$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a1e219f1-4e6f-3b25-8e70-00d949fa391d.roa File: a1e219f1-4e6f-3b25-8e70-00d949fa391d.roa (raw, json) Hash identifier: DSyeeXBku+8dkY4Wieija9Q5B/AL1gDM1pRsgGnddS0= Subject key identifier: 7A:86:8D:89:9D:73:F2:CB:F6:A6:30:6A:F1:12:80:DD:E1:C8:48:84 Certificate issuer: /CN=61e7cca0-e65d-417d-a651-371c91be9c95 Certificate serial: 010D0C9F43285845D39E53342D3EA71AC19937C0 Authority key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a1e219f1-4e6f-3b25-8e70-00d949fa391d.roa Signing time: Fri 10 May 2024 13:00:36 +0000 ROA not before: Fri 10 May 2024 13:00:36 +0000 ROA not after: Thu 08 Aug 2024 13:00:36 +0000 asID: 1448 IP address blocks: 158.41.128.0/17 maxlen: 17 156.146.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d3:9e:53:34:2d:3e:a7:1a:c1:99:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61e7cca0-e65d-417d-a651-371c91be9c95 Validity Not Before: May 10 13:00:36 2024 GMT Not After : Aug 8 13:00:36 2024 GMT Subject: CN=587f5ba4-ac04-421a-ab23-94652c85c5b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c7:a2:2d:15:d4:4b:8d:92:21:07:fd:de:4d: 82:15:d5:4f:a8:c2:bd:1f:ef:a4:5c:da:27:25:f2: 09:bf:d8:77:99:1a:bb:fb:20:19:ad:6d:e6:d3:69: 39:67:af:5f:16:36:2b:da:b6:e4:90:aa:05:79:64: cb:04:ce:02:5f:f8:83:e2:4b:cd:14:8b:c0:a1:c2: 98:1b:eb:f3:e6:e2:be:05:4e:ab:24:38:77:bd:5a: 6a:02:28:18:f7:b6:11:af:61:57:74:f8:45:2f:51: f4:4f:24:57:a7:c4:0a:43:b3:86:65:86:c0:54:39: f1:b0:58:eb:13:3e:c8:de:9c:92:66:06:44:be:d8: 64:3f:cd:f5:a7:91:e2:74:6c:6f:7e:01:35:2a:f5: c1:3b:a6:ec:eb:c5:d0:65:02:31:95:27:7a:10:9b: e7:26:4a:cb:44:14:09:5d:85:26:08:fb:34:ed:a0: f7:e6:c8:5f:d9:69:af:69:ac:9c:2d:d5:42:aa:13: ce:4e:a6:60:49:c5:be:c4:3f:af:2b:e2:62:6a:14: ee:70:cb:67:52:07:d0:61:46:92:7b:15:9f:e7:b2: 0f:b0:84:fa:49:49:28:78:8c:91:15:66:b4:82:86: c0:4c:13:db:b1:61:48:77:fa:7e:3b:45:45:b5:8d: 54:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:86:8D:89:9D:73:F2:CB:F6:A6:30:6A:F1:12:80:DD:E1:C8:48:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a1e219f1-4e6f-3b25-8e70-00d949fa391d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl X509v3 Authority Key Identifier: keyid:64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer sbgp-ipAddrBlock: critical IPv4: 156.146.128.0/17 158.41.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:74:84:be:bd:d3:36:66:0a:97:c3:a0:fc:67:d9:fd:1f:3c: 4d:03:f5:1d:53:a9:47:db:7d:80:d4:d1:7e:14:b2:89:42:a1: c0:80:35:ea:91:6b:98:21:6a:e4:89:d6:77:23:9e:a2:1b:b6: 96:f8:49:41:8c:51:f2:96:e0:fc:a9:b1:54:20:2b:57:f0:85: 38:54:3c:31:70:36:31:87:07:8d:00:a6:a1:b4:47:ec:10:57: b7:93:0b:50:a3:a3:19:f8:a9:f2:36:ee:2d:96:d6:6a:66:2d: 0b:f1:1e:38:a2:fe:50:d8:6d:3d:b0:17:7a:bf:26:72:5a:d7: 3e:8f:d4:71:8d:57:0a:8f:9a:03:ef:2c:5e:fc:2c:5f:a2:e1: 7a:fb:c4:91:4a:00:f7:3f:aa:d1:1e:11:e4:73:e0:61:55:87: 55:c1:54:1c:35:2a:69:99:43:08:8b:be:99:47:66:fe:68:18: 08:c7:6e:5d:2c:c1:1d:10:c2:70:42:a4:64:7d:27:8e:1e:9c: e3:a0:6c:23:27:ea:17:82:b6:cb:98:39:be:82:65:5a:2a:ce: 17:de:4c:65:22:8d:4f:33:a3:89:5b:58:e6:24:3b:c0:36:a3: 22:03:43:56:d5:10:a5:f3:76:5b:0e:36:44:70:31:37:17:02: 0e:74:82:72 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEXTnlM0LT6nGsGZN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFlN2NjYTAtZTY1ZC00MTdkLWE2NTEtMzcxYzkxYmU5 Yzk1MB4XDTI0MDUxMDEzMDAzNloXDTI0MDgwODEzMDAzNlowLzEtMCsGA1UEAxMk NTg3ZjViYTQtYWMwNC00MjFhLWFiMjMtOTQ2NTJjODVjNWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8eiLRXUS42SIQf93k2CFdVPqMK9H++kXNon JfIJv9h3mRq7+yAZrW3m02k5Z69fFjYr2rbkkKoFeWTLBM4CX/iD4kvNFIvAocKY G+vz5uK+BU6rJDh3vVpqAigY97YRr2FXdPhFL1H0TyRXp8QKQ7OGZYbAVDnxsFjr Ez7I3pySZgZEvthkP831p5HidGxvfgE1KvXBO6bs68XQZQIxlSd6EJvnJkrLRBQJ XYUmCPs07aD35shf2WmvaaycLdVCqhPOTqZgScW+xD+vK+JiahTucMtnUgfQYUaS exWf57IPsIT6SUkoeIyRFWa0gobATBPbsWFId/p+O0VFtY1UVwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHqGjYmdc/LL9qYwavESgN3hyEiEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3 Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFjOTFiZTljOTUvYTFlMjE5ZjEtNGU2Zi0z YjI1LThlNzAtMDBkOTQ5ZmEzOTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjFlN2NjYTAtZTY1ZC00MTdkLWE2 NTEtMzcxYzkxYmU5Yzk1LzYxZTdjY2EwLWU2NWQtNDE3ZC1hNjUxLTM3MWM5MWJl OWM5NS5jcmwwHwYDVR0jBBgwFoAUZKKfsBKjdPIJ4gOO6+LG02MkVyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFj OTFiZTljOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHnJKAAwQH nimAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFN0hL690zZmCpfDoPxn2f0fPE0D9R1TqUfbfYDU0X4UsolC ocCANeqRa5ghauSJ1ncjnqIbtpb4SUGMUfKW4PypsVQgK1fwhThUPDFwNjGHB40A pqG0R+wQV7eTC1Cjoxn4qfI27i2W1mpmLQvxHjii/lDYbT2wF3q/JnJa1z6P1HGN VwqPmgPvLF78LF+i4Xr7xJFKAPc/qtEeEeRz4GFVh1XBVBw1KmmZQwiLvplHZv5o GAjHbl0swR0QwnBCpGR9J44enOOgbCMn6heCtsuYOb6CZVoqzhfeTGUijU8zo4lb WOYkO8A2oyIDQ1bVEKXzdlsONkRwMTcXAg50gnI= -----END CERTIFICATE-----Generated at Sat May 18 01:32:34 2024 by rpki-client on console-fra.rpki-client.org