$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/893dd363-c6c9-36a6-9711-88e6926e4b45.roa File: 893dd363-c6c9-36a6-9711-88e6926e4b45.roa (raw, json) Hash identifier: bY03zQ039BNJWx8DoymyptMfgkgf73bACk4bj0SyNUU= Subject key identifier: 53:D6:C6:DF:64:CA:29:85:F4:41:2E:0A:26:B6:FB:2C:33:72:34:A0 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584668F9EE55CCC99859C00C8C00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/893dd363-c6c9-36a6-9711-88e6926e4b45.roa Signing time: Wed 03 Jul 2024 01:00:24 +0000 ROA not before: Wed 03 Jul 2024 01:00:24 +0000 ROA not after: Tue 01 Oct 2024 01:00:24 +0000 asID: 212238 IP address blocks: 192.253.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jul 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:68:f9:ee:55:cc:c9:98:59:c0:0c:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 3 01:00:24 2024 GMT Not After : Oct 1 01:00:24 2024 GMT Subject: CN=c242faee-2163-4667-9dbc-364623a6e0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9f:ab:97:92:21:2b:58:60:6e:ae:ed:97:ac: c2:20:d1:fd:af:ac:e2:6a:a7:f9:4a:36:f2:40:09: 58:73:33:9d:5b:37:bb:13:b0:7e:16:fd:8a:1e:c8: ce:1d:fd:45:3a:5c:47:14:7b:a5:bf:64:ef:e6:c8: 65:05:8a:84:73:37:47:ac:01:2c:91:89:d3:e3:52: d8:ae:a2:71:5e:03:7d:ff:0f:15:85:27:40:44:cc: 97:64:1b:af:53:e8:e7:8c:64:29:23:d5:8d:10:38: cb:d0:7c:1e:aa:e5:75:56:97:1c:71:c7:72:53:2f: 3d:23:d0:41:4c:f0:6b:50:d5:a1:e0:99:82:54:b7: 65:f2:d0:5f:9f:24:2b:d2:be:05:1d:1a:f1:4f:e9: cd:9c:30:df:77:e3:1b:cd:75:8d:24:f2:c9:b9:e9: 60:fa:85:e9:35:b6:3f:94:1e:86:90:3d:95:37:4e: e7:4a:20:2e:a1:e2:dc:c4:82:d5:5b:56:80:92:de: 2f:07:d0:60:03:9c:f5:d2:98:7f:4c:ee:8d:6a:68: 3c:54:1c:8c:95:43:9e:9c:06:0d:bd:78:d6:29:12: 4c:e3:db:81:68:88:87:e8:27:f2:ed:2d:d4:5a:64: eb:15:17:77:81:ac:17:06:ca:58:f0:c9:57:50:8a: c7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D6:C6:DF:64:CA:29:85:F4:41:2E:0A:26:B6:FB:2C:33:72:34:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/893dd363-c6c9-36a6-9711-88e6926e4b45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:f2:9b:83:57:56:74:1f:0d:fa:5b:0b:06:41:bb:ec:f7:9f: 4f:9e:ed:56:6b:bf:12:00:23:8b:68:c5:67:d2:6a:c8:35:8d: 0b:6b:35:7d:cd:90:2d:16:b4:f1:b3:92:de:da:78:5b:9b:53: 5b:be:6b:87:00:79:4d:2f:2a:ea:d5:8c:9b:91:e1:1b:f3:84: 26:ae:b7:c3:35:9b:54:96:4a:de:dc:b0:4e:16:cd:5c:ae:fc: 47:54:08:80:b4:06:ec:a8:db:b8:fa:35:27:0a:92:84:9b:91: 32:78:9d:45:b2:19:92:08:25:da:5c:a3:dc:c8:eb:49:5c:7b: 36:4d:36:92:88:96:b6:c9:5b:5e:c8:27:9a:25:e2:2f:db:45: 18:d2:cc:af:e4:e2:9f:19:4b:12:f7:f8:ee:ae:02:b4:04:45: 6b:e0:30:e2:25:23:d1:e1:c8:7a:3f:bd:29:72:00:1d:00:14: 8c:2e:c5:16:81:16:16:47:a7:69:24:f8:ff:a4:c6:d5:ca:c9: 44:93:f3:42:74:97:f9:8d:d7:c2:90:ac:7e:e9:d3:b7:e1:ca: fb:31:d0:78:63:bb:34:b9:7e:bc:5f:6e:44:1e:da:d1:ce:b4: da:9b:a5:6b:d4:b9:e7:1e:23:88:f4:e1:c5:94:8f:67:69:d1: a5:a1:f8:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEZo+e5VzMmYWcAMjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDcwMzAxMDAyNFoXDTI0MTAwMTAxMDAyNFowLzEtMCsGA1UEAxMk YzI0MmZhZWUtMjE2My00NjY3LTlkYmMtMzY0NjIzYTZlMGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ+rl5IhK1hgbq7tl6zCINH9r6ziaqf5Sjby QAlYczOdWze7E7B+Fv2KHsjOHf1FOlxHFHulv2Tv5shlBYqEczdHrAEskYnT41LY rqJxXgN9/w8VhSdARMyXZBuvU+jnjGQpI9WNEDjL0HwequV1VpccccdyUy89I9BB TPBrUNWh4JmCVLdl8tBfnyQr0r4FHRrxT+nNnDDfd+MbzXWNJPLJuelg+oXpNbY/ lB6GkD2VN07nSiAuoeLcxILVW1aAkt4vB9BgA5z10ph/TO6Namg8VByMlUOenAYN vXjWKRJM49uBaIiH6Cfy7S3UWmTrFRd3gawXBspY8MlXUIrHrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPWxt9kyimF9EEuCia2+ywzcjSgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODkzZGQzNjMtYzZjOS0z NmE2LTk3MTEtODhlNjkyNmU0YjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP36MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3ym4NXVnQfDfpbCwZBu+z3n0+e7VZrvxIAI4toxWfSasg1jQtrNX3N kC0WtPGzkt7aeFubU1u+a4cAeU0vKurVjJuR4RvzhCaut8M1m1SWSt7csE4WzVyu /EdUCIC0Buyo27j6NScKkoSbkTJ4nUWyGZIIJdpco9zI60lcezZNNpKIlrbJW17I J5ol4i/bRRjSzK/k4p8ZSxL3+O6uArQERWvgMOIlI9HhyHo/vSlyAB0AFIwuxRaB FhZHp2kk+P+kxtXKyUST80J0l/mN18KQrH7p07fhyvsx0HhjuzS5frxfbkQe2tHO tNqbpWvUueceI4j04cWUj2dp0aWh+OI= -----END CERTIFICATE-----Generated at Sun Jul 14 08:22:16 2024 by rpki-client on console.sobornost.net