$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa File: 724dc813-9136-3075-bcba-f77834af4133.roa (raw, json) Hash identifier: dazHKyAReaVGhgaAfCp3saJ81Ei/2cTshs20GHLIC4Q= Subject key identifier: 19:E7:46:0D:80:8D:0E:A5:74:09:91:35:01:6B:F1:47:A1:84:E6:16 Certificate issuer: /CN=add35f11-0294-4be9-94b7-49cac2bcb001 Certificate serial: 010D0C9F43285845C5A8F13DB2775F90C74D0480 Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa Signing time: Sun 05 May 2024 13:00:34 +0000 ROA not before: Sun 05 May 2024 13:00:34 +0000 ROA not after: Sat 03 Aug 2024 13:00:34 +0000 asID: 923 IP address blocks: 207.167.121.0/24 maxlen: 24 2602:fbf5::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c5:a8:f1:3d:b2:77:5f:90:c7:4d:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001 Validity Not Before: May 5 13:00:34 2024 GMT Not After : Aug 3 13:00:34 2024 GMT Subject: CN=cf30cebd-9db6-4de1-a116-640ed92dc697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c6:d2:e3:b0:f6:95:64:09:0f:81:f8:46:ee: 9e:35:95:bb:a5:0c:c7:07:d8:16:c7:dc:ea:36:f3: 88:ee:f6:6d:5a:cf:65:41:7a:cb:b7:55:c8:cb:45: 89:12:98:15:a5:c9:44:2a:23:a5:68:3c:2b:49:ba: 3a:ab:d8:b5:52:06:9e:63:ae:ed:a0:69:d4:38:6d: 57:3a:d0:0a:44:91:78:57:5f:4d:5c:d9:0e:5a:5b: 9a:08:28:45:f0:50:7d:e1:dc:e9:32:03:f4:62:15: 2c:fc:54:6a:85:4f:e5:d2:fd:97:db:46:06:58:9d: 66:f7:01:ec:69:6e:ef:2e:e3:4a:84:66:de:f5:68: a2:97:a9:d7:c1:56:dc:ee:6b:42:f4:c0:57:b3:54: d6:2a:26:b2:7f:d8:23:b2:51:2c:f0:ae:00:0f:68: c9:c5:f8:17:6b:59:a7:b4:2e:be:80:65:bc:cc:f3: 44:b6:da:47:15:17:16:be:25:70:55:68:d1:e5:73: 22:b6:34:27:dd:cc:5e:a6:13:c5:8e:f2:a9:8c:33: aa:b3:8f:a8:79:ff:bb:45:bd:1a:78:a7:c1:f5:ff: 26:aa:6a:fc:dc:c8:48:8b:57:93:b2:c4:52:a3:09: e0:aa:ed:ee:e2:e5:1c:56:93:f2:be:ce:32:29:56: e3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E7:46:0D:80:8D:0E:A5:74:09:91:35:01:6B:F1:47:A1:84:E6:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl X509v3 Authority Key Identifier: keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer sbgp-ipAddrBlock: critical IPv4: 207.167.121.0/24 IPv6: 2602:fbf5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:97:6a:50:69:e6:1b:1f:79:2a:95:45:0f:95:48:c2:c2:71: 9e:0a:5f:09:c9:5a:5e:a6:d0:0f:27:b2:34:f5:ab:2d:68:b4: 51:d9:81:55:5d:0a:c1:d5:3a:03:47:d3:17:44:3e:be:53:57: 3e:06:e1:9d:ad:fb:90:6c:44:e0:b9:fe:11:e0:78:4c:ff:7c: 81:f0:14:f4:c6:ad:e9:d5:df:4e:c5:96:b6:4f:10:60:71:ba: dc:4b:09:d2:9c:bd:4d:03:20:5f:87:25:6c:b8:eb:67:2b:88: f0:f1:58:46:6a:81:38:bd:46:13:d9:d3:02:7e:9b:35:64:48: bc:c5:ba:db:a2:2d:b2:6f:73:9f:58:77:4d:af:e6:0a:5c:d5: 39:1f:29:b9:02:a9:d7:a6:b6:77:3d:5f:20:5b:9e:0b:4f:7d: 02:5b:ce:b3:fb:6e:74:4d:52:35:23:e2:38:a1:c4:ea:54:e5: e8:12:fb:f7:24:44:ac:5b:03:de:73:f7:5a:54:2a:5c:d1:02: 39:5a:23:64:27:91:c5:c3:c0:e3:13:0e:8d:95:ee:20:e1:36: 94:9d:66:4d:4d:dc:90:d0:b2:62:16:bf:15:b0:00:4e:22:bc: 75:e1:00:bf:29:1c:5d:64:c7:10:53:f4:5d:26:8d:92:9d:9d: e3:e8:35:53 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEXFqPE9sndfkMdNBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRkMzVmMTEtMDI5NC00YmU5LTk0YjctNDljYWMyYmNi MDAxMB4XDTI0MDUwNTEzMDAzNFoXDTI0MDgwMzEzMDAzNFowLzEtMCsGA1UEAxMk Y2YzMGNlYmQtOWRiNi00ZGUxLWExMTYtNjQwZWQ5MmRjNjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8bS47D2lWQJD4H4Ru6eNZW7pQzHB9gWx9zq NvOI7vZtWs9lQXrLt1XIy0WJEpgVpclEKiOlaDwrSbo6q9i1UgaeY67toGnUOG1X OtAKRJF4V19NXNkOWluaCChF8FB94dzpMgP0YhUs/FRqhU/l0v2X20YGWJ1m9wHs aW7vLuNKhGbe9Wiil6nXwVbc7mtC9MBXs1TWKiayf9gjslEs8K4AD2jJxfgXa1mn tC6+gGW8zPNEttpHFRcWviVwVWjR5XMitjQn3cxephPFjvKpjDOqs4+oef+7Rb0a eKfB9f8mqmr83MhIi1eTssRSowngqu3u4uUcVpPyvs4yKVbjBwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBnnRg2AjQ6ldAmRNQFr8UehhOYWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQz NWYxMS0wMjk0LTRiZTktOTRiNy00OWNhYzJiY2IwMDEvNzI0ZGM4MTMtOTEzNi0z MDc1LWJjYmEtZjc3ODM0YWY0MTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWRkMzVmMTEtMDI5NC00YmU5LTk0 YjctNDljYWMyYmNiMDAxL2FkZDM1ZjExLTAyOTQtNGJlOS05NGI3LTQ5Y2FjMmJj YjAwMS5jcmwwHwYDVR0jBBgwFoAUpXphLLBJKDwfCZ0NXgzzjrlY+MowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQzNWYxMS0wMjk0LTRiZTktOTRiNy00OWNh YzJiY2IwMDEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAz6d5MA4E AgACMAgDBgAmAvv1ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCKl2pQaeYbH3kqlUUPlUjCwnGeCl8JyVpe ptAPJ7I09astaLRR2YFVXQrB1ToDR9MXRD6+U1c+BuGdrfuQbETguf4R4HhM/3yB 8BT0xq3p1d9OxZa2TxBgcbrcSwnSnL1NAyBfhyVsuOtnK4jw8VhGaoE4vUYT2dMC fps1ZEi8xbrboi2yb3OfWHdNr+YKXNU5Hym5AqnXprZ3PV8gW54LT30CW86z+250 TVI1I+I4ocTqVOXoEvv3JESsWwPec/daVCpc0QI5WiNkJ5HFw8DjEw6Nle4g4TaU nWZNTdyQ0LJiFr8VsABOIrx14QC/KRxdZMcQU/RdJo2SnZ3j6DVT -----END CERTIFICATE-----Generated at Sat May 18 17:20:56 2024 by rpki-client on console-ams.rpki-client.org