$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/447bf38b-43f7-339f-8dfb-dedfec1e92d0.roa File: 447bf38b-43f7-339f-8dfb-dedfec1e92d0.roa (raw, json) Hash identifier: zxFMcvNuiyTF/Nhp/uwRxPpJ9J70U/nq/8eujPoZnLo= Subject key identifier: 57:6B:DA:10:0A:4D:06:ED:0F:1C:77:B9:1E:D7:73:E3:F7:BA:10:ED Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F43285845068AC02266EAEAB47B1BFB80 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/447bf38b-43f7-339f-8dfb-dedfec1e92d0.roa Signing time: Tue 27 Feb 2024 02:00:26 +0000 ROA not before: Tue 27 Feb 2024 02:00:26 +0000 ROA not after: Mon 27 May 2024 01:00:26 +0000 asID: 209242 IP address blocks: 170.114.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:06:8a:c0:22:66:ea:ea:b4:7b:1b:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Feb 27 02:00:26 2024 GMT Not After : May 27 01:00:26 2024 GMT Subject: CN=4c6b4d19-b243-4c01-a57b-f7a5182aeddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f3:87:97:d8:19:95:e8:37:7b:e3:10:6d:29: 8a:ac:e9:1e:ed:d3:5b:aa:62:d9:1c:28:df:e0:56: 48:d7:cb:1f:8b:cb:ce:a2:09:e9:2d:46:51:7e:1b: 18:ae:a0:e0:8e:73:f1:01:77:54:80:05:de:39:6e: 1a:07:75:c2:70:bf:ce:b6:fb:2f:31:40:50:c6:24: 07:ec:ed:8c:32:0e:d6:1b:8e:b0:65:e6:be:be:04: 17:a4:38:7d:60:43:97:d1:fa:55:59:cf:79:d7:ff: f3:61:f1:b6:d6:f3:98:9d:7c:4f:f7:07:7b:c7:48: ba:ac:75:40:1d:66:45:a8:a0:1a:7f:48:13:a5:52: ff:33:60:7c:79:07:38:db:56:ad:9a:e5:cd:fd:08: 18:0e:0c:15:79:d5:9a:ce:d1:65:7f:61:c1:06:6d: f2:92:e9:a6:3c:bc:12:72:23:3d:e1:2f:48:b8:8e: 09:1d:6e:2a:12:13:dc:0e:a7:9a:2f:54:8e:b9:18: 0e:5c:73:f9:52:89:c2:0d:38:48:5d:7f:83:ff:cb: 84:4f:1f:c9:8e:8f:08:c9:dc:6b:15:1f:31:c4:4c: 2f:59:f2:da:ac:dd:19:74:eb:e8:d2:1d:2d:49:6b: e1:99:13:5b:96:7a:a9:e5:40:91:20:e6:f2:85:99: 57:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6B:DA:10:0A:4D:06:ED:0F:1C:77:B9:1E:D7:73:E3:F7:BA:10:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/447bf38b-43f7-339f-8dfb-dedfec1e92d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:87:e8:8e:16:0b:68:c7:95:09:cc:41:6f:d9:9c:9f:65:2d: cf:e8:ea:98:29:77:cd:59:8d:65:dc:26:60:68:c1:a3:5c:e7: 36:aa:59:9a:d5:a7:a1:07:b1:f0:af:ec:35:56:67:8f:75:4a: 0f:11:7c:92:fa:1b:99:c3:ee:65:63:e3:58:c7:c0:71:80:cf: 77:12:c6:57:f8:6e:f8:e6:74:5f:dc:e0:b4:6e:6a:ec:a8:13: 14:42:c6:fc:9c:a6:60:89:4d:af:a1:38:34:dc:7a:07:ca:0a: b0:80:48:c9:63:11:2e:6a:ca:d3:6d:f8:e3:5f:03:90:03:2b: 6d:9d:2a:26:41:53:7e:42:1c:81:4b:e0:f3:1f:95:5a:89:13: cf:5f:b7:d7:7e:1d:61:65:49:7a:70:e3:30:7a:69:d8:26:a1: 99:68:ca:67:b8:8a:61:bd:2f:8c:1e:77:c3:f5:6e:f5:61:09: e9:d6:cb:9f:15:65:43:e7:d6:93:09:90:52:5b:b4:0e:4a:8f: 9a:1b:43:a4:37:dc:08:fe:39:f4:8f:e3:7e:bb:a9:71:35:7a: e9:2f:33:88:b9:7e:09:b7:4e:9e:ca:3a:60:5a:ff:c4:dc:57: 54:ba:82:5d:29:24:97:80:98:82:82:31:0f:ef:7b:23:85:ae: 5f:a8:fe:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUGisAiZurqtHsb+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI0MDIyNzAyMDAyNloXDTI0MDUyNzAxMDAyNlowLzEtMCsGA1UEAxMk NGM2YjRkMTktYjI0My00YzAxLWE1N2ItZjdhNTE4MmFlZGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvOHl9gZleg3e+MQbSmKrOke7dNbqmLZHCjf 4FZI18sfi8vOognpLUZRfhsYrqDgjnPxAXdUgAXeOW4aB3XCcL/OtvsvMUBQxiQH 7O2MMg7WG46wZea+vgQXpDh9YEOX0fpVWc951//zYfG21vOYnXxP9wd7x0i6rHVA HWZFqKAaf0gTpVL/M2B8eQc421atmuXN/QgYDgwVedWaztFlf2HBBm3ykummPLwS ciM94S9IuI4JHW4qEhPcDqeaL1SOuRgOXHP5UonCDThIXX+D/8uETx/Jjo8Iydxr FR8xxEwvWfLarN0ZdOvo0h0tSWvhmRNblnqp5UCRIObyhZlXTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdr2hAKTQbtDxx3uR7Xc+P3uhDtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNDQ3YmYzOGItNDNmNy0z MzlmLThkZmItZGVkZmVjMWU5MmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnI0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeH6I4WC2jHlQnMQW/ZnJ9lLc/o6pgpd81ZjWXcJmBowaNc5zaqWZrV p6EHsfCv7DVWZ491Sg8RfJL6G5nD7mVj41jHwHGAz3cSxlf4bvjmdF/c4LRuauyo ExRCxvycpmCJTa+hODTcegfKCrCASMljES5qytNt+ONfA5ADK22dKiZBU35CHIFL 4PMflVqJE89ft9d+HWFlSXpw4zB6adgmoZloyme4imG9L4wed8P1bvVhCenWy58V ZUPn1pMJkFJbtA5Kj5obQ6Q33Aj+OfSP4367qXE1eukvM4i5fgm3Tp7KOmBa/8Tc V1S6gl0pJJeAmIKCMQ/veyOFrl+o/o8= -----END CERTIFICATE-----Generated at Tue May 7 21:47:21 2024 by rpki-client on console-fra.rpki-client.org