$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/778c411d-d7df-3c97-9219-3ef234ab6f08.roa File: 778c411d-d7df-3c97-9219-3ef234ab6f08.roa (raw, json) Hash identifier: gdP7fjFNftIF8SA8QcatE/RodQQHGqF61kbMr7C+aPo= Subject key identifier: D1:5A:A3:82:1F:71:82:7B:E1:0F:D1:5D:7A:13:88:EB:E7:5F:6B:C0 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F432858455B92EE2147D0F69FF817D420 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/778c411d-d7df-3c97-9219-3ef234ab6f08.roa Signing time: Thu 28 Mar 2024 13:00:36 +0000 ROA not before: Thu 28 Mar 2024 13:00:36 +0000 ROA not after: Wed 26 Jun 2024 13:00:36 +0000 asID: 16509 IP address blocks: 207.202.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5b:92:ee:21:47:d0:f6:9f:f8:17:d4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Mar 28 13:00:36 2024 GMT Not After : Jun 26 13:00:36 2024 GMT Subject: CN=ad09cce3-70a6-4185-a335-d0fa66213487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:de:eb:6a:84:84:e8:85:73:0d:b2:24:a4:a1: 15:cf:d9:27:64:32:83:1f:0a:28:c6:86:78:f6:41: 69:ee:95:7e:07:4e:ea:15:8a:c2:ec:5b:95:a3:a9: e1:10:ef:f8:6e:35:b5:cf:dd:67:e7:8c:53:c7:31: c0:45:2c:82:74:c2:16:22:e9:cc:55:91:89:ef:bd: 54:c0:16:43:b0:49:ef:12:cb:10:75:11:2f:c1:a2: 83:e0:00:55:7f:40:f5:af:97:16:ad:96:69:58:66: 26:47:84:d5:ed:07:7f:a4:7d:df:12:58:81:5e:b1: d3:a1:49:41:6b:a7:97:3c:93:0a:04:c8:15:46:fa: 8d:fe:8b:8b:63:00:b4:fb:82:52:f5:df:b9:86:3f: a6:9e:a4:b7:a0:0a:70:43:57:d6:97:b4:8e:e2:d1: 57:3f:0b:dc:06:b1:50:9d:cd:0b:29:52:88:00:2e: c7:2a:3e:68:41:58:f5:da:cb:92:cc:84:1b:12:90: 73:c7:3c:7d:59:48:98:ab:70:9a:b2:dd:d9:6d:5d: 26:4b:aa:91:73:d0:6b:d4:af:f9:ed:45:14:00:00: 1f:01:22:18:6e:61:ad:5e:4f:ac:1b:2f:71:d6:52: 59:67:29:96:5f:e2:17:a6:6a:3e:25:2a:cc:34:68: 16:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5A:A3:82:1F:71:82:7B:E1:0F:D1:5D:7A:13:88:EB:E7:5F:6B:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/778c411d-d7df-3c97-9219-3ef234ab6f08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:bf:4e:eb:e0:be:ec:bf:4a:1a:6c:85:48:2e:82:65:15:25: 89:63:40:05:8a:3c:1b:92:18:05:dc:f4:78:a7:1b:51:6c:5b: b8:ab:16:68:31:cc:2c:55:be:92:70:c2:1b:a7:a0:3a:9c:b3: 23:5a:ce:0a:ab:07:e1:ef:97:b7:cc:12:99:8e:46:de:44:ee: 62:d4:49:4e:40:02:4b:d9:ef:c5:99:24:1d:e2:b7:20:2b:dc: 46:c2:c5:df:db:e5:74:79:65:4f:e5:af:ca:01:f5:2f:6e:3b: e6:de:77:78:f1:15:16:cb:c6:18:cf:bb:2d:09:87:1c:48:5a: 77:94:d3:ab:05:a4:55:ae:f4:31:96:5d:65:10:26:da:6e:da: 4a:9f:ad:2f:d3:5e:eb:b5:08:ff:e3:37:12:e4:b6:83:37:d6: a8:6b:6e:68:f8:5a:da:d0:51:f0:d9:37:a3:f1:b4:bc:ef:5d: 5d:66:e4:85:20:b5:63:6c:f8:c7:ab:a3:66:6d:08:c2:6d:2d: f4:9d:4e:ca:be:da:9e:8b:e6:fb:bc:1e:3d:b8:b0:bd:bf:82: 91:7f:56:8e:3e:fb:2b:5d:f5:d0:42:7f:87:ad:7b:10:db:b0: 6d:d6:2c:17:5b:5b:4f:4e:48:34:d2:9d:24:21:95:18:ad:10: 45:6d:89:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVbku4hR9D2n/gX1CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI0MDMyODEzMDAzNloXDTI0MDYyNjEzMDAzNlowLzEtMCsGA1UEAxMk YWQwOWNjZTMtNzBhNi00MTg1LWEzMzUtZDBmYTY2MjEzNDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd7raoSE6IVzDbIkpKEVz9knZDKDHwooxoZ4 9kFp7pV+B07qFYrC7FuVo6nhEO/4bjW1z91n54xTxzHARSyCdMIWIunMVZGJ771U wBZDsEnvEssQdREvwaKD4ABVf0D1r5cWrZZpWGYmR4TV7Qd/pH3fEliBXrHToUlB a6eXPJMKBMgVRvqN/ouLYwC0+4JS9d+5hj+mnqS3oApwQ1fWl7SO4tFXPwvcBrFQ nc0LKVKIAC7HKj5oQVj12suSzIQbEpBzxzx9WUiYq3Cast3ZbV0mS6qRc9Br1K/5 7UUUAAAfASIYbmGtXk+sGy9x1lJZZymWX+IXpmo+JSrMNGgWFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFao4IfcYJ74Q/RXXoTiOvnX2vAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvNzc4YzQxMWQtZDdkZi0z Yzk3LTkyMTktM2VmMjM0YWI2ZjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8ohMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJm/Tuvgvuy/ShpshUgugmUVJYljQAWKPBuSGAXc9HinG1FsW7irFmgx zCxVvpJwwhunoDqcsyNazgqrB+Hvl7fMEpmORt5E7mLUSU5AAkvZ78WZJB3ityAr 3EbCxd/b5XR5ZU/lr8oB9S9uO+bed3jxFRbLxhjPuy0JhxxIWneU06sFpFWu9DGW XWUQJtpu2kqfrS/TXuu1CP/jNxLktoM31qhrbmj4WtrQUfDZN6PxtLzvXV1m5IUg tWNs+Mero2ZtCMJtLfSdTsq+2p6L5vu8Hj24sL2/gpF/Vo4++ytd9dBCf4etexDb sG3WLBdbW09OSDTSnSQhlRitEEVticE= -----END CERTIFICATE-----Generated at Thu May 2 12:37:17 2024 by rpki-client on console-ams.rpki-client.org