$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/65c1aea1-c02b-3d72-b84f-6e726068e5ae.roa File: 65c1aea1-c02b-3d72-b84f-6e726068e5ae.roa (raw, json) Hash identifier: bZYdng9n2YSuLc7YfOm7/xVR3vtXFZ16X3CGOou0caM= Subject key identifier: 90:72:FB:7F:E5:C8:69:5D:DC:AC:49:21:D9:DC:6A:95:DF:8B:40:8C Certificate issuer: /CN=453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9 Certificate serial: 010D0C9F43285845A15DFCE111D513224D99BB40 Authority key identifier: 87:84:0F:3E:28:8D:EB:FA:C0:58:73:AA:77:33:2A:06:15:D3:DC:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/65c1aea1-c02b-3d72-b84f-6e726068e5ae.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 55034 IP address blocks: 192.243.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5d:fc:e1:11:d5:13:22:4d:99:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9 Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=e4e2ab03-2969-406a-99b2-3be80fcb6b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:26:cb:bb:b5:21:31:02:3b:20:34:d0:83:bb: 61:2c:e3:80:73:17:91:4d:2f:c0:8c:73:17:e9:b4: 41:45:37:b6:91:74:9a:8f:a6:6d:3b:02:68:3d:b6: b0:57:0d:a5:e7:18:83:ec:77:3a:bf:08:f0:d9:08: d1:c7:47:e8:ce:92:fd:46:7b:68:1a:c0:d3:3d:a6: 4d:a2:93:ab:2a:8d:eb:96:f7:0f:a9:9e:1f:37:40: 1c:83:0e:96:09:40:d2:ea:07:75:94:60:97:53:b9: 36:81:64:9e:f9:cf:87:e6:f5:b2:67:6f:6a:e3:91: 98:14:a2:18:54:12:ce:24:53:00:5f:74:8b:45:5d: 24:bb:4f:54:56:dd:c6:b4:c3:2b:cb:81:84:9f:f7: 69:db:be:c9:af:fe:a6:81:14:29:e5:a8:87:e7:22: f0:e5:79:a7:73:0f:c2:ab:6b:ac:08:0e:15:4d:53: e3:50:df:2b:e5:b8:1e:b3:eb:5a:e7:22:d9:b1:d2: bb:d7:8e:ae:73:23:f5:5a:d1:88:c7:5f:88:c2:2e: 12:a7:59:bf:4c:a0:57:ab:02:56:36:17:71:d3:cd: 64:0b:a8:b4:b5:3e:68:af:f0:f5:91:4c:8b:e5:79: 1a:b8:40:6f:b3:96:b2:b9:c7:7d:ff:0d:d0:52:52: 2a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:72:FB:7F:E5:C8:69:5D:DC:AC:49:21:D9:DC:6A:95:DF:8B:40:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/65c1aea1-c02b-3d72-b84f-6e726068e5ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.crl X509v3 Authority Key Identifier: keyid:87:84:0F:3E:28:8D:EB:FA:C0:58:73:AA:77:33:2A:06:15:D3:DC:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer sbgp-ipAddrBlock: critical IPv4: 192.243.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:61:9d:78:7b:6e:bd:b7:c7:67:b2:5d:a1:e6:9d:76:00:aa: 06:19:c5:50:d4:0d:ce:90:4f:c0:ff:20:01:49:a3:92:34:6b: 39:5f:75:af:e0:af:8f:bd:c0:04:81:59:cb:d9:83:dd:2f:ee: 5d:75:e2:13:3e:a1:da:a2:bf:f1:18:59:fe:7c:76:57:aa:73: e9:9a:75:1a:53:bf:d1:b4:05:50:31:f5:2d:17:3e:e0:bd:ad: a0:a8:25:88:0b:75:41:e0:5e:0d:de:d4:e8:fb:98:ce:ca:b0: 78:b3:30:ab:23:37:06:ab:5e:4a:03:56:0d:37:7f:c4:10:3f: 80:ca:9f:8c:40:bd:7f:a3:87:77:c3:90:14:56:93:69:50:63: d2:ad:eb:fd:15:be:e2:c8:16:93:78:fa:2c:47:80:1f:a8:07: 65:cc:ea:4f:be:f0:1c:e1:bd:8e:02:8d:35:be:af:cf:37:38: b6:ec:8a:48:b9:80:3f:c1:84:16:fd:18:44:5f:17:e3:d9:a3: ea:00:b1:45:b8:ed:97:0d:b4:22:5e:ae:59:2e:7b:b1:03:6a: e5:90:26:a7:f0:22:58:e9:c3:fb:93:1e:9e:07:9e:6f:8f:e7: 43:95:cb:61:ed:f2:6d:46:87:0d:04:93:ce:00:87:db:e2:c5: 8e:fe:43:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXfzhEdUTIk2Zu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzYjVlYWItM2NkNS00NzlhLWI1YmEtYmE4ZTBiZGM5 Y2E5MB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk ZTRlMmFiMDMtMjk2OS00MDZhLTk5YjItM2JlODBmY2I2YjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCbLu7UhMQI7IDTQg7thLOOAcxeRTS/AjHMX 6bRBRTe2kXSaj6ZtOwJoPbawVw2l5xiD7Hc6vwjw2QjRx0fozpL9RntoGsDTPaZN opOrKo3rlvcPqZ4fN0Acgw6WCUDS6gd1lGCXU7k2gWSe+c+H5vWyZ29q45GYFKIY VBLOJFMAX3SLRV0ku09UVt3GtMMry4GEn/dp277Jr/6mgRQp5aiH5yLw5Xmncw/C q2usCA4VTVPjUN8r5bges+ta5yLZsdK7146ucyP1WtGIx1+Iwi4Sp1m/TKBXqwJW Nhdx081kC6i0tT5or/D1kUyL5XkauEBvs5ayucd9/w3QUlIqXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBy+3/lyGld3KxJIdncapXfi0CMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NTNi NWVhYi0zY2Q1LTQ3OWEtYjViYS1iYThlMGJkYzljYTkvNjVjMWFlYTEtYzAyYi0z ZDcyLWI4NGYtNmU3MjYwNjhlNWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDUzYjVlYWItM2NkNS00NzlhLWI1 YmEtYmE4ZTBiZGM5Y2E5LzQ1M2I1ZWFiLTNjZDUtNDc5YS1iNWJhLWJhOGUwYmRj OWNhOS5jcmwwHwYDVR0jBBgwFoAUh4QPPiiN6/rAWHOqdzMqBhXT3AcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NTNiNWVhYi0zY2Q1LTQ3OWEtYjViYS1iYThl MGJkYzljYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwPMoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9hnXh7br23x2eyXaHmnXYAqgYZxVDUDc6QT8D/IAFJo5I0azlfda/g r4+9wASBWcvZg90v7l114hM+odqiv/EYWf58dleqc+madRpTv9G0BVAx9S0XPuC9 raCoJYgLdUHgXg3e1Oj7mM7KsHizMKsjNwarXkoDVg03f8QQP4DKn4xAvX+jh3fD kBRWk2lQY9Kt6/0VvuLIFpN4+ixHgB+oB2XM6k++8BzhvY4CjTW+r883OLbsiki5 gD/BhBb9GERfF+PZo+oAsUW47ZcNtCJerlkue7EDauWQJqfwIljpw/uTHp4Hnm+P 50OVy2Ht8m1Ghw0Ek84Ah9vixY7+Q/c= -----END CERTIFICATE-----Generated at Thu May 23 21:43:17 2024 by rpki-client on console-fra.rpki-client.org