$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/652a09b9-25b2-30d2-b96c-7fffa4418198.roa File: 652a09b9-25b2-30d2-b96c-7fffa4418198.roa (raw, json) Hash identifier: bPwVANZtDSBr2P6f1Ru1CuCRGzWtvd8TEW3vyhwyNzA= Subject key identifier: 70:45:F2:8E:B8:8C:1E:D8:AB:42:A6:10:CC:D6:82:2B:CF:17:48:97 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285845628DF129993B458E8AE93D00 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/652a09b9-25b2-30d2-b96c-7fffa4418198.roa Signing time: Sun 31 Mar 2024 01:00:26 +0000 ROA not before: Sun 31 Mar 2024 01:00:26 +0000 ROA not after: Sat 29 Jun 2024 01:00:26 +0000 asID: 20115 IP address blocks: 24.196.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:62:8d:f1:29:99:3b:45:8e:8a:e9:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 31 01:00:26 2024 GMT Not After : Jun 29 01:00:26 2024 GMT Subject: CN=1a57b9a6-7ebb-4512-ace5-2dde3633526d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:01:9c:5b:f8:13:37:30:d4:9d:61:2c:82:b8: 2c:0f:f5:51:f9:c0:41:32:21:43:35:5a:ea:8a:57: f6:86:ed:fe:bb:ec:db:c8:97:ba:09:d7:48:63:ea: 49:1f:17:e7:36:71:42:ce:85:8c:f3:26:69:57:ce: 1f:f2:0d:29:5a:cf:08:f5:aa:79:da:f2:fa:73:55: 09:e0:da:39:05:59:c4:f7:64:4f:c9:af:8d:29:5f: 38:4d:9a:1b:b7:41:e7:ed:6f:81:f5:bc:fe:07:52: a5:ef:cb:c9:a3:66:c9:f5:b9:1b:2a:2f:c1:54:03: cb:d6:f4:92:ec:6f:8e:ac:e2:74:ae:f8:08:3c:ab: 11:cd:03:c2:1f:03:be:cd:6f:3e:1a:54:94:d8:47: 2e:d7:f7:77:4b:1b:ad:80:f2:c6:95:50:3e:64:00: ab:82:bf:e4:67:59:20:15:ff:31:23:1f:f1:cb:87: 70:92:6a:5c:d3:0c:a1:a4:78:04:ab:0c:e5:46:e3: 55:ac:af:6f:56:09:03:a9:ca:65:a2:ab:c2:ef:c8: 91:6f:00:23:c7:04:d5:ed:a2:82:82:cd:be:2e:d4: a2:f4:33:df:71:a5:99:12:e5:62:fc:81:96:da:d7: ad:42:76:39:50:07:05:bf:f3:47:0f:23:28:af:11: 50:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:45:F2:8E:B8:8C:1E:D8:AB:42:A6:10:CC:D6:82:2B:CF:17:48:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/652a09b9-25b2-30d2-b96c-7fffa4418198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.196.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:13:2f:2b:b4:c5:22:0f:ea:7b:c7:49:3d:39:10:58:8f:7d: f2:79:9f:be:9b:0c:fe:6a:cb:58:7e:1b:70:02:2f:d5:1a:64: c5:3b:b1:e8:bf:5f:b7:8a:48:1b:8b:07:9a:40:4c:5a:65:59: d7:d7:1e:bc:e6:95:39:b1:48:33:cf:2e:cd:59:09:1f:ec:d2: 28:98:ee:d9:3e:e5:d6:28:d1:b2:27:cf:22:13:b6:16:33:70: 30:1a:6b:94:61:05:89:2f:df:b6:cb:e0:34:42:e8:59:9c:35: 48:f4:3a:f1:bd:07:31:30:0f:fd:1b:25:d3:59:43:26:42:89: d2:67:b4:e1:37:7f:0d:0d:77:60:28:47:7d:1a:72:d0:60:6c: 19:e3:75:8a:00:ca:47:d2:fa:56:78:1f:37:2c:42:e2:fb:5d: 82:b1:ca:c9:17:62:5f:33:71:87:92:87:ca:b0:45:60:77:55: 2b:c2:76:a7:2f:84:cd:87:33:2c:99:c3:95:90:c3:2c:3d:84: 52:b7:f7:11:aa:ff:ca:0a:6c:d7:93:8d:dc:0a:4a:7f:23:59: bc:7e:3c:91:45:10:6b:84:bc:cb:0a:f2:ec:f4:97:3a:c3:e9: 73:3b:94:80:70:09:7c:e4:90:ee:46:1a:09:75:08:52:a9:52: 96:40:d5:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijfEpmTtFjorpPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk MWE1N2I5YTYtN2ViYi00NTEyLWFjZTUtMmRkZTM2MzM1MjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QGcW/gTNzDUnWEsgrgsD/VR+cBBMiFDNVrq ilf2hu3+u+zbyJe6CddIY+pJHxfnNnFCzoWM8yZpV84f8g0pWs8I9ap52vL6c1UJ 4No5BVnE92RPya+NKV84TZobt0Hn7W+B9bz+B1Kl78vJo2bJ9bkbKi/BVAPL1vSS 7G+OrOJ0rvgIPKsRzQPCHwO+zW8+GlSU2Ecu1/d3SxutgPLGlVA+ZACrgr/kZ1kg Ff8xIx/xy4dwkmpc0wyhpHgEqwzlRuNVrK9vVgkDqcploqvC78iRbwAjxwTV7aKC gs2+LtSi9DPfcaWZEuVi/IGW2tetQnY5UAcFv/NHDyMorxFQLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBF8o64jB7Yq0KmEMzWgivPF0iXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNjUyYTA5YjktMjViMi0z MGQyLWI5NmMtN2ZmZmE0NDE4MTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGMTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4TLyu0xSIP6nvHST05EFiPffJ5n76bDP5qy1h+G3ACL9UaZMU7sei/ X7eKSBuLB5pATFplWdfXHrzmlTmxSDPPLs1ZCR/s0iiY7tk+5dYo0bInzyITthYz cDAaa5RhBYkv37bL4DRC6FmcNUj0OvG9BzEwD/0bJdNZQyZCidJntOE3fw0Nd2Ao R30actBgbBnjdYoAykfS+lZ4HzcsQuL7XYKxyskXYl8zcYeSh8qwRWB3VSvCdqcv hM2HMyyZw5WQwyw9hFK39xGq/8oKbNeTjdwKSn8jWbx+PJFFEGuEvMsK8uz0lzrD 6XM7lIBwCXzkkO5GGgl1CFKpUpZA1R4= -----END CERTIFICATE-----Generated at Sun May 12 15:05:04 2024 by rpki-client on console-fra.rpki-client.org