$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/b67e258b-12d7-30b6-ba30-2b61891a6642.roa File: b67e258b-12d7-30b6-ba30-2b61891a6642.roa (raw, json) Hash identifier: FEgx5oeo6972CCCkl9wLV+0+LCoEdnRq/JFEUZei5mY= Subject key identifier: CC:73:BA:D4:5C:39:36:67:44:A1:D0:E8:17:55:64:FB:3D:D5:BE:E0 Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F432858459368BD015817620319B13300 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/b67e258b-12d7-30b6-ba30-2b61891a6642.roa Signing time: Wed 17 Apr 2024 13:00:34 +0000 ROA not before: Wed 17 Apr 2024 13:00:34 +0000 ROA not after: Tue 16 Jul 2024 13:00:34 +0000 asID: 394111 IP address blocks: 207.174.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:93:68:bd:01:58:17:62:03:19:b1:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Apr 17 13:00:34 2024 GMT Not After : Jul 16 13:00:34 2024 GMT Subject: CN=6da4d09c-9674-4e28-a50d-e381e4166534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6b:b7:9a:71:ea:41:1e:66:7a:ed:9c:1f:3d: 3b:b1:b0:8c:cc:d9:0c:93:1b:58:39:38:cb:b6:9b: 48:29:fe:5b:31:88:fe:a8:a5:d4:47:40:5b:1e:5d: 28:8c:34:7c:f1:c8:5e:60:18:42:18:0e:61:a0:5b: ec:a5:ed:94:eb:06:08:03:f6:f4:65:b0:f4:ee:be: 57:a8:39:e2:43:69:78:be:ed:07:f8:ae:da:f7:01: d3:af:1a:3a:fb:05:c5:74:ee:64:f7:57:b3:80:91: f3:58:49:cf:a6:2e:d7:13:0d:a3:90:1d:bd:7c:a8: bf:90:2a:27:0b:3c:a7:1e:01:14:7d:f5:59:f7:b0: 23:75:f6:85:4c:d2:8d:2a:9f:e2:ff:d9:90:ee:f8: 4b:ce:b2:f4:34:49:42:37:c3:75:0f:57:14:45:6d: ef:f0:7c:14:ac:63:35:04:b9:46:c0:60:05:3f:03: 19:03:a7:b6:1e:0b:97:66:cf:7e:90:61:b6:c3:1f: 60:e2:27:a4:ad:ec:1d:93:3e:cc:25:2e:aa:2f:40: 3d:ad:fd:e9:21:8a:e9:1e:39:66:99:14:69:9a:62: 67:dd:c6:ba:e7:93:07:3e:7f:dd:c0:1e:78:3f:16: 5d:4a:d6:b8:c3:7a:18:6a:07:13:d8:ba:02:98:92: db:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:73:BA:D4:5C:39:36:67:44:A1:D0:E8:17:55:64:FB:3D:D5:BE:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/b67e258b-12d7-30b6-ba30-2b61891a6642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 207.174.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:06:c7:aa:36:85:52:e5:07:fe:b2:09:eb:7b:dd:09:09:e5: ec:ec:57:ad:98:09:b6:e0:b6:77:4f:b0:b6:4d:0a:9e:2e:ed: 57:f5:1a:eb:97:37:ed:6b:00:96:a6:ed:29:22:e2:dd:1b:33: 5c:a1:8e:c7:21:20:89:59:2d:8f:ee:d3:d8:80:25:85:36:88: f4:86:47:d6:05:3c:ae:e9:78:eb:37:c3:02:ed:ad:1c:e0:32: a3:cd:ae:1e:b5:33:e8:a5:59:45:d4:39:e5:a6:d2:76:9d:4b: 83:5e:b8:40:aa:03:95:b8:c3:8f:f2:f7:96:8a:1c:91:18:94: 2b:e6:90:6a:66:c8:59:9b:eb:f2:1c:fb:ee:48:e7:96:c5:cf: 35:a8:52:a8:92:64:71:e7:e0:01:91:f6:06:10:ba:75:2d:42: 3f:39:20:94:62:85:4d:66:25:1d:5f:3f:12:22:c4:a6:bd:03: f5:a8:d1:08:06:e6:75:1f:a4:2d:03:6f:43:f4:0e:6b:cf:c3: 12:29:50:03:12:3e:c7:94:68:3a:48:b4:88:94:21:a4:03:4e: 84:6a:86:0e:6f:e4:04:63:7c:68:fc:84:df:d1:7b:3b:e8:e8: e9:cd:17:46:52:30:2f:65:84:cd:6f:a9:a7:43:01:e0:1d:08: dd:fb:74:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWTaL0BWBdiAxmxMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk NmRhNGQwOWMtOTY3NC00ZTI4LWE1MGQtZTM4MWU0MTY2NTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Wu3mnHqQR5meu2cHz07sbCMzNkMkxtYOTjL tptIKf5bMYj+qKXUR0BbHl0ojDR88cheYBhCGA5hoFvspe2U6wYIA/b0ZbD07r5X qDniQ2l4vu0H+K7a9wHTrxo6+wXFdO5k91ezgJHzWEnPpi7XEw2jkB29fKi/kCon CzynHgEUffVZ97AjdfaFTNKNKp/i/9mQ7vhLzrL0NElCN8N1D1cURW3v8HwUrGM1 BLlGwGAFPwMZA6e2HguXZs9+kGG2wx9g4iekrewdkz7MJS6qL0A9rf3pIYrpHjlm mRRpmmJn3ca655MHPn/dwB54PxZdSta4w3oYagcT2LoCmJLbfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxzutRcOTZnRKHQ6BdVZPs91b7gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvYjY3ZTI1OGItMTJkNy0z MGI2LWJhMzAtMmI2MTg5MWE2NjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz66QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwGx6o2hVLlB/6yCet73QkJ5ezsV62YCbbgtndPsLZNCp4u7Vf1GuuX N+1rAJam7Ski4t0bM1yhjschIIlZLY/u09iAJYU2iPSGR9YFPK7peOs3wwLtrRzg MqPNrh61M+ilWUXUOeWm0nadS4NeuECqA5W4w4/y95aKHJEYlCvmkGpmyFmb6/Ic ++5I55bFzzWoUqiSZHHn4AGR9gYQunUtQj85IJRihU1mJR1fPxIixKa9A/Wo0QgG 5nUfpC0Db0P0DmvPwxIpUAMSPseUaDpItIiUIaQDToRqhg5v5ARjfGj8hN/Rezvo 6OnNF0ZSMC9lhM1vqadDAeAdCN37dJE= -----END CERTIFICATE-----Generated at Tue May 21 16:52:30 2024 by rpki-client on console-fra.rpki-client.org