$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa File: f3af561f-6e70-31c4-86f8-a11b4790170b.roa (raw, json) Hash identifier: VQcxUEm92ct/3F0+JIeXe2achTLJr/Wf3t4EBu8vzKs= Subject key identifier: A7:99:82:0D:43:1E:12:96:0E:DF:09:4B:90:85:C9:F4:FC:B8:A0:E7 Certificate issuer: /CN=a66a1dc9-26a8-4e01-9916-0d16dd191690 Certificate serial: 010D0C9F432858452C1D3D3112677613A1F7FEA0 Authority key identifier: 05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa Signing time: Mon 11 Mar 2024 13:00:31 +0000 ROA not before: Mon 11 Mar 2024 13:00:31 +0000 ROA not after: Sun 09 Jun 2024 13:00:31 +0000 asID: 46307 IP address blocks: 23.144.248.0/24 maxlen: 24 2602:fb3c::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:2c:1d:3d:31:12:67:76:13:a1:f7:fe:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a66a1dc9-26a8-4e01-9916-0d16dd191690 Validity Not Before: Mar 11 13:00:31 2024 GMT Not After : Jun 9 13:00:31 2024 GMT Subject: CN=d5180cff-2887-4832-adc4-e65a3eac8aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:06:ac:60:a9:7e:e8:66:ca:32:a5:21:0a:f9: 87:76:c3:34:cc:d6:08:81:6d:ae:e7:8f:a4:f6:0a: c0:7b:5e:76:8b:0e:29:23:42:c9:19:95:16:2c:9c: cb:7d:f3:1e:20:ec:25:14:55:64:59:ca:35:75:e9: d0:c2:bd:17:91:a0:e9:a2:ab:df:ff:71:98:42:01: 55:d8:d3:9f:bf:7d:6d:f6:ef:97:27:85:f0:21:5b: dc:f0:ea:29:56:06:9a:63:34:38:4a:83:c3:fb:15: 8e:41:be:05:37:63:80:43:15:a3:1c:1d:37:81:e9: df:cc:a6:aa:6c:8c:d7:a7:81:e2:e5:9b:bc:32:05: 34:80:d5:9c:ad:d6:15:d7:b0:45:a8:c1:9f:7f:71: 70:85:de:dc:ea:d7:5b:ea:97:b9:e7:bd:8b:5b:9e: 88:d4:2d:4f:24:57:41:76:5e:83:fa:9e:c7:60:df: 4b:9d:0c:b8:72:3a:8d:3a:b0:92:67:41:14:6f:13: 38:bd:7d:17:5f:55:e6:89:e5:85:b6:44:cb:b7:88: 57:42:f9:91:b1:84:36:1b:80:7c:a1:9a:60:86:a5: cb:d3:43:b3:d9:29:71:19:05:3e:38:eb:15:9b:34: 0c:b3:e7:f2:2e:58:71:6e:f0:45:2c:30:39:7b:c9: e6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:99:82:0D:43:1E:12:96:0E:DF:09:4B:90:85:C9:F4:FC:B8:A0:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl X509v3 Authority Key Identifier: keyid:05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer sbgp-ipAddrBlock: critical IPv4: 23.144.248.0/24 IPv6: 2602:fb3c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:8a:0b:f5:b4:e7:1e:a5:98:bc:c9:0b:b6:45:f1:2d:4d:26: e2:e2:85:04:a2:46:70:f1:54:6e:cd:56:7f:0e:cf:9b:35:4b: c3:e5:64:a6:58:8c:55:e9:55:07:bb:fc:f4:99:01:b6:4b:16: 14:e6:f5:c9:84:de:c5:26:12:d3:97:2a:e2:2d:57:84:8c:87: c9:20:69:10:e4:cd:8d:54:c5:17:09:06:f1:bb:ed:16:d0:30: 9d:81:1d:0a:57:b4:bd:7c:87:2b:4d:78:c5:40:98:19:3c:9e: 7d:36:b6:43:29:ae:5e:f1:c5:ff:ca:36:97:a0:88:4b:83:32: 06:2a:f5:5c:a1:17:ec:9d:54:4e:a2:43:15:32:5f:aa:bd:de: 36:07:9d:57:c2:7c:8e:66:52:f5:de:a1:24:79:26:8a:78:c5: ea:e3:cf:b5:12:d8:42:df:70:21:d9:72:6e:6d:65:76:7f:b1: 30:57:99:58:b1:05:eb:8a:e7:6f:50:9e:6c:8f:8d:bc:d0:ea: 50:38:f5:85:68:a1:7e:db:65:34:4a:5e:89:49:4a:b8:e5:5a: de:44:2c:51:a7:38:0b:f7:d8:a8:ad:e5:90:48:2e:69:3e:99: a6:7f:ec:d5:b1:9e:70:4f:17:a2:e4:e7:17:67:33:1b:69:24: b1:be:90:e6 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEUsHT0xEmd2E6H3/qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY2YTFkYzktMjZhOC00ZTAxLTk5MTYtMGQxNmRkMTkx NjkwMB4XDTI0MDMxMTEzMDAzMVoXDTI0MDYwOTEzMDAzMVowLzEtMCsGA1UEAxMk ZDUxODBjZmYtMjg4Ny00ODMyLWFkYzQtZTY1YTNlYWM4YWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAasYKl+6GbKMqUhCvmHdsM0zNYIgW2u54+k 9grAe152iw4pI0LJGZUWLJzLffMeIOwlFFVkWco1denQwr0XkaDpoqvf/3GYQgFV 2NOfv31t9u+XJ4XwIVvc8OopVgaaYzQ4SoPD+xWOQb4FN2OAQxWjHB03genfzKaq bIzXp4Hi5Zu8MgU0gNWcrdYV17BFqMGff3Fwhd7c6tdb6pe5572LW56I1C1PJFdB dl6D+p7HYN9LnQy4cjqNOrCSZ0EUbxM4vX0XX1XmieWFtkTLt4hXQvmRsYQ2G4B8 oZpghqXL00Oz2SlxGQU+OOsVmzQMs+fyLlhxbvBFLDA5e8nmfQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKeZgg1DHhKWDt8JS5CFyfT8uKDnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNjZh MWRjOS0yNmE4LTRlMDEtOTkxNi0wZDE2ZGQxOTE2OTAvZjNhZjU2MWYtNmU3MC0z MWM0LTg2ZjgtYTExYjQ3OTAxNzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTY2YTFkYzktMjZhOC00ZTAxLTk5 MTYtMGQxNmRkMTkxNjkwL2E2NmExZGM5LTI2YTgtNGUwMS05OTE2LTBkMTZkZDE5 MTY5MC5jcmwwHwYDVR0jBBgwFoAUBSoarMYDzX68/IwHytY4A2TY5KEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNjZhMWRjOS0yNmE4LTRlMDEtOTkxNi0wZDE2 ZGQxOTE2OTAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5D4MA4E AgACMAgDBgQmAvs8ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQigv1tOcepZi8yQu2RfEtTSbi4oUEokZw 8VRuzVZ/Ds+bNUvD5WSmWIxV6VUHu/z0mQG2SxYU5vXJhN7FJhLTlyriLVeEjIfJ IGkQ5M2NVMUXCQbxu+0W0DCdgR0KV7S9fIcrTXjFQJgZPJ59NrZDKa5e8cX/yjaX oIhLgzIGKvVcoRfsnVROokMVMl+qvd42B51XwnyOZlL13qEkeSaKeMXq48+1EthC 33Ah2XJubWV2f7EwV5lYsQXriudvUJ5sj4280OpQOPWFaKF+22U0Sl6JSUq45Vre RCxRpzgL99ioreWQSC5pPpmmf+zVsZ5wTxei5OcXZzMbaSSxvpDm -----END CERTIFICATE-----Generated at Sat May 18 15:26:57 2024 by rpki-client on console-fra.rpki-client.org