$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/668022d2-73ad-3719-a3aa-730c3feeebc0.roa File: 668022d2-73ad-3719-a3aa-730c3feeebc0.roa (raw, json) Hash identifier: kQGsrJnL2pdKYsvD2Kith2yeWpXOf/dkPCzizxvE+EI= Subject key identifier: 5F:DE:98:1C:44:59:9E:FB:24:AA:9B:95:99:1A:C0:EA:DC:36:68:F8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DED4CD391A4B968F36700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/668022d2-73ad-3719-a3aa-730c3feeebc0.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 198.45.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:ed:4c:d3:91:a4:b9:68:f3:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=5c95eb45-13a8-4982-ad81-17257af71e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:57:8a:82:23:0d:0b:91:12:e0:63:11:0c:fb: 45:db:3e:1d:cc:c0:b6:ed:bc:6d:3b:c5:76:0b:14: a2:89:66:b2:75:eb:2f:22:00:11:d7:af:66:01:84: 76:f2:e1:eb:35:d5:c0:a7:c8:a7:ad:94:21:9d:53: 34:3b:5c:ad:51:ba:1a:9b:6a:00:7c:d2:28:1f:a1: 06:1c:32:3e:77:f9:ef:ad:86:d0:4b:57:c7:e6:6d: c6:d1:10:bd:06:4f:22:9d:6c:24:d3:05:ec:ea:5d: f8:c2:c3:4f:91:d6:20:ba:42:e0:a5:69:b8:89:99: 57:65:7b:b2:a0:09:83:02:34:92:de:34:c2:92:d3: 9f:03:d9:80:ce:40:36:a4:e6:b0:af:a7:b4:bd:6f: 58:d8:de:1b:f4:08:f4:74:2e:d8:04:f1:04:60:33: fd:f8:a8:fc:77:9e:cf:1b:64:b8:c0:f7:d5:3f:11: 03:cb:11:73:e7:f5:b6:da:ab:1c:82:67:26:b0:c2: 0a:0b:56:d8:21:90:f6:13:f0:ed:c2:4e:9d:66:e3: cc:d8:e6:c3:31:c5:d8:b8:89:a9:b9:15:89:d9:3b: d1:06:ad:f2:d5:5d:5b:47:b6:4a:77:78:3a:da:47: 73:ed:0f:f3:f8:5c:c4:ef:33:1c:d0:09:70:41:a5: f8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DE:98:1C:44:59:9E:FB:24:AA:9B:95:99:1A:C0:EA:DC:36:68:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/668022d2-73ad-3719-a3aa-730c3feeebc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:27:32:40:11:c8:6c:11:0c:f1:73:b3:a4:94:1c:40:d9:e1: df:69:ce:31:ae:7d:fb:64:e6:bb:01:98:70:42:86:e4:d4:0a: 0e:e1:1c:6f:f5:be:d3:f6:d0:ee:ff:2e:e8:7e:79:f4:b3:7f: d5:c6:b0:f4:e0:83:aa:7c:05:00:fa:b5:cd:bc:03:74:33:77: 0d:9f:5b:fc:fd:c0:db:0e:23:4f:1f:e8:07:5c:c2:53:5c:12: 75:57:a6:ab:a3:ab:66:5b:75:99:7b:8c:22:c6:06:ca:71:63: 5e:26:68:40:1e:3d:19:13:6e:66:73:67:e2:be:8f:48:e6:d7: af:db:a2:fa:65:19:77:14:b2:73:f1:eb:fa:47:ad:f1:13:a7: 70:1e:45:1e:88:65:a3:11:45:2d:3f:b2:83:2b:20:84:89:c3: bd:33:2e:de:bb:1e:aa:fa:3c:e9:1b:88:25:01:7e:fb:e5:ad: 68:9d:7a:b8:f9:cc:50:db:41:c1:63:95:03:91:14:23:61:2b: 1e:7d:82:92:24:8e:94:cb:d0:26:db:51:e1:dc:b0:b1:49:b1: 8d:67:30:36:24:d6:de:51:c8:fa:a5:c4:0e:e9:e1:b8:f6:d0: af:e4:c0:bf:1e:4e:1c:0d:0f:59:9d:31:10:66:27:64:b6:d7: 74:e1:28:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPe1M05GkuWjzZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk NWM5NWViNDUtMTNhOC00OTgyLWFkODEtMTcyNTdhZjcxZTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFeKgiMNC5ES4GMRDPtF2z4dzMC27bxtO8V2 CxSiiWaydesvIgAR169mAYR28uHrNdXAp8inrZQhnVM0O1ytUboam2oAfNIoH6EG HDI+d/nvrYbQS1fH5m3G0RC9Bk8inWwk0wXs6l34wsNPkdYgukLgpWm4iZlXZXuy oAmDAjSS3jTCktOfA9mAzkA2pOawr6e0vW9Y2N4b9Aj0dC7YBPEEYDP9+Kj8d57P G2S4wPfVPxEDyxFz5/W22qscgmcmsMIKC1bYIZD2E/Dtwk6dZuPM2ObDMcXYuImp uRWJ2TvRBq3y1V1bR7ZKd3g62kdz7Q/z+FzE7zMc0AlwQaX4BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/emBxEWZ77JKqblZkawOrcNmj4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjY4MDIyZDItNzNhZC0z NzE5LWEzYWEtNzMwYzNmZWVlYmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi32MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8nMkARyGwRDPFzs6SUHEDZ4d9pzjGufftk5rsBmHBChuTUCg7hHG/1 vtP20O7/Luh+efSzf9XGsPTgg6p8BQD6tc28A3Qzdw2fW/z9wNsOI08f6AdcwlNc EnVXpqujq2ZbdZl7jCLGBspxY14maEAePRkTbmZzZ+K+j0jm16/bovplGXcUsnPx 6/pHrfETp3AeRR6IZaMRRS0/soMrIISJw70zLt67Hqr6POkbiCUBfvvlrWiderj5 zFDbQcFjlQORFCNhKx59gpIkjpTL0CbbUeHcsLFJsY1nMDYk1t5RyPqlxA7p4bj2 0K/kwL8eThwND1mdMRBmJ2S213ThKEA= -----END CERTIFICATE-----Generated at Sun Apr 28 00:51:13 2024 by rpki-client on console-ams.rpki-client.org