$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b7f49026-ae81-329a-8ec0-a16f2a074f88.roa File: b7f49026-ae81-329a-8ec0-a16f2a074f88.roa (raw, json) Hash identifier: n3aEj7mHc30XGtT3YjRcJ1Kr2xJndcDLZYP7JSA9liw= Subject key identifier: A0:0F:AC:AF:D1:B5:3E:0C:EF:BA:43:5F:5C:9A:CC:A2:97:6A:B3:05 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F43285844E50A93E6634668B478528100 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b7f49026-ae81-329a-8ec0-a16f2a074f88.roa Signing time: Thu 15 Feb 2024 02:00:26 +0000 ROA not before: Thu 15 Feb 2024 02:00:26 +0000 ROA not after: Wed 15 May 2024 01:00:26 +0000 asID: 14618 IP address blocks: 207.202.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:e5:0a:93:e6:63:46:68:b4:78:52:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Feb 15 02:00:26 2024 GMT Not After : May 15 01:00:26 2024 GMT Subject: CN=ac3605bb-938c-4668-ac4c-b3fb76f7c72b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3e:91:22:40:f7:88:44:f5:8d:12:ed:15:f1: 60:a4:58:69:1a:47:c5:95:fc:91:55:50:fe:54:9b: d3:02:58:38:15:c3:75:a9:81:b3:0a:78:ff:5c:a5: 29:27:cc:a9:64:b5:7e:2a:1e:e2:7b:33:45:a2:30: 4e:16:5d:40:4b:cf:bb:84:af:e0:7b:75:2e:5a:e2: fa:83:8b:fa:bd:bc:16:70:4f:fa:a7:3d:1d:f2:ec: 44:26:c9:f6:3b:ad:00:49:db:9d:18:4e:1a:f1:22: 44:d4:94:15:e4:06:c2:ab:4f:50:94:86:33:05:0b: f7:cc:21:a8:b9:15:a0:a3:31:0f:c2:95:e7:4a:c0: 68:6e:9a:b9:b7:f3:df:86:39:3d:90:45:3a:4d:5d: 20:32:4e:5a:8a:bd:71:82:c8:6f:35:f3:e7:b1:eb: 74:b8:5a:5e:ba:d4:86:ea:dc:be:b6:93:a5:03:fa: 6a:a9:f5:38:1a:02:0b:f8:19:0f:d9:c4:d9:b2:9b: 77:2f:f0:4d:bd:93:c0:96:f6:8a:bf:87:2b:f0:d5: 29:75:23:1f:5a:b8:7a:0e:57:70:2b:67:05:c4:04: a1:91:80:cb:4e:aa:be:3d:f2:a8:90:8a:fb:ff:09: 9e:08:2a:6f:75:5b:37:ea:9d:52:32:4d:b6:ec:2e: e6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0F:AC:AF:D1:B5:3E:0C:EF:BA:43:5F:5C:9A:CC:A2:97:6A:B3:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b7f49026-ae81-329a-8ec0-a16f2a074f88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:97:9f:36:66:57:a3:12:00:b9:dd:1f:38:cb:7c:4b:12:37: c8:b0:58:06:40:51:52:34:37:1a:23:73:e3:24:3a:56:cb:11: 35:12:da:0d:30:b0:3a:88:9f:73:d2:d0:ae:4f:9a:39:dd:4f: 89:bd:0a:a9:9c:0b:81:49:7f:5a:f6:c4:69:0e:a2:70:b5:5c: c7:5f:84:46:70:86:a1:78:d5:73:d3:15:a0:fa:8b:20:6c:ca: 05:62:78:d1:bb:86:38:c9:36:fb:89:24:36:95:b7:b7:f3:49: 03:ee:96:82:8f:3c:e1:83:4b:ee:03:a4:7b:f9:2b:be:37:80: 55:62:e9:3a:36:20:18:c7:22:f0:98:ef:79:03:80:70:9a:1d: 9c:c8:a8:44:6b:cb:1e:07:cf:5c:02:6d:63:97:80:64:5a:7b: 51:a9:f6:d3:85:19:e6:e4:2b:47:bb:e7:ce:52:22:6e:64:a4: 1f:1a:e4:eb:01:2f:0e:b7:aa:0e:62:c6:eb:0e:1a:85:a9:47: 59:64:5c:7a:c9:4a:f1:75:cf:50:ad:36:2b:6c:05:69:cb:82: 25:0d:4f:fb:d7:d5:9c:e1:af:97:68:4b:7e:e9:58:bd:3f:13: a9:5e:99:7d:3c:78:f0:be:59:04:94:ae:51:67:e9:6c:3a:7a: 76:65:72:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETlCpPmY0ZotHhSgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI0MDIxNTAyMDAyNloXDTI0MDUxNTAxMDAyNlowLzEtMCsGA1UEAxMk YWMzNjA1YmItOTM4Yy00NjY4LWFjNGMtYjNmYjc2ZjdjNzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj6RIkD3iET1jRLtFfFgpFhpGkfFlfyRVVD+ VJvTAlg4FcN1qYGzCnj/XKUpJ8ypZLV+Kh7iezNFojBOFl1AS8+7hK/ge3UuWuL6 g4v6vbwWcE/6pz0d8uxEJsn2O60ASdudGE4a8SJE1JQV5AbCq09QlIYzBQv3zCGo uRWgozEPwpXnSsBobpq5t/Pfhjk9kEU6TV0gMk5air1xgshvNfPnset0uFpeutSG 6ty+tpOlA/pqqfU4GgIL+BkP2cTZspt3L/BNvZPAlvaKv4cr8NUpdSMfWrh6Dldw K2cFxAShkYDLTqq+PfKokIr7/wmeCCpvdVs36p1SMk227C7mDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAPrK/RtT4M77pDX1yazKKXarMFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvYjdmNDkwMjYtYWU4MS0z MjlhLThlYzAtYTE2ZjJhMDc0Zjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeXnzZmV6MSALndHzjLfEsSN8iwWAZAUVI0Nxojc+MkOlbLETUS2g0w sDqIn3PS0K5PmjndT4m9CqmcC4FJf1r2xGkOonC1XMdfhEZwhqF41XPTFaD6iyBs ygVieNG7hjjJNvuJJDaVt7fzSQPuloKPPOGDS+4DpHv5K743gFVi6To2IBjHIvCY 73kDgHCaHZzIqERryx4Hz1wCbWOXgGRae1Gp9tOFGebkK0e7585SIm5kpB8a5OsB Lw63qg5ixusOGoWpR1lkXHrJSvF1z1CtNitsBWnLgiUNT/vX1Zzhr5doS37pWL0/ E6lemX08ePC+WQSUrlFn6Ww6enZlcok= -----END CERTIFICATE-----Generated at Wed May 1 23:05:23 2024 by rpki-client on console-ams.rpki-client.org