$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa File: d474896b-8f19-3b64-a77d-131cf6524395.roa (raw, json) Hash identifier: +7V9utlEyC1ZJs0w6D33tp4yDI1TdU0lwv6aVV1MsFs= Subject key identifier: BC:84:B9:ED:71:D6:20:3C:05:E8:F6:30:29:A5:E1:5A:69:D0:45:47 Certificate issuer: /CN=7b840891-ef20-464d-970d-ffec736f7949 Certificate serial: 010D0C9F43285845963342437B13530B26DA3F00 Authority key identifier: 54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa Signing time: Thu 18 Apr 2024 13:00:33 +0000 ROA not before: Thu 18 Apr 2024 13:00:33 +0000 ROA not after: Wed 17 Jul 2024 13:00:33 +0000 asID: 30500 IP address blocks: 208.77.196.0/22 maxlen: 24 208.123.208.0/24 maxlen: 24 208.123.210.0/23 maxlen: 24 208.123.212.0/22 maxlen: 24 208.123.216.0/22 maxlen: 24 74.123.68.0/22 maxlen: 24 198.134.28.0/22 maxlen: 24 2605:e680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:96:33:42:43:7b:13:53:0b:26:da:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b840891-ef20-464d-970d-ffec736f7949 Validity Not Before: Apr 18 13:00:33 2024 GMT Not After : Jul 17 13:00:33 2024 GMT Subject: CN=23d12e7b-0432-4f07-9fce-e1f0247f8f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f6:a4:07:46:c9:16:39:4d:5c:cb:62:95:db: 87:f6:a8:3d:c7:63:c1:b3:ae:3f:cc:1d:af:d0:3f: 00:ac:87:2a:f2:48:41:58:1f:02:a7:ee:4e:09:bc: 73:27:d9:48:75:e8:f1:27:1d:9c:20:47:a6:05:31: 88:52:57:4b:dd:a2:f3:21:31:e6:23:c7:c2:1e:d1: 28:07:cf:d6:73:ef:a8:c7:1f:f2:c1:0d:d0:6d:be: 84:62:fa:28:1a:bb:af:ea:d3:4e:e7:19:40:55:9e: d5:51:90:7b:84:06:68:49:70:24:12:93:5a:35:00: d3:9f:4b:87:cf:63:8e:00:1e:2d:ac:f0:d0:5e:3f: d9:f4:b1:04:36:28:49:8d:f8:46:83:76:22:49:5e: 4d:07:cc:98:9e:a4:da:7c:e3:02:1c:35:ea:0f:fc: f4:a9:e9:87:2a:1d:78:2e:ab:49:27:dd:94:db:2f: e4:99:d3:f2:9c:26:68:24:96:91:19:fc:dc:40:53: b1:22:4d:e6:a0:da:70:9c:b8:e8:83:c2:3a:84:0e: 1c:45:70:ea:fc:48:39:e7:e6:74:8e:28:4f:30:6e: 9c:2a:0b:25:6d:56:0f:59:96:38:e8:7d:0e:48:32: 85:45:6a:04:fa:04:01:74:f0:ae:5b:fb:39:de:bc: 38:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:84:B9:ED:71:D6:20:3C:05:E8:F6:30:29:A5:E1:5A:69:D0:45:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl X509v3 Authority Key Identifier: keyid:54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer sbgp-ipAddrBlock: critical IPv4: 74.123.68.0/22 198.134.28.0/22 208.77.196.0/22 208.123.208.0/24 208.123.210.0-208.123.219.255 IPv6: 2605:e680::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:60:1a:6d:ff:53:82:43:de:a2:04:4a:78:53:85:c5:af:e9: 70:0a:17:16:65:1b:31:1b:ce:a8:13:64:c1:51:39:1e:1b:88: 10:a7:4d:04:54:8b:80:42:93:e2:f2:e6:9f:50:63:55:1c:6f: bf:99:80:79:c4:e9:83:ee:42:0b:89:dd:14:d0:a1:79:38:dc: b9:9a:f6:cc:2c:b8:e6:99:04:70:18:86:57:2c:e8:b6:9f:8a: f2:e2:b2:b7:a4:f0:12:79:76:36:64:8d:fc:cb:59:08:1b:8f: 39:38:40:93:92:29:31:7f:66:6b:41:72:65:2d:f2:f6:10:d5: f6:85:28:36:fd:5c:95:d3:cd:58:3c:51:bc:b2:75:6f:73:c8: 40:a8:c9:32:7b:e8:0c:54:2f:ac:45:5a:2a:01:cc:fe:26:b2: 1d:49:2a:c2:fc:bc:1f:36:fc:73:97:74:f7:13:77:5c:fb:07: 3a:e8:50:17:90:37:e9:5b:c4:d8:bc:78:13:d8:fc:c5:d7:47: 3f:e7:06:cc:72:bb:ac:39:5c:a3:b9:ff:c8:c4:c3:4a:a2:3a: ee:4a:a6:9e:ba:7b:56:d7:84:e9:ab:d5:fc:87:55:cb:af:37: 8b:e5:fd:a5:0b:1f:83:d0:4d:46:df:d0:73:7f:b8:65:b0:d9: e9:bc:f9:97 -----BEGIN CERTIFICATE----- MIIGcjCCBVqgAwIBAgIUAQ0Mn0MoWEWWM0JDexNTCybaPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2I4NDA4OTEtZWYyMC00NjRkLTk3MGQtZmZlYzczNmY3 OTQ5MB4XDTI0MDQxODEzMDAzM1oXDTI0MDcxNzEzMDAzM1owLzEtMCsGA1UEAxMk MjNkMTJlN2ItMDQzMi00ZjA3LTlmY2UtZTFmMDI0N2Y4ZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfakB0bJFjlNXMtilduH9qg9x2PBs64/zB2v 0D8ArIcq8khBWB8Cp+5OCbxzJ9lIdejxJx2cIEemBTGIUldL3aLzITHmI8fCHtEo B8/Wc++oxx/ywQ3Qbb6EYvooGruv6tNO5xlAVZ7VUZB7hAZoSXAkEpNaNQDTn0uH z2OOAB4trPDQXj/Z9LEENihJjfhGg3YiSV5NB8yYnqTafOMCHDXqD/z0qemHKh14 LqtJJ92U2y/kmdPynCZoJJaRGfzcQFOxIk3moNpwnLjog8I6hA4cRXDq/Eg55+Z0 jihPMG6cKgslbVYPWZY46H0OSDKFRWoE+gQBdPCuW/s53rw4owIDAQABo4IDhDCC A4AwHQYDVR0OBBYEFLyEue1x1iA8Bej2MCml4Vpp0EVHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Yjg0 MDg5MS1lZjIwLTQ2NGQtOTcwZC1mZmVjNzM2Zjc5NDkvZDQ3NDg5NmItOGYxOS0z YjY0LWE3N2QtMTMxY2Y2NTI0Mzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2I4NDA4OTEtZWYyMC00NjRkLTk3 MGQtZmZlYzczNmY3OTQ5LzdiODQwODkxLWVmMjAtNDY0ZC05NzBkLWZmZWM3MzZm Nzk0OS5jcmwwHwYDVR0jBBgwFoAUVJrTOw8GTIGZDMgH+o0kE8Of9tAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83Yjg0MDg5MS1lZjIwLTQ2NGQtOTcwZC1mZmVj NzM2Zjc5NDkuY2VyME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQCSntEAwQC xoYcAwQC0E3EAwQA0HvQMAwDBAHQe9IDBALQe9gwDQQCAAIwBwMFACYF5oAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAH2Aabf9TgkPeogRKeFOFxa/pcAoXFmUbMRvOqBNkwVE5HhuIEKdNBFSL gEKT4vLmn1BjVRxvv5mAecTpg+5CC4ndFNCheTjcuZr2zCy45pkEcBiGVyzotp+K 8uKyt6TwEnl2NmSN/MtZCBuPOThAk5IpMX9ma0FyZS3y9hDV9oUoNv1cldPNWDxR vLJ1b3PIQKjJMnvoDFQvrEVaKgHM/iayHUkqwvy8Hzb8c5d09xN3XPsHOuhQF5A3 6VvE2Lx4E9j8xddHP+cGzHK7rDlco7n/yMTDSqI67kqmnrp7VteE6avV/IdVy683 i+X9pQsfg9BNRt/Qc3+4ZbDZ6bz5lw== -----END CERTIFICATE-----Generated at Sat May 18 15:35:28 2024 by rpki-client on console-fra.rpki-client.org