$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6be131c0-9d45-3a78-86d8-bb9e1e654c54.roa File: 6be131c0-9d45-3a78-86d8-bb9e1e654c54.roa (raw, json) Hash identifier: qdrITdgzJVha+SPnJ2ZcE1tIz6t7OQBx9bw5DoHXh3s= Subject key identifier: 0C:07:9B:4E:91:D4:FF:60:CD:83:AF:EB:42:CA:81:29:0F:70:B8:37 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584571E85B6041D7C36CD6F11C40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6be131c0-9d45-3a78-86d8-bb9e1e654c54.roa Signing time: Fri 05 Apr 2024 13:00:33 +0000 ROA not before: Fri 05 Apr 2024 13:00:33 +0000 ROA not after: Thu 04 Jul 2024 13:00:33 +0000 asID: 36183 IP address blocks: 172.226.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:71:e8:5b:60:41:d7:c3:6c:d6:f1:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 5 13:00:33 2024 GMT Not After : Jul 4 13:00:33 2024 GMT Subject: CN=16834940-4b29-4415-bd61-34b3b13ea85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0f:64:8d:72:0d:9f:e9:c7:7e:cf:40:5b:10: a6:50:8f:47:16:3c:91:a2:13:f8:ed:0f:a5:3d:0a: d6:1a:43:89:a2:d1:5d:47:f3:4c:eb:a2:02:1a:9f: 6d:0e:e3:c9:a5:51:66:7f:76:cc:9a:09:2f:4b:aa: 6d:91:df:65:a0:5f:ea:90:d6:d5:08:a4:e4:69:8e: 4e:15:b4:a8:87:0b:92:5d:90:45:8e:de:cf:cc:e0: 07:56:f6:e5:92:6d:95:62:58:93:45:6d:cf:61:9a: 99:9b:6f:f7:70:17:1e:62:62:2e:a7:96:00:32:5a: 5c:f8:ef:b6:56:aa:f2:78:84:9a:0f:83:52:a2:c4: 2d:b8:34:03:96:29:39:81:4c:9b:46:98:b7:59:f0: c7:ec:6c:91:e1:eb:cd:67:10:69:f0:f9:36:c8:35: cf:32:92:36:43:6a:eb:26:d4:0a:e6:cd:3d:1b:b4: 25:0f:7f:6b:75:67:31:56:87:84:bc:2a:84:e8:5d: 49:1f:74:94:9a:27:68:22:33:64:68:0a:a2:1e:7a: 7e:a5:d3:fd:1f:31:47:d5:91:fc:a1:cb:fc:aa:b9: 70:1e:6b:2a:38:93:47:cc:55:e8:b9:3d:b7:f6:0b: e9:b7:f8:cf:86:84:50:10:12:d6:5a:82:cf:00:85: 1a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:07:9B:4E:91:D4:FF:60:CD:83:AF:EB:42:CA:81:29:0F:70:B8:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6be131c0-9d45-3a78-86d8-bb9e1e654c54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:67:8d:6a:84:b9:7f:bb:2f:48:78:a1:7e:8f:24:a2:bc:40: e3:fb:47:63:fb:0a:de:46:81:24:a6:b5:78:25:8e:0d:b4:4d: 65:86:e6:49:66:e8:81:7d:cd:4a:63:05:7b:ee:0c:5e:e7:cc: 3f:4c:ca:f5:9e:94:7b:2f:f1:84:ba:4a:03:7e:09:b5:49:60: ff:b8:fc:8b:4c:aa:4b:9d:a4:dc:69:08:ab:45:92:03:00:17: 59:86:29:4b:aa:e4:b3:be:ee:74:6a:e0:53:79:8d:47:92:03: 0e:c3:76:f6:c5:82:ab:05:4e:5c:1d:6b:10:a8:b1:30:41:89: 01:ac:86:ff:87:f9:5e:32:ea:90:22:53:dc:35:64:4b:75:bd: e5:79:bd:9f:3d:c1:d2:ef:67:e3:f5:75:c1:b5:f4:9d:cb:b6: b8:a4:26:77:38:90:a8:6d:41:81:eb:a6:d4:9c:90:6b:e2:72: 92:c9:e0:f0:a1:9f:37:4a:a7:af:5d:f9:0e:0a:b5:97:be:fc: 0f:74:92:85:5d:55:32:f7:e8:40:a0:12:79:20:69:3d:f3:8e: 2b:a5:85:3e:0a:6e:cd:ad:e1:d3:ae:b0:6d:07:10:45:60:90: f5:ac:eb:1d:ab:50:04:f2:a9:20:c0:02:1f:be:d5:f7:13:90: b3:f9:d4:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVx6FtgQdfDbNbxHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDQwNTEzMDAzM1oXDTI0MDcwNDEzMDAzM1owLzEtMCsGA1UEAxMk MTY4MzQ5NDAtNGIyOS00NDE1LWJkNjEtMzRiM2IxM2VhODVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g9kjXINn+nHfs9AWxCmUI9HFjyRohP47Q+l PQrWGkOJotFdR/NM66ICGp9tDuPJpVFmf3bMmgkvS6ptkd9loF/qkNbVCKTkaY5O FbSohwuSXZBFjt7PzOAHVvblkm2VYliTRW3PYZqZm2/3cBceYmIup5YAMlpc+O+2 VqryeISaD4NSosQtuDQDlik5gUybRpi3WfDH7GyR4evNZxBp8Pk2yDXPMpI2Q2rr JtQK5s09G7QlD39rdWcxVoeEvCqE6F1JH3SUmidoIjNkaAqiHnp+pdP9HzFH1ZH8 ocv8qrlwHmsqOJNHzFXouT239gvpt/jPhoRQEBLWWoLPAIUawQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwHm06R1P9gzYOv60LKgSkPcLg3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmJlMTMxYzAtOWQ0NS0z YTc4LTg2ZDgtYmI5ZTFlNjU0YzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOICMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5njWqEuX+7L0h4oX6PJKK8QOP7R2P7Ct5GgSSmtXgljg20TWWG5klm 6IF9zUpjBXvuDF7nzD9MyvWelHsv8YS6SgN+CbVJYP+4/ItMqkudpNxpCKtFkgMA F1mGKUuq5LO+7nRq4FN5jUeSAw7DdvbFgqsFTlwdaxCosTBBiQGshv+H+V4y6pAi U9w1ZEt1veV5vZ89wdLvZ+P1dcG19J3LtrikJnc4kKhtQYHrptSckGvicpLJ4PCh nzdKp69d+Q4KtZe+/A90koVdVTL36ECgEnkgaT3zjiulhT4Kbs2t4dOusG0HEEVg kPWs6x2rUATyqSDAAh++1fcTkLP51Jg= -----END CERTIFICATE-----Generated at Fri May 17 20:12:06 2024 by rpki-client on console-fra.rpki-client.org