$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/a1df9eb3-9223-341f-b628-80c3d070480b.roa File: a1df9eb3-9223-341f-b628-80c3d070480b.roa (raw, json) Hash identifier: HW6iO2EJejRUbaVi6n5vSXF3tLs/0YRFAcoLEomXVEY= Subject key identifier: DF:C4:A2:0A:FF:56:1A:D4:16:31:D4:11:32:80:6D:E8:F3:BD:0D:46 Certificate issuer: /CN=2775f7c3-c238-47d5-98c9-835a28d9095e Certificate serial: 010D0C9F432858456F1DCB0A688E10CF00D4C180 Authority key identifier: D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/a1df9eb3-9223-341f-b628-80c3d070480b.roa Signing time: Thu 04 Apr 2024 13:00:36 +0000 ROA not before: Thu 04 Apr 2024 13:00:36 +0000 ROA not after: Wed 03 Jul 2024 13:00:36 +0000 asID: 398355 IP address blocks: 104.167.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6f:1d:cb:0a:68:8e:10:cf:00:d4:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2775f7c3-c238-47d5-98c9-835a28d9095e Validity Not Before: Apr 4 13:00:36 2024 GMT Not After : Jul 3 13:00:36 2024 GMT Subject: CN=d6554f5e-0a98-4401-a184-7ca98c4f6ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b4:c7:7b:d7:a6:3c:74:05:90:32:d0:ce:b8: 10:9e:43:0a:34:a1:ac:74:d0:b2:02:64:47:0b:f8: 77:ae:f3:30:f4:d0:ce:a3:e5:6c:be:89:58:31:2d: 97:e0:28:d4:b0:75:fe:81:b9:59:e7:27:21:78:a8: 25:c1:71:07:6f:8d:52:a9:3e:68:88:6b:0b:11:1c: 97:be:d9:a2:d6:a0:2d:ca:51:81:e9:e6:c3:9f:2e: 1b:26:27:b2:14:d8:55:6b:ae:0d:ec:e6:e8:8c:07: cf:ea:4d:2e:cb:b3:08:c0:08:4c:1a:1a:2a:41:b9: 46:60:5b:20:85:33:6f:da:9e:a1:7b:14:37:b5:5f: ce:c0:e2:0e:4a:67:2c:40:52:ba:ca:63:0c:45:14: 6f:3a:d1:78:ac:f4:3d:75:78:59:e3:11:0c:94:d8: 78:88:5f:c6:90:0e:9f:7e:e6:1c:c8:7e:1b:dc:6e: bf:de:7a:35:d1:6b:af:59:83:b2:5c:8b:7f:0a:cd: fa:22:f4:7f:f1:d9:16:6b:d9:8e:b8:1a:a6:ed:86: b3:f9:b2:17:2c:26:8e:66:7a:be:9a:b5:7e:c6:14: 3f:d2:b1:59:5a:52:1b:58:f7:55:50:3f:db:85:e9: 18:87:37:ba:08:f5:77:6c:6e:4c:ff:69:04:2d:35: 07:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C4:A2:0A:FF:56:1A:D4:16:31:D4:11:32:80:6D:E8:F3:BD:0D:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/a1df9eb3-9223-341f-b628-80c3d070480b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl X509v3 Authority Key Identifier: keyid:D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer sbgp-ipAddrBlock: critical IPv4: 104.167.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:6b:19:0b:dc:62:5d:91:6d:95:e5:f5:3b:1f:82:57:8a:1b: 95:35:40:05:1d:2b:a1:f0:fc:87:0b:c3:5a:96:74:70:12:f5: 5e:53:6a:04:2d:8e:d8:e1:f2:b0:de:b9:93:c7:f5:ff:d6:7b: ee:2c:45:a0:3d:53:f8:6b:15:ac:09:9a:07:d2:13:b1:b5:44: 6c:49:8f:d4:47:a4:cd:12:7c:c2:a6:60:0a:c0:65:f5:b0:51: 9f:4d:c2:0a:38:90:fd:52:4b:b3:6e:77:30:c4:bd:fd:b2:c8: bd:e7:fa:f8:38:1e:2c:30:c0:5b:8a:3a:e7:cb:4b:7f:4d:c8: 1c:9a:7d:53:f9:a2:b5:60:67:7c:c0:89:83:e2:9c:d6:28:87: 32:82:e0:cc:c8:ef:b0:98:6d:03:7d:53:c1:51:7e:c6:3c:c6: 3f:32:b5:13:d5:a3:94:8e:09:f1:12:30:be:4f:ae:7f:c9:16: 4f:c7:5b:0c:09:dd:56:ec:5a:d6:c9:1f:a7:52:5e:48:01:e6: 76:cd:79:15:cb:24:80:b6:3d:44:99:e7:b8:df:2d:21:5e:5e: 63:11:90:a3:9b:03:12:4c:73:39:3c:6c:8a:fd:16:b8:f6:9e: ee:35:7f:cd:a3:44:a8:34:c8:92:90:13:69:6b:52:44:b4:51: ed:97:63:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVvHcsKaI4QzwDUwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjc3NWY3YzMtYzIzOC00N2Q1LTk4YzktODM1YTI4ZDkw OTVlMB4XDTI0MDQwNDEzMDAzNloXDTI0MDcwMzEzMDAzNlowLzEtMCsGA1UEAxMk ZDY1NTRmNWUtMGE5OC00NDAxLWExODQtN2NhOThjNGY2ZGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbTHe9emPHQFkDLQzrgQnkMKNKGsdNCyAmRH C/h3rvMw9NDOo+VsvolYMS2X4CjUsHX+gblZ5ycheKglwXEHb41SqT5oiGsLERyX vtmi1qAtylGB6ebDny4bJieyFNhVa64N7ObojAfP6k0uy7MIwAhMGhoqQblGYFsg hTNv2p6hexQ3tV/OwOIOSmcsQFK6ymMMRRRvOtF4rPQ9dXhZ4xEMlNh4iF/GkA6f fuYcyH4b3G6/3no10WuvWYOyXIt/Cs36IvR/8dkWa9mOuBqm7Yaz+bIXLCaOZnq+ mrV+xhQ/0rFZWlIbWPdVUD/bhekYhze6CPV3bG5M/2kELTUHTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/Eogr/VhrUFjHUETKAbejzvQ1GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNzc1 ZjdjMy1jMjM4LTQ3ZDUtOThjOS04MzVhMjhkOTA5NWUvYTFkZjllYjMtOTIyMy0z NDFmLWI2MjgtODBjM2QwNzA0ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjc3NWY3YzMtYzIzOC00N2Q1LTk4 YzktODM1YTI4ZDkwOTVlLzI3NzVmN2MzLWMyMzgtNDdkNS05OGM5LTgzNWEyOGQ5 MDk1ZS5jcmwwHwYDVR0jBBgwFoAU0STfzH9bgNKN7P7ujM9SM461IUQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNzc1ZjdjMy1jMjM4LTQ3ZDUtOThjOS04MzVh MjhkOTA5NWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKfxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClrGQvcYl2RbZXl9TsfgleKG5U1QAUdK6Hw/IcLw1qWdHAS9V5TagQt jtjh8rDeuZPH9f/We+4sRaA9U/hrFawJmgfSE7G1RGxJj9RHpM0SfMKmYArAZfWw UZ9Nwgo4kP1SS7NudzDEvf2yyL3n+vg4HiwwwFuKOufLS39NyByafVP5orVgZ3zA iYPinNYohzKC4MzI77CYbQN9U8FRfsY8xj8ytRPVo5SOCfESML5Prn/JFk/HWwwJ 3VbsWtbJH6dSXkgB5nbNeRXLJIC2PUSZ57jfLSFeXmMRkKObAxJMczk8bIr9Frj2 nu41f82jRKg0yJKQE2lrUkS0Ue2XY64= -----END CERTIFICATE-----Generated at Sat May 4 15:01:41 2024 by rpki-client on console-ams.rpki-client.org