$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cf4b7dc5-2338-3607-87ee-0fa7e1c48095.roa File: cf4b7dc5-2338-3607-87ee-0fa7e1c48095.roa (raw, json) Hash identifier: WHbqItHV/ei+l/bkJNQWr1CkpYCRn9YtyLrdOnT/SKM= Subject key identifier: 47:C0:0F:26:55:55:D5:8B:B8:BC:ED:BF:71:E6:7D:F1:EA:72:65:05 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285845B21E27B4D26AA5BD9489BD80 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cf4b7dc5-2338-3607-87ee-0fa7e1c48095.roa Signing time: Sun 28 Apr 2024 13:00:34 +0000 ROA not before: Sun 28 Apr 2024 13:00:34 +0000 ROA not after: Sat 27 Jul 2024 13:00:34 +0000 asID: 14618 IP address blocks: 67.217.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b2:1e:27:b4:d2:6a:a5:bd:94:89:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Apr 28 13:00:34 2024 GMT Not After : Jul 27 13:00:34 2024 GMT Subject: CN=920f73cf-427e-4489-9fce-8a98b525de63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1d:eb:41:02:10:3d:d1:51:d2:a5:f3:58:6f: 92:9e:0c:f1:cd:f7:d0:dd:26:d2:2f:59:f2:81:b7: ae:79:98:cf:00:f9:47:32:eb:02:b3:8c:a8:70:56: fa:07:83:8f:3a:3d:e7:16:7d:a1:76:4f:21:e8:a4: a4:59:33:4a:5f:12:7c:d9:f8:4a:8a:25:92:71:72: 72:9a:5b:f9:5c:90:a0:93:49:7d:bd:59:5f:19:23: a8:04:92:5c:e5:5f:bf:86:f0:b1:94:0a:f3:0d:d4: e5:aa:a0:ae:e6:e4:32:4e:25:f7:7b:6a:99:ab:2d: 5f:c4:36:fe:b7:c9:95:48:bd:78:30:f2:f7:3e:cc: ec:37:cf:a7:62:ad:8e:b3:24:de:03:ba:05:e1:d8: 57:79:d2:93:10:b7:76:a2:82:7e:5d:e6:62:26:9d: 1d:1a:25:f0:eb:59:39:74:c8:b6:b4:db:c6:98:dd: 2a:ec:f4:44:78:10:12:29:24:72:ec:b6:69:30:97: 76:af:06:f4:b1:28:10:99:80:96:b8:77:dc:21:dd: 4d:72:ff:26:08:0e:b0:a2:48:19:ae:96:69:32:c1: 9f:d0:a2:a5:2c:9a:9e:0e:f3:e7:a7:c2:f7:ac:81: 7d:22:11:ba:e5:2c:18:84:95:d9:21:2f:f8:c2:ab: 43:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C0:0F:26:55:55:D5:8B:B8:BC:ED:BF:71:E6:7D:F1:EA:72:65:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cf4b7dc5-2338-3607-87ee-0fa7e1c48095.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:43:3f:35:51:b3:54:30:32:4e:a1:40:02:bf:5e:5e:a0:86: ec:8d:76:90:a4:8b:03:0f:55:b9:d4:10:a6:b5:bf:63:ad:9b: 50:d7:21:cd:6c:17:da:27:a5:b6:b1:d7:83:bf:67:68:00:99: 4c:eb:62:8e:4d:fe:14:06:83:70:bc:bb:aa:b8:98:3f:bb:97: 13:0f:93:55:e0:b8:2c:28:3e:24:cd:4d:d5:97:26:05:02:2c: c7:b7:ff:3d:51:30:8a:35:5c:31:a9:04:1f:46:f5:c7:48:4c: 6f:dc:23:c4:9d:20:8a:56:de:f2:72:22:34:ff:81:ba:18:c7: 5e:15:86:07:16:6b:4f:d4:d4:d5:98:22:03:17:7e:4f:31:fa: e1:64:c1:14:5f:42:e2:34:2b:8b:1b:d4:00:14:2e:ae:d8:51: 9d:db:7a:58:7d:64:34:0b:86:36:2f:b2:c3:3f:1a:b5:b3:69: a9:a9:ba:73:97:6c:b7:89:89:4b:a3:1a:c1:2f:81:1d:c9:0a: 20:a3:f2:91:53:3c:f2:8f:f6:1d:01:9e:ce:91:92:1d:3e:9a: f3:1d:86:99:33:bd:f0:23:45:92:9b:27:87:3a:9e:96:2d:87: ed:ef:01:4c:ab:9d:ae:ef:72:29:fd:54:a7:81:95:cd:fa:eb: 7c:a0:8b:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWyHie00mqlvZSJvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI0MDQyODEzMDAzNFoXDTI0MDcyNzEzMDAzNFowLzEtMCsGA1UEAxMk OTIwZjczY2YtNDI3ZS00NDg5LTlmY2UtOGE5OGI1MjVkZTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB3rQQIQPdFR0qXzWG+SngzxzffQ3SbSL1ny gbeueZjPAPlHMusCs4yocFb6B4OPOj3nFn2hdk8h6KSkWTNKXxJ82fhKiiWScXJy mlv5XJCgk0l9vVlfGSOoBJJc5V+/hvCxlArzDdTlqqCu5uQyTiX3e2qZqy1fxDb+ t8mVSL14MPL3PszsN8+nYq2OsyTeA7oF4dhXedKTELd2ooJ+XeZiJp0dGiXw61k5 dMi2tNvGmN0q7PREeBASKSRy7LZpMJd2rwb0sSgQmYCWuHfcId1Ncv8mCA6wokgZ rpZpMsGf0KKlLJqeDvPnp8L3rIF9IhG65SwYhJXZIS/4wqtDHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfADyZVVdWLuLztv3HmffHqcmUFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvY2Y0YjdkYzUtMjMzOC0z NjA3LTg3ZWUtMGZhN2UxYzQ4MDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxDPzVRs1QwMk6hQAK/Xl6ghuyNdpCkiwMPVbnUEKa1v2Otm1DXIc1s F9onpbax14O/Z2gAmUzrYo5N/hQGg3C8u6q4mD+7lxMPk1XguCwoPiTNTdWXJgUC LMe3/z1RMIo1XDGpBB9G9cdITG/cI8SdIIpW3vJyIjT/gboYx14VhgcWa0/U1NWY IgMXfk8x+uFkwRRfQuI0K4sb1AAULq7YUZ3belh9ZDQLhjYvssM/GrWzaampunOX bLeJiUujGsEvgR3JCiCj8pFTPPKP9h0Bns6Rkh0+mvMdhpkzvfAjRZKbJ4c6npYt h+3vAUyrna7vcin9VKeBlc3663ygizE= -----END CERTIFICATE-----Generated at Mon May 6 01:08:03 2024 by rpki-client on console-fra.rpki-client.org