$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2af590ad-2847-4970-8c2f-c8714fe9c558/666a7cbb-d8e8-37dd-a208-8f6cc6a5103d.roa File: 666a7cbb-d8e8-37dd-a208-8f6cc6a5103d.roa (raw, json) Hash identifier: 1I/7ExIuaQBRYROa6KMNuLVDURK1UhM4hYVgwWtflvA= Subject key identifier: 47:70:17:77:0D:45:37:70:1E:BA:2F:27:4D:20:CC:FD:CD:56:C3:D7 Certificate issuer: /CN=2af590ad-2847-4970-8c2f-c8714fe9c558 Certificate serial: 010D0C9F432858452AB7DFFD78B7AC7811FB3380 Authority key identifier: 63:06:A3:BC:43:00:71:CD:AD:71:49:DA:6B:C6:82:75:52:5E:3A:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2af590ad-2847-4970-8c2f-c8714fe9c558.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2af590ad-2847-4970-8c2f-c8714fe9c558/666a7cbb-d8e8-37dd-a208-8f6cc6a5103d.roa Signing time: Mon 11 Mar 2024 01:00:26 +0000 ROA not before: Mon 11 Mar 2024 01:00:26 +0000 ROA not after: Sun 09 Jun 2024 01:00:26 +0000 asID: 11385 IP address blocks: 192.110.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2af590ad-2847-4970-8c2f-c8714fe9c558/2af590ad-2847-4970-8c2f-c8714fe9c558.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2af590ad-2847-4970-8c2f-c8714fe9c558/2af590ad-2847-4970-8c2f-c8714fe9c558.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2af590ad-2847-4970-8c2f-c8714fe9c558.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:2a:b7:df:fd:78:b7:ac:78:11:fb:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2af590ad-2847-4970-8c2f-c8714fe9c558 Validity Not Before: Mar 11 01:00:26 2024 GMT Not After : Jun 9 01:00:26 2024 GMT Subject: CN=9739cac5-5610-4a41-82e1-5615cc311021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:87:68:41:b6:f0:f3:5d:e7:1e:22:bf:3e:70: 44:3f:8a:0e:e1:89:81:5f:c9:38:dc:51:01:52:cc: ed:6f:b6:cc:38:d1:41:62:ec:19:69:c5:78:68:29: 5e:70:a1:32:b4:4d:9c:9b:b1:5b:8f:1d:69:82:77: a9:62:57:0e:e0:d8:db:87:af:c3:74:90:f9:fb:82: b2:c0:f3:99:1e:0c:72:1e:c8:25:8b:5a:1e:8f:75: 46:1a:d8:ee:96:80:d7:2d:2d:38:3a:bb:27:27:12: 96:86:e7:57:86:43:72:67:b3:15:ee:2b:3f:e1:82: 5f:35:7c:58:53:fe:39:c4:02:19:d3:23:f4:0c:7c: fa:b8:43:1c:c2:e0:b2:f1:00:03:63:08:f4:70:a8: 4a:fb:22:c5:9b:db:c8:fd:36:7f:55:c1:d5:48:df: 90:83:28:de:df:dd:7d:36:35:e2:c3:1e:06:2a:64: 1f:6a:12:64:6a:fc:33:8c:49:16:c2:04:f9:00:c3: 1c:44:15:2d:6f:86:c4:27:e9:74:ac:c3:fd:4c:3d: 67:79:47:66:73:8c:1c:11:c1:43:76:ff:ca:c2:b7: da:85:cb:33:a5:11:a4:82:7c:ab:77:19:e2:75:65: 7e:60:35:fe:ac:75:6e:a8:26:99:b2:a6:67:f7:e6: 23:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:70:17:77:0D:45:37:70:1E:BA:2F:27:4D:20:CC:FD:CD:56:C3:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2af590ad-2847-4970-8c2f-c8714fe9c558/666a7cbb-d8e8-37dd-a208-8f6cc6a5103d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2af590ad-2847-4970-8c2f-c8714fe9c558/2af590ad-2847-4970-8c2f-c8714fe9c558.crl X509v3 Authority Key Identifier: keyid:63:06:A3:BC:43:00:71:CD:AD:71:49:DA:6B:C6:82:75:52:5E:3A:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2af590ad-2847-4970-8c2f-c8714fe9c558.cer sbgp-ipAddrBlock: critical IPv4: 192.110.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:06:10:af:3c:e2:8a:dd:2a:42:40:1b:85:29:11:fd:6c:95: ae:8e:80:10:0b:62:e8:04:03:57:75:8c:aa:31:cd:c6:5d:83: 58:09:8d:62:75:35:a5:33:be:a7:4d:ba:d8:e6:5b:c5:57:a9: d4:98:45:0d:3c:89:88:13:81:41:40:f3:fa:63:0a:de:2c:c8: 67:96:23:d1:19:0c:00:cc:3a:73:03:dc:b3:a6:37:87:1e:d9: 8d:90:04:59:45:27:5f:34:12:d1:66:46:44:92:0b:cf:ac:bb: 8f:18:e5:0e:c7:d3:18:1b:7f:f9:30:b7:02:7a:f6:a2:6c:68: 10:f2:85:d4:d0:f5:c7:da:26:9b:58:00:53:37:8c:3a:8a:8f: fe:4f:23:af:51:78:05:a8:7b:88:17:28:a3:b7:a5:ac:8d:6d: 9f:ed:b7:fc:7a:78:ca:32:f1:a3:1a:21:05:7b:e0:07:ab:00: 3c:f2:ae:24:78:17:98:67:5f:55:99:96:05:36:e5:86:7b:3a: d5:0c:78:60:95:e1:c9:40:f7:e3:06:9e:ba:f7:5b:be:25:bf: 66:1c:f5:9c:7e:1c:cc:ff:49:77:77:87:8c:e4:b9:fc:0d:39: e2:25:26:32:57:ad:28:32:8d:d0:ea:26:d5:96:26:e6:40:1a: 5f:f5:76:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUqt9/9eLeseBH7M4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFmNTkwYWQtMjg0Ny00OTcwLThjMmYtYzg3MTRmZTlj NTU4MB4XDTI0MDMxMTAxMDAyNloXDTI0MDYwOTAxMDAyNlowLzEtMCsGA1UEAxMk OTczOWNhYzUtNTYxMC00YTQxLTgyZTEtNTYxNWNjMzExMDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmodoQbbw813nHiK/PnBEP4oO4YmBX8k43FEB Usztb7bMONFBYuwZacV4aClecKEytE2cm7Fbjx1pgnepYlcO4Njbh6/DdJD5+4Ky wPOZHgxyHsgli1oej3VGGtjuloDXLS04OrsnJxKWhudXhkNyZ7MV7is/4YJfNXxY U/45xAIZ0yP0DHz6uEMcwuCy8QADYwj0cKhK+yLFm9vI/TZ/VcHVSN+Qgyje3919 NjXiwx4GKmQfahJkavwzjEkWwgT5AMMcRBUtb4bEJ+l0rMP9TD1neUdmc4wcEcFD dv/KwrfahcszpRGkgnyrdxnidWV+YDX+rHVuqCaZsqZn9+Yj4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdwF3cNRTdwHrovJ00gzP3NVsPXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yYWY1 OTBhZC0yODQ3LTQ5NzAtOGMyZi1jODcxNGZlOWM1NTgvNjY2YTdjYmItZDhlOC0z N2RkLWEyMDgtOGY2Y2M2YTUxMDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmFmNTkwYWQtMjg0Ny00OTcwLThj MmYtYzg3MTRmZTljNTU4LzJhZjU5MGFkLTI4NDctNDk3MC04YzJmLWM4NzE0ZmU5 YzU1OC5jcmwwHwYDVR0jBBgwFoAUYwajvEMAcc2tcUnaa8aCdVJeOj8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yYWY1OTBhZC0yODQ3LTQ5NzAtOGMyZi1jODcx NGZlOWM1NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwG6cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEGEK884ordKkJAG4UpEf1sla6OgBALYugEA1d1jKoxzcZdg1gJjWJ1 NaUzvqdNutjmW8VXqdSYRQ08iYgTgUFA8/pjCt4syGeWI9EZDADMOnMD3LOmN4ce 2Y2QBFlFJ180EtFmRkSSC8+su48Y5Q7H0xgbf/kwtwJ69qJsaBDyhdTQ9cfaJptY AFM3jDqKj/5PI69ReAWoe4gXKKO3payNbZ/tt/x6eMoy8aMaIQV74AerADzyriR4 F5hnX1WZlgU25YZ7OtUMeGCV4clA9+MGnrr3W74lv2Yc9Zx+HMz/SXd3h4zkufwN OeIlJjJXrSgyjdDqJtWWJuZAGl/1dsc= -----END CERTIFICATE-----Generated at Wed May 15 15:09:00 2024 by rpki-client on console-fra.rpki-client.org