$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/aea67f21-701a-365e-862d-6aee442c3571.roa File: aea67f21-701a-365e-862d-6aee442c3571.roa (raw, json) Hash identifier: 15QfBvJRH89IJGHO+YP79TRjvSYz2DAvdrWHISAKwJE= Subject key identifier: 99:44:C3:31:2B:D3:96:4B:6D:84:42:5C:C2:BC:6D:15:4D:A1:8F:05 Certificate issuer: /CN=76c188c9-4fff-4233-9a69-35e66734774b Certificate serial: 010D0C9F432858451B7AF1AB9AC335CF725EC000 Authority key identifier: DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/aea67f21-701a-365e-862d-6aee442c3571.roa Signing time: Tue 05 Mar 2024 14:00:31 +0000 ROA not before: Tue 05 Mar 2024 14:00:31 +0000 ROA not after: Mon 03 Jun 2024 13:00:31 +0000 asID: 7922 IP address blocks: 64.84.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/76c188c9-4fff-4233-9a69-35e66734774b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/76c188c9-4fff-4233-9a69-35e66734774b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1b:7a:f1:ab:9a:c3:35:cf:72:5e:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76c188c9-4fff-4233-9a69-35e66734774b Validity Not Before: Mar 5 14:00:31 2024 GMT Not After : Jun 3 13:00:31 2024 GMT Subject: CN=7d3ec9f6-5f2c-46f3-a1d3-e6875b30d8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f5:fa:87:8b:2a:41:93:b4:aa:4b:29:12:6e: 7a:02:49:e9:21:e9:5d:19:21:0d:5c:e0:f5:d1:7f: e3:ee:fd:0f:83:63:ad:df:e1:dc:16:d8:09:ca:b2: 4d:f1:c0:c4:9a:8a:5d:e2:9a:e2:24:b6:9c:cb:b8: 03:46:fe:1c:49:4c:e1:c8:0a:13:c7:30:58:1b:1f: 7c:1c:f6:ca:9c:14:d3:79:9a:bd:5b:f4:19:a5:d3: 2a:88:6d:ae:3a:4f:34:51:92:d6:96:3d:fb:9f:29: e3:bb:54:6e:e3:85:80:6a:2c:23:0a:0e:d6:c2:45: 62:bd:b0:0d:a1:83:46:f6:f7:8d:fc:80:2d:49:7b: 5e:20:f4:f7:5e:a3:41:39:5c:e5:57:3b:e3:ac:1e: ed:db:5b:d6:0a:71:52:67:d2:84:cf:9e:b2:74:9e: c8:ff:40:65:66:86:9e:8f:95:78:30:de:62:b8:48: 42:74:2e:01:e4:c7:57:07:a1:08:38:2d:d3:3f:5c: 24:db:17:4d:61:05:be:1a:6a:ac:b1:cb:2e:e7:8f: bc:f1:7f:9c:59:c8:9a:f8:dc:b6:ac:2d:4a:3c:a3: 77:0e:18:6d:88:07:62:0b:32:42:d3:1a:d1:12:64: 6c:5a:3e:1f:b6:c1:b1:94:a6:e1:64:81:b2:c8:61: 81:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:44:C3:31:2B:D3:96:4B:6D:84:42:5C:C2:BC:6D:15:4D:A1:8F:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/aea67f21-701a-365e-862d-6aee442c3571.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/76c188c9-4fff-4233-9a69-35e66734774b.crl X509v3 Authority Key Identifier: keyid:DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer sbgp-ipAddrBlock: critical IPv4: 64.84.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:f6:de:f6:80:fd:87:7d:25:91:ca:2f:3b:8a:6c:65:8d:26: a1:51:e7:b3:19:55:48:e3:de:36:59:7f:75:50:ae:33:18:cc: e6:ea:7e:0f:99:88:25:88:67:7a:20:a4:a8:4d:2d:90:c3:77: 86:a6:f5:09:03:22:75:1c:e2:64:8b:58:db:47:c2:59:dc:d6: b4:33:3c:e5:ce:20:55:31:75:86:cf:d2:48:2e:47:18:4f:e4: 46:68:53:16:a9:ab:64:4d:9f:9d:f9:c9:3b:b2:f2:0f:10:75: ec:90:fb:a1:75:f3:8e:00:72:51:ee:7a:7d:52:5d:91:d1:cb: 5c:ca:d8:c4:c4:19:65:c3:f2:0d:d4:ee:4a:97:14:e3:6e:74: 18:0d:85:e2:88:24:0f:a9:d4:c3:08:f5:1c:5a:27:e6:f4:ea: 61:11:f7:5f:db:4f:17:f5:39:81:5e:0f:2b:af:87:07:ba:1f: b9:c2:44:d6:ea:d1:75:3d:48:d4:1b:6d:91:f2:71:c6:f9:5c: d9:20:0a:50:3e:25:e8:ea:46:cf:88:de:59:5b:3b:2b:67:64: 9c:be:ca:d6:bc:dc:2b:f4:05:9d:54:6f:dd:e5:f8:50:f5:e6: b2:38:54:2d:60:1b:bd:4d:45:49:21:08:8b:d9:d5:2b:88:57: 0a:9a:a5:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUbevGrmsM1z3JewAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZjMTg4YzktNGZmZi00MjMzLTlhNjktMzVlNjY3MzQ3 NzRiMB4XDTI0MDMwNTE0MDAzMVoXDTI0MDYwMzEzMDAzMVowLzEtMCsGA1UEAxMk N2QzZWM5ZjYtNWYyYy00NmYzLWExZDMtZTY4NzViMzBkOGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/X6h4sqQZO0qkspEm56AknpIeldGSENXOD1 0X/j7v0Pg2Ot3+HcFtgJyrJN8cDEmopd4priJLacy7gDRv4cSUzhyAoTxzBYGx98 HPbKnBTTeZq9W/QZpdMqiG2uOk80UZLWlj37nynju1Ru44WAaiwjCg7WwkVivbAN oYNG9veN/IAtSXteIPT3XqNBOVzlVzvjrB7t21vWCnFSZ9KEz56ydJ7I/0BlZoae j5V4MN5iuEhCdC4B5MdXB6EIOC3TP1wk2xdNYQW+Gmqsscsu54+88X+cWcia+Ny2 rC1KPKN3DhhtiAdiCzJC0xrREmRsWj4ftsGxlKbhZIGyyGGBOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlEwzEr05ZLbYRCXMK8bRVNoY8FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NmMx ODhjOS00ZmZmLTQyMzMtOWE2OS0zNWU2NjczNDc3NGIvYWVhNjdmMjEtNzAxYS0z NjVlLTg2MmQtNmFlZTQ0MmMzNTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzZjMTg4YzktNGZmZi00MjMzLTlh NjktMzVlNjY3MzQ3NzRiLzc2YzE4OGM5LTRmZmYtNDIzMy05YTY5LTM1ZTY2NzM0 Nzc0Yi5jcmwwHwYDVR0jBBgwFoAU2+KmpXhT9xLjHzFSCsVBuxw+5xswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NmMxODhjOS00ZmZmLTQyMzMtOWE2OS0zNWU2 NjczNDc3NGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQFR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB723vaA/Yd9JZHKLzuKbGWNJqFR57MZVUjj3jZZf3VQrjMYzObqfg+Z iCWIZ3ogpKhNLZDDd4am9QkDInUc4mSLWNtHwlnc1rQzPOXOIFUxdYbP0kguRxhP 5EZoUxapq2RNn535yTuy8g8QdeyQ+6F1844AclHuen1SXZHRy1zK2MTEGWXD8g3U 7kqXFONudBgNheKIJA+p1MMI9RxaJ+b06mER91/bTxf1OYFeDyuvhwe6H7nCRNbq 0XU9SNQbbZHyccb5XNkgClA+JejqRs+I3llbOytnZJy+yta83Cv0BZ1Ub93l+FD1 5rI4VC1gG71NRUkhCIvZ1SuIVwqapUI= -----END CERTIFICATE-----Generated at Sat May 4 04:33:08 2024 by rpki-client on console-ams.rpki-client.org