$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/836781a2-5e0f-3d21-a688-e7561146e9f7.roa File: 836781a2-5e0f-3d21-a688-e7561146e9f7.roa (raw, json) Hash identifier: XJ+dR2WQu7zRDIlNsqYnaPYt6pW9w8bzZ8i83LdIZB4= Subject key identifier: AD:FC:6C:18:21:CA:68:F1:42:89:28:39:4A:FB:0E:80:96:8E:18:FA Certificate issuer: /CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c Certificate serial: 010D0C9F432858455333476E1DEF65C82A893200 Authority key identifier: 36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/836781a2-5e0f-3d21-a688-e7561146e9f7.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 2914 IP address blocks: 141.195.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:47:6e:1d:ef:65:c8:2a:89:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=a7e040f0-8ffd-46b6-bcf9-3e09b551b3df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ae:36:15:57:3e:02:81:59:a8:3c:75:79:c0: 03:62:fb:47:0c:8b:30:33:dc:07:f7:24:aa:7a:10: 4e:69:3d:09:64:ab:00:92:6b:dd:8a:e3:a2:99:8c: 4e:71:38:f5:3b:99:1b:eb:96:fb:ea:b2:79:de:18: d5:4b:fd:0c:8c:57:63:0b:57:f6:66:de:23:25:3b: ba:2a:52:18:8c:bd:8f:75:2c:88:23:a3:53:b9:b9: e8:76:f8:f4:42:70:37:db:3d:e7:f1:37:f7:f1:8f: 4d:41:0d:03:3e:76:0f:2b:92:31:65:5c:c4:a9:60: 7d:dd:f3:5d:4f:a9:a5:aa:76:ea:55:4e:0a:cc:22: 1b:18:33:3c:0a:8f:d9:1e:5f:42:09:cf:66:d0:3d: 83:6e:d4:41:ae:75:2e:6c:bd:eb:75:f1:26:df:8f: 94:98:38:1d:e4:ee:05:5f:03:9f:8d:4c:9a:33:91: 9f:d2:f5:64:b3:f2:55:de:25:a9:06:6f:98:51:e9: bc:6f:c7:b1:64:4d:13:4d:60:a0:c9:dd:c3:4d:e6: 92:a4:32:73:b5:7b:4e:36:1f:cc:e3:61:a9:7b:f8: 61:d6:fe:25:99:5e:32:08:18:40:f0:27:76:0c:5f: 2e:b7:55:dd:81:09:ce:28:e0:6f:68:03:0d:79:d6: 38:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FC:6C:18:21:CA:68:F1:42:89:28:39:4A:FB:0E:80:96:8E:18:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/836781a2-5e0f-3d21-a688-e7561146e9f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl X509v3 Authority Key Identifier: keyid:36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer sbgp-ipAddrBlock: critical IPv4: 141.195.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:af:78:dd:e2:5a:f4:ad:a0:c2:34:a6:e5:c2:06:81:65:1f: 93:6b:53:9f:bd:12:0b:7b:f8:58:47:b5:8b:f6:42:6c:c5:79: 84:7a:69:08:64:80:4d:a6:0c:1d:6b:7b:75:64:64:57:2b:85: dc:44:2a:e5:6f:b7:bf:46:fc:56:db:c3:c8:2d:5c:f8:20:41: d5:e4:af:98:e6:b6:96:14:f4:c2:6b:f0:96:98:4c:14:96:f4: 75:ad:50:92:66:06:69:e6:a5:cc:bc:88:04:50:fb:d7:8c:f2: 79:e0:4d:dd:fb:54:7b:8f:d6:c8:a9:1d:f7:c4:e1:79:b4:c3: 2f:29:22:02:dc:b6:1e:8b:b5:d5:95:64:54:67:81:08:da:22: fc:72:61:15:59:11:aa:1d:0e:12:d5:b2:88:4a:69:0b:6a:67: d2:56:68:83:9b:90:b4:52:c3:17:6b:4e:20:22:79:97:df:15: 22:cc:d5:b2:e1:81:07:50:47:24:3d:8b:1a:11:26:35:25:9b: cc:39:a1:a8:48:2d:6a:be:97:56:11:79:12:e4:f4:20:86:ef: f9:9d:6e:00:b7:a9:c7:5e:3b:5d:8b:6c:09:58:48:53:d0:40: c2:68:d5:0b:fe:00:22:bd:a5:93:fd:51:55:89:08:9b:cd:55: 66:3f:1c:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTM0duHe9lyCqJMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmZDljODctOWRjOC00OGMyLTljN2QtZTcyNDEyYTM1 ZTVjMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk YTdlMDQwZjAtOGZmZC00NmI2LWJjZjktM2UwOWI1NTFiM2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK42FVc+AoFZqDx1ecADYvtHDIswM9wH9ySq ehBOaT0JZKsAkmvdiuOimYxOcTj1O5kb65b76rJ53hjVS/0MjFdjC1f2Zt4jJTu6 KlIYjL2PdSyII6NTubnodvj0QnA32z3n8Tf38Y9NQQ0DPnYPK5IxZVzEqWB93fNd T6mlqnbqVU4KzCIbGDM8Co/ZHl9CCc9m0D2DbtRBrnUubL3rdfEm34+UmDgd5O4F XwOfjUyaM5Gf0vVks/JV3iWpBm+YUem8b8exZE0TTWCgyd3DTeaSpDJztXtONh/M 42Gpe/hh1v4lmV4yCBhA8Cd2DF8ut1XdgQnOKOBvaAMNedY4bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK38bBghymjxQokoOUr7DoCWjhj6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82MGZk OWM4Ny05ZGM4LTQ4YzItOWM3ZC1lNzI0MTJhMzVlNWMvODM2NzgxYTItNWUwZi0z ZDIxLWE2ODgtZTc1NjExNDZlOWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjBmZDljODctOWRjOC00OGMyLTlj N2QtZTcyNDEyYTM1ZTVjLzYwZmQ5Yzg3LTlkYzgtNDhjMi05YzdkLWU3MjQxMmEz NWU1Yy5jcmwwHwYDVR0jBBgwFoAUNi3cZad6EHPmFuNH94D90YlnPrEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82MGZkOWM4Ny05ZGM4LTQ4YzItOWM3ZC1lNzI0 MTJhMzVlNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjcN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiveN3iWvStoMI0puXCBoFlH5NrU5+9Egt7+FhHtYv2QmzFeYR6aQhk gE2mDB1re3VkZFcrhdxEKuVvt79G/Fbbw8gtXPggQdXkr5jmtpYU9MJr8JaYTBSW 9HWtUJJmBmnmpcy8iARQ+9eM8nngTd37VHuP1sipHffE4Xm0wy8pIgLcth6LtdWV ZFRngQjaIvxyYRVZEaodDhLVsohKaQtqZ9JWaIObkLRSwxdrTiAieZffFSLM1bLh gQdQRyQ9ixoRJjUlm8w5oahILWq+l1YReRLk9CCG7/mdbgC3qcdeO12LbAlYSFPQ QMJo1Qv+ACK9pZP9UVWJCJvNVWY/HFM= -----END CERTIFICATE-----Generated at Sun May 5 15:51:12 2024 by rpki-client on console-ams.rpki-client.org