$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3f61d3c-52d1-3663-a998-7f3d0e54528b.roa File: a3f61d3c-52d1-3663-a998-7f3d0e54528b.roa (raw, json) Hash identifier: MmooPj2M0x+p06Ai2udYZyVp3Wuvqa+B5fkDMJSgtL8= Subject key identifier: D1:42:BC:A6:83:85:9D:60:C8:81:44:70:70:07:9B:04:01:2B:91:65 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285845A428C1CFA4A99143B1AB94E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3f61d3c-52d1-3663-a998-7f3d0e54528b.roa Signing time: Tue 23 Apr 2024 13:00:34 +0000 ROA not before: Tue 23 Apr 2024 13:00:34 +0000 ROA not after: Mon 22 Jul 2024 13:00:34 +0000 asID: 33490 IP address blocks: 174.174.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a4:28:c1:cf:a4:a9:91:43:b1:ab:94:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 23 13:00:34 2024 GMT Not After : Jul 22 13:00:34 2024 GMT Subject: CN=d53005c5-f9d6-46de-8fca-d0232358e876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:aa:08:fc:92:e5:c2:23:34:29:ae:cd:78:85: 47:8d:0e:7f:d5:23:33:2c:32:04:39:b7:f7:18:0c: 69:cc:19:fd:f3:61:38:d4:14:85:a3:82:37:72:08: af:f5:ad:2a:fe:c2:f0:15:9d:1c:a4:7f:a8:96:7f: 88:97:5c:b3:c3:9b:34:c9:37:16:65:ff:d2:69:53: 82:71:a5:b3:bc:e2:5b:dd:1b:a7:d7:d7:0e:bb:23: 76:51:09:a3:40:15:89:0a:53:7f:67:2a:12:0a:08: 90:59:30:ac:87:d1:fe:e5:6f:be:30:5a:6d:85:84: c9:9e:4e:42:38:f1:d8:36:17:d0:58:ae:72:4f:0c: 93:0f:fb:7e:df:bc:54:d2:08:51:4c:12:28:a4:14: 69:0c:a8:05:32:28:42:42:5b:bc:2b:94:2d:d7:7a: eb:f0:f4:02:b0:fa:29:c0:20:f4:3a:00:2b:fd:99: 16:59:49:42:1d:8e:0d:74:9b:0a:f4:e0:02:1e:8d: 19:88:fe:e7:70:77:5f:a3:55:96:d0:96:39:d2:6b: a1:ea:b0:6b:3f:ec:ea:3f:01:91:5c:dc:54:d3:24: 00:c9:7e:e1:59:f5:2a:d0:2e:90:c1:fc:30:64:ff: 91:b4:d0:5f:12:5a:a8:0b:96:cc:31:43:1d:7a:e1: b5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:42:BC:A6:83:85:9D:60:C8:81:44:70:70:07:9B:04:01:2B:91:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3f61d3c-52d1-3663-a998-7f3d0e54528b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.174.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:ee:d9:ef:75:72:99:51:5e:c8:ec:01:ee:08:ba:a2:24:12: 51:c5:4e:c7:f7:24:38:f4:d8:db:c5:c4:e9:f7:5e:93:09:57: 30:3b:f5:f1:e4:6d:88:f8:3d:82:f6:f4:8b:16:7e:4b:a6:de: d7:1c:2e:09:fe:1c:ba:fa:d0:94:9d:36:00:f4:07:20:49:41: aa:17:1a:b5:6a:ac:25:8e:3b:61:3e:60:93:2c:7d:6e:8b:83: 14:e7:e4:01:ed:f5:af:1f:e4:a7:c0:5b:db:eb:8f:42:98:21: 25:91:e8:0f:75:f6:e7:db:50:51:b5:b6:7a:d3:81:6c:9a:49: 79:4c:ed:ba:e3:d2:83:27:82:1a:e4:7e:72:b5:6e:24:fe:1f: e9:6f:b6:c1:c8:84:8d:dd:c8:5a:19:b7:e6:f2:83:68:6f:51: 5b:1d:81:a2:95:5c:fd:ae:73:53:2c:57:03:1d:d1:02:f9:cc: 13:d4:71:ac:2d:b3:80:ed:0b:4b:52:fd:d8:8a:a9:f0:2c:e0: 87:18:01:9d:be:32:82:89:04:e4:10:78:df:15:0e:e6:f5:b8: 3a:57:79:4d:6a:b5:57:87:a2:53:78:19:dc:e2:c4:74:16:c2: ea:3e:a8:c8:9d:a2:af:a8:fc:9d:93:33:8e:09:da:68:69:1b: d7:d7:ce:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWkKMHPpKmRQ7GrlOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDQyMzEzMDAzNFoXDTI0MDcyMjEzMDAzNFowLzEtMCsGA1UEAxMk ZDUzMDA1YzUtZjlkNi00NmRlLThmY2EtZDAyMzIzNThlODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaoI/JLlwiM0Ka7NeIVHjQ5/1SMzLDIEObf3 GAxpzBn982E41BSFo4I3cgiv9a0q/sLwFZ0cpH+oln+Il1yzw5s0yTcWZf/SaVOC caWzvOJb3Run19cOuyN2UQmjQBWJClN/ZyoSCgiQWTCsh9H+5W++MFpthYTJnk5C OPHYNhfQWK5yTwyTD/t+37xU0ghRTBIopBRpDKgFMihCQlu8K5Qt13rr8PQCsPop wCD0OgAr/ZkWWUlCHY4NdJsK9OACHo0ZiP7ncHdfo1WW0JY50muh6rBrP+zqPwGR XNxU0yQAyX7hWfUq0C6QwfwwZP+RtNBfElqoC5bMMUMdeuG1bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFCvKaDhZ1gyIFEcHAHmwQBK5FlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTNmNjFkM2MtNTJkMS0z NjYzLWE5OTgtN2YzZDBlNTQ1MjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrq4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMDu2e91cplRXsjsAe4IuqIkElHFTsf3JDj02NvFxOn3XpMJVzA79fHk bYj4PYL29IsWfkum3tccLgn+HLr60JSdNgD0ByBJQaoXGrVqrCWOO2E+YJMsfW6L gxTn5AHt9a8f5KfAW9vrj0KYISWR6A919ufbUFG1tnrTgWyaSXlM7brj0oMnghrk fnK1biT+H+lvtsHIhI3dyFoZt+byg2hvUVsdgaKVXP2uc1MsVwMd0QL5zBPUcawt s4DtC0tS/diKqfAs4IcYAZ2+MoKJBOQQeN8VDub1uDpXeU1qtVeHolN4GdzixHQW wuo+qMidoq+o/J2TM44J2mhpG9fXzmM= -----END CERTIFICATE-----Generated at Sat May 4 14:53:49 2024 by rpki-client on console-fra.rpki-client.org