$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1b8311cc-d113-3e8f-bb9a-1b0ad7ff5a92.roa File: 1b8311cc-d113-3e8f-bb9a-1b0ad7ff5a92.roa (raw, json) Hash identifier: Q3Mc3rPCc8b4nJNndtgy8RyBaqb0xraTuHAgOVVaJyE= Subject key identifier: 97:DB:31:C6:89:71:C4:FC:BC:C9:FB:7A:B1:26:6A:B0:84:D0:32:F8 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285845D933C4F949A2CEDF5E326070 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1b8311cc-d113-3e8f-bb9a-1b0ad7ff5a92.roa Signing time: Sun 12 May 2024 13:00:34 +0000 ROA not before: Sun 12 May 2024 13:00:34 +0000 ROA not after: Sat 10 Aug 2024 13:00:34 +0000 asID: 394330 IP address blocks: 64.71.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d9:33:c4:f9:49:a2:ce:df:5e:32:60:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 12 13:00:34 2024 GMT Not After : Aug 10 13:00:34 2024 GMT Subject: CN=2f25ab85-f242-4c94-970a-dd1d04c0ebef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4d:db:04:db:93:d9:74:5c:98:94:b6:1d:44: e6:3c:b3:1c:67:55:29:43:c7:2e:79:c3:d8:10:f2: 47:3d:fd:e4:03:30:36:21:8d:a1:cb:86:dd:8c:ec: 36:5f:2b:a1:09:0f:e2:74:8b:47:76:d2:06:c9:ce: 85:b0:e6:be:af:4a:10:8c:ec:6d:83:d1:8c:c9:20: 16:e6:39:c4:92:45:4e:1d:42:98:37:d4:6d:66:a9: 19:ae:11:ee:41:a5:7e:6f:41:19:79:98:a3:63:cd: 09:ee:53:94:69:c5:bb:31:7a:12:3b:d7:83:40:90: 53:7d:3b:d7:5b:ae:e5:c0:4f:e3:61:d4:c7:6f:23: 5e:40:26:0d:15:e3:2a:62:fb:fa:b6:ed:0f:5e:e4: d3:03:02:39:de:cf:5d:f4:fe:d5:46:bb:f0:1b:d6: f9:01:1c:f3:e0:94:89:34:bf:6c:9b:79:6e:0f:90: 13:1c:4c:38:35:b2:1b:79:82:cf:ac:9c:4f:92:6c: 30:cb:7f:de:3e:4e:cc:12:02:3f:ff:c2:cb:54:bb: 15:be:f8:09:e4:77:c1:2e:a8:72:48:8e:fd:06:b7: 79:24:64:7d:f9:28:60:10:b8:8c:01:b1:ba:03:fe: 0f:b9:35:78:a9:53:0e:b1:5f:37:5a:3f:41:1d:e7: 82:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DB:31:C6:89:71:C4:FC:BC:C9:FB:7A:B1:26:6A:B0:84:D0:32:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1b8311cc-d113-3e8f-bb9a-1b0ad7ff5a92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.71.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:3b:5f:74:51:d8:23:96:83:7f:62:3c:f8:0c:4b:3f:87:2b: c1:f7:4b:ff:f3:d8:e4:02:e0:bb:b1:c8:c1:f1:68:13:f1:88: d1:10:78:f4:9b:30:c9:72:bf:77:d6:b2:5e:7c:2e:b2:06:d5: 22:e1:1d:07:c2:65:a3:44:14:52:0c:08:15:b6:79:d1:d1:2d: 99:96:24:0f:a6:96:a0:49:56:e2:14:10:46:6f:f3:48:ae:bb: 77:b6:23:90:3d:d8:a5:c7:cd:19:7d:1e:cf:07:b9:23:d3:78: 82:5f:e2:15:33:2f:b3:6f:27:b7:cc:16:20:ce:8d:8b:8c:ef: 3f:54:26:a2:6d:47:60:35:c3:c8:9c:ee:77:9d:e7:ef:cf:c2: 88:34:03:34:8b:67:0b:3a:8c:77:73:2b:e4:5a:75:41:1d:e3: 6b:5f:bf:1a:92:bc:0f:3e:3c:a7:9f:54:87:05:f1:75:5d:39: b2:23:d0:c3:46:0a:67:62:75:40:34:21:d8:36:7f:f2:72:f3: 74:ab:57:3d:32:4a:02:ab:d3:85:14:54:8b:68:0f:dc:16:70: 4a:e0:0f:97:8e:72:9b:f3:68:0d:c6:ac:21:e6:a5:65:0b:36: 27:26:4f:b3:d3:93:f5:db:28:45:e8:bc:b4:79:ea:47:30:6d: 67:73:49:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXZM8T5SaLO314yYHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDUxMjEzMDAzNFoXDTI0MDgxMDEzMDAzNFowLzEtMCsGA1UEAxMk MmYyNWFiODUtZjI0Mi00Yzk0LTk3MGEtZGQxZDA0YzBlYmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1E3bBNuT2XRcmJS2HUTmPLMcZ1UpQ8cuecPY EPJHPf3kAzA2IY2hy4bdjOw2XyuhCQ/idItHdtIGyc6FsOa+r0oQjOxtg9GMySAW 5jnEkkVOHUKYN9RtZqkZrhHuQaV+b0EZeZijY80J7lOUacW7MXoSO9eDQJBTfTvX W67lwE/jYdTHbyNeQCYNFeMqYvv6tu0PXuTTAwI53s9d9P7VRrvwG9b5ARzz4JSJ NL9sm3luD5ATHEw4NbIbeYLPrJxPkmwwy3/ePk7MEgI//8LLVLsVvvgJ5HfBLqhy SI79Brd5JGR9+ShgELiMAbG6A/4PuTV4qVMOsV83Wj9BHeeCzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfbMcaJccT8vMn7erEmarCE0DL4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWI4MzExY2MtZDExMy0z ZThmLWJiOWEtMWIwYWQ3ZmY1YTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEeqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD47X3RR2COWg39iPPgMSz+HK8H3S//z2OQC4LuxyMHxaBPxiNEQePSb MMlyv3fWsl58LrIG1SLhHQfCZaNEFFIMCBW2edHRLZmWJA+mlqBJVuIUEEZv80iu u3e2I5A92KXHzRl9Hs8HuSPTeIJf4hUzL7NvJ7fMFiDOjYuM7z9UJqJtR2A1w8ic 7ned5+/Pwog0AzSLZws6jHdzK+RadUEd42tfvxqSvA8+PKefVIcF8XVdObIj0MNG CmdidUA0Idg2f/Jy83SrVz0ySgKr04UUVItoD9wWcErgD5eOcpvzaA3GrCHmpWUL NicmT7PTk/XbKEXovLR56kcwbWdzSTo= -----END CERTIFICATE-----Generated at Mon May 20 01:52:43 2024 by rpki-client on console-fra.rpki-client.org