$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/305a652b-8f6d-3a59-84d7-290880080ccf.roa File: 305a652b-8f6d-3a59-84d7-290880080ccf.roa (raw, json) Hash identifier: 8CMaJQHgqfpTHvuLPrl+zY3rzf6NSAq8fheoVbOizLs= Subject key identifier: 27:33:73:C8:CB:E5:8B:B1:35:47:8E:C0:E8:77:8B:E2:CC:9D:F3:AB Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Certificate serial: 010D0C9F432858456C531BA7B0B06F17A8045880 Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/305a652b-8f6d-3a59-84d7-290880080ccf.roa Signing time: Wed 03 Apr 2024 13:00:37 +0000 ROA not before: Wed 03 Apr 2024 13:00:37 +0000 ROA not after: Tue 02 Jul 2024 13:00:37 +0000 asID: 396259 IP address blocks: 139.60.200.0/21 maxlen: 32 136.228.0.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6c:53:1b:a7:b0:b0:6f:17:a8:04:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Validity Not Before: Apr 3 13:00:37 2024 GMT Not After : Jul 2 13:00:37 2024 GMT Subject: CN=5fdd247f-6354-4c89-b4ac-eeab631d1236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6b:3f:60:77:52:62:52:30:99:9e:29:3d:22: 47:02:8c:28:88:4e:4b:00:e8:7e:8f:82:fe:b9:54: f7:0d:79:2a:7c:1f:27:5f:40:22:4b:e2:e0:1c:ab: 97:c3:75:d9:f9:f8:11:a5:c6:41:e0:34:f4:03:b9: 81:08:90:be:5a:70:ea:51:78:68:69:6f:38:d7:22: 02:d8:3a:e7:75:09:ff:d7:34:11:39:19:51:83:b7: 1d:a6:8c:2f:07:89:4c:25:ff:cd:57:0b:99:d8:9f: cd:67:ac:7a:74:12:ac:5f:41:8c:bc:39:1f:9f:7b: e2:71:0c:64:1e:8b:d9:94:09:0d:ae:48:4e:87:d2: 44:34:ba:c6:b2:a8:74:42:02:97:46:0c:9c:9e:3f: 19:f1:12:0f:92:8f:65:b4:9d:99:e7:dd:05:a0:1f: 75:3f:1b:f4:11:97:27:33:44:ec:79:f0:97:70:90: 1f:1c:85:ac:4d:d5:c1:e6:e7:d1:61:eb:b9:55:04: af:e4:04:65:69:a4:3a:0c:5f:38:fc:f1:a5:03:74: d0:7f:59:3c:eb:4c:96:bd:e1:65:c4:ec:0f:8a:29: b5:bb:07:34:26:e4:5c:12:19:a2:93:64:3c:49:39: e8:e9:c7:16:95:92:09:29:ec:8c:bf:87:bd:74:24: 16:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:33:73:C8:CB:E5:8B:B1:35:47:8E:C0:E8:77:8B:E2:CC:9D:F3:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/305a652b-8f6d-3a59-84d7-290880080ccf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl X509v3 Authority Key Identifier: keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.0.0/19 139.60.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:90:40:3a:4f:c2:b0:ad:9d:f0:a3:00:6b:36:44:33:86:b1: 8c:cc:81:90:39:4d:26:e2:b8:f8:2f:ca:f8:5c:0f:07:84:17: fc:ff:8f:0d:68:d7:dc:30:79:36:f3:a1:1c:f8:f5:7f:0c:4e: c6:1e:8d:04:f9:0c:d0:1f:ff:4a:df:a3:a2:c3:c6:21:30:f4: ce:44:4b:7b:cb:7d:3b:49:0b:f2:ff:c1:59:b9:63:ca:37:11: e6:81:79:ee:62:37:b8:4d:5d:d8:5e:1f:3e:c0:6e:b0:7d:72: 66:09:7b:3f:36:3a:eb:7e:2d:f9:0f:90:62:73:aa:1b:9a:ac: 16:29:74:2d:9c:9e:2e:8d:ab:8d:e2:e4:af:ff:3f:ca:81:90: c3:25:65:9a:c4:44:f4:56:27:fe:0c:20:b9:da:f9:80:7f:9d: ff:bd:bd:94:96:19:f9:68:4b:7d:ab:f5:52:86:50:cd:46:d1: d6:06:92:82:25:03:9e:7e:d0:e8:fc:eb:63:53:32:4b:f3:54: 5d:4f:66:08:2a:cd:76:ac:ea:ad:63:e3:9b:63:88:1b:d4:9d: 35:f4:13:79:2a:58:4b:fe:35:13:74:c9:4c:33:9d:7f:f3:4f: b0:30:69:c3:09:30:0a:4f:d4:51:14:34:84:9c:6f:7a:dd:6f: 64:fb:de:97 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEVsUxunsLBvF6gEWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm NDdkMB4XDTI0MDQwMzEzMDAzN1oXDTI0MDcwMjEzMDAzN1owLzEtMCsGA1UEAxMk NWZkZDI0N2YtNjM1NC00Yzg5LWI0YWMtZWVhYjYzMWQxMjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWs/YHdSYlIwmZ4pPSJHAowoiE5LAOh+j4L+ uVT3DXkqfB8nX0AiS+LgHKuXw3XZ+fgRpcZB4DT0A7mBCJC+WnDqUXhoaW841yIC 2DrndQn/1zQRORlRg7cdpowvB4lMJf/NVwuZ2J/NZ6x6dBKsX0GMvDkfn3vicQxk HovZlAkNrkhOh9JENLrGsqh0QgKXRgycnj8Z8RIPko9ltJ2Z590FoB91Pxv0EZcn M0TsefCXcJAfHIWsTdXB5ufRYeu5VQSv5ARlaaQ6DF84/PGlA3TQf1k860yWveFl xOwPiim1uwc0JuRcEhmik2Q8STno6ccWlZIJKeyMv4e9dCQWowIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCczc8jL5YuxNUeOwOh3i+LMnfOrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvMzA1YTY1MmItOGY2ZC0z YTU5LTg0ZDctMjkwODgwMDgwY2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5 ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5 MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFmQQDpPwrCtnfCjAGs2RDOGsYzMgZA5TSbiuPgvyvhcDweE F/z/jw1o19wweTbzoRz49X8MTsYejQT5DNAf/0rfo6LDxiEw9M5ES3vLfTtJC/L/ wVm5Y8o3EeaBee5iN7hNXdheHz7AbrB9cmYJez82Out+LfkPkGJzqhuarBYpdC2c ni6Nq43i5K//P8qBkMMlZZrERPRWJ/4MILna+YB/nf+9vZSWGfloS32r9VKGUM1G 0dYGkoIlA55+0Oj862NTMkvzVF1PZggqzXas6q1j45tjiBvUnTX0E3kqWEv+NRN0 yUwznX/zT7AwacMJMApP1FEUNIScb3rdb2T73pc= -----END CERTIFICATE-----Generated at Sat May 4 15:07:13 2024 by rpki-client on console-ams.rpki-client.org