ff:d6:54:a2:32:08: 4b:82:32:b8:50:2c:86:e3:98:c5:11:98:2c:a9:f4: 99:b2:d0:de:a9:a4:4c:a6:9b:86:9a:50:b6:c2:b4: 2e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:34:00:CE:35:BE:CF:B1:2E:C4:FB:BE:68:21:C7:73:D8:A1:7A:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d3dbc1d1-07b4-37bd-b097-bce911bfb095.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 107.190.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:d6:0b:72:3c:6f:44:71:97:df:01:73:50:fe:59:4c:94:df: 16:90:a0:20:8c:ea:2e:da:da:35:70:6f:4b:e8:c9:0e:b6:ac: 17:d1:26:7c:4d:c1:12:30:22:d9:68:8d:db:1c:10:41:b8:71: b7:42:32:1b:98:a3:d7:2a:f9:68:af:df:6f:fd:31:96:1b:90: 26:d1:46:05:86:68:23:5b:02:46:b3:8c:69:23:21:c1:d5:bb: b6:6f:f1:28:0f:f0:6e:17:a8:66:f1:6e:d3:52:b3:46:52:54: 13:9c:36:90:d7:60:06:12:02:2a:0b:36:ec:f9:12:29:a5:f8: 55:74:57:5e:4f:d2:6e:91:eb:08:d4:c7:c0:ff:a6:5b:1d:2c: b6:e4:5b:6d:c5:08:53:85:7a:f9:6a:ed:94:22:b5:db:3a:6b: 25:9f:01:22:17:71:e0:65:9e:43:ac:5f:3f:a1:90:8a:40:d1: d1:ed:b5:e2:94:71:e3:fb:87:c6:d7:cc:97:15:42:aa:65:ad: 56:fb:68:5c:3c:73:3c:92:f5:62:9b:35:db:44:44:7c:2f:91: e3:c0:7f:4f:90:e8:f9:9f:d3:c8:32:61:6f:84:d8:d9:87:50: dd:da:23:4a:4a:83:9d:54:d2:6f:fc:02:5a:09:2e:4c:e9:e5: 6d:b1:4b:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETu0AFSrzvklepFr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI0MDIxODE0MDAzMFoXDTI0MDUxODEzMDAzMFowLzEtMCsGA1UEAxMk Mzg5OWJhMzMtN2JmZS00MWE0LWIwNDAtOGVlZGEzYTFiYzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kfITE5Ywg66w0bSZObbIDMHWt4lPXUonL6T EztG6h6+ah2O39NUruTSCtrbz+djcGfZ5RR4TLniuc9Rrqgsty4GthI8nPpF4B2R ZsDUF/dyzWNrRcIyQ7xzC4PWKboUHiRVqaoLyEbaH/kR7Lq0TcNFHaY5CIqskdx7 +FpIpsQqHDDzl5HfaesSDye7Y+niQkeGf/Rz+E2tEZQdUk1E1WxSdtzjQ8QFA5ig TW0cDxTCewwx07VVUB0r0RHifCS482fmwgBKqcZnLm2SuDqi7wM3Adanwpr7Jkr/ 1lSiMghLgjK4UCyG45jFEZgsqfSZstDeqaRMppuGmlC2wrQulQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHM0AM41vs+xLsT7vmghx3PYoXomMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZDNkYmMxZDEtMDdiNC0z N2JkLWIwOTctYmNlOTExYmZiMDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEa77QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHWC3I8b0Rxl98Bc1D+WUyU3xaQoCCM6i7a2jVwb0voyQ62rBfRJnxN wRIwItlojdscEEG4cbdCMhuYo9cq+Wiv32/9MZYbkCbRRgWGaCNbAkazjGkjIcHV u7Zv8SgP8G4XqGbxbtNSs0ZSVBOcNpDXYAYSAioLNuz5Eiml+FV0V15P0m6R6wjU x8D/plsdLLbkW23FCFOFevlq7ZQitds6ayWfASIXceBlnkOsXz+hkIpA0dHtteKU ceP7h8bXzJcVQqplrVb7aFw8czyS9WKbNdtERHwvkePAf0+Q6Pmf08gyYW+E2NmH UN3aI0pKg51U0m/8AloJLkzp5W2xS0A= -----END CERTIFICATE-----Generated at Thu May 2 14:57:52 2024 by rpki-client on console-fra.rpki-client.org