$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cfddd6a1-ab8f-3790-8282-f78bc658b358.roa File: cfddd6a1-ab8f-3790-8282-f78bc658b358.roa (raw, json) Hash identifier: P9uys4/ShiNDUMVbCYsM1hCdODqyE7B4clmF49AJuSk= Subject key identifier: 13:33:77:9F:B6:DA:6A:37:28:00:2A:2B:49:A0:A8:29:2C:CE:C9:77 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285844E93A989B92948A09461CAF00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cfddd6a1-ab8f-3790-8282-f78bc658b358.roa Signing time: Fri 16 Feb 2024 14:00:29 +0000 ROA not before: Fri 16 Feb 2024 14:00:29 +0000 ROA not after: Thu 16 May 2024 13:00:29 +0000 asID: 31898 IP address blocks: 158.120.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:e9:3a:98:9b:92:94:8a:09:46:1c:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Feb 16 14:00:29 2024 GMT Not After : May 16 13:00:29 2024 GMT Subject: CN=9db78ad3-d95c-4317-a767-6438256f6319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:55:72:09:c7:23:b9:49:de:55:fe:0c:3f:3b: aa:c8:04:eb:e8:7c:d7:de:b3:b5:88:b5:0b:35:5d: ca:94:3e:4b:e2:50:1a:c2:69:42:4a:b9:0a:20:00: 95:eb:e4:cd:47:36:26:2f:7e:9e:79:57:8e:be:97: 99:41:2f:49:e8:54:59:64:31:fd:93:14:7c:54:50: 96:46:ea:29:9d:a3:5e:97:3b:a7:17:62:02:58:66: 36:98:0b:32:9c:3a:77:f0:6f:a2:ee:dd:24:0b:51: a1:13:1f:37:01:36:16:2a:b0:c6:28:02:13:10:6e: e2:ee:a8:35:3c:d2:d2:c1:fc:0f:28:6d:ad:27:0b: 3a:df:e2:5d:60:73:2e:7c:3c:cd:2c:e5:2d:0c:e1: c6:28:55:98:a5:be:d1:53:70:8a:c2:2a:e5:aa:c1: be:db:71:73:df:fb:10:87:43:00:96:1a:b3:30:4a: 3c:24:03:11:7a:8a:b6:eb:7a:cd:d8:9f:21:c5:4d: 84:0c:99:68:aa:d6:0d:71:21:ee:3a:81:fc:31:83: 07:f1:c9:dd:97:f8:03:6f:e8:8e:a3:79:64:12:74: 4e:cc:64:9e:75:30:2a:40:31:36:f7:1a:15:76:27: ab:61:8a:a1:51:fc:82:2a:4a:f4:25:41:73:65:b2: 08:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:33:77:9F:B6:DA:6A:37:28:00:2A:2B:49:A0:A8:29:2C:CE:C9:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cfddd6a1-ab8f-3790-8282-f78bc658b358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 158.120.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:1b:8d:9a:99:5a:30:52:af:04:a6:8a:36:a4:4f:fb:0e:cc: 68:fb:1f:7e:c5:47:82:75:1a:db:33:21:4f:81:f3:95:3f:c1: bd:62:c0:df:1a:0d:5a:22:fc:9f:bd:fa:2e:9f:03:99:0f:81: b3:97:a0:03:11:af:c7:c8:d9:c1:f8:f6:d4:03:3f:b0:1a:06: 5f:45:9c:ac:41:90:f1:60:a4:73:27:28:f8:1e:69:3a:5a:37: 7b:ff:93:47:49:de:12:62:d8:7a:b5:e1:7e:91:bd:d1:94:35: 4e:49:40:2e:f3:27:81:5a:83:57:0b:f9:b4:02:e2:60:3e:ac: 07:fb:e1:9e:69:35:33:ce:d0:64:82:03:a5:38:11:39:0d:bc: b9:ea:45:ab:aa:69:fb:9f:02:a7:ef:e9:1e:0e:90:28:10:68: 70:cf:00:9a:22:99:a4:12:fb:88:a9:40:bf:e7:0c:c1:fe:59: 01:42:fe:82:1e:f6:28:6d:75:c8:ea:34:4e:72:d2:3b:c1:d3: 89:89:5e:6c:f6:47:1a:59:4d:3b:55:a2:a8:5c:8f:08:39:61: f7:a1:ac:55:6b:74:d2:49:22:d7:2a:af:ae:5e:de:3a:3a:79: de:58:2a:db:72:27:8f:9a:e8:cb:cf:e9:0d:83:eb:e4:d3:b1: f8:e0:98:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETpOpibkpSKCUYcrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI0MDIxNjE0MDAyOVoXDTI0MDUxNjEzMDAyOVowLzEtMCsGA1UEAxMk OWRiNzhhZDMtZDk1Yy00MzE3LWE3NjctNjQzODI1NmY2MzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVVyCccjuUneVf4MPzuqyATr6HzX3rO1iLUL NV3KlD5L4lAawmlCSrkKIACV6+TNRzYmL36eeVeOvpeZQS9J6FRZZDH9kxR8VFCW RuopnaNelzunF2ICWGY2mAsynDp38G+i7t0kC1GhEx83ATYWKrDGKAITEG7i7qg1 PNLSwfwPKG2tJws63+JdYHMufDzNLOUtDOHGKFWYpb7RU3CKwirlqsG+23Fz3/sQ h0MAlhqzMEo8JAMReoq263rN2J8hxU2EDJloqtYNcSHuOoH8MYMH8cndl/gDb+iO o3lkEnROzGSedTAqQDE29xoVdierYYqhUfyCKkr0JUFzZbIIHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMzd5+22mo3KAAqK0mgqCkszsl3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvY2ZkZGQ2YTEtYWI4Zi0z NzkwLTgyODItZjc4YmM2NThiMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnngUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYbjZqZWjBSrwSmijakT/sOzGj7H37FR4J1GtszIU+B85U/wb1iwN8a DVoi/J+9+i6fA5kPgbOXoAMRr8fI2cH49tQDP7AaBl9FnKxBkPFgpHMnKPgeaTpa N3v/k0dJ3hJi2Hq14X6RvdGUNU5JQC7zJ4Fag1cL+bQC4mA+rAf74Z5pNTPO0GSC A6U4ETkNvLnqRauqafufAqfv6R4OkCgQaHDPAJoimaQS+4ipQL/nDMH+WQFC/oIe 9ihtdcjqNE5y0jvB04mJXmz2RxpZTTtVoqhcjwg5YfehrFVrdNJJItcqr65e3jo6 ed5YKttyJ4+a6MvP6Q2D6+TTsfjgmEU= -----END CERTIFICATE-----Generated at Thu May 2 04:29:47 2024 by rpki-client on console-fra.rpki-client.org