$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/444c1899-a62f-31ca-94a1-61107e7fe508.roa File: 444c1899-a62f-31ca-94a1-61107e7fe508.roa (raw, json) Hash identifier: 19ZzWpEpgHsYkqVhdGqYjT6Cl0tz75TEqs8IAU1/w2c= Subject key identifier: 36:90:B5:60:E4:57:D1:09:89:BF:C6:4D:2E:55:F8:42:FA:75:57:E5 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285840D34DC670612ACEA4D1044C80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/444c1899-a62f-31ca-94a1-61107e7fe508.roa Signing time: Sun 05 Feb 2023 12:00:00 +0000 ROA not before: Sun 05 Feb 2023 12:00:00 +0000 ROA not after: Mon 29 Jan 2029 05:00:00 +0000 asID: 20115 IP address blocks: 159.111.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:40:d3:4d:c6:70:61:2a:ce:a4:d1:04:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 5 12:00:00 2023 GMT Not After : Jan 29 05:00:00 2029 GMT Subject: CN=4552775a-2d0a-42c6-9593-e2e691fd2572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9b:a6:e1:63:6a:fa:88:d3:32:78:0a:5e:48: cc:3c:59:45:91:fe:3c:b3:88:db:3f:62:ca:29:37: 0f:ca:26:5d:d7:03:10:08:14:76:cb:f5:15:6e:8b: 75:38:61:c4:33:86:cf:70:64:62:bc:c8:cc:9b:22: 38:82:95:f6:3e:ed:d5:44:1f:0a:38:aa:8c:27:83: 47:f2:f6:87:92:8b:5d:47:4e:ee:67:e1:8e:9d:a1: 27:ee:c6:d9:52:79:ae:f1:ae:e4:57:8a:9f:03:2a: 6d:6d:2b:5a:40:65:38:76:64:55:71:62:54:2e:db: 45:35:35:25:a3:b7:0a:11:7f:8e:cd:3e:6c:76:0e: 6d:66:2b:3e:55:78:1f:e1:e5:9e:d0:52:a9:f9:f7: be:e4:05:71:0d:3d:e7:04:cf:17:33:f6:f2:2a:a7: ad:33:39:17:60:a5:b6:bc:a1:e5:17:1d:e1:f3:64: cf:8a:84:48:8c:da:3c:ec:ed:8d:09:10:f3:49:38: f9:b4:3e:ef:79:00:57:c7:8f:43:e6:c5:41:04:e1: 9e:75:c5:8f:6f:ae:94:e5:f5:76:67:8c:40:8d:15: d6:e7:de:9e:d2:53:54:c6:a7:9a:88:cb:27:92:dd: 98:96:da:7d:aa:29:b8:39:b7:10:76:17:b7:b0:69: 9f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:90:B5:60:E4:57:D1:09:89:BF:C6:4D:2E:55:F8:42:FA:75:57:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/444c1899-a62f-31ca-94a1-61107e7fe508.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 159.111.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:34:a2:2d:8b:c3:75:17:52:75:40:91:25:10:d1:ef:5b:db: 1c:44:10:66:be:3b:d5:8d:c0:57:8c:8a:1e:d2:56:0b:d8:30: 7e:6b:19:c4:a1:bf:1b:c7:df:f8:00:ed:03:b4:ba:2e:7e:6f: 33:cd:03:66:97:07:ef:bf:a5:94:ac:23:bc:d6:27:cb:b3:a9: 83:72:5f:3b:98:3c:40:52:cd:eb:12:7d:78:36:be:a9:c2:a5: 51:3b:1d:31:ff:45:3a:68:95:d6:76:9c:a6:d0:ad:1e:00:6d: 12:a4:ed:6e:4f:ad:b5:b4:b3:da:d7:fc:44:cc:96:dd:f9:ed: e9:41:e1:b5:03:48:8c:4b:a2:65:e8:c7:ed:8b:79:a2:34:4a: 2c:4c:94:cd:6a:cc:c0:ab:b0:1e:2f:9e:57:fd:57:1f:5b:8e: c5:49:db:8e:13:54:55:42:d7:89:b9:57:2c:c7:b0:44:ab:03: 61:56:a9:fc:35:cf:10:2c:57:39:33:18:7a:1b:b3:e1:74:fc: 11:54:fa:9b:09:9e:92:cf:73:0c:bd:92:ae:e6:29:26:e9:b3: 56:56:e3:45:b4:91:9f:2a:6f:b4:68:c9:47:2f:bc:a3:9c:9b: a2:db:c6:41:54:13:1b:ea:cb:83:97:42:ef:50:67:ea:fd:fc: d6:34:33:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEDTTcZwYSrOpNEETIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTIzMDIwNTEyMDAwMFoXDTI5MDEyOTA1MDAwMFowLzEtMCsGA1UEAxMk NDU1Mjc3NWEtMmQwYS00MmM2LTk1OTMtZTJlNjkxZmQyNTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJum4WNq+ojTMngKXkjMPFlFkf48s4jbP2LK KTcPyiZd1wMQCBR2y/UVbot1OGHEM4bPcGRivMjMmyI4gpX2Pu3VRB8KOKqMJ4NH 8vaHkotdR07uZ+GOnaEn7sbZUnmu8a7kV4qfAyptbStaQGU4dmRVcWJULttFNTUl o7cKEX+OzT5sdg5tZis+VXgf4eWe0FKp+fe+5AVxDT3nBM8XM/byKqetMzkXYKW2 vKHlFx3h82TPioRIjNo87O2NCRDzSTj5tD7veQBXx49D5sVBBOGedcWPb66U5fV2 Z4xAjRXW596e0lNUxqeaiMsnkt2Yltp9qim4ObcQdhe3sGmfBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaQtWDkV9EJib/GTS5V+EL6dVflMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNDQ0YzE4OTktYTYyZi0z MWNhLTk0YTEtNjExMDdlN2ZlNTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCn2/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQ0oi2Lw3UXUnVAkSUQ0e9b2xxEEGa+O9WNwFeMih7SVgvYMH5rGcSh vxvH3/gA7QO0ui5+bzPNA2aXB++/pZSsI7zWJ8uzqYNyXzuYPEBSzesSfXg2vqnC pVE7HTH/RTpoldZ2nKbQrR4AbRKk7W5PrbW0s9rX/ETMlt357elB4bUDSIxLomXo x+2LeaI0SixMlM1qzMCrsB4vnlf9Vx9bjsVJ244TVFVC14m5VyzHsESrA2FWqfw1 zxAsVzkzGHobs+F0/BFU+psJnpLPcwy9kq7mKSbps1ZW40W0kZ8qb7RoyUcvvKOc m6LbxkFUExvqy4OXQu9QZ+r9/NY0M60= -----END CERTIFICATE-----Generated at Sun May 12 17:45:52 2024 by rpki-client on console-fra.rpki-client.org