$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fb966e1b-fa13-37b0-a49e-0b319577773b.roa File: fb966e1b-fa13-37b0-a49e-0b319577773b.roa (raw, json) Hash identifier: 1bZXfE1XkiDEKR3QosXjVNLSYU5WmccGWWnbTjcUYpw= Subject key identifier: A6:17:F6:BF:09:0F:CE:9A:DF:87:E6:B9:F5:88:FD:13:AB:A5:13:9C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285844D17FC6CA7775FE1DCE9A8A40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fb966e1b-fa13-37b0-a49e-0b319577773b.roa Signing time: Thu 08 Feb 2024 02:00:26 +0000 ROA not before: Thu 08 Feb 2024 02:00:26 +0000 ROA not after: Wed 08 May 2024 01:00:26 +0000 asID: 212238 IP address blocks: 104.250.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:d1:7f:c6:ca:77:75:fe:1d:ce:9a:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 8 02:00:26 2024 GMT Not After : May 8 01:00:26 2024 GMT Subject: CN=0671e325-45d9-48ae-81ab-62e3ab4aa424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:39:23:81:d5:4b:91:52:72:83:68:4a:ee:0e: d7:be:a4:16:43:d4:6b:35:97:56:9a:12:f8:c2:94: 2b:5c:f1:5b:33:93:29:b5:7d:d5:3a:90:28:c9:1b: a9:dd:24:5d:4c:10:7a:5c:de:52:da:1f:e3:0d:de: ac:8e:1d:be:1d:79:fe:03:99:fe:ef:27:c3:08:1d: 32:40:a2:cf:2b:96:23:bf:28:57:65:53:dc:75:db: e8:24:1a:30:d1:84:5a:43:d1:43:91:7b:4c:72:a8: 46:e8:c3:97:40:27:08:82:b0:77:ee:56:57:c0:1f: 1a:8b:a4:ac:aa:d2:c0:ef:fc:2a:f7:24:06:6f:78: eb:80:8b:d2:23:84:c0:49:60:72:73:3d:56:71:cc: bb:30:fc:df:85:1a:0c:dd:a8:1e:2f:a2:22:e3:6e: 8f:81:0d:90:eb:a9:ed:27:ca:3c:15:5a:35:2f:7a: e2:f6:a7:06:a2:1f:e0:da:c0:72:27:53:ab:bb:e6: a2:e4:9a:83:52:90:f0:42:21:6a:e8:8a:d9:27:b0: a0:de:3e:67:c3:64:ba:29:77:7b:a6:0b:92:b1:81: 1f:8d:49:9e:5b:6b:a1:78:e3:db:d1:56:4b:58:08: e2:0e:61:67:39:5b:73:ff:0d:dc:50:51:eb:0d:af: 4a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:17:F6:BF:09:0F:CE:9A:DF:87:E6:B9:F5:88:FD:13:AB:A5:13:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fb966e1b-fa13-37b0-a49e-0b319577773b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:88:62:bb:f3:87:4e:e6:c9:e3:d4:06:27:48:46:35:f9:85: 5a:95:37:df:e8:50:b0:72:60:56:38:6b:30:7f:c6:81:a1:5a: dc:79:d8:fd:21:18:82:4c:43:fe:83:59:9f:61:76:5e:8d:23: 24:63:d5:a4:90:39:0d:96:6e:ee:81:94:65:ed:65:7d:71:3c: e2:4c:92:16:9a:bf:e6:e1:4c:c4:b6:d2:ba:c1:db:49:e4:ca: 3e:56:36:1f:7f:bd:8e:bc:9d:4b:f5:6a:72:bc:37:a6:92:08: 5b:f0:4a:11:10:88:5b:53:41:ef:3e:63:29:9c:dc:15:fb:40: 0c:9f:27:a8:03:93:0f:0e:0b:18:db:e8:c1:ac:98:60:f8:1e: 4e:77:f2:d6:ab:aa:73:55:58:24:50:0a:f5:83:e4:59:d9:ba: 01:d0:dd:51:a3:f2:b4:62:27:ce:eb:44:a9:ff:4c:8c:f1:e4: e5:d3:e3:89:9b:d2:ca:87:0b:de:c9:3d:54:ce:35:c0:4b:1b: cc:55:f9:1c:f6:8f:7a:ae:ed:10:66:df:bb:48:57:ff:0f:cf: d6:ad:aa:8d:bc:e3:a3:db:6e:72:02:2d:95:76:51:44:1d:17: f2:2e:1e:47:48:f3:57:67:0a:77:c4:03:cd:a8:16:ad:ac:f1: f0:d3:c8:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETRf8bKd3X+Hc6aikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDIwODAyMDAyNloXDTI0MDUwODAxMDAyNlowLzEtMCsGA1UEAxMk MDY3MWUzMjUtNDVkOS00OGFlLTgxYWItNjJlM2FiNGFhNDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTkjgdVLkVJyg2hK7g7XvqQWQ9RrNZdWmhL4 wpQrXPFbM5MptX3VOpAoyRup3SRdTBB6XN5S2h/jDd6sjh2+HXn+A5n+7yfDCB0y QKLPK5YjvyhXZVPcddvoJBow0YRaQ9FDkXtMcqhG6MOXQCcIgrB37lZXwB8ai6Ss qtLA7/wq9yQGb3jrgIvSI4TASWBycz1Wccy7MPzfhRoM3ageL6Ii426PgQ2Q66nt J8o8FVo1L3ri9qcGoh/g2sByJ1Oru+ai5JqDUpDwQiFq6IrZJ7Cg3j5nw2S6KXd7 pguSsYEfjUmeW2uheOPb0VZLWAjiDmFnOVtz/w3cUFHrDa9K7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYX9r8JD86a34fmufWI/ROrpROcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZmI5NjZlMWItZmExMy0z N2IwLWE0OWUtMGIzMTk1Nzc3NzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPq/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqIYrvzh07myePUBidIRjX5hVqVN9/oULByYFY4azB/xoGhWtx52P0h GIJMQ/6DWZ9hdl6NIyRj1aSQOQ2Wbu6BlGXtZX1xPOJMkhaav+bhTMS20rrB20nk yj5WNh9/vY68nUv1anK8N6aSCFvwShEQiFtTQe8+Yymc3BX7QAyfJ6gDkw8OCxjb 6MGsmGD4Hk538tarqnNVWCRQCvWD5FnZugHQ3VGj8rRiJ87rRKn/TIzx5OXT44mb 0sqHC97JPVTONcBLG8xV+Rz2j3qu7RBm37tIV/8Pz9atqo2846PbbnICLZV2UUQd F/IuHkdI81dnCnfEA82oFq2s8fDTyGA= -----END CERTIFICATE-----Generated at Sun Apr 28 03:24:02 2024 by rpki-client on console-ams.rpki-client.org