$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d496bf54-ff2f-3588-af59-de7d639e9932.roa File: d496bf54-ff2f-3588-af59-de7d639e9932.roa (raw, json) Hash identifier: WQ9yHlzPL59+EYu9rr8wXOmILFKavmvBiH5P7nzO1R4= Subject key identifier: 53:81:C0:16:7E:71:A4:17:52:83:EA:C8:A9:BF:41:AC:D4:BB:36:34 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F432858454AD2CC3C27F1522862BB2F80 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d496bf54-ff2f-3588-af59-de7d639e9932.roa Signing time: Fri 22 Mar 2024 13:00:34 +0000 ROA not before: Fri 22 Mar 2024 13:00:34 +0000 ROA not after: Thu 20 Jun 2024 13:00:34 +0000 asID: 397373 IP address blocks: 168.91.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:4a:d2:cc:3c:27:f1:52:28:62:bb:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Mar 22 13:00:34 2024 GMT Not After : Jun 20 13:00:34 2024 GMT Subject: CN=65062b6d-b763-470c-b737-bd7d49a59ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ec:87:50:ac:ee:14:91:c3:72:42:54:ab:ab: 0a:81:8d:66:31:1e:d9:ba:da:25:e3:d1:f0:9a:0d: b6:58:09:d7:27:fe:58:9c:88:97:c5:0c:14:6b:de: 59:39:4c:5c:09:ab:ac:29:d8:0b:48:41:70:3e:e4: 29:5f:6c:5a:cd:e4:c9:87:1c:24:23:77:f1:6c:37: 73:b9:c7:0b:33:6c:55:23:38:8b:88:31:e9:d8:83: 2f:b4:09:0c:20:a5:b0:48:c1:e7:df:c5:16:8b:ca: f3:66:4d:d3:76:19:d7:8a:86:4f:38:c3:66:87:14: 06:22:ba:91:b6:94:e9:49:f2:19:14:b1:3a:f1:0a: 7c:b6:d6:92:60:37:b9:98:48:59:40:aa:0c:d4:66: b4:f8:93:da:f0:3a:f7:fe:77:37:de:0e:99:fe:00: 85:75:b2:8c:d5:1c:35:4e:a7:a9:78:f0:72:7a:d6: 94:43:50:0c:5e:a6:e9:c3:c5:9c:af:f1:b6:ee:78: 13:23:35:ff:b4:88:fc:eb:db:bd:2b:84:47:d0:32: 62:87:d5:e4:b8:0b:4b:1b:ea:cc:b2:f3:80:e8:6f: 68:b3:3d:a6:76:30:54:1d:7a:c1:da:4a:aa:73:43: 4f:14:3d:27:67:a1:a0:c3:05:82:18:86:60:9c:14: 21:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:81:C0:16:7E:71:A4:17:52:83:EA:C8:A9:BF:41:AC:D4:BB:36:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d496bf54-ff2f-3588-af59-de7d639e9932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:4c:b7:91:1f:8e:02:8e:de:54:4e:cf:d3:21:9a:b3:63:cd: d7:0b:ae:e6:7e:8f:5c:d3:34:f4:d3:7b:00:2a:b3:62:12:e0: 29:7d:42:8b:c3:52:2b:26:f9:80:24:ea:c7:26:be:78:60:30: 71:c5:94:5e:e8:ed:a5:64:6e:af:c8:3c:ea:91:14:9f:b2:99: 82:55:84:98:26:ed:05:ce:f4:35:2f:9d:a4:7b:25:d8:9d:b8: 35:c8:2f:53:ff:3e:ff:bd:c8:c1:12:56:db:cb:bb:21:62:91: 47:21:14:f8:fc:95:be:53:6b:fa:61:57:83:4e:2d:cf:96:be: 7a:32:1b:5e:76:5b:a6:8f:d7:6c:93:94:9c:b4:c5:a9:27:bf: 55:0e:29:9f:64:bc:59:f7:31:4f:c3:29:e6:1c:7b:cb:f9:3f: da:65:96:c8:f9:3b:7e:12:97:85:e7:3d:a5:71:95:d6:df:7f: e1:38:6d:4a:b6:48:68:d3:34:17:28:d9:30:aa:bd:69:bf:62: 9d:b3:dc:6a:e5:02:ff:66:59:c1:86:1c:04:14:56:f1:33:bd: 6f:74:ec:c6:df:fc:79:62:3a:74:ec:08:73:75:80:6d:ad:32: ee:29:3b:3c:bd:f3:1f:7e:c3:09:f9:bd:8e:a8:31:fb:77:72: 8f:24:46:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVK0sw8J/FSKGK7L4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI0MDMyMjEzMDAzNFoXDTI0MDYyMDEzMDAzNFowLzEtMCsGA1UEAxMk NjUwNjJiNmQtYjc2My00NzBjLWI3MzctYmQ3ZDQ5YTU5ZWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+yHUKzuFJHDckJUq6sKgY1mMR7Zutol49Hw mg22WAnXJ/5YnIiXxQwUa95ZOUxcCausKdgLSEFwPuQpX2xazeTJhxwkI3fxbDdz uccLM2xVIziLiDHp2IMvtAkMIKWwSMHn38UWi8rzZk3TdhnXioZPOMNmhxQGIrqR tpTpSfIZFLE68Qp8ttaSYDe5mEhZQKoM1Ga0+JPa8Dr3/nc33g6Z/gCFdbKM1Rw1 TqepePByetaUQ1AMXqbpw8Wcr/G27ngTIzX/tIj869u9K4RH0DJih9XkuAtLG+rM svOA6G9osz2mdjBUHXrB2kqqc0NPFD0nZ6GgwwWCGIZgnBQhSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOBwBZ+caQXUoPqyKm/QazUuzY0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvZDQ5NmJmNTQtZmYyZi0z NTg4LWFmNTktZGU3ZDYzOWU5OTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFtKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtMt5EfjgKO3lROz9MhmrNjzdcLruZ+j1zTNPTTewAqs2IS4Cl9QovD Uism+YAk6scmvnhgMHHFlF7o7aVkbq/IPOqRFJ+ymYJVhJgm7QXO9DUvnaR7Jdid uDXIL1P/Pv+9yMESVtvLuyFikUchFPj8lb5Ta/phV4NOLc+WvnoyG152W6aP12yT lJy0xaknv1UOKZ9kvFn3MU/DKeYce8v5P9pllsj5O34Sl4XnPaVxldbff+E4bUq2 SGjTNBco2TCqvWm/Yp2z3GrlAv9mWcGGHAQUVvEzvW907Mbf/HliOnTsCHN1gG2t Mu4pOzy98x9+wwn5vY6oMft3co8kRow= -----END CERTIFICATE-----Generated at Thu May 2 15:00:16 2024 by rpki-client on console-ams.rpki-client.org