$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa File: ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa (raw, json) Hash identifier: NDl6/NHi3honYFufQ01JjXikY+eLlhpH4FSnnGHu7NY= Subject key identifier: CC:5D:3A:95:F8:28:E5:79:F1:E1:E4:1D:97:ED:96:77:C8:24:84:1A Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F432858454B82F6D9B361B01F3A901300 Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa Signing time: Fri 22 Mar 2024 18:55:35 +0000 ROA not before: Fri 22 Mar 2024 18:55:35 +0000 ROA not after: Thu 20 Jun 2024 18:55:35 +0000 asID: 14618 IP address blocks: 149.72.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:4b:82:f6:d9:b3:61:b0:1f:3a:90:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: Mar 22 18:55:35 2024 GMT Not After : Jun 20 18:55:35 2024 GMT Subject: CN=b177966b-3456-46ae-99ab-a049e6c2780a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:06:c8:b1:d0:5b:75:f4:55:76:07:90:ed:f8: 1a:e9:95:ea:da:66:ef:6a:9c:03:0b:ba:43:ea:12: f0:54:28:8b:54:fb:26:33:26:70:58:87:12:db:88: 68:3a:a6:7d:b3:39:f3:8e:07:52:ec:ec:cf:3a:e6: c7:aa:6d:27:06:76:37:a6:3c:37:b1:f3:63:ac:65: 69:0d:4f:56:52:6b:fb:dd:b7:13:12:b3:40:d8:7a: dc:e4:61:ff:be:ca:6b:80:19:38:2b:d9:61:0d:f8: 1e:e0:c8:88:95:ec:fd:81:b3:06:8c:ac:a8:1e:d4: 6e:51:b1:ec:7c:54:1d:84:7a:90:9e:36:75:1d:d1: e8:4d:02:57:b9:44:eb:64:76:b4:b4:c4:ac:41:12: 2b:bc:68:11:25:7d:15:04:58:13:7e:f8:59:78:fb: 3b:7f:4a:7f:1b:5b:7c:93:14:ed:d0:8c:aa:2b:0b: a6:d0:c8:60:18:fa:a2:f2:c2:4f:c0:56:bb:98:be: 24:2e:d3:95:76:22:22:bb:c2:e5:fb:36:74:f3:6e: 85:37:af:98:cc:38:73:90:23:fd:db:11:10:28:bc: 44:d5:21:bf:a3:74:77:ae:08:6e:ec:c4:52:bc:35: fd:e8:dd:d8:9d:ab:7e:53:33:9f:21:41:d4:64:04: aa:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5D:3A:95:F8:28:E5:79:F1:E1:E4:1D:97:ED:96:77:C8:24:84:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:b6:0d:58:6e:cf:92:88:ad:0c:7e:72:8a:8d:1f:6e:5a:a4: 5f:c6:be:6d:fe:6d:df:5f:46:68:7c:0f:19:b0:3f:3f:d7:25: ad:2f:43:6d:c9:c6:b2:d1:69:52:2d:d0:75:6d:b5:f6:40:81: 11:47:2a:ad:2b:ca:77:20:6a:a4:3e:a5:31:f2:3e:2a:a1:b3: 6c:e8:26:fb:2d:07:e3:76:57:d8:b4:73:bf:d6:87:ac:ee:4e: b2:ef:ce:01:45:bc:83:f6:cd:03:0c:55:a5:6f:13:3b:74:16: bb:ff:b6:1d:cf:43:71:7d:85:c8:b6:e1:e9:57:72:c7:8d:b0: 82:ff:32:77:39:4c:cc:f5:60:4d:4a:94:da:70:60:7e:c6:ef: 01:fd:f4:14:6c:e0:fc:a7:98:63:b8:03:ba:34:af:7d:fa:8e: 36:77:c1:5b:01:45:a1:5d:ab:d0:7f:40:2f:94:7b:b0:3b:42: 33:3f:d6:95:bd:ca:01:d2:0a:61:c2:1e:15:40:ce:fc:d1:9c: 0c:0c:2d:ba:86:d9:f8:89:6d:60:81:f1:29:41:34:2d:71:61: 40:8d:97:b4:a0:84:7b:ef:f6:b3:07:a9:48:e6:da:8c:d8:b9: 3a:3b:05:ad:fa:a6:dc:8f:f5:01:35:70:9e:c1:50:d4:b6:e7: 1e:3d:83:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVLgvbZs2GwHzqQEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI0MDMyMjE4NTUzNVoXDTI0MDYyMDE4NTUzNVowLzEtMCsGA1UEAxMk YjE3Nzk2NmItMzQ1Ni00NmFlLTk5YWItYTA0OWU2YzI3ODBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+wbIsdBbdfRVdgeQ7fga6ZXq2mbvapwDC7pD 6hLwVCiLVPsmMyZwWIcS24hoOqZ9sznzjgdS7OzPOubHqm0nBnY3pjw3sfNjrGVp DU9WUmv73bcTErNA2Hrc5GH/vsprgBk4K9lhDfge4MiIlez9gbMGjKyoHtRuUbHs fFQdhHqQnjZ1HdHoTQJXuUTrZHa0tMSsQRIrvGgRJX0VBFgTfvhZePs7f0p/G1t8 kxTt0IyqKwum0MhgGPqi8sJPwFa7mL4kLtOVdiIiu8Ll+zZ0826FN6+YzDhzkCP9 2xEQKLxE1SG/o3R3rghu7MRSvDX96N3Ynat+UzOfIUHUZASqNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxdOpX4KOV58eHkHZftlnfIJIQaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvZmZhNTJjNjAtZGE5NS0z MWIxLWJmZTktYWNiZDRlNTk4NWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlUgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAG2DVhuz5KIrQx+coqNH25apF/Gvm3+bd9fRmh8DxmwPz/XJa0vQ23J xrLRaVIt0HVttfZAgRFHKq0ryncgaqQ+pTHyPiqhs2zoJvstB+N2V9i0c7/Wh6zu TrLvzgFFvIP2zQMMVaVvEzt0Frv/th3PQ3F9hci24elXcseNsIL/Mnc5TMz1YE1K lNpwYH7G7wH99BRs4PynmGO4A7o0r336jjZ3wVsBRaFdq9B/QC+Ue7A7QjM/1pW9 ygHSCmHCHhVAzvzRnAwMLbqG2fiJbWCB8SlBNC1xYUCNl7SghHvv9rMHqUjm2ozY uTo7Ba36ptyP9QE1cJ7BUNS25x49gwg= -----END CERTIFICATE-----Generated at Wed May 1 22:27:28 2024 by rpki-client on console-fra.rpki-client.org