$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/caafb0e5-91a7-3e7f-bde6-fed499c7bf12.roa File: caafb0e5-91a7-3e7f-bde6-fed499c7bf12.roa (raw, json) Hash identifier: taXVhi3PCQHMf8XdlWcTHA+wOCrkBD2vhLHBU8J4p1M= Subject key identifier: 55:F7:6D:BA:0A:DD:60:82:09:C5:A9:BC:03:C0:0A:6C:65:28:EF:51 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DF56E80D61D1EEA985F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/caafb0e5-91a7-3e7f-bde6-fed499c7bf12.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 67.54.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:f5:6e:80:d6:1d:1e:ea:98:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=4fb39892-3a7f-4a22-90c5-235028f84321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c3:37:d0:f5:c8:16:47:a5:c1:31:89:31:a7: d5:11:d2:44:f7:fb:8d:33:cb:a1:74:2f:7d:df:61: 0d:cd:25:eb:73:8f:79:f5:e5:a4:e1:a3:ba:ae:fa: 69:e7:41:d3:de:66:cd:ce:8f:84:21:07:b7:f4:30: 5e:f0:56:5e:c8:8c:df:5f:44:83:92:f2:6a:e5:55: 08:9b:7a:17:bf:52:87:f8:e9:ab:7d:86:92:9d:7f: c8:f3:b5:6e:74:f2:30:e8:67:05:89:21:64:ea:e1: 96:96:56:8e:38:c1:22:34:36:0c:86:7c:89:8a:5c: 0e:1d:80:42:7c:34:ad:57:fd:ee:3e:80:10:13:9b: b7:3e:d9:f3:8c:5b:97:20:8d:ea:7a:00:72:d3:72: be:36:1c:a2:32:d0:e5:ef:07:6e:c8:2e:42:69:1d: ce:e0:4e:46:f5:4a:3e:ab:4a:3f:47:47:78:9e:24: 5a:49:95:07:22:b3:04:54:a5:b8:7a:b9:f9:38:83: cc:74:ce:06:21:86:46:4d:51:21:6d:1f:5d:8e:f5: 66:e1:da:ab:38:62:dc:1e:43:84:ea:0e:02:02:9b: 62:96:6c:fc:55:3f:20:71:08:2f:c6:e1:6b:58:95: 97:b6:70:23:67:99:fe:47:58:41:8e:32:bf:d3:37: 87:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F7:6D:BA:0A:DD:60:82:09:C5:A9:BC:03:C0:0A:6C:65:28:EF:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/caafb0e5-91a7-3e7f-bde6-fed499c7bf12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:0c:86:f7:00:6a:3b:00:8e:6f:8f:8c:47:15:f7:54:7b:89: bb:3a:64:de:71:65:ca:6c:f7:fe:12:7d:22:8d:04:e0:07:18: 4d:4b:70:51:ee:2d:b7:ad:64:49:93:35:7f:ca:bf:eb:a6:07: b6:22:6d:f8:80:11:51:fa:33:ac:13:62:6f:74:a9:ed:87:02: dc:50:93:03:57:61:8c:06:2d:0f:73:fc:23:e6:aa:07:9a:80: 13:ad:b7:ab:99:ea:72:e6:18:65:c5:0e:aa:9d:0f:85:ff:2f: 1c:3d:83:a5:42:84:04:56:27:d8:70:c2:63:44:60:b4:82:56: b8:72:17:e1:6f:86:63:c1:c7:7c:8f:73:f3:d8:c1:82:0e:28: 13:92:97:98:ec:93:09:71:50:ff:26:60:3a:54:a2:72:f2:2a: f1:85:04:27:c1:be:bc:fd:81:2c:7e:85:dd:3d:c2:03:61:3e: f8:41:47:a1:31:d8:04:41:79:58:ad:92:96:42:b7:49:cd:7f: 20:2f:c7:ee:cf:b0:5f:cb:4d:59:de:6f:fd:92:22:8b:e3:eb: d8:02:4f:d5:54:4b:2c:74:ba:dc:2d:13:ee:73:94:d9:40:63: de:74:8c:49:db:18:81:f0:5f:e3:f9:8e:f7:f2:14:d6:e5:2a: 4a:2c:55:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPfVugNYdHuqYX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk NGZiMzk4OTItM2E3Zi00YTIyLTkwYzUtMjM1MDI4Zjg0MzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMM30PXIFkelwTGJMafVEdJE9/uNM8uhdC99 32ENzSXrc4959eWk4aO6rvpp50HT3mbNzo+EIQe39DBe8FZeyIzfX0SDkvJq5VUI m3oXv1KH+OmrfYaSnX/I87VudPIw6GcFiSFk6uGWllaOOMEiNDYMhnyJilwOHYBC fDStV/3uPoAQE5u3PtnzjFuXII3qegBy03K+NhyiMtDl7wduyC5CaR3O4E5G9Uo+ q0o/R0d4niRaSZUHIrMEVKW4ern5OIPMdM4GIYZGTVEhbR9djvVm4dqrOGLcHkOE 6g4CAptilmz8VT8gcQgvxuFrWJWXtnAjZ5n+R1hBjjK/0zeH5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFX3bboK3WCCCcWpvAPACmxlKO9RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2FhZmIwZTUtOTFhNy0z ZTdmLWJkZTYtZmVkNDk5YzdiZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzb9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkMhvcAajsAjm+PjEcV91R7ibs6ZN5xZcps9/4SfSKNBOAHGE1LcFHu LbetZEmTNX/Kv+umB7YibfiAEVH6M6wTYm90qe2HAtxQkwNXYYwGLQ9z/CPmqgea gBOtt6uZ6nLmGGXFDqqdD4X/Lxw9g6VChARWJ9hwwmNEYLSCVrhyF+FvhmPBx3yP c/PYwYIOKBOSl5jskwlxUP8mYDpUonLyKvGFBCfBvrz9gSx+hd09wgNhPvhBR6Ex 2ARBeVitkpZCt0nNfyAvx+7PsF/LTVneb/2SIovj69gCT9VUSyx0utwtE+5zlNlA Y950jEnbGIHwX+P5jvfyFNblKkosVck= -----END CERTIFICATE-----Generated at Sat Apr 27 15:14:11 2024 by rpki-client on console-ams.rpki-client.org