$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/299096e0-2f30-39c1-8e77-4fa18c746b04.roa File: 299096e0-2f30-39c1-8e77-4fa18c746b04.roa (raw, json) Hash identifier: A+6yj6w1VR3UiyMuO0jnHOsnCU79dK5xR8ymiM5Q9eI= Subject key identifier: 6C:CB:2C:37:79:2B:DD:88:2E:BC:CD:DD:8B:06:1C:16:14:CA:B6:0C Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F43285844F9FABE8E49C07BA7EFAFDFE0 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/299096e0-2f30-39c1-8e77-4fa18c746b04.roa Signing time: Thu 22 Feb 2024 14:00:30 +0000 ROA not before: Thu 22 Feb 2024 14:00:30 +0000 ROA not after: Wed 22 May 2024 13:00:30 +0000 asID: 30103 IP address blocks: 149.137.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f9:fa:be:8e:49:c0:7b:a7:ef:af:df:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Feb 22 14:00:30 2024 GMT Not After : May 22 13:00:30 2024 GMT Subject: CN=705898ca-6bbb-4ccb-8d24-64e817390668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bd:13:1a:f3:e7:78:98:39:1b:1d:94:28:55: 5e:c3:10:36:3b:83:e1:7e:93:4c:4f:0e:13:97:1b: 7d:08:f6:63:22:46:a1:39:c2:b4:3a:77:78:e3:16: 1e:5a:32:24:e5:a4:32:07:42:c1:c0:14:7c:70:91: 91:5e:f1:30:d3:41:fe:04:fc:98:47:fe:8d:61:38: 5e:a4:11:99:60:63:41:51:45:f2:b1:3b:d1:d2:12: 10:07:22:a5:82:9e:e8:2d:3c:f3:34:d3:2c:9f:84: 2d:d6:93:26:b8:27:de:d8:f5:b7:2e:df:63:a4:c9: dd:34:1e:b8:05:32:e7:81:91:68:f7:1d:f2:cf:1f: 86:a5:76:eb:a9:92:62:e6:47:49:67:30:a0:b1:5b: 6b:23:f4:7e:f0:77:50:4d:19:d5:56:8f:dd:e8:2d: 47:bd:26:0d:8a:0f:ca:ee:fa:e0:52:d1:b3:b5:c9: 37:c8:4f:6a:22:38:25:cf:0e:27:04:ff:6a:2d:37: a8:9f:90:7b:32:9d:41:ff:19:26:d8:d5:3e:ec:98: dd:93:82:71:23:d4:d0:47:61:07:d2:1c:5b:04:69: 9b:38:89:6d:c7:d6:2e:89:49:1f:92:3e:e2:be:14: fc:dd:1c:96:ee:cd:fa:a6:05:f3:b5:f2:3b:c8:29: f0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CB:2C:37:79:2B:DD:88:2E:BC:CD:DD:8B:06:1C:16:14:CA:B6:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/299096e0-2f30-39c1-8e77-4fa18c746b04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 149.137.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:32:b8:45:69:b8:82:41:09:9c:35:60:06:a4:9f:e2:ed:1b: 51:14:b8:09:c3:23:db:86:4d:b3:56:08:9b:37:b6:3e:a1:70: 5b:51:c7:2d:a4:b6:ce:9a:32:8d:31:bb:c4:6c:6e:a1:80:c6: b6:c7:61:5f:66:57:c8:0d:62:54:bc:dc:17:18:29:ce:26:b2: 06:10:ac:7f:ac:b1:9b:eb:ad:6f:c7:30:d1:df:39:8c:83:c2: 09:98:03:8e:b4:ae:35:c1:59:34:27:45:ce:28:45:d2:96:52: e4:c2:0f:fc:51:85:50:82:dc:71:0e:b4:ce:1f:74:9d:0f:33: 70:ac:64:97:4f:ea:8c:d4:dc:c6:02:2b:a7:7b:1e:df:68:33: ed:af:80:76:25:96:70:70:58:42:50:8e:2c:d8:6f:a7:73:6d: 53:6b:96:35:bd:19:83:63:3a:21:20:fb:bf:10:a9:5d:0c:17: e1:63:a8:36:4c:f1:04:00:68:26:b1:9a:33:ef:48:d7:49:27: 76:e0:bd:0e:6e:29:9c:6f:3a:7b:c4:b6:2d:db:2e:89:ed:85: cc:72:f2:d0:74:21:e7:b9:90:7a:9d:a9:1b:07:5b:27:6c:7c: f0:5b:d6:f8:e9:85:4a:cc:9a:92:b3:a8:6d:db:21:32:75:06: e2:ff:08:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET5+r6OScB7p++v3+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI0MDIyMjE0MDAzMFoXDTI0MDUyMjEzMDAzMFowLzEtMCsGA1UEAxMk NzA1ODk4Y2EtNmJiYi00Y2NiLThkMjQtNjRlODE3MzkwNjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL0TGvPneJg5Gx2UKFVewxA2O4PhfpNMTw4T lxt9CPZjIkahOcK0Ond44xYeWjIk5aQyB0LBwBR8cJGRXvEw00H+BPyYR/6NYThe pBGZYGNBUUXysTvR0hIQByKlgp7oLTzzNNMsn4Qt1pMmuCfe2PW3Lt9jpMndNB64 BTLngZFo9x3yzx+GpXbrqZJi5kdJZzCgsVtrI/R+8HdQTRnVVo/d6C1HvSYNig/K 7vrgUtGztck3yE9qIjglzw4nBP9qLTeon5B7Mp1B/xkm2NU+7Jjdk4JxI9TQR2EH 0hxbBGmbOIltx9YuiUkfkj7ivhT83RyW7s36pgXztfI7yCnwqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzLLDd5K92ILrzN3YsGHBYUyrYMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMjk5MDk2ZTAtMmYzMC0z OWMxLThlNzctNGZhMThjNzQ2YjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClYkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgyuEVpuIJBCZw1YAakn+LtG1EUuAnDI9uGTbNWCJs3tj6hcFtRxy2k ts6aMo0xu8RsbqGAxrbHYV9mV8gNYlS83BcYKc4msgYQrH+ssZvrrW/HMNHfOYyD wgmYA460rjXBWTQnRc4oRdKWUuTCD/xRhVCC3HEOtM4fdJ0PM3CsZJdP6ozU3MYC K6d7Ht9oM+2vgHYllnBwWEJQjizYb6dzbVNrljW9GYNjOiEg+78QqV0MF+FjqDZM 8QQAaCaxmjPvSNdJJ3bgvQ5uKZxvOnvEti3bLonthcxy8tB0Iee5kHqdqRsHWyds fPBb1vjphUrMmpKzqG3bITJ1BuL/CPQ= -----END CERTIFICATE-----Generated at Thu May 9 22:19:05 2024 by rpki-client on console-fra.rpki-client.org