$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9e521e10-05f5-31f1-a49a-9a7a844cba26.roa File: 9e521e10-05f5-31f1-a49a-9a7a844cba26.roa (raw, json) Hash identifier: qyGMd0OdHmYr5pU30qUCSOYmxl+QcG6s4B6ULR+NquI= Subject key identifier: AC:15:95:C5:0E:9F:02:F3:43:06:50:BA:B3:32:38:E6:8B:B4:71:17 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584546283489924D85FBAD9EF300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9e521e10-05f5-31f1-a49a-9a7a844cba26.roa Signing time: Wed 20 Mar 2024 20:53:40 +0000 ROA not before: Wed 20 Mar 2024 20:53:40 +0000 ROA not after: Tue 18 Jun 2024 20:53:40 +0000 asID: 396982 IP address blocks: 208.76.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:28:34:89:92:4d:85:fb:ad:9e:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 20 20:53:40 2024 GMT Not After : Jun 18 20:53:40 2024 GMT Subject: CN=789841ab-7ce9-4eef-bcb8-470ee2f696ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ab:8b:4b:36:3b:5d:62:5b:e1:1a:8d:4f:28: eb:73:68:88:d0:67:9f:d9:8b:16:6c:36:95:2c:0f: 8c:b9:3c:a6:c3:0d:f3:ad:ed:42:03:ca:b8:75:14: 1d:0d:cd:9a:35:37:f8:7e:4e:8a:6e:cd:c1:1a:5b: 07:ae:a6:60:ef:60:d4:a8:e3:fb:ee:8c:16:b9:e2: 3c:e4:42:33:dd:fc:43:c0:7b:23:35:a2:5e:7f:eb: 80:aa:3b:cc:89:c0:03:c1:1d:ff:93:e7:c9:76:0e: d6:b7:4a:66:37:7f:dc:0e:70:8a:05:ae:f7:fa:46: 69:28:b3:ef:74:fd:f4:d4:fb:86:24:1f:d1:44:32: d4:0e:06:60:58:74:4a:16:c8:07:d3:0c:7e:5b:7d: ae:2e:97:c4:fe:37:8e:ef:14:ef:31:db:5f:06:44: 07:54:00:43:a1:6c:be:ac:0b:60:fb:46:c3:9c:8e: b5:86:9a:8a:09:4f:4a:67:e0:8b:93:90:56:55:49: a8:09:81:57:35:de:fc:ac:19:82:16:b0:97:91:7d: b4:2b:ff:96:ec:09:dd:5c:b0:69:50:62:ee:15:5c: 72:9a:62:30:45:98:80:b9:35:1a:a8:bd:18:e5:49: ad:75:71:b8:fe:b8:14:e7:2c:37:82:f1:20:be:86: aa:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:15:95:C5:0E:9F:02:F3:43:06:50:BA:B3:32:38:E6:8B:B4:71:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9e521e10-05f5-31f1-a49a-9a7a844cba26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:c7:44:97:73:b2:a3:15:c1:ca:fd:7d:40:18:a8:92:ad:8c: b7:b7:f9:68:81:04:e7:36:72:1b:13:e0:7d:02:f1:5c:57:eb: d3:8f:55:b7:4f:f9:ad:95:d2:70:b0:d6:bd:4b:28:39:f1:b2: 3b:19:b7:f5:15:c1:91:35:63:90:e1:02:db:e0:7a:cc:53:41: 9b:2b:6a:4d:24:c9:87:5b:a6:b4:17:e5:dc:93:8f:91:35:c7: c2:94:7f:10:0a:fb:30:68:b9:94:78:90:4b:8c:09:ff:ca:bb: dc:76:49:7d:b7:6f:ed:b8:85:8e:57:a3:5c:3e:59:c6:fa:b7: 7d:a1:61:42:91:18:49:75:3e:ca:f6:f0:4d:7d:15:a9:3f:b2: 1e:1a:59:58:cb:44:66:a0:9d:ff:04:04:b4:f3:f3:e6:a9:60: c2:d5:83:f0:09:7c:55:5d:86:0e:ff:2c:20:18:cc:70:33:05: ff:91:03:b1:70:1b:32:8c:32:b3:83:51:41:4f:96:22:61:ca: 0e:5d:5b:1d:6c:1e:60:fa:65:f6:fb:31:10:19:0a:90:85:b9: 03:1c:d7:fd:2a:5d:a7:32:7e:d0:ea:5a:21:cb:3d:9e:31:4c: 6f:bc:05:21:45:33:5d:35:87:85:09:64:f2:8f:06:44:b8:8c: 61:0e:b5:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGKDSJkk2F+62e8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMDIwNTM0MFoXDTI0MDYxODIwNTM0MFowLzEtMCsGA1UEAxMk Nzg5ODQxYWItN2NlOS00ZWVmLWJjYjgtNDcwZWUyZjY5NmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhquLSzY7XWJb4RqNTyjrc2iI0Gef2YsWbDaV LA+MuTymww3zre1CA8q4dRQdDc2aNTf4fk6Kbs3BGlsHrqZg72DUqOP77owWueI8 5EIz3fxDwHsjNaJef+uAqjvMicADwR3/k+fJdg7Wt0pmN3/cDnCKBa73+kZpKLPv dP301PuGJB/RRDLUDgZgWHRKFsgH0wx+W32uLpfE/jeO7xTvMdtfBkQHVABDoWy+ rAtg+0bDnI61hpqKCU9KZ+CLk5BWVUmoCYFXNd78rBmCFrCXkX20K/+W7AndXLBp UGLuFVxymmIwRZiAuTUaqL0Y5UmtdXG4/rgU5yw3gvEgvoaqsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwVlcUOnwLzQwZQurMyOOaLtHEXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWU1MjFlMTAtMDVmNS0z MWYxLWE0OWEtOWE3YTg0NGNiYTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ExFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrHRJdzsqMVwcr9fUAYqJKtjLe3+WiBBOc2chsT4H0C8VxX69OPVbdP +a2V0nCw1r1LKDnxsjsZt/UVwZE1Y5DhAtvgesxTQZsrak0kyYdbprQX5dyTj5E1 x8KUfxAK+zBouZR4kEuMCf/Ku9x2SX23b+24hY5Xo1w+Wcb6t32hYUKRGEl1Psr2 8E19Fak/sh4aWVjLRGagnf8EBLTz8+apYMLVg/AJfFVdhg7/LCAYzHAzBf+RA7Fw GzKMMrODUUFPliJhyg5dWx1sHmD6Zfb7MRAZCpCFuQMc1/0qXacyftDqWiHLPZ4x TG+8BSFFM101h4UJZPKPBkS4jGEOtdc= -----END CERTIFICATE-----Generated at Sun May 5 15:51:55 2024 by rpki-client on console-ams.rpki-client.org