$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/238c9a06-d601-3fd9-9dfb-934253679451.roa File: 238c9a06-d601-3fd9-9dfb-934253679451.roa (raw, json) Hash identifier: YQJiLEa7IAAmhGePxIxAEcDn6+oKESFa2dW5Vhq07j8= Subject key identifier: 6E:C2:E5:69:61:D9:27:03:2F:82:4E:BA:7B:61:99:A4:5F:54:45:AE Certificate issuer: /CN=2ff5ac87-7814-4f58-a2b6-2075afc56f21 Certificate serial: 010D0C9F43285845025AD2DE4F32F658CB11B900 Authority key identifier: AB:2B:9D:64:9F:90:C1:18:3F:2B:2E:38:1F:79:BF:7D:93:6A:47:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/238c9a06-d601-3fd9-9dfb-934253679451.roa Signing time: Sun 25 Feb 2024 14:00:34 +0000 ROA not before: Sun 25 Feb 2024 14:00:34 +0000 ROA not after: Sat 25 May 2024 13:00:34 +0000 asID: 17054 IP address blocks: 67.220.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:02:5a:d2:de:4f:32:f6:58:cb:11:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff5ac87-7814-4f58-a2b6-2075afc56f21 Validity Not Before: Feb 25 14:00:34 2024 GMT Not After : May 25 13:00:34 2024 GMT Subject: CN=b00b5997-4062-46d8-a57d-506f70e93455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:77:fd:f0:86:ea:a9:71:10:b7:26:18:da:1b: fe:6e:21:51:5b:4f:2c:61:12:d1:a8:41:0c:0e:14: 11:b9:c9:08:4a:ea:02:37:68:49:d4:b6:b6:69:79: 4b:cc:b1:3f:51:c5:45:67:0e:a8:b1:a4:c3:0a:81: aa:d7:96:c4:bc:b1:66:e6:25:6b:c2:77:86:77:5e: 19:14:7d:53:5a:6d:42:58:1b:19:14:1b:cf:95:0a: 56:85:ba:a6:14:9d:a6:07:d4:2d:42:ba:c7:7f:f4: fe:ae:61:4b:cd:72:40:34:d4:3e:17:36:90:8a:4f: 5d:a9:86:0c:76:c9:e7:ef:9e:18:d4:7f:3d:0f:55: 61:d5:ab:97:ec:b5:22:4a:c1:2d:07:14:0d:aa:77: 28:e2:40:fc:e9:5a:15:2c:bf:53:cf:b3:de:4e:38: 6c:de:d6:75:77:4d:57:d5:8b:b1:36:29:f7:49:5d: 07:ba:94:f3:37:2b:c9:3c:53:ad:a5:5a:fa:56:a8: 5b:16:93:80:1f:c6:64:f4:17:0a:22:c5:55:c6:f5: ad:af:8b:0c:83:e3:8f:a3:36:56:b8:8f:85:81:bd: a7:5d:71:2c:bf:f5:40:4f:93:a9:ad:40:0d:ff:b3: 15:86:36:f5:75:fb:e2:f1:34:ee:66:4d:cc:71:0a: 94:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C2:E5:69:61:D9:27:03:2F:82:4E:BA:7B:61:99:A4:5F:54:45:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/238c9a06-d601-3fd9-9dfb-934253679451.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.crl X509v3 Authority Key Identifier: keyid:AB:2B:9D:64:9F:90:C1:18:3F:2B:2E:38:1F:79:BF:7D:93:6A:47:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer sbgp-ipAddrBlock: critical IPv4: 67.220.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:d3:ba:f0:e3:4e:20:f1:c0:aa:f1:9a:5c:74:08:39:21:8f: 37:96:1c:24:ad:43:37:3f:6a:fb:93:c5:84:94:94:3b:66:f7: 2f:23:cc:2e:ec:2c:96:97:ce:fb:8c:79:fb:61:e3:fd:ef:bc: 71:3b:a4:12:63:1b:c0:61:b1:1a:72:92:2a:9c:11:66:81:7d: ca:03:ba:15:f5:5a:14:48:0e:d2:13:56:a8:c2:42:88:5a:a1: ad:07:ad:80:73:f2:b4:c4:c3:5c:dd:99:6b:18:c5:73:6c:96: dc:e5:a4:25:ad:65:91:12:a5:c6:e2:66:7e:d9:b8:a1:59:6e: de:d3:4c:79:a5:9f:75:e3:a2:c7:b0:4b:cc:f2:ee:96:b0:c0: e3:0f:bb:5c:0c:d8:b3:10:bd:32:a4:b1:e7:09:9a:36:34:0d: 6a:d3:f1:62:c6:51:12:49:b2:97:7e:39:04:ee:0a:2f:9b:c0: ab:37:a0:4a:5c:19:dd:a8:99:21:1f:f0:bb:f5:9a:8a:a2:a7: b4:b8:8b:2f:ab:4c:12:70:85:78:b9:64:f3:76:1f:67:83:b9: 58:6e:c2:31:df:43:b6:b0:59:0f:76:47:7b:e8:44:55:62:1e: 1b:82:de:e1:91:92:17:30:c3:4a:6f:cc:af:b6:51:c2:79:7c: b0:db:27:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUCWtLeTzL2WMsRuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmNWFjODctNzgxNC00ZjU4LWEyYjYtMjA3NWFmYzU2 ZjIxMB4XDTI0MDIyNTE0MDAzNFoXDTI0MDUyNTEzMDAzNFowLzEtMCsGA1UEAxMk YjAwYjU5OTctNDA2Mi00NmQ4LWE1N2QtNTA2ZjcwZTkzNDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunf98IbqqXEQtyYY2hv+biFRW08sYRLRqEEM DhQRuckISuoCN2hJ1La2aXlLzLE/UcVFZw6osaTDCoGq15bEvLFm5iVrwneGd14Z FH1TWm1CWBsZFBvPlQpWhbqmFJ2mB9QtQrrHf/T+rmFLzXJANNQ+FzaQik9dqYYM dsnn754Y1H89D1Vh1auX7LUiSsEtBxQNqnco4kD86VoVLL9Tz7PeTjhs3tZ1d01X 1YuxNin3SV0HupTzNyvJPFOtpVr6VqhbFpOAH8Zk9BcKIsVVxvWtr4sMg+OPozZW uI+Fgb2nXXEsv/VAT5OprUAN/7MVhjb1dfvi8TTuZk3McQqU7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7C5Wlh2ScDL4JOunthmaRfVEWuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZmY1 YWM4Ny03ODE0LTRmNTgtYTJiNi0yMDc1YWZjNTZmMjEvMjM4YzlhMDYtZDYwMS0z ZmQ5LTlkZmItOTM0MjUzNjc5NDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmZmNWFjODctNzgxNC00ZjU4LWEy YjYtMjA3NWFmYzU2ZjIxLzJmZjVhYzg3LTc4MTQtNGY1OC1hMmI2LTIwNzVhZmM1 NmYyMS5jcmwwHwYDVR0jBBgwFoAUqyudZJ+QwRg/Ky44H3m/fZNqR50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZmY1YWM4Ny03ODE0LTRmNTgtYTJiNi0yMDc1 YWZjNTZmMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9wwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/TuvDjTiDxwKrxmlx0CDkhjzeWHCStQzc/avuTxYSUlDtm9y8jzC7s LJaXzvuMefth4/3vvHE7pBJjG8BhsRpykiqcEWaBfcoDuhX1WhRIDtITVqjCQoha oa0HrYBz8rTEw1zdmWsYxXNsltzlpCWtZZESpcbiZn7ZuKFZbt7TTHmln3Xjosew S8zy7pawwOMPu1wM2LMQvTKksecJmjY0DWrT8WLGURJJspd+OQTuCi+bwKs3oEpc Gd2omSEf8Lv1moqip7S4iy+rTBJwhXi5ZPN2H2eDuVhuwjHfQ7awWQ92R3voRFVi HhuC3uGRkhcww0pvzK+2UcJ5fLDbJ9o= -----END CERTIFICATE-----Generated at Tue May 14 01:59:52 2024 by rpki-client on console-fra.rpki-client.org