$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/c406e3b3-9b34-3520-b60d-2a089c3a219b.roa File: c406e3b3-9b34-3520-b60d-2a089c3a219b.roa (raw, json) Hash identifier: Cg8S2K3dDfApaLXkOppbsvsDjbK8CQ4pOfgJdqoQNRU= Subject key identifier: 81:5A:4B:12:28:00:CF:17:54:4D:19:25:05:76:FC:6C:34:B0:75:A1 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F43285845909DE432924E5A6D8052B1C8 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/c406e3b3-9b34-3520-b60d-2a089c3a219b.roa Signing time: Tue 16 Apr 2024 13:00:33 +0000 ROA not before: Tue 16 Apr 2024 13:00:33 +0000 ROA not after: Mon 15 Jul 2024 13:00:33 +0000 asID: 398420 IP address blocks: 216.246.216.0/21 maxlen: 27 74.126.160.0/20 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:90:9d:e4:32:92:4e:5a:6d:80:52:b1:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Apr 16 13:00:33 2024 GMT Not After : Jul 15 13:00:33 2024 GMT Subject: CN=e0688b5f-0266-4a35-ae72-303c492bab99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:35:e4:54:10:c2:1d:7d:cc:03:0c:ae:a6: e9:90:94:50:ac:a3:c5:2d:7c:15:ac:09:7a:43:2f: 09:50:58:a9:32:45:3d:a6:e7:aa:7d:4b:36:1c:4b: ff:81:02:1b:3f:68:46:37:34:d5:fd:ad:1a:63:b0: 13:d6:b1:10:9a:ea:13:a9:78:cd:4b:f3:6a:cc:79: 8f:1d:ab:cd:f3:38:44:1b:cf:8a:de:47:cb:db:0d: 54:d3:d1:a0:f6:9f:1e:3f:dd:d6:9d:ce:4c:43:91: 75:7a:64:b5:e3:7f:33:6d:14:01:f4:a3:41:d1:2e: 17:0d:71:c4:80:90:5c:15:c7:07:fe:d2:46:bc:1a: e7:ea:97:4b:f3:ac:9c:10:2c:57:8d:00:0e:dd:7f: 69:db:fe:df:bc:a4:4d:b1:12:d0:9f:c8:8b:a9:25: 9b:95:1d:b6:b2:c0:70:c3:a9:28:af:75:af:85:ff: d8:96:d6:5e:c7:39:d4:62:35:9e:83:ed:44:71:a2: 53:58:0d:dc:14:99:7c:cd:1d:7b:3b:a3:ae:02:6c: 9d:a0:0a:36:69:1d:ca:5f:86:97:29:1f:98:83:87: f2:c0:d1:58:ab:61:41:5c:f9:28:ad:3f:4b:34:95: 61:81:b9:66:6f:63:6b:6c:19:97:f1:68:d5:09:37: cd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:5A:4B:12:28:00:CF:17:54:4D:19:25:05:76:FC:6C:34:B0:75:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/c406e3b3-9b34-3520-b60d-2a089c3a219b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.126.160.0/20 216.246.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:e8:79:0f:22:7d:6c:a3:3d:30:ee:2a:b0:7e:05:1a:af:96: 88:34:f3:79:5b:c1:80:13:17:80:3c:69:c0:97:d0:2a:f0:51: 57:3c:e5:e4:6c:20:d3:e5:a0:fe:86:a5:e4:54:29:8d:31:7a: e9:b1:f7:17:85:67:ab:95:41:f2:64:8c:91:42:02:d8:df:f8: bc:60:5a:8a:f4:df:a1:76:68:71:12:37:5b:9f:79:92:07:40: 4e:00:ce:a2:47:d4:00:7d:c4:e6:5a:70:5f:f3:c7:02:47:25: bc:88:ec:b2:ff:87:f1:f1:d1:dc:a9:2e:4e:ad:75:2d:ae:32: aa:ea:bb:47:86:59:50:11:1b:ca:d6:bd:6d:5b:e8:3b:67:e8: be:e5:95:22:43:0d:34:e9:8c:d3:42:21:1e:72:e1:af:0c:7b: 8a:d1:49:53:11:f2:1c:18:4e:5f:b1:a7:69:ae:f6:7e:5f:8e: b3:f6:2e:52:bc:bf:95:21:cf:fd:c8:0e:81:a9:80:38:45:d2: b4:18:ef:86:b0:00:3f:c9:14:5f:08:27:66:13:4d:8c:ea:10: 8c:b9:47:43:f7:85:da:37:03:3b:3e:bd:6e:4e:0b:b7:82:78: e9:80:96:1e:5d:8a:f1:49:4c:58:b2:92:94:5f:02:62:50:13: 2f:5f:d4:41 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEWQneQykk5abYBSscgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI0MDQxNjEzMDAzM1oXDTI0MDcxNTEzMDAzM1owLzEtMCsGA1UEAxMk ZTA2ODhiNWYtMDI2Ni00YTM1LWFlNzItMzAzYzQ5MmJhYjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+A15FQQwh19zAMMrqbpkJRQrKPFLXwVrAl6 Qy8JUFipMkU9pueqfUs2HEv/gQIbP2hGNzTV/a0aY7AT1rEQmuoTqXjNS/NqzHmP HavN8zhEG8+K3kfL2w1U09Gg9p8eP93Wnc5MQ5F1emS1438zbRQB9KNB0S4XDXHE gJBcFccH/tJGvBrn6pdL86ycECxXjQAO3X9p2/7fvKRNsRLQn8iLqSWblR22ssBw w6kor3Wvhf/YltZexznUYjWeg+1EcaJTWA3cFJl8zR17O6OuAmydoAo2aR3KX4aX KR+Yg4fywNFYq2FBXPkorT9LNJVhgblmb2NrbBmX8WjVCTfN5QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIFaSxIoAM8XVE0ZJQV2/Gw0sHWhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvYzQwNmUzYjMtOWIzNC0z NTIwLWI2MGQtMmEwODljM2EyMTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQESn6gAwQD 2PbYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFPoeQ8ifWyjPTDuKrB+BRqvlog083lbwYATF4A8acCX0Crw UVc85eRsINPloP6GpeRUKY0xeumx9xeFZ6uVQfJkjJFCAtjf+LxgWor036F2aHES N1ufeZIHQE4AzqJH1AB9xOZacF/zxwJHJbyI7LL/h/Hx0dypLk6tdS2uMqrqu0eG WVARG8rWvW1b6Dtn6L7llSJDDTTpjNNCIR5y4a8Me4rRSVMR8hwYTl+xp2mu9n5f jrP2LlK8v5Uhz/3IDoGpgDhF0rQY74awAD/JFF8IJ2YTTYzqEIy5R0P3hdo3Azs+ vW5OC7eCeOmAlh5divFJTFiykpRfAmJQEy9f1EE= -----END CERTIFICATE-----Generated at Thu Apr 18 16:19:26 2024 by rpki-client on console-fra.rpki-client.org