$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cafceee9-6623-3dbc-8b7b-87b03b1bd65d.roa File: cafceee9-6623-3dbc-8b7b-87b03b1bd65d.roa (raw, json) Hash identifier: D/xsHRbWkOdWbPHD53kbfJJwfJbJlf3pR7ZARmEe9Ow= Subject key identifier: 9B:95:43:9F:83:EC:97:DA:C1:34:70:3D:A8:49:6A:E5:53:15:31:09 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F43285845B3836544E8CE9DA6B2BDF700 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cafceee9-6623-3dbc-8b7b-87b03b1bd65d.roa Signing time: Mon 29 Apr 2024 01:00:25 +0000 ROA not before: Mon 29 Apr 2024 01:00:25 +0000 ROA not after: Sun 28 Jul 2024 01:00:25 +0000 asID: 21949 IP address blocks: 64.137.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b3:83:65:44:e8:ce:9d:a6:b2:bd:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Apr 29 01:00:25 2024 GMT Not After : Jul 28 01:00:25 2024 GMT Subject: CN=c21600a1-b925-4ae0-9aeb-3f3c93aa23b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:05:0f:f6:05:c2:f8:b5:b5:14:47:ab:dc:84: 89:32:28:7b:fd:94:4d:6f:5a:bd:e1:21:01:ae:ea: 1b:15:d0:66:27:80:ef:5f:03:91:75:89:a2:6f:84: 98:04:79:dc:de:48:cb:06:4e:30:e4:8b:3c:58:46: 0e:e5:d2:d8:07:b6:cb:c0:e6:c9:f9:ca:6b:55:6d: 62:b9:6b:94:15:8a:28:4b:b8:11:34:7a:14:88:ee: 12:b1:52:3b:9b:4c:6f:8b:3e:44:b1:36:e4:e3:a6: 4e:ab:c0:7a:98:5e:fa:d6:9f:0d:bb:7c:d5:88:23: 80:11:38:3b:43:af:b1:84:71:d3:a5:ba:a6:d1:08: 0a:cd:57:50:0c:cf:e3:1e:31:3a:63:b0:14:53:6c: 6c:31:a7:d0:2d:39:b3:87:e8:82:5d:f0:38:2d:98: 72:83:bf:33:8b:d2:d9:72:94:9a:e0:72:76:45:24: eb:2b:1b:79:38:6d:4b:e5:dd:3b:81:82:dc:62:d0: cd:28:99:f9:c3:94:1a:7f:72:02:e2:32:ab:2a:46: b6:b3:04:e2:4a:e9:67:86:d9:62:c1:4c:e3:69:04: a8:f2:34:ca:64:71:50:2e:61:e8:04:18:55:a1:c9: 10:53:b1:60:84:81:93:5b:e2:c8:21:9d:fc:47:3d: 2a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:95:43:9F:83:EC:97:DA:C1:34:70:3D:A8:49:6A:E5:53:15:31:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cafceee9-6623-3dbc-8b7b-87b03b1bd65d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 64.137.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:e5:1e:a4:70:a7:a9:54:02:68:87:88:49:96:ae:a0:91:a9: d0:c0:15:64:ac:0e:bf:6b:5a:af:67:4b:2b:5b:23:f0:29:73: b8:25:10:a9:c0:41:cc:b4:eb:b6:54:46:7a:1b:b9:63:ea:7a: cf:40:ff:a2:07:8d:4b:98:3c:2b:41:ba:79:8c:d4:54:84:3e: dd:62:80:a1:a6:e8:1c:f8:b8:47:38:1b:63:28:72:0d:05:33: 8b:a1:e6:97:b2:fd:d5:5d:a7:2f:ba:d5:c5:1e:e7:1e:0b:e6: 85:30:98:d3:7c:ec:c5:6b:92:a9:b2:71:85:4a:9e:3c:14:9f: f5:a9:e6:5b:a8:1a:32:07:51:ed:9a:82:30:e9:6e:31:28:57: 9c:aa:1b:c2:3d:a3:5a:48:aa:f8:80:93:a3:d3:12:d4:f6:bc: 1c:65:7d:09:a0:0c:77:95:ff:90:93:e8:a5:6b:37:fc:bf:3e: 72:05:0a:12:c4:b9:e8:39:4d:49:5d:38:24:c0:e9:ab:1a:de: 42:6c:42:aa:1d:ef:83:fd:0f:5a:ed:3a:b3:07:28:2e:0f:6a: da:e0:2d:2a:67:fe:89:84:30:f5:50:1e:c6:f8:3b:a0:a7:f8: 7a:cd:a9:51:12:af:6f:59:a2:a1:75:c5:7f:9d:2b:30:db:e4: 33:3d:80:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWzg2VE6M6dprK99wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI0MDQyOTAxMDAyNVoXDTI0MDcyODAxMDAyNVowLzEtMCsGA1UEAxMk YzIxNjAwYTEtYjkyNS00YWUwLTlhZWItM2YzYzkzYWEyM2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgUP9gXC+LW1FEer3ISJMih7/ZRNb1q94SEB ruobFdBmJ4DvXwORdYmib4SYBHnc3kjLBk4w5Is8WEYO5dLYB7bLwObJ+cprVW1i uWuUFYooS7gRNHoUiO4SsVI7m0xviz5EsTbk46ZOq8B6mF761p8Nu3zViCOAETg7 Q6+xhHHTpbqm0QgKzVdQDM/jHjE6Y7AUU2xsMafQLTmzh+iCXfA4LZhyg78zi9LZ cpSa4HJ2RSTrKxt5OG1L5d07gYLcYtDNKJn5w5Qaf3IC4jKrKka2swTiSulnhtli wUzjaQSo8jTKZHFQLmHoBBhVockQU7FghIGTW+LIIZ38Rz0qFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuVQ5+D7JfawTRwPahJauVTFTEJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvY2FmY2VlZTktNjYyMy0z ZGJjLThiN2ItODdiMDNiMWJkNjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQImAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACblHqRwp6lUAmiHiEmWrqCRqdDAFWSsDr9rWq9nSytbI/Apc7glEKnA Qcy067ZURnobuWPqes9A/6IHjUuYPCtBunmM1FSEPt1igKGm6Bz4uEc4G2Mocg0F M4uh5pey/dVdpy+61cUe5x4L5oUwmNN87MVrkqmycYVKnjwUn/Wp5luoGjIHUe2a gjDpbjEoV5yqG8I9o1pIqviAk6PTEtT2vBxlfQmgDHeV/5CT6KVrN/y/PnIFChLE ueg5TUldOCTA6asa3kJsQqod74P9D1rtOrMHKC4PatrgLSpn/omEMPVQHsb4O6Cn +HrNqVESr29ZoqF1xX+dKzDb5DM9gAM= -----END CERTIFICATE-----Generated at Sat May 18 01:54:24 2024 by rpki-client on console-ams.rpki-client.org