$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/398da38d-6292-37e2-9086-59fb9ddf4972.roa File: 398da38d-6292-37e2-9086-59fb9ddf4972.roa (raw, json) Hash identifier: gyLWIPPiGgdI9BGqxSh6wJhSr9BzRW93OZzEJNhxaz0= Subject key identifier: 71:89:62:C8:3D:AD:31:43:B8:E4:15:9F:ED:E5:8D:B5:26:99:BE:9E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285845AC89CF5189268C56AB8B0F90 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/398da38d-6292-37e2-9086-59fb9ddf4972.roa Signing time: Fri 26 Apr 2024 13:00:35 +0000 ROA not before: Fri 26 Apr 2024 13:00:35 +0000 ROA not after: Thu 25 Jul 2024 13:00:35 +0000 asID: 33287 IP address blocks: 67.165.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ac:89:cf:51:89:26:8c:56:ab:8b:0f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 26 13:00:35 2024 GMT Not After : Jul 25 13:00:35 2024 GMT Subject: CN=853ca06a-7152-4dd8-a08f-3192929764f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:12:da:3d:5c:7d:1b:82:4f:6e:04:24:31:94: 78:29:b5:7c:88:a0:dd:bd:df:00:cc:d9:5e:a3:9d: 07:88:d2:17:5e:68:d4:f3:df:28:69:9c:25:92:8b: de:be:10:ec:aa:9a:82:7c:b2:74:08:02:e7:15:cc: 7c:ca:62:46:65:a3:0f:b4:1c:38:ed:80:fe:5c:64: 9b:64:24:a3:51:09:0e:52:ab:2f:df:12:5b:e8:61: 8d:8b:85:06:c2:c3:10:2d:9d:30:ce:9d:7a:a0:96: 43:f1:61:af:d1:b8:f2:4c:78:83:d4:62:97:b2:21: c2:63:2e:e0:47:63:f5:e7:1f:94:5b:ea:0a:9f:24: b8:47:e2:c9:dd:2c:2c:b3:b6:0f:34:ea:dc:23:6d: 6f:d4:8b:65:e6:6c:73:47:3e:7e:50:5d:44:71:34: af:51:f8:5e:10:1d:a6:e1:29:5e:a1:53:c7:d3:9a: 88:3b:bd:df:45:1e:c0:55:b7:3f:1f:64:33:a9:76: c3:27:aa:4c:e5:8c:19:6d:67:3c:ad:10:a1:ed:b2: f1:4a:84:9f:ac:20:ab:cc:67:0d:80:aa:4c:49:06: e7:4a:5b:20:0f:20:52:7a:27:50:52:48:f0:d5:12: 41:30:7b:2d:9c:01:7e:2e:23:bf:ba:db:eb:4b:54: fd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:89:62:C8:3D:AD:31:43:B8:E4:15:9F:ED:E5:8D:B5:26:99:BE:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/398da38d-6292-37e2-9086-59fb9ddf4972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.165.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:67:3e:0f:28:4a:1f:f6:b0:4d:5c:5d:76:1e:a0:8a:7c:9a: 29:79:5e:20:d9:0c:ab:47:55:df:8b:36:1a:82:0d:48:2b:46: b0:50:04:ca:45:5c:55:83:b8:40:bd:03:69:5d:72:59:52:06: f6:9d:91:bd:28:e8:f6:32:56:21:98:45:85:95:c6:73:1c:84: f5:92:0f:fd:2c:47:c6:bf:cc:dd:a4:1a:15:48:b0:d5:70:3d: a6:61:62:02:7f:39:ae:00:98:37:cf:a4:44:dc:dd:09:56:82: b4:e8:02:28:a5:d7:1a:81:78:a2:cf:14:65:3e:5c:63:88:f5: 5c:35:22:a4:ee:e5:90:f9:2d:12:98:34:0d:9a:96:31:33:73: 74:fb:fd:66:77:56:7c:50:e6:79:15:af:c3:e3:9f:19:22:ce: f9:bb:da:b9:97:a4:af:e9:6d:4b:ef:31:f9:70:df:2e:fd:6e: 47:fc:85:40:1d:f7:e4:16:0b:1b:3d:bd:89:a3:43:12:62:34: 67:22:05:69:4d:c4:0e:32:b8:cf:3b:8d:04:ca:eb:f4:6e:1e: 18:ae:72:e8:c1:45:df:53:d5:55:a8:0d:70:94:d9:48:49:fb: e6:a5:cc:8c:a5:e9:02:25:a3:98:b1:92:b8:fd:ce:a0:49:d4: aa:7a:24:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsic9RiSaMVquLD5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk ODUzY2EwNmEtNzE1Mi00ZGQ4LWEwOGYtMzE5MjkyOTc2NGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RLaPVx9G4JPbgQkMZR4KbV8iKDdvd8AzNle o50HiNIXXmjU898oaZwlkovevhDsqpqCfLJ0CALnFcx8ymJGZaMPtBw47YD+XGSb ZCSjUQkOUqsv3xJb6GGNi4UGwsMQLZ0wzp16oJZD8WGv0bjyTHiD1GKXsiHCYy7g R2P15x+UW+oKnyS4R+LJ3Swss7YPNOrcI21v1Itl5mxzRz5+UF1EcTSvUfheEB2m 4SleoVPH05qIO73fRR7AVbc/H2QzqXbDJ6pM5YwZbWc8rRCh7bLxSoSfrCCrzGcN gKpMSQbnSlsgDyBSeidQUkjw1RJBMHstnAF+LiO/utvrS1T9+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGJYsg9rTFDuOQVn+3ljbUmmb6eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzk4ZGEzOGQtNjI5Mi0z N2UyLTkwODYtNTlmYjlkZGY0OTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ6UYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1nPg8oSh/2sE1cXXYeoIp8mil5XiDZDKtHVd+LNhqCDUgrRrBQBMpF XFWDuEC9A2ldcllSBvadkb0o6PYyViGYRYWVxnMchPWSD/0sR8a/zN2kGhVIsNVw PaZhYgJ/Oa4AmDfPpETc3QlWgrToAiil1xqBeKLPFGU+XGOI9Vw1IqTu5ZD5LRKY NA2aljEzc3T7/WZ3VnxQ5nkVr8Pjnxkizvm72rmXpK/pbUvvMflw3y79bkf8hUAd 9+QWCxs9vYmjQxJiNGciBWlNxA4yuM87jQTK6/RuHhiucujBRd9T1VWoDXCU2UhJ ++alzIyl6QIlo5ixkrj9zqBJ1Kp6JCQ= -----END CERTIFICATE-----Generated at Sat May 4 14:47:18 2024 by rpki-client on console-fra.rpki-client.org