$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c585bfe-3a62-3952-832e-2038f0a3a45f.roa File: 5c585bfe-3a62-3952-832e-2038f0a3a45f.roa (raw, json) Hash identifier: sMYJZ4Xd0lbC7t5JUOLqmsKQ7hx1K2HvEtcmXn7gMcQ= Subject key identifier: 40:32:C6:A4:AE:FE:A2:3D:73:AE:64:97:9B:4D:74:D4:B8:61:2B:C2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FABAF87EF5E86B5C9F41F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c585bfe-3a62-3952-832e-2038f0a3a45f.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33662 IP address blocks: 162.151.4.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:af:87:ef:5e:86:b5:c9:f4:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=b92eda90-0fa0-41a6-a9e6-103abfdbed92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e9:26:9b:81:26:19:82:00:9b:aa:3a:f3:ea: a7:ac:29:e1:21:fb:53:ae:1f:3b:e2:41:1b:a5:a3: 8c:c7:02:26:e0:56:34:27:60:6e:07:19:44:c9:ee: d3:78:3e:b5:00:55:4d:1f:13:1b:ba:f8:1b:83:01: a7:94:30:9a:4c:c7:c4:d3:85:a9:d6:1a:d5:20:76: be:4f:fd:97:30:9a:87:9e:dd:51:08:44:db:c2:9f: 5f:86:44:5b:35:26:dc:7e:d3:77:eb:d4:a5:13:01: be:b5:02:b1:b8:3d:d8:b9:a6:60:99:16:68:94:93: b9:4b:a9:2c:1c:06:16:26:a8:c8:c4:1b:69:d6:4c: 1b:77:55:ac:6e:b6:04:a8:90:b8:e1:01:16:b3:d0: d4:cf:bc:d9:6c:ca:08:c6:0c:b3:93:4f:78:ac:41: 4e:de:f3:cb:63:2b:10:1b:53:09:ba:fd:54:f6:2a: 21:3e:06:0b:50:29:c9:14:a4:6c:fb:66:d9:ca:d8: ae:a7:76:04:1b:12:44:cf:34:65:cf:eb:8b:88:98: 60:69:cb:37:8c:3e:86:1d:66:38:16:34:86:8a:60: 81:fa:9e:7e:59:b2:18:f8:43:90:0c:74:ca:59:d6: 43:20:13:e2:98:1d:4d:c1:48:55:2f:5b:73:f7:0d: 65:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:32:C6:A4:AE:FE:A2:3D:73:AE:64:97:9B:4D:74:D4:B8:61:2B:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c585bfe-3a62-3952-832e-2038f0a3a45f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 162.151.4.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:77:b7:cc:19:37:84:ed:93:92:d8:de:4d:4b:33:29:c2:e9: 5f:65:5e:cc:3b:fa:a0:8b:dc:c1:8d:b8:23:58:90:74:3c:f6: 18:79:f0:b5:63:3b:21:9a:af:f3:cb:68:0d:d9:c9:e2:df:6c: c8:cb:e6:09:9a:b9:4c:51:92:6a:2e:eb:b4:37:aa:b5:97:98: f9:18:eb:03:13:cc:ef:d8:96:6c:d4:e7:ff:b5:16:c3:c7:61: bf:eb:cc:c4:86:29:fd:8e:64:4b:8a:69:2f:40:dd:e3:97:74: 22:bc:1f:8a:fa:20:16:c0:0d:24:7d:95:ca:15:5a:33:0d:cd: 09:cc:d4:bb:83:3e:77:dd:2f:c8:d4:0b:26:88:7b:35:3d:a0: 4d:a6:56:f3:6c:4b:d3:16:3a:83:47:16:1f:cd:df:74:6f:81: 95:e7:d1:29:74:6b:87:fc:c8:0d:75:4e:22:43:42:f2:a7:b7: 50:76:9e:80:b5:85:b8:0e:5c:1a:b6:50:5e:b9:fc:7a:42:fc: 04:6e:b5:4c:75:ae:ca:b7:e1:b5:09:77:ec:7b:48:5b:5b:fe: 49:c9:65:b0:c2:8d:91:53:10:3d:c6:61:01:56:2b:2d:8e:fa: d8:7a:ce:87:1e:b6:f7:93:89:ad:6e:7a:76:24:a1:22:18:f1: 49:d7:f4:ce -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEUfq6+H716Gtcn0HwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk YjkyZWRhOTAtMGZhMC00MWE2LWE5ZTYtMTAzYWJmZGJlZDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlekmm4EmGYIAm6o68+qnrCnhIftTrh874kEb paOMxwIm4FY0J2BuBxlEye7TeD61AFVNHxMbuvgbgwGnlDCaTMfE04Wp1hrVIHa+ T/2XMJqHnt1RCETbwp9fhkRbNSbcftN369SlEwG+tQKxuD3YuaZgmRZolJO5S6ks HAYWJqjIxBtp1kwbd1WsbrYEqJC44QEWs9DUz7zZbMoIxgyzk094rEFO3vPLYysQ G1MJuv1U9iohPgYLUCnJFKRs+2bZytiup3YEGxJEzzRlz+uLiJhgacs3jD6GHWY4 FjSGimCB+p5+WbIY+EOQDHTKWdZDIBPimB1NwUhVL1tz9w1lswIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEAyxqSu/qI9c65kl5tNdNS4YSvCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWM1ODViZmUtM2E2Mi0z OTUyLTgzMmUtMjAzOGYwYTNhNDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHopcEgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCNd7fMGTeE7ZOS2N5NSzMpwulfZV7MO/qgi9zBjbgjWJB0PPYYefC1 Yzshmq/zy2gN2cni32zIy+YJmrlMUZJqLuu0N6q1l5j5GOsDE8zv2JZs1Of/tRbD x2G/68zEhin9jmRLimkvQN3jl3QivB+K+iAWwA0kfZXKFVozDc0JzNS7gz533S/I 1AsmiHs1PaBNplbzbEvTFjqDRxYfzd90b4GV59EpdGuH/MgNdU4iQ0Lyp7dQdp6A tYW4DlwatlBeufx6QvwEbrVMda7Kt+G1CXfse0hbW/5JyWWwwo2RUxA9xmEBVist jvrYes6HHrb3k4mtbnp2JKEiGPFJ1/TO -----END CERTIFICATE-----Generated at Sat May 4 14:51:41 2024 by rpki-client on console-ams.rpki-client.org