$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/1dafa895-ce97-3c2b-9067-e9ff7279b148.roa File: 1dafa895-ce97-3c2b-9067-e9ff7279b148.roa (raw, json) Hash identifier: NuvG+txgR0EFWnBZOD82HmyukGW/n95f0pwZH9Vx3eg= Subject key identifier: B9:F7:F1:86:AF:FB:06:CA:CF:71:D5:DE:BC:39:A0:F6:57:12:04:B8 Certificate issuer: /CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Certificate serial: 010D0C9F432858456822EAFA589DC49773AA9A00 Authority key identifier: D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/1dafa895-ce97-3c2b-9067-e9ff7279b148.roa Signing time: Tue 02 Apr 2024 01:00:26 +0000 ROA not before: Tue 02 Apr 2024 01:00:26 +0000 ROA not after: Mon 01 Jul 2024 01:00:26 +0000 asID: 46672 IP address blocks: 199.30.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:68:22:ea:fa:58:9d:c4:97:73:aa:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Validity Not Before: Apr 2 01:00:26 2024 GMT Not After : Jul 1 01:00:26 2024 GMT Subject: CN=865a12cb-6107-4f58-ba8e-0535feee2885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8d:8b:e6:bf:6d:d6:fa:a1:d8:88:36:03:31: f4:ec:07:b4:d8:a4:f6:9b:f9:81:ba:f1:cd:a5:05: 23:5e:c7:c8:1c:aa:41:d0:b7:04:55:3c:96:53:5d: 13:2a:5f:8d:f7:35:34:43:b7:c5:a5:e1:b7:51:e7: 28:d7:1d:c2:62:35:77:0c:d5:c3:88:33:0a:f6:a8: 7c:55:df:f5:60:5d:e4:18:a2:2b:26:cf:28:1d:1b: f7:15:bd:4b:bb:97:e5:23:43:ca:cb:20:85:77:7c: 5a:fd:93:e9:7b:e7:9d:b7:b1:5b:10:2a:6c:de:3c: e7:10:7f:89:01:eb:d6:64:68:30:61:79:8d:a9:ad: 81:b5:6b:db:1e:01:af:e5:b6:8d:8d:77:9f:44:a9: 26:10:ff:f4:89:94:a5:8c:90:a8:5d:ce:11:cd:80: bb:dd:42:3f:8f:73:11:40:0c:e1:3c:31:95:8c:69: b0:4b:39:c5:a9:29:1b:01:a4:dc:1f:5b:e7:30:59: 32:bc:90:a3:34:6c:dc:a7:97:26:b4:3d:da:db:51: ab:ee:06:87:2c:03:de:79:cb:12:95:4d:9b:cc:9b: 0f:82:fb:39:e7:44:f6:b6:12:aa:ca:81:8e:a6:45: ef:f4:32:0f:e5:4e:81:33:b2:26:32:ae:b2:aa:84: d8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F7:F1:86:AF:FB:06:CA:CF:71:D5:DE:BC:39:A0:F6:57:12:04:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/1dafa895-ce97-3c2b-9067-e9ff7279b148.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl X509v3 Authority Key Identifier: keyid:D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer sbgp-ipAddrBlock: critical IPv4: 199.30.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:34:a1:5f:c3:fd:9a:94:f1:9c:d9:cb:41:e5:62:65:bf:fa: a5:6c:34:fd:87:e7:9c:ae:86:f3:45:9f:9d:ea:44:d3:34:6f: d3:c8:85:f1:e4:5f:b2:1c:16:32:75:7a:28:b6:b9:c8:50:e4: 84:08:43:61:b2:5d:72:00:e0:a2:f2:86:76:7e:47:ab:12:24: 63:7a:06:0c:3a:15:b9:1b:79:12:2a:e1:d2:11:09:7d:b7:18: d6:ab:de:97:19:2a:7a:d6:e6:a3:8b:ec:61:f6:08:9b:68:23: be:1c:23:3a:dc:19:76:e7:a3:a3:08:0d:97:88:49:68:25:f4: 7c:f8:83:d4:37:80:f1:08:26:3a:7c:b3:6a:3f:73:53:ab:b6: 8a:71:d5:c7:20:ae:3d:f4:ec:78:ee:0b:ed:15:30:7f:19:2f: ba:83:74:49:f6:89:a9:e6:0f:81:61:3f:3a:a1:b3:e6:96:5b: a1:2b:70:0e:e5:04:51:e0:a8:90:fa:fd:59:1b:52:cf:00:99: 28:2f:e4:be:8d:45:d0:ef:54:0f:0c:ae:42:e5:ca:90:1e:ea: 51:5f:b6:b2:4a:f4:a9:d0:c8:70:9e:34:30:e4:49:cf:6d:8d: 27:a9:05:f3:75:15:df:dc:8c:26:42:4c:48:74:0c:b1:24:4f: e1:07:dc:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVoIur6WJ3El3OqmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY0YjFjYjctNWZiMi00YTM5LWI0MzEtYzEzOTdmNjNh ODE4MB4XDTI0MDQwMjAxMDAyNloXDTI0MDcwMTAxMDAyNlowLzEtMCsGA1UEAxMk ODY1YTEyY2ItNjEwNy00ZjU4LWJhOGUtMDUzNWZlZWUyODg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho2L5r9t1vqh2Ig2AzH07Ae02KT2m/mBuvHN pQUjXsfIHKpB0LcEVTyWU10TKl+N9zU0Q7fFpeG3Ueco1x3CYjV3DNXDiDMK9qh8 Vd/1YF3kGKIrJs8oHRv3Fb1Lu5flI0PKyyCFd3xa/ZPpe+edt7FbECps3jznEH+J AevWZGgwYXmNqa2BtWvbHgGv5baNjXefRKkmEP/0iZSljJCoXc4RzYC73UI/j3MR QAzhPDGVjGmwSznFqSkbAaTcH1vnMFkyvJCjNGzcp5cmtD3a21Gr7gaHLAPeecsS lU2bzJsPgvs550T2thKqyoGOpkXv9DIP5U6BM7ImMq6yqoTYeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLn38Yav+wbKz3HV3rw5oPZXEgS4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRi MWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5N2Y2M2E4MTgvMWRhZmE4OTUtY2U5Ny0z YzJiLTkwNjctZTlmZjcyNzliMTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDY0YjFjYjctNWZiMi00YTM5LWI0 MzEtYzEzOTdmNjNhODE4LzA2NGIxY2I3LTVmYjItNGEzOS1iNDMxLWMxMzk3ZjYz YTgxOC5jcmwwHwYDVR0jBBgwFoAU1T4vELW7cKEguZWHWaSc6pjU1OswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRiMWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5 N2Y2M2E4MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxx6CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI00oV/D/ZqU8ZzZy0HlYmW/+qVsNP2H55yuhvNFn53qRNM0b9PIhfHk X7IcFjJ1eii2uchQ5IQIQ2GyXXIA4KLyhnZ+R6sSJGN6Bgw6FbkbeRIq4dIRCX23 GNar3pcZKnrW5qOL7GH2CJtoI74cIzrcGXbno6MIDZeISWgl9Hz4g9Q3gPEIJjp8 s2o/c1Ortopx1ccgrj307HjuC+0VMH8ZL7qDdEn2ianmD4FhPzqhs+aWW6ErcA7l BFHgqJD6/VkbUs8AmSgv5L6NRdDvVA8MrkLlypAe6lFftrJK9KnQyHCeNDDkSc9t jSepBfN1Fd/cjCZCTEh0DLEkT+EH3L0= -----END CERTIFICATE-----