$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/1fed6c3c-17d8-3f60-ac4e-0757fcf0829a.roa File: 1fed6c3c-17d8-3f60-ac4e-0757fcf0829a.roa (raw, json) Hash identifier: Xr9K3B4e8Q6UUntr0xXpPep9F7vspDl0SEoy3B1TsDQ= Subject key identifier: DA:34:B5:9D:BB:00:CE:A8:82:60:AC:93:3B:11:0D:7E:78:21:42:91 Certificate issuer: /CN=76d1290b-e045-43ca-96b8-a3da87e72c4b Certificate serial: 010D0C9F43285845A428D34D669FF1A8C19DFD80 Authority key identifier: 7F:96:EF:CA:02:7E:0C:BE:ED:E1:6B:31:77:0E:29:D4:0A:B4:F3:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/1fed6c3c-17d8-3f60-ac4e-0757fcf0829a.roa Signing time: Tue 23 Apr 2024 13:00:34 +0000 ROA not before: Tue 23 Apr 2024 13:00:34 +0000 ROA not after: Mon 22 Jul 2024 13:00:34 +0000 asID: 400191 IP address blocks: 66.59.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/76d1290b-e045-43ca-96b8-a3da87e72c4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/76d1290b-e045-43ca-96b8-a3da87e72c4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a4:28:d3:4d:66:9f:f1:a8:c1:9d:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76d1290b-e045-43ca-96b8-a3da87e72c4b Validity Not Before: Apr 23 13:00:34 2024 GMT Not After : Jul 22 13:00:34 2024 GMT Subject: CN=c08be0cc-f73a-4282-8617-fd90f426c424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c3:0b:d9:a8:05:31:c7:84:3b:45:ea:4f:ba: 74:20:8d:ee:7f:12:e3:53:8d:1c:99:66:74:8d:d7: 98:8a:ce:be:c1:62:17:74:62:ec:0e:0e:97:d3:54: 9f:f2:1d:e3:42:94:da:1c:ac:76:3e:94:ab:d3:80: 34:7f:9f:42:5b:43:05:3b:7f:76:c2:1e:f2:0d:b3: f5:ff:96:0c:69:96:f9:43:f0:0d:18:f8:59:d7:9a: c3:b2:e4:a0:e4:02:26:17:20:1a:57:48:cc:de:bd: 25:c8:3f:fd:a2:b8:13:28:11:6e:98:60:a2:ee:f0: 9b:2f:8a:e1:b8:91:ba:e8:84:d0:49:2c:75:23:0a: 5a:35:58:8f:d4:99:74:d1:9c:e3:dc:82:b2:0c:4b: db:6f:53:d0:8a:3a:58:59:da:0a:5d:83:43:f5:43: e0:d4:fa:84:bf:db:a9:a2:c5:2e:87:50:76:a6:9c: 12:22:b2:68:92:fa:5a:47:b1:62:ca:1a:eb:07:4b: e4:60:ce:72:a3:1d:67:ba:dc:1d:06:4d:f0:1f:77: c9:43:36:9f:7d:9f:db:9c:e0:25:cd:ca:35:a8:3c: 1e:1c:95:0c:0b:e5:82:97:cd:8f:24:08:84:ba:c1: 37:2b:11:77:8d:09:01:3a:1c:18:50:bf:0b:33:f5: ca:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:34:B5:9D:BB:00:CE:A8:82:60:AC:93:3B:11:0D:7E:78:21:42:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/1fed6c3c-17d8-3f60-ac4e-0757fcf0829a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/76d1290b-e045-43ca-96b8-a3da87e72c4b.crl X509v3 Authority Key Identifier: keyid:7F:96:EF:CA:02:7E:0C:BE:ED:E1:6B:31:77:0E:29:D4:0A:B4:F3:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b.cer sbgp-ipAddrBlock: critical IPv4: 66.59.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:37:dd:8d:90:ea:2c:7f:a8:38:75:27:88:b3:db:24:1a:80: f8:61:33:a8:0b:e6:f0:ba:c2:c4:5e:a7:59:e3:65:80:14:18: 6c:c8:05:b1:50:ee:0e:13:8e:c8:46:00:f9:ed:f4:7e:ec:80: 45:2c:56:bf:85:d6:0b:59:7d:3f:84:40:31:ad:39:29:29:0b: bf:4f:ce:b2:e4:7a:25:af:f4:84:04:e8:b3:32:e0:52:3f:f1: a6:37:6f:c0:25:4f:24:72:43:56:83:dc:e2:bb:9d:18:f0:d0: 0d:ab:74:e4:ce:f3:26:e1:b1:37:bb:5e:db:f2:69:58:7a:12: 7f:15:9f:28:14:a9:21:5f:b0:e9:62:13:4e:27:11:c9:82:8b: a2:f8:59:35:d6:6b:62:a2:81:58:9c:e6:ce:fe:f7:93:86:62: 45:e0:9a:6b:67:56:93:ce:b0:09:76:5b:19:3a:29:e9:69:18: d8:0e:d2:f8:ec:9a:a0:20:a0:30:8c:74:d2:8c:81:4e:33:2e: 27:95:9c:a8:e5:11:e3:76:28:ba:22:26:8d:51:25:65:4c:3c: c6:5c:a7:64:1a:c6:3b:43:d5:ba:bf:48:36:db:06:04:14:82: b9:fb:88:99:ee:b7:e0:d9:f6:21:e3:60:5c:59:ce:eb:4f:ce: 17:4d:a6:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWkKNNNZp/xqMGd/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZkMTI5MGItZTA0NS00M2NhLTk2YjgtYTNkYTg3ZTcy YzRiMB4XDTI0MDQyMzEzMDAzNFoXDTI0MDcyMjEzMDAzNFowLzEtMCsGA1UEAxMk YzA4YmUwY2MtZjczYS00MjgyLTg2MTctZmQ5MGY0MjZjNDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8ML2agFMceEO0XqT7p0II3ufxLjU40cmWZ0 jdeYis6+wWIXdGLsDg6X01Sf8h3jQpTaHKx2PpSr04A0f59CW0MFO392wh7yDbP1 /5YMaZb5Q/ANGPhZ15rDsuSg5AImFyAaV0jM3r0lyD/9orgTKBFumGCi7vCbL4rh uJG66ITQSSx1IwpaNViP1Jl00Zzj3IKyDEvbb1PQijpYWdoKXYND9UPg1PqEv9up osUuh1B2ppwSIrJokvpaR7FiyhrrB0vkYM5yox1nutwdBk3wH3fJQzaffZ/bnOAl zco1qDweHJUMC+WCl82PJAiEusE3KxF3jQkBOhwYUL8LM/XKqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNo0tZ27AM6ogmCskzsRDX54IUKRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NmQx MjkwYi1lMDQ1LTQzY2EtOTZiOC1hM2RhODdlNzJjNGIvMWZlZDZjM2MtMTdkOC0z ZjYwLWFjNGUtMDc1N2ZjZjA4MjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzZkMTI5MGItZTA0NS00M2NhLTk2 YjgtYTNkYTg3ZTcyYzRiLzc2ZDEyOTBiLWUwNDUtNDNjYS05NmI4LWEzZGE4N2U3 MmM0Yi5jcmwwHwYDVR0jBBgwFoAUf5bvygJ+DL7t4Wsxdw4p1Aq089IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NmQxMjkwYi1lMDQ1LTQzY2EtOTZiOC1hM2Rh ODdlNzJjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjvDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMs33Y2Q6ix/qDh1J4iz2yQagPhhM6gL5vC6wsRep1njZYAUGGzIBbFQ 7g4TjshGAPnt9H7sgEUsVr+F1gtZfT+EQDGtOSkpC79PzrLkeiWv9IQE6LMy4FI/ 8aY3b8AlTyRyQ1aD3OK7nRjw0A2rdOTO8ybhsTe7XtvyaVh6En8VnygUqSFfsOli E04nEcmCi6L4WTXWa2KigVic5s7+95OGYkXgmmtnVpPOsAl2Wxk6KelpGNgO0vjs mqAgoDCMdNKMgU4zLieVnKjlEeN2KLoiJo1RJWVMPMZcp2QaxjtD1bq/SDbbBgQU grn7iJnut+DZ9iHjYFxZzutPzhdNpoI= -----END CERTIFICATE-----Generated at Fri May 24 11:43:38 2024 by rpki-client on console-ams.rpki-client.org