$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3576a8b7-6506-398c-8b78-2430a514e1f2.roa File: 3576a8b7-6506-398c-8b78-2430a514e1f2.roa (raw, json) Hash identifier: O+MeZqAiU5GonT2cq3RNM3uo4GzKe7qn7LY1vRyasUU= Subject key identifier: 1B:93:DD:3D:32:1B:A5:3A:23:3D:88:6A:3B:42:C8:4F:AD:2E:BF:CE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285845490F5B2C8327823CAD8A7D00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3576a8b7-6506-398c-8b78-2430a514e1f2.roa Signing time: Thu 21 Mar 2024 21:51:01 +0000 ROA not before: Thu 21 Mar 2024 21:51:01 +0000 ROA not after: Wed 19 Jun 2024 21:51:01 +0000 asID: 15169 IP address blocks: 64.233.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:0f:5b:2c:83:27:82:3c:ad:8a:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 21:51:01 2024 GMT Not After : Jun 19 21:51:01 2024 GMT Subject: CN=8c67f11f-6480-41fc-b685-93e6bee53a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ab:2b:1d:b3:16:92:8d:14:e9:04:b5:08:84: 68:45:ab:58:36:60:f8:f6:a2:4d:d1:dd:69:f7:a7: 41:e0:0d:91:67:8d:9b:eb:79:77:99:80:96:96:03: 58:d6:33:d3:c3:e0:6d:8a:dc:16:e2:74:40:b0:fd: df:78:96:4a:ba:6c:b7:41:fb:c8:0c:15:13:c3:39: 1f:77:b2:69:be:0e:a7:cb:fd:09:8f:ec:c3:90:79: 9d:52:24:0e:c6:25:0f:86:ca:42:44:38:cb:0c:25: 6e:db:f5:3d:a8:cd:77:22:d4:9e:95:b7:62:d3:20: e7:1a:52:37:9f:74:8c:04:7d:4f:53:08:59:b2:02: 88:ec:4c:12:de:15:8d:17:62:8b:d2:aa:ae:85:43: ad:dc:31:b2:fb:2f:d6:c4:77:f6:76:c1:c0:62:80: 7a:0c:f2:fb:74:81:50:8b:ec:b7:e7:c9:17:50:92: 94:3f:ae:02:0a:83:ac:44:c8:57:06:07:0e:8d:cc: 3e:02:fa:ca:54:08:cf:8a:83:9f:49:93:5d:86:13: 3f:90:48:d0:d5:ca:00:c7:1d:fc:21:0a:de:51:5d: bc:8c:71:02:3f:b1:d5:54:e6:d8:1c:a8:89:19:f4: bf:66:6a:d7:ac:a7:16:9b:88:7d:f7:2e:a3:15:23: 61:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:93:DD:3D:32:1B:A5:3A:23:3D:88:6A:3B:42:C8:4F:AD:2E:BF:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3576a8b7-6506-398c-8b78-2430a514e1f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:d0:9e:13:fd:2f:63:bc:1c:0d:3c:e5:12:df:c4:e6:ad:a1: c2:c0:d8:4a:c1:e0:c8:be:cf:97:a9:dc:5e:04:08:4e:cf:55: d9:af:96:3c:a9:bc:5c:dd:b5:f9:7c:c9:20:67:53:2a:2d:a0: 84:cb:07:bb:12:9c:a5:6e:c7:89:37:d8:b3:de:ed:42:e5:54: 21:c3:fc:f1:ac:16:20:03:dc:f6:98:50:8a:41:25:56:98:12: 12:da:2f:71:73:0a:6c:b9:ee:e0:8a:cc:73:ff:00:e5:a0:ca: 02:e1:e2:4f:17:00:a6:24:6f:56:5a:69:a2:2d:4c:84:3a:4d: 3e:84:45:88:82:ca:a6:bd:9c:6f:6a:36:19:c4:35:e2:ff:36: 28:63:bd:df:78:ce:be:d9:e5:28:98:d3:17:97:89:cb:b4:40: ce:45:56:12:5e:b9:92:db:66:41:fd:e9:be:8d:23:3c:ff:53: 81:cc:8a:63:46:84:0d:d5:c4:d9:b4:06:98:04:f7:a5:a3:9a: 50:c5:fa:dc:90:bc:5a:53:d6:fa:d3:69:19:66:c9:59:f1:7e: 9e:04:2b:cf:7b:fb:64:41:03:35:4c:16:c9:49:85:57:f7:57: d3:13:bc:22:09:88:9d:0d:89:0a:57:d7:64:5b:b3:68:55:82: e7:a9:be:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJD1ssgyeCPK2KfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMTIxNTEwMVoXDTI0MDYxOTIxNTEwMVowLzEtMCsGA1UEAxMk OGM2N2YxMWYtNjQ4MC00MWZjLWI2ODUtOTNlNmJlZTUzYTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKsrHbMWko0U6QS1CIRoRatYNmD49qJN0d1p 96dB4A2RZ42b63l3mYCWlgNY1jPTw+BtitwW4nRAsP3feJZKumy3QfvIDBUTwzkf d7Jpvg6ny/0Jj+zDkHmdUiQOxiUPhspCRDjLDCVu2/U9qM13ItSelbdi0yDnGlI3 n3SMBH1PUwhZsgKI7EwS3hWNF2KL0qquhUOt3DGy+y/WxHf2dsHAYoB6DPL7dIFQ i+y358kXUJKUP64CCoOsRMhXBgcOjcw+AvrKVAjPioOfSZNdhhM/kEjQ1coAxx38 IQreUV28jHECP7HVVObYHKiJGfS/ZmrXrKcWm4h99y6jFSNhVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuT3T0yG6U6Iz2IajtCyE+tLr/OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzU3NmE4YjctNjUwNi0z OThjLThiNzgtMjQzMGE1MTRlMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOm+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjQnhP9L2O8HA085RLfxOatocLA2ErB4Mi+z5ep3F4ECE7PVdmvljyp vFzdtfl8ySBnUyotoITLB7sSnKVux4k32LPe7ULlVCHD/PGsFiAD3PaYUIpBJVaY EhLaL3FzCmy57uCKzHP/AOWgygLh4k8XAKYkb1ZaaaItTIQ6TT6ERYiCyqa9nG9q NhnENeL/Nihjvd94zr7Z5SiY0xeXicu0QM5FVhJeuZLbZkH96b6NIzz/U4HMimNG hA3VxNm0BpgE96WjmlDF+tyQvFpT1vrTaRlmyVnxfp4EK897+2RBAzVMFslJhVf3 V9MTvCIJiJ0NiQpX12Rbs2hVguepvu4= -----END CERTIFICATE-----Generated at Fri May 17 22:54:39 2024 by rpki-client on console-fra.rpki-client.org