$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/3afa1228-a192-3ab6-85c3-e3eb06ba7375.roa File: 3afa1228-a192-3ab6-85c3-e3eb06ba7375.roa (raw, json) Hash identifier: pEq1A2cmfXDDRfACdxJLGLAOxTeTYefaieLxFE7u0Ic= Subject key identifier: 80:BA:5E:D3:A5:5C:13:7C:C7:BB:CD:F7:19:42:E4:5C:42:69:70:AE Certificate issuer: /CN=1278dcae-79cc-43c4-b974-7a8df750630c Certificate serial: 010D0C9F43285845A15E02D3D41648CF23BBB560 Authority key identifier: AA:1E:2F:B3:BA:54:76:06:E3:15:82:BE:26:D4:A0:E3:A0:6F:F7:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/3afa1228-a192-3ab6-85c3-e3eb06ba7375.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 397550 IP address blocks: 208.91.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/1278dcae-79cc-43c4-b974-7a8df750630c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/1278dcae-79cc-43c4-b974-7a8df750630c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5e:02:d3:d4:16:48:cf:23:bb:b5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1278dcae-79cc-43c4-b974-7a8df750630c Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=dd98a396-9c15-4d0c-8a5b-7665d861f74b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c3:4a:e6:22:17:59:8e:ba:9a:f9:1b:3a:f2: 5a:04:93:be:58:69:9b:4d:87:81:a5:bc:73:74:e4: b3:b6:85:16:fd:f8:f2:bf:7d:17:ea:8b:20:35:f4: ec:b1:d9:38:80:a5:2c:59:69:3a:1a:0e:9e:2a:20: cb:ee:07:27:b9:99:88:ef:a1:be:d1:28:04:58:ab: ac:e6:8c:67:74:b9:43:7d:2e:79:51:58:a3:e0:e3: 57:5d:eb:ec:4c:9e:75:66:ce:c2:f4:74:9f:1a:60: 44:a8:69:87:0c:08:e1:be:c6:a0:68:46:6e:85:0d: 89:75:4d:9b:86:a3:8b:c7:33:e3:cc:8e:6b:3a:28: 42:76:8c:2e:93:ad:a6:ad:28:e3:ab:a7:4b:95:53: 8d:eb:02:da:26:0f:e6:fd:6e:d8:0a:a0:21:d6:77: 7c:a9:33:11:23:4d:c3:4b:93:12:4b:6d:09:91:2c: 46:b7:38:e7:d8:df:97:bf:39:eb:7f:99:01:6f:40: 86:5b:da:32:7c:df:e4:82:bc:22:f2:b1:3b:59:eb: e5:35:28:f1:94:70:4c:25:63:31:3c:18:8c:47:d8: 31:96:b5:fd:0f:e2:77:9b:fa:2e:b4:b2:f3:66:ae: 4d:11:1a:e2:44:04:c1:49:74:7e:c4:b6:94:7d:73: 2c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BA:5E:D3:A5:5C:13:7C:C7:BB:CD:F7:19:42:E4:5C:42:69:70:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/3afa1228-a192-3ab6-85c3-e3eb06ba7375.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/1278dcae-79cc-43c4-b974-7a8df750630c.crl X509v3 Authority Key Identifier: keyid:AA:1E:2F:B3:BA:54:76:06:E3:15:82:BE:26:D4:A0:E3:A0:6F:F7:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c.cer sbgp-ipAddrBlock: critical IPv4: 208.91.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:47:13:99:e7:95:6f:92:84:82:a8:cb:ed:ec:92:30:38:1f: 4f:1c:51:5b:53:03:0c:ea:3d:a2:77:9f:61:42:4c:30:f5:61: e2:03:10:e1:0e:b4:f4:bf:73:16:b4:27:c3:94:a0:36:8a:f7: ff:b3:fb:08:29:3f:64:ec:60:e3:81:f1:ed:08:29:cc:51:88: c4:da:cc:ff:a1:a9:3c:26:34:36:f5:80:05:b1:45:b1:09:34: 12:e9:69:a6:6b:45:51:08:a2:bd:fb:22:68:9e:d9:61:43:ef: db:cc:4b:e2:c2:f2:61:dd:0a:e3:f5:5a:5d:af:6a:45:89:23: 6d:a3:88:4b:5e:d1:50:9b:a3:77:d3:da:f2:ac:d8:f4:48:7a: ed:2d:0c:59:bf:24:b8:8c:bc:48:73:3e:89:7d:16:2d:63:1e: ef:c7:c2:c7:38:37:a5:fa:80:8a:ee:65:bb:01:0a:fe:7a:97: 80:bc:98:28:b4:bf:59:45:49:2c:ad:04:ba:8f:79:c2:5b:7a: 98:4a:3a:f5:f4:f2:43:ea:ba:67:c9:21:9b:a0:ba:33:88:75: f1:92:48:98:94:39:6f:a5:22:54:c8:2e:1e:03:3a:a3:db:7b: af:fe:9f:27:2b:90:2d:5d:86:c8:5d:ad:c1:3e:af:6d:68:9c: a5:2d:e8:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXgLT1BZIzyO7tWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI3OGRjYWUtNzljYy00M2M0LWI5NzQtN2E4ZGY3NTA2 MzBjMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk ZGQ5OGEzOTYtOWMxNS00ZDBjLThhNWItNzY2NWQ4NjFmNzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMNK5iIXWY66mvkbOvJaBJO+WGmbTYeBpbxz dOSztoUW/fjyv30X6osgNfTssdk4gKUsWWk6Gg6eKiDL7gcnuZmI76G+0SgEWKus 5oxndLlDfS55UVij4ONXXevsTJ51Zs7C9HSfGmBEqGmHDAjhvsagaEZuhQ2JdU2b hqOLxzPjzI5rOihCdowuk62mrSjjq6dLlVON6wLaJg/m/W7YCqAh1nd8qTMRI03D S5MSS20JkSxGtzjn2N+Xvznrf5kBb0CGW9oyfN/kgrwi8rE7WevlNSjxlHBMJWMx PBiMR9gxlrX9D+J3m/outLLzZq5NERriRATBSXR+xLaUfXMsUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIC6XtOlXBN8x7vN9xlC5FxCaXCuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjc4 ZGNhZS03OWNjLTQzYzQtYjk3NC03YThkZjc1MDYzMGMvM2FmYTEyMjgtYTE5Mi0z YWI2LTg1YzMtZTNlYjA2YmE3Mzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI3OGRjYWUtNzljYy00M2M0LWI5 NzQtN2E4ZGY3NTA2MzBjLzEyNzhkY2FlLTc5Y2MtNDNjNC1iOTc0LTdhOGRmNzUw NjMwYy5jcmwwHwYDVR0jBBgwFoAUqh4vs7pUdgbjFYK+JtSg46Bv9yYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjc4ZGNhZS03OWNjLTQzYzQtYjk3NC03YThk Zjc1MDYzMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Fs8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNHE5nnlW+ShIKoy+3skjA4H08cUVtTAwzqPaJ3n2FCTDD1YeIDEOEO tPS/cxa0J8OUoDaK9/+z+wgpP2TsYOOB8e0IKcxRiMTazP+hqTwmNDb1gAWxRbEJ NBLpaaZrRVEIor37Imie2WFD79vMS+LC8mHdCuP1Wl2vakWJI22jiEte0VCbo3fT 2vKs2PRIeu0tDFm/JLiMvEhzPol9Fi1jHu/Hwsc4N6X6gIruZbsBCv56l4C8mCi0 v1lFSSytBLqPecJbephKOvX08kPqumfJIZugujOIdfGSSJiUOW+lIlTILh4DOqPb e6/+nycrkC1dhshdrcE+r21onKUt6Oc= -----END CERTIFICATE-----Generated at Thu Apr 25 22:42:13 2024 by rpki-client on console-fra.rpki-client.org