$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/08cfbc8f-ad4b-3bde-9029-1164f0b530da.roa File: 08cfbc8f-ad4b-3bde-9029-1164f0b530da.roa (raw, json) Hash identifier: DGVcScLBssHVAP0KF+k8PW0XsefNJFfrsM0E+6hvXxQ= Subject key identifier: 07:B9:2C:EC:D8:6D:CF:99:B1:26:D9:9A:E1:76:4F:98:1B:62:43:92 Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F432858456C53052BA1D88BB42379A880 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/08cfbc8f-ad4b-3bde-9029-1164f0b530da.roa Signing time: Wed 03 Apr 2024 13:00:37 +0000 ROA not before: Wed 03 Apr 2024 13:00:37 +0000 ROA not after: Tue 02 Jul 2024 13:00:37 +0000 asID: 42 IP address blocks: 67.21.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6c:53:05:2b:a1:d8:8b:b4:23:79:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Apr 3 13:00:37 2024 GMT Not After : Jul 2 13:00:37 2024 GMT Subject: CN=d817facf-7166-406d-a08a-14b578f7295f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c2:da:2f:c9:9d:d1:3c:92:39:e4:c2:d9:6a: 4b:ea:ac:01:0a:a3:0f:a7:e1:5a:3a:e3:7a:22:9f: 9a:cd:da:e9:c2:63:cb:72:6b:91:66:14:98:d5:4b: 55:60:40:a4:f2:65:af:7c:e2:56:b1:96:72:e3:f9: e3:39:08:3a:b5:45:fa:53:f9:c4:35:f0:1d:7b:a2: 01:06:0d:af:8a:09:e9:f7:33:41:aa:12:56:f6:7a: e9:9b:b1:6d:a8:a7:83:05:7a:ca:26:86:3d:e4:11: bd:2f:4b:29:8e:fe:e6:3e:ce:69:23:cb:d2:bb:01: c3:a3:e4:9e:62:62:68:fc:61:55:eb:78:41:99:32: b3:23:56:b4:fa:1d:56:90:ea:32:f2:9e:0d:e9:7f: 7b:f8:1e:b4:d5:8a:61:e8:b9:4c:33:45:ed:32:7c: 0b:14:94:41:5c:62:ad:3c:2e:2d:a9:61:25:51:68: 30:48:da:0b:f7:c8:e5:62:73:12:40:98:fa:51:4e: 2b:75:0c:35:66:8c:80:e6:66:a7:0c:44:bb:35:67: f9:ce:24:1e:98:82:43:67:b1:90:21:9e:8a:09:8e: af:ff:5e:7f:d6:cc:ef:94:ae:4b:9c:fc:38:8c:f3: 7b:24:30:b1:c3:13:22:73:fd:83:ce:68:c3:c4:bc: c7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B9:2C:EC:D8:6D:CF:99:B1:26:D9:9A:E1:76:4F:98:1B:62:43:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/08cfbc8f-ad4b-3bde-9029-1164f0b530da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv4: 67.21.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:36:d3:0d:ed:10:e5:e1:dc:dd:9d:87:19:56:f7:e0:60:00: 1d:80:1c:55:05:f8:b5:f2:6d:4b:98:55:c7:90:ec:c5:e8:cd: 10:4c:bb:0b:1b:b6:bf:f8:5e:ce:68:52:18:97:61:cc:b9:7a: 74:ff:e5:9e:68:cc:f7:8f:47:4c:91:33:dd:d7:01:c0:d7:2b: 20:39:48:4a:54:6c:d4:57:57:52:7b:37:11:9a:79:47:26:07: 2a:ca:b5:00:e7:3f:47:0f:00:c4:6f:5b:9a:1c:0a:7b:5c:f0: 0c:c4:81:4d:02:4e:d0:ea:a7:9a:88:1f:de:5a:eb:fe:8e:25: 4e:6d:97:34:64:67:71:69:eb:f0:ba:8b:22:6c:b4:4c:16:40: 2a:d0:0e:68:1f:5e:cc:76:c3:a0:a0:85:b3:a5:c2:55:54:11: e1:8c:4d:15:45:9d:d1:91:6c:09:41:09:1b:ed:11:24:8f:d2: 67:47:a8:a0:cb:d0:0b:dd:ca:ec:7f:3b:77:37:42:a7:16:3e: 43:44:d4:1b:fe:5d:46:22:e8:93:6b:2c:e8:43:6c:2f:8c:89: ed:a6:83:fe:0c:1e:3b:1c:12:f7:cb:4e:2b:9c:76:ef:7c:42: c0:a1:85:94:f2:be:d8:9e:a7:1b:69:42:10:c2:f3:a1:6d:30: 41:4e:33:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVsUwUrodiLtCN5qIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI0MDQwMzEzMDAzN1oXDTI0MDcwMjEzMDAzN1owLzEtMCsGA1UEAxMk ZDgxN2ZhY2YtNzE2Ni00MDZkLWEwOGEtMTRiNTc4ZjcyOTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8LaL8md0TySOeTC2WpL6qwBCqMPp+FaOuN6 Ip+azdrpwmPLcmuRZhSY1UtVYECk8mWvfOJWsZZy4/njOQg6tUX6U/nENfAde6IB Bg2vignp9zNBqhJW9nrpm7FtqKeDBXrKJoY95BG9L0spjv7mPs5pI8vSuwHDo+Se YmJo/GFV63hBmTKzI1a0+h1WkOoy8p4N6X97+B601Yph6LlMM0XtMnwLFJRBXGKt PC4tqWElUWgwSNoL98jlYnMSQJj6UU4rdQw1ZoyA5manDES7NWf5ziQemIJDZ7GQ IZ6KCY6v/15/1szvlK5LnPw4jPN7JDCxwxMic/2DzmjDxLzH2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAe5LOzYbc+ZsSbZmuF2T5gbYkOSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvMDhjZmJjOGYtYWQ0Yi0z YmRlLTkwMjktMTE2NGYwYjUzMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQxUlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJo20w3tEOXh3N2dhxlW9+BgAB2AHFUF+LXybUuYVceQ7MXozRBMuwsb tr/4Xs5oUhiXYcy5enT/5Z5ozPePR0yRM93XAcDXKyA5SEpUbNRXV1J7NxGaeUcm ByrKtQDnP0cPAMRvW5ocCntc8AzEgU0CTtDqp5qIH95a6/6OJU5tlzRkZ3Fp6/C6 iyJstEwWQCrQDmgfXsx2w6CghbOlwlVUEeGMTRVFndGRbAlBCRvtESSP0mdHqKDL 0Avdyux/O3c3QqcWPkNE1Bv+XUYi6JNrLOhDbC+Mie2mg/4MHjscEvfLTiucdu98 QsChhZTyvtiepxtpQhDC86FtMEFOM4c= -----END CERTIFICATE-----Generated at Fri May 10 14:11:03 2024 by rpki-client on console-ams.rpki-client.org