$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040/bff6d528-671e-3c17-b90d-eeec25af51af.roa File: bff6d528-671e-3c17-b90d-eeec25af51af.roa (raw, json) Hash identifier: at6RmsrJZmR+o89zYYhLZwNi23CASD6SL27Rf0ubMd8= Subject key identifier: 32:2F:B7:7B:EB:AF:7E:04:B0:9F:4D:83:9E:A0:DF:D6:38:B8:11:37 Certificate issuer: /CN=a0b0a14e-6768-4444-a710-ff902d319040 Certificate serial: 010D0C9F4328584563F30E856C86D58DD8090380 Authority key identifier: 88:1F:DD:F5:D1:6A:C8:B3:52:3B:D5:27:D9:6C:6F:8E:7F:4C:54:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040/bff6d528-671e-3c17-b90d-eeec25af51af.roa Signing time: Sun 31 Mar 2024 13:00:36 +0000 ROA not before: Sun 31 Mar 2024 13:00:36 +0000 ROA not after: Sat 29 Jun 2024 13:00:36 +0000 asID: 14618 IP address blocks: 208.84.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040/a0b0a14e-6768-4444-a710-ff902d319040.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040/a0b0a14e-6768-4444-a710-ff902d319040.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:63:f3:0e:85:6c:86:d5:8d:d8:09:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0b0a14e-6768-4444-a710-ff902d319040 Validity Not Before: Mar 31 13:00:36 2024 GMT Not After : Jun 29 13:00:36 2024 GMT Subject: CN=42d23ed0-bd88-4e6e-a42d-5b39cc6083f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8e:17:23:c1:74:93:3b:4a:f5:ab:b7:9e:a1: c3:c5:2f:dd:8f:81:59:2d:18:71:b2:03:bc:40:66: 9e:32:30:ab:73:94:49:26:59:8e:81:86:20:ca:4d: 21:d4:43:b9:ed:98:42:14:7a:31:71:78:d2:1b:fb: 40:8b:20:be:6b:7b:cf:12:c5:09:ba:2d:07:3f:4a: ab:cd:3f:fe:c2:d8:0f:1f:be:38:b5:61:89:7d:12: eb:45:20:e6:84:14:0b:be:90:6d:4b:2c:ce:52:6c: 47:7c:c4:a3:68:5d:a5:db:63:b3:01:d4:0e:70:56: 7c:76:1e:9e:31:3d:07:82:dd:11:90:bb:ed:a5:3a: 7a:d4:92:b3:3b:b2:b9:02:3a:ef:a1:79:5f:e4:89: 54:a1:d4:a9:1e:da:7c:81:23:3b:f8:af:6b:10:75: 51:ad:52:40:d3:b1:88:0a:f8:30:99:e1:ee:88:a0: 72:f1:53:07:86:2c:31:54:eb:bc:eb:aa:71:8d:a0: 65:39:a2:f0:ca:90:8e:0d:79:a5:ec:29:8b:77:ec: 24:8d:2b:f7:5a:2b:6e:dc:29:7c:29:3e:6c:01:bf: 77:98:4b:4c:c9:c7:5c:29:fa:ca:be:4a:e2:97:ff: 66:be:21:58:8b:38:1f:48:0f:40:86:e1:e1:8d:c9: ba:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2F:B7:7B:EB:AF:7E:04:B0:9F:4D:83:9E:A0:DF:D6:38:B8:11:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040/bff6d528-671e-3c17-b90d-eeec25af51af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040/a0b0a14e-6768-4444-a710-ff902d319040.crl X509v3 Authority Key Identifier: keyid:88:1F:DD:F5:D1:6A:C8:B3:52:3B:D5:27:D9:6C:6F:8E:7F:4C:54:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040.cer sbgp-ipAddrBlock: critical IPv4: 208.84.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:d6:b0:6a:46:5f:4a:a3:d6:0c:35:24:58:11:aa:ac:1d:4c: ff:2b:7b:3b:e0:59:31:b3:f1:50:39:10:2a:5c:40:18:42:96: 32:12:9d:a7:0e:9a:b1:8a:8c:9c:fc:a0:c7:21:e1:b3:13:ee: ba:31:51:b6:a2:e2:63:78:43:3d:e6:7f:8c:1b:df:ad:00:80: 65:14:37:52:64:d6:2c:26:a1:dd:c4:4c:71:b5:b7:65:a1:12: e5:e6:68:e6:68:ed:78:2e:c4:06:c3:d2:66:aa:3d:b2:ae:83: 75:30:b7:5c:50:a9:54:0c:90:e7:b8:d0:74:de:32:2c:1a:d8: 6c:39:e2:a9:5c:22:84:db:f4:93:d5:39:30:be:ec:9e:01:e0: 16:6b:5a:4f:b3:7c:33:74:4c:ac:b7:f3:ab:ba:4e:44:f3:42: 99:af:d0:7e:b5:00:46:87:f2:bc:67:33:c9:6c:f3:0e:d9:e8: 71:82:5f:58:4d:bf:43:bb:07:0e:f1:dd:33:55:fa:4f:6e:20: 70:91:26:22:17:cd:79:7a:f7:dd:78:3e:77:c5:da:ff:9c:9a: 25:af:12:78:5f:c6:ef:0d:24:49:85:23:9a:d9:17:d4:20:1e: 44:07:51:b5:23:32:2b:50:28:88:17:fe:d5:0f:65:05:49:72: 1c:04:7c:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVj8w6FbIbVjdgJA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTBiMGExNGUtNjc2OC00NDQ0LWE3MTAtZmY5MDJkMzE5 MDQwMB4XDTI0MDMzMTEzMDAzNloXDTI0MDYyOTEzMDAzNlowLzEtMCsGA1UEAxMk NDJkMjNlZDAtYmQ4OC00ZTZlLWE0MmQtNWIzOWNjNjA4M2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo4XI8F0kztK9au3nqHDxS/dj4FZLRhxsgO8 QGaeMjCrc5RJJlmOgYYgyk0h1EO57ZhCFHoxcXjSG/tAiyC+a3vPEsUJui0HP0qr zT/+wtgPH744tWGJfRLrRSDmhBQLvpBtSyzOUmxHfMSjaF2l22OzAdQOcFZ8dh6e MT0Hgt0RkLvtpTp61JKzO7K5AjrvoXlf5IlUodSpHtp8gSM7+K9rEHVRrVJA07GI CvgwmeHuiKBy8VMHhiwxVOu866pxjaBlOaLwypCODXml7CmLd+wkjSv3Witu3Cl8 KT5sAb93mEtMycdcKfrKvkril/9mviFYizgfSA9AhuHhjcm6XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIvt3vrr34EsJ9Ng56g39Y4uBE3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMGIw YTE0ZS02NzY4LTQ0NDQtYTcxMC1mZjkwMmQzMTkwNDAvYmZmNmQ1MjgtNjcxZS0z YzE3LWI5MGQtZWVlYzI1YWY1MWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTBiMGExNGUtNjc2OC00NDQ0LWE3 MTAtZmY5MDJkMzE5MDQwL2EwYjBhMTRlLTY3NjgtNDQ0NC1hNzEwLWZmOTAyZDMx OTA0MC5jcmwwHwYDVR0jBBgwFoAUiB/d9dFqyLNSO9Un2Wxvjn9MVBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMGIwYTE0ZS02NzY4LTQ0NDQtYTcxMC1mZjkw MmQzMTkwNDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPWsGpGX0qj1gw1JFgRqqwdTP8rezvgWTGz8VA5ECpcQBhCljISnacO mrGKjJz8oMch4bMT7roxUbai4mN4Qz3mf4wb360AgGUUN1Jk1iwmod3ETHG1t2Wh EuXmaOZo7XguxAbD0maqPbKug3Uwt1xQqVQMkOe40HTeMiwa2Gw54qlcIoTb9JPV OTC+7J4B4BZrWk+zfDN0TKy386u6TkTzQpmv0H61AEaH8rxnM8ls8w7Z6HGCX1hN v0O7Bw7x3TNV+k9uIHCRJiIXzXl69914PnfF2v+cmiWvEnhfxu8NJEmFI5rZF9Qg HkQHUbUjMitQKIgX/tUPZQVJchwEfCk= -----END CERTIFICATE-----Generated at Thu May 2 04:23:23 2024 by rpki-client on console-fra.rpki-client.org