$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/42ad508a-1d9b-3416-b900-7d41869eb2b5.roa File: 42ad508a-1d9b-3416-b900-7d41869eb2b5.roa (raw, json) Hash identifier: 7Iv8k/f2mNhw5i/OWu2TuRitnrKt0yOO42vcWEIP32Q= Subject key identifier: A7:15:42:DC:73:9C:01:27:31:F9:43:2E:A3:C3:BF:32:BA:B2:3E:B8 Certificate issuer: /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Certificate serial: 010D0C9F432858454B56F50C2A994F0C5D85AF80 Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/42ad508a-1d9b-3416-b900-7d41869eb2b5.roa Signing time: Fri 22 Mar 2024 17:26:55 +0000 ROA not before: Fri 22 Mar 2024 17:26:55 +0000 ROA not after: Thu 20 Jun 2024 17:26:55 +0000 asID: 14217 IP address blocks: 64.21.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:4b:56:f5:0c:2a:99:4f:0c:5d:85:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Validity Not Before: Mar 22 17:26:55 2024 GMT Not After : Jun 20 17:26:55 2024 GMT Subject: CN=8c01549f-2919-47fc-b942-fc26cdb8fb08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:80:0d:56:e0:6b:ea:22:a2:19:b3:cf:a1:47: 73:ab:b5:8c:3b:0a:4e:0c:14:a8:e5:0d:34:eb:26: 10:63:34:ee:a0:8b:5c:84:32:94:44:c3:df:a0:b7: e5:29:cd:fc:a1:e4:2a:02:2c:b6:90:95:ad:43:be: f3:d7:c0:44:d2:ea:50:60:d8:76:f3:5a:6e:3e:7c: 9d:df:f0:13:71:36:2b:32:66:be:ff:ea:5a:19:48: 34:54:bd:65:92:e7:c3:6a:b1:bc:b6:0f:fe:8a:99: cc:94:49:4f:0b:b9:10:d6:74:54:8e:0b:73:e7:96: 5d:c1:08:77:c5:82:c3:59:18:68:3a:2b:29:d5:b0: 1f:60:32:55:6b:fe:a3:6b:63:7e:5f:0e:43:08:97: 57:06:95:f0:6d:47:9f:5d:be:e0:ea:93:f0:e3:12: 1b:4f:cd:5f:21:56:3b:c6:73:5d:04:70:32:4d:ba: b6:0d:35:c0:e1:24:fa:8c:77:82:da:cc:ea:9a:cc: ab:2a:5e:ae:b6:43:08:92:86:5a:42:01:fe:a9:82: 81:cc:d2:a9:51:42:a0:58:9a:11:99:8b:fb:56:a2: 16:4b:1e:c0:3f:9a:b4:78:c3:b5:fb:37:0c:05:30: ba:d9:ea:e8:a4:30:be:bc:66:62:9e:f2:9e:c9:3d: 09:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:15:42:DC:73:9C:01:27:31:F9:43:2E:A3:C3:BF:32:BA:B2:3E:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/42ad508a-1d9b-3416-b900-7d41869eb2b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl X509v3 Authority Key Identifier: keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer sbgp-ipAddrBlock: critical IPv4: 64.21.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:47:36:9e:f6:78:37:12:08:4f:d1:cd:29:84:ea:90:29:5c: d5:ed:6d:40:60:89:57:36:0b:67:a7:80:01:da:b6:63:87:07: 66:79:2c:0e:23:f9:c5:84:ef:97:85:d8:cb:cc:b8:95:9a:49: d3:a6:87:75:79:fb:76:89:79:5f:c0:aa:36:2f:59:98:72:b4: 7f:a5:e8:dd:f3:18:87:20:92:f7:f1:c5:48:34:c0:61:ec:4b: 72:56:c6:ab:33:88:b0:31:39:ab:c2:5c:4e:0e:7b:09:77:d7: 34:a2:7a:49:77:d1:64:ed:ad:f0:65:eb:c1:98:c1:ad:c7:10: da:9b:98:a8:3d:04:5a:f7:a7:3e:b3:1c:d8:e7:36:c6:88:25: 5d:2f:5e:8b:a9:26:af:c2:2a:9d:21:d7:1a:6d:78:36:dd:6d: a0:08:44:2c:ee:1b:12:6f:9f:9d:e0:38:ce:f3:3c:96:a8:68: 30:c2:4f:32:ad:b2:8c:db:43:67:68:f9:98:f6:b9:ee:eb:7f: e7:11:d5:cd:10:70:fb:e8:42:4b:59:3e:59:de:3c:f8:21:d3: f2:76:12:8d:c9:6b:6c:5c:79:a5:09:b4:71:80:3b:34:0b:9e: c1:cb:14:40:55:0a:3d:4e:b1:06:b5:c4:33:d1:22:7e:1e:50: fb:93:35:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVLVvUMKplPDF2Fr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjNDNiNzUtMTA2Zi00OWU3LWJmM2EtNGFlYjk0NTY2 ZTkwMB4XDTI0MDMyMjE3MjY1NVoXDTI0MDYyMDE3MjY1NVowLzEtMCsGA1UEAxMk OGMwMTU0OWYtMjkxOS00N2ZjLWI5NDItZmMyNmNkYjhmYjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4ANVuBr6iKiGbPPoUdzq7WMOwpODBSo5Q00 6yYQYzTuoItchDKURMPfoLflKc38oeQqAiy2kJWtQ77z18BE0upQYNh281puPnyd 3/ATcTYrMma+/+paGUg0VL1lkufDarG8tg/+ipnMlElPC7kQ1nRUjgtz55ZdwQh3 xYLDWRhoOisp1bAfYDJVa/6ja2N+Xw5DCJdXBpXwbUefXb7g6pPw4xIbT81fIVY7 xnNdBHAyTbq2DTXA4ST6jHeC2szqmsyrKl6utkMIkoZaQgH+qYKBzNKpUUKgWJoR mYv7VqIWSx7AP5q0eMO1+zcMBTC62eropDC+vGZinvKeyT0JZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcVQtxznAEnMflDLqPDvzK6sj64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0 M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWViOTQ1NjZlOTAvNDJhZDUwOGEtMWQ5Yi0z NDE2LWI5MDAtN2Q0MTg2OWViMmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBjNDNiNzUtMTA2Zi00OWU3LWJm M2EtNGFlYjk0NTY2ZTkwL2IwYzQzYjc1LTEwNmYtNDllNy1iZjNhLTRhZWI5NDU2 NmU5MC5jcmwwHwYDVR0jBBgwFoAUu0SUXwFyTe65Irjq0C6iB25OIzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWVi OTQ1NjZlOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBW/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtHNp72eDcSCE/RzSmE6pApXNXtbUBgiVc2C2engAHatmOHB2Z5LA4j +cWE75eF2MvMuJWaSdOmh3V5+3aJeV/AqjYvWZhytH+l6N3zGIcgkvfxxUg0wGHs S3JWxqsziLAxOavCXE4Oewl31zSiekl30WTtrfBl68GYwa3HENqbmKg9BFr3pz6z HNjnNsaIJV0vXoupJq/CKp0h1xpteDbdbaAIRCzuGxJvn53gOM7zPJaoaDDCTzKt sozbQ2do+Zj2ue7rf+cR1c0QcPvoQktZPlnePPgh0/J2Eo3Ja2xceaUJtHGAOzQL nsHLFEBVCj1OsQa1xDPRIn4eUPuTNSk= -----END CERTIFICATE-----Generated at Wed May 15 16:06:13 2024 by rpki-client on console-ams.rpki-client.org