$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e4e6178-f703-354a-9254-0b8622ba2433.roa File: 1e4e6178-f703-354a-9254-0b8622ba2433.roa (raw, json) Hash identifier: kx4G0+jOL7LERWFFTv7AmwnVjcriVYzW+fTaHXx6kNo= Subject key identifier: 0A:65:72:77:0E:03:26:F5:0D:59:7B:63:AB:0B:4F:F7:1D:04:94:85 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285845AC88DA4C1E0FFBBFA28619C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e4e6178-f703-354a-9254-0b8622ba2433.roa Signing time: Fri 26 Apr 2024 13:00:35 +0000 ROA not before: Fri 26 Apr 2024 13:00:35 +0000 ROA not after: Thu 25 Jul 2024 13:00:35 +0000 asID: 33660 IP address blocks: 67.186.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ac:88:da:4c:1e:0f:fb:bf:a2:86:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 26 13:00:35 2024 GMT Not After : Jul 25 13:00:35 2024 GMT Subject: CN=9388351e-bd81-4242-8d7f-8dfde7fb6d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fd:e4:0c:eb:ad:e4:5e:22:89:04:0f:c4:75: 6e:9e:24:31:cc:fc:49:f1:15:26:85:3c:91:8b:43: b1:bb:bd:26:4a:e3:e1:24:5c:20:1c:af:d2:6b:82: fe:d1:e4:1c:f0:40:81:47:2e:d5:ec:8f:1d:08:d5: ff:57:58:67:81:f0:f8:06:96:ea:1f:49:f0:85:bd: 3d:1e:b1:f2:3d:fc:f0:ae:90:15:88:ca:84:75:fa: c2:c3:62:af:8b:81:01:e6:98:aa:b4:d1:ba:31:ee: 27:9c:40:13:d6:3b:b0:43:fd:1b:ba:68:95:bf:d0: 08:6e:c5:bc:c4:b8:b5:76:67:53:01:c7:83:67:79: 7d:38:fd:1c:6f:6c:58:49:d5:ce:23:68:73:e5:4a: cf:01:de:de:ac:aa:3b:b1:76:e3:4c:7f:98:24:88: 8a:d6:99:ee:c7:d6:9e:99:29:dc:92:fa:0b:59:9e: df:17:68:0b:4b:ce:ea:23:50:05:62:99:d5:3e:5a: db:f8:6c:f0:0d:55:33:9f:47:84:79:d1:5c:51:54: cc:40:cb:f1:83:5b:9b:ee:7a:8b:81:db:76:cf:39: 2f:d0:da:b2:c5:5f:30:4c:47:a4:35:cf:55:12:bd: 91:4b:6a:03:d3:8e:4f:e4:ec:2f:64:2f:19:d8:b6: 8c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:65:72:77:0E:03:26:F5:0D:59:7B:63:AB:0B:4F:F7:1D:04:94:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e4e6178-f703-354a-9254-0b8622ba2433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.186.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:37:34:85:6d:54:f8:ac:72:1b:67:3d:7b:5e:6f:81:21:35: f2:3f:52:db:4e:a0:74:d9:59:20:9b:ab:d2:1e:f7:c9:38:ae: 06:92:50:ea:89:ae:3b:bf:37:0c:32:f2:79:d9:f2:0e:79:ed: 08:ed:30:a2:71:d2:cc:fd:24:36:b8:b8:dc:0d:16:fc:72:fc: 55:54:f6:e8:60:ca:36:45:58:26:b6:65:61:8d:72:5c:5c:8b: b9:a6:1f:69:e0:86:80:1c:22:4d:0d:9a:8f:09:24:f4:2e:d5: fb:78:42:43:19:61:bf:e9:b1:a8:ce:5d:bd:b0:de:9e:2a:da: e3:39:f3:a1:d5:48:65:a9:12:36:27:02:64:0d:57:0c:b0:7e: 75:19:47:11:96:4e:4d:82:47:01:0b:40:cc:ad:17:1c:c7:2a: 99:68:0e:73:83:87:d1:80:ae:64:6d:09:e9:ac:55:dc:32:9a: f3:07:c9:d4:7a:7d:89:09:39:67:1f:59:1c:7e:d2:78:bc:ce: e2:ba:c7:1e:0f:88:f6:df:a7:73:2a:b3:2a:79:a9:06:f3:bb: 8e:88:d3:c4:2a:ed:5c:33:47:1c:67:98:92:30:82:a9:af:5c: 22:56:26:d2:95:ac:68:dc:5c:7e:49:6a:c8:ae:16:03:95:18: 4b:26:b0:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsiNpMHg/7v6KGGcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk OTM4ODM1MWUtYmQ4MS00MjQyLThkN2YtOGRmZGU3ZmI2ZDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf3kDOut5F4iiQQPxHVuniQxzPxJ8RUmhTyR i0Oxu70mSuPhJFwgHK/Sa4L+0eQc8ECBRy7V7I8dCNX/V1hngfD4BpbqH0nwhb09 HrHyPfzwrpAViMqEdfrCw2Kvi4EB5piqtNG6Me4nnEAT1juwQ/0bumiVv9AIbsW8 xLi1dmdTAceDZ3l9OP0cb2xYSdXOI2hz5UrPAd7erKo7sXbjTH+YJIiK1pnux9ae mSnckvoLWZ7fF2gLS87qI1AFYpnVPlrb+GzwDVUzn0eEedFcUVTMQMvxg1ub7nqL gdt2zzkv0NqyxV8wTEekNc9VEr2RS2oD045P5OwvZC8Z2LaMRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAplcncOAyb1DVl7Y6sLT/cdBJSFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWU0ZTYxNzgtZjcwMy0z NTRhLTkyNTQtMGI4NjIyYmEyNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ7rYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKI3NIVtVPischtnPXteb4EhNfI/UttOoHTZWSCbq9Ie98k4rgaSUOqJ rju/Nwwy8nnZ8g557QjtMKJx0sz9JDa4uNwNFvxy/FVU9uhgyjZFWCa2ZWGNclxc i7mmH2nghoAcIk0Nmo8JJPQu1ft4QkMZYb/psajOXb2w3p4q2uM586HVSGWpEjYn AmQNVwywfnUZRxGWTk2CRwELQMytFxzHKploDnODh9GArmRtCemsVdwymvMHydR6 fYkJOWcfWRx+0ni8zuK6xx4PiPbfp3Mqsyp5qQbzu46I08Qq7VwzRxxnmJIwgqmv XCJWJtKVrGjcXH5JasiuFgOVGEsmsLs= -----END CERTIFICATE-----Generated at Sun May 5 01:14:54 2024 by rpki-client on console-ams.rpki-client.org