$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ea5b8a17-465e-3806-935e-87cb1d092488.roa File: ea5b8a17-465e-3806-935e-87cb1d092488.roa (raw, json) Hash identifier: KLNI5tMRYDRCHp1F2ssbrbekmm4Mx5knXlWVnxFoGiE= Subject key identifier: A0:B8:D8:8B:AA:94:AC:19:BA:FF:86:1B:E2:3A:8A:E3:BA:EA:3F:A3 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F432858452AB7E4B43632A155D5A65E80 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ea5b8a17-465e-3806-935e-87cb1d092488.roa Signing time: Mon 11 Mar 2024 01:00:26 +0000 ROA not before: Mon 11 Mar 2024 01:00:26 +0000 ROA not after: Sun 09 Jun 2024 01:00:26 +0000 asID: 13536 IP address blocks: 66.152.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:2a:b7:e4:b4:36:32:a1:55:d5:a6:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Mar 11 01:00:26 2024 GMT Not After : Jun 9 01:00:26 2024 GMT Subject: CN=cb4ee337-739c-4697-be1e-b4e9db589321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:25:a1:79:17:bb:a7:77:a2:d7:1c:6e:05:56: 26:37:ed:45:e9:51:5a:85:ed:28:8a:a1:07:a6:a6: ec:ef:aa:84:10:40:1c:6e:10:9b:62:23:f6:e5:ba: df:dd:b5:46:98:6c:f2:12:91:ad:e9:29:3d:17:0d: 68:08:2a:d6:62:df:72:2b:3f:6b:34:a1:76:00:f0: ba:65:08:56:bc:00:ed:3d:52:d4:41:da:e2:20:8a: ec:6c:65:3d:b8:a4:c3:d9:a4:c5:be:f4:37:17:45: e9:fb:ce:ad:77:65:4c:f2:05:1b:30:89:c3:7e:e9: 4a:cf:ed:e9:25:fb:77:97:c1:be:9a:4a:82:b7:b1: dc:96:d6:57:10:de:1e:b4:82:51:b5:af:98:72:b0: e3:07:8e:7a:1a:a0:83:7f:8e:42:e1:b8:1e:e9:c2: 20:fd:00:ff:43:95:64:af:0b:6c:f9:ff:a2:69:38: a6:84:c7:e0:70:57:46:f4:e5:d5:6d:ba:ff:bd:18: 20:0b:50:a5:e5:1b:43:e4:bf:49:65:40:d8:c7:3e: bc:bb:4a:ef:f7:73:05:7e:df:44:fe:b9:14:23:00: 95:8d:a0:1e:be:74:41:91:6b:50:d5:77:38:29:bf: 24:29:0b:87:08:6d:f2:3d:ec:ec:d0:f3:f6:96:d5: 0e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B8:D8:8B:AA:94:AC:19:BA:FF:86:1B:E2:3A:8A:E3:BA:EA:3F:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ea5b8a17-465e-3806-935e-87cb1d092488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 66.152.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:f3:88:fd:46:03:ea:72:b9:fc:29:9f:63:7a:b1:37:14:01: 58:ab:69:cd:24:18:9b:10:31:86:ee:23:35:73:17:51:76:59: c7:13:9e:7d:16:59:bb:1e:7b:67:77:60:a6:6b:f5:0e:b2:58: 9c:a4:41:a2:42:c6:b4:58:8b:cd:e0:2b:8a:d1:94:58:99:e8: 2a:e6:74:c3:bb:c2:dc:7e:5c:3d:56:ba:d4:da:00:91:44:f2: 21:76:5a:07:6b:92:63:9c:82:8f:f5:19:2f:f9:df:8e:d2:df: 86:b7:74:6b:f7:dd:a7:c1:6b:a5:a9:0a:ff:28:ba:6c:24:9a: 96:53:4a:6f:cd:1a:bc:ed:e6:d7:58:2c:76:cb:54:b7:9d:57: 2e:0c:35:50:7c:6a:9d:5c:61:ba:cd:84:c7:1f:f7:07:c7:e7: d5:05:9e:67:43:f9:e5:cb:4e:a5:41:30:79:d5:aa:68:d9:56: ec:02:6d:b7:4c:35:42:25:ce:c9:fd:d1:03:f6:3d:4e:ac:48: fa:3d:58:8e:a8:b5:78:68:15:4f:0f:5a:39:f8:dd:28:53:c6: 37:1e:13:80:74:70:d9:2f:b0:26:74:c6:b8:e5:2d:71:c7:c4: 15:d8:f9:d7:14:6f:37:b6:8b:68:26:94:cc:4a:88:85:c7:3f: 59:d8:0f:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUqt+S0NjKhVdWmXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI0MDMxMTAxMDAyNloXDTI0MDYwOTAxMDAyNlowLzEtMCsGA1UEAxMk Y2I0ZWUzMzctNzM5Yy00Njk3LWJlMWUtYjRlOWRiNTg5MzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCWheRe7p3ei1xxuBVYmN+1F6VFahe0oiqEH pqbs76qEEEAcbhCbYiP25brf3bVGmGzyEpGt6Sk9Fw1oCCrWYt9yKz9rNKF2APC6 ZQhWvADtPVLUQdriIIrsbGU9uKTD2aTFvvQ3F0Xp+86td2VM8gUbMInDfulKz+3p Jft3l8G+mkqCt7HcltZXEN4etIJRta+YcrDjB456GqCDf45C4bge6cIg/QD/Q5Vk rwts+f+iaTimhMfgcFdG9OXVbbr/vRggC1Cl5RtD5L9JZUDYxz68u0rv93MFft9E /rkUIwCVjaAevnRBkWtQ1Xc4Kb8kKQuHCG3yPezs0PP2ltUOtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKC42IuqlKwZuv+GG+I6iuO66j+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvZWE1YjhhMTctNDY1ZS0z ODA2LTkzNWUtODdjYjFkMDkyNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQph/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANfziP1GA+pyufwpn2N6sTcUAVirac0kGJsQMYbuIzVzF1F2WccTnn0W Wbsee2d3YKZr9Q6yWJykQaJCxrRYi83gK4rRlFiZ6CrmdMO7wtx+XD1WutTaAJFE 8iF2WgdrkmOcgo/1GS/5347S34a3dGv33afBa6WpCv8oumwkmpZTSm/NGrzt5tdY LHbLVLedVy4MNVB8ap1cYbrNhMcf9wfH59UFnmdD+eXLTqVBMHnVqmjZVuwCbbdM NUIlzsn90QP2PU6sSPo9WI6otXhoFU8PWjn43ShTxjceE4B0cNkvsCZ0xrjlLXHH xBXY+dcUbze2i2gmlMxKiIXHP1nYD6M= -----END CERTIFICATE-----Generated at Thu May 23 19:00:50 2024 by rpki-client on console-fra.rpki-client.org