$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/c81b4e9d-6b25-353f-b21c-f0758e3a3921.roa File: c81b4e9d-6b25-353f-b21c-f0758e3a3921.roa (raw, json) Hash identifier: D+XVCb/mu4dAa210q43Ce6Nl2Z5vYPWbtKExOqjJCQQ= Subject key identifier: B5:BE:92:88:BA:83:92:36:60:3A:77:F8:0C:B9:B9:79:37:17:6D:38 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584522759D9A316247A1F298F140 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/c81b4e9d-6b25-353f-b21c-f0758e3a3921.roa Signing time: Fri 08 Mar 2024 02:00:26 +0000 ROA not before: Fri 08 Mar 2024 02:00:26 +0000 ROA not after: Thu 06 Jun 2024 01:00:26 +0000 asID: 54989 IP address blocks: 64.17.97.0/24 maxlen: 24 64.17.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:22:75:9d:9a:31:62:47:a1:f2:98:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Mar 8 02:00:26 2024 GMT Not After : Jun 6 01:00:26 2024 GMT Subject: CN=d36b915e-2905-4d78-b2e4-67fb186f6007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fb:98:52:c8:eb:65:1e:c2:77:7f:f5:58:ac: 74:75:c4:b3:eb:16:b7:6a:c4:7b:c4:f3:5c:54:af: 5a:8b:02:bf:e6:5f:fb:16:8c:a0:61:08:90:c0:4f: 4f:26:b4:f7:03:77:c2:b6:91:57:51:be:f4:52:88: 8a:b0:64:bd:04:36:6c:f8:88:8d:f0:4f:92:22:7a: 75:d0:30:2f:3d:b2:35:75:be:81:63:61:c6:4c:18: 74:52:87:cc:2b:b0:55:3d:e7:f6:41:1d:23:d8:29: c4:28:90:a3:31:29:d3:04:d2:0f:57:9b:11:8b:bd: d8:28:70:bf:6a:b0:6e:7a:ac:17:9a:75:0d:59:aa: 7d:46:3c:f8:32:3e:d8:d9:c2:de:14:87:5f:9a:c1: c1:95:ef:6b:84:e0:80:e7:21:17:f6:1d:6e:b3:57: 63:cc:c9:7a:d2:c8:23:a7:da:35:bd:99:a0:2d:34: 94:5b:88:c1:60:d2:9a:7c:f4:b9:65:2a:e9:f8:fa: 47:34:6f:9a:f8:e8:c3:ba:14:c0:80:94:0c:f3:f2: b8:20:8e:bc:89:ee:b7:76:ca:e3:06:ab:70:f2:55: ae:23:08:ad:ff:89:eb:df:84:eb:b9:47:fb:19:ec: ae:7a:d4:36:dc:5d:e9:d8:5a:69:87:21:76:0c:8b: ed:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BE:92:88:BA:83:92:36:60:3A:77:F8:0C:B9:B9:79:37:17:6D:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/c81b4e9d-6b25-353f-b21c-f0758e3a3921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 64.17.97.0/24 64.17.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:dd:ae:5f:1e:fd:c9:14:73:66:c3:cf:4e:c1:c3:41:27:26: 6a:f5:8c:1c:67:a7:dd:74:2f:bc:ad:e5:ed:55:02:37:da:7e: 6d:f3:80:4f:b8:cc:7a:9f:32:45:ec:76:7e:a6:01:70:8e:63: 42:fb:4d:b4:e8:d5:f4:8d:9b:bf:c6:7f:87:fb:ba:5f:2a:1f: 5a:ce:fb:fd:e6:7b:be:2f:61:af:ee:67:f2:f8:21:61:85:6b: 76:29:3b:36:50:d4:ac:38:51:cb:f4:c6:8e:0e:85:38:6d:51: be:ef:e8:ca:49:1e:06:8e:bf:8b:5f:9b:3d:e6:8d:84:2d:cb: ba:cc:8d:7c:2d:b0:c3:6d:d2:af:99:ca:f1:37:11:a3:48:33: a2:11:56:cd:fd:17:a7:95:f0:fc:7b:47:60:71:b2:6c:82:4a: 38:91:6e:d8:58:96:14:73:a7:b3:36:8c:20:93:d3:90:f3:49: 32:ec:be:9b:94:fd:e5:8d:74:12:ef:ce:83:6d:d7:f7:59:3e: 75:ca:c1:01:9d:e3:d4:4f:c7:88:6d:46:fd:5c:19:c1:03:e8: 7f:57:67:7c:5f:45:59:5c:39:15:19:9c:ff:5e:f1:42:48:c1: 91:70:48:1b:71:70:78:cc:33:3f:6e:11:5a:b9:02:57:ae:bb: dd:72:d6:99 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEUidZ2aMWJHofKY8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI0MDMwODAyMDAyNloXDTI0MDYwNjAxMDAyNlowLzEtMCsGA1UEAxMk ZDM2YjkxNWUtMjkwNS00ZDc4LWIyZTQtNjdmYjE4NmY2MDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfuYUsjrZR7Cd3/1WKx0dcSz6xa3asR7xPNc VK9aiwK/5l/7FoygYQiQwE9PJrT3A3fCtpFXUb70UoiKsGS9BDZs+IiN8E+SInp1 0DAvPbI1db6BY2HGTBh0UofMK7BVPef2QR0j2CnEKJCjMSnTBNIPV5sRi73YKHC/ arBueqwXmnUNWap9Rjz4Mj7Y2cLeFIdfmsHBle9rhOCA5yEX9h1us1djzMl60sgj p9o1vZmgLTSUW4jBYNKafPS5ZSrp+PpHNG+a+OjDuhTAgJQM8/K4II68ie63dsrj Bqtw8lWuIwit/4nr34TruUf7GeyuetQ23F3p2FpphyF2DIvtewIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLW+koi6g5I2YDp3+Ay5uXk3F204MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvYzgxYjRlOWQtNmIyNS0z NTNmLWIyMWMtZjA3NThlM2EzOTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQBFhAwQA QBF3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAATdrl8e/ckUc2bDz07Bw0EnJmr1jBxnp910L7yt5e1VAjfa fm3zgE+4zHqfMkXsdn6mAXCOY0L7TbTo1fSNm7/Gf4f7ul8qH1rO+/3me74vYa/u Z/L4IWGFa3YpOzZQ1Kw4Ucv0xo4OhThtUb7v6MpJHgaOv4tfmz3mjYQty7rMjXwt sMNt0q+ZyvE3EaNIM6IRVs39F6eV8Px7R2BxsmyCSjiRbthYlhRzp7M2jCCT05Dz STLsvpuU/eWNdBLvzoNt1/dZPnXKwQGd49RPx4htRv1cGcED6H9XZ3xfRVlcORUZ nP9e8UJIwZFwSBtxcHjMMz9uEVq5Aleuu91y1pk= -----END CERTIFICATE-----Generated at Thu May 23 13:45:29 2024 by rpki-client on console-fra.rpki-client.org