$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bff7e352-f370-4115-8cf8-ed60841dfe0d/28efba3f-4ee3-3ec3-bbfe-dbe3a9b0f603.roa File: 28efba3f-4ee3-3ec3-bbfe-dbe3a9b0f603.roa (raw, json) Hash identifier: 1Gc9DTXAi/HxAC85bqDHU8pBs1gE2X2rNfg4Rl79CAs= Subject key identifier: 76:DB:5B:54:A4:89:EC:1A:B2:5B:DC:C1:B6:B7:90:54:23:F8:D6:DA Certificate issuer: /CN=bff7e352-f370-4115-8cf8-ed60841dfe0d Certificate serial: 010D0C9F432858456C53225FC78754AD1950BE00 Authority key identifier: 4A:6C:33:40:CB:19:81:F0:68:69:AE:2E:2C:43:B5:D0:8B:E3:DC:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bff7e352-f370-4115-8cf8-ed60841dfe0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bff7e352-f370-4115-8cf8-ed60841dfe0d/28efba3f-4ee3-3ec3-bbfe-dbe3a9b0f603.roa Signing time: Wed 03 Apr 2024 13:00:37 +0000 ROA not before: Wed 03 Apr 2024 13:00:37 +0000 ROA not after: Tue 02 Jul 2024 13:00:37 +0000 asID: 399045 IP address blocks: 207.167.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bff7e352-f370-4115-8cf8-ed60841dfe0d/bff7e352-f370-4115-8cf8-ed60841dfe0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bff7e352-f370-4115-8cf8-ed60841dfe0d/bff7e352-f370-4115-8cf8-ed60841dfe0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bff7e352-f370-4115-8cf8-ed60841dfe0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6c:53:22:5f:c7:87:54:ad:19:50:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bff7e352-f370-4115-8cf8-ed60841dfe0d Validity Not Before: Apr 3 13:00:37 2024 GMT Not After : Jul 2 13:00:37 2024 GMT Subject: CN=3118893e-ea44-494b-ab72-0e6fbadc1b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a4:17:56:2d:4e:1c:e0:a8:78:c6:fb:fd:e8: 9c:87:66:0f:6b:3b:d8:8b:08:77:84:d6:ba:3c:2e: 56:e0:51:ef:8d:55:d7:ae:b3:71:73:cd:bc:06:39: 32:49:2f:09:33:b9:72:c0:11:97:ed:a5:2d:81:98: 0c:f7:e9:8a:cb:fe:fd:65:7d:8f:87:fa:df:be:d4: d4:94:cf:20:4f:81:4d:72:fa:0b:36:8e:72:37:cd: 07:dd:d3:6a:b8:ff:45:0a:35:a1:76:aa:91:b4:86: a1:6a:6b:22:1e:36:5d:de:f0:e8:be:77:dd:49:12: 0a:98:c5:7c:7b:62:de:c6:60:49:33:8e:33:79:8e: be:ac:e4:71:26:1f:d6:42:16:7b:f4:53:ef:9e:bd: be:0f:6a:2b:58:49:87:b5:ca:9f:4b:6b:df:65:8c: 5e:f2:ef:3d:a6:16:94:f6:72:e4:ee:42:cd:bd:0e: 7f:86:47:d4:e8:d6:49:2e:25:61:b5:57:06:45:1d: 73:c3:1d:70:70:4f:ae:1b:0b:b5:8c:ee:82:a2:06: 15:ab:ce:6a:b4:9f:58:fa:67:9c:af:74:e0:7a:c1: 17:1e:8e:4a:1f:5f:11:0d:9b:19:61:bb:62:77:85: 6d:47:06:b1:2a:8d:e5:57:26:8f:96:4a:7e:50:7c: 4b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DB:5B:54:A4:89:EC:1A:B2:5B:DC:C1:B6:B7:90:54:23:F8:D6:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bff7e352-f370-4115-8cf8-ed60841dfe0d/28efba3f-4ee3-3ec3-bbfe-dbe3a9b0f603.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bff7e352-f370-4115-8cf8-ed60841dfe0d/bff7e352-f370-4115-8cf8-ed60841dfe0d.crl X509v3 Authority Key Identifier: keyid:4A:6C:33:40:CB:19:81:F0:68:69:AE:2E:2C:43:B5:D0:8B:E3:DC:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bff7e352-f370-4115-8cf8-ed60841dfe0d.cer sbgp-ipAddrBlock: critical IPv4: 207.167.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:99:7a:31:c2:86:fc:45:55:92:c7:6f:64:f3:b3:23:92:83: 9d:23:e7:ce:21:74:e0:39:2e:e2:bc:b5:92:48:6b:cd:4a:37: 02:1c:b5:20:c5:f9:fc:91:7b:f4:7f:1e:ad:58:e6:0e:09:9f: 56:80:d7:e7:ad:ca:80:f0:f7:0a:72:eb:30:4b:b2:62:a6:42: c5:50:82:a7:33:8b:02:39:63:43:46:23:c8:1a:37:93:b0:5b: 8f:b6:f5:9a:a5:04:d7:2a:cd:fd:4e:39:fd:c7:f5:4a:ff:ba: 31:2b:0e:51:e3:b5:cb:81:1a:d5:ec:48:0e:f7:ef:b1:90:00: ef:81:39:58:71:81:c6:96:4a:38:8b:e0:f3:7e:60:38:3a:38: c6:60:90:39:b8:b4:67:b4:43:e7:5e:6b:f5:ba:32:c1:aa:91: e8:ac:02:df:bd:94:26:2e:36:57:1d:b8:35:48:cc:ba:3f:65: 33:6c:16:87:bf:41:f3:fc:99:8a:85:72:4c:ff:40:47:5d:e0: f5:f6:d0:7e:a6:94:fe:90:68:c7:4f:16:55:9a:cd:ad:61:34: e2:ce:a1:40:06:61:b2:b4:e3:ff:c4:2e:2c:17:50:89:54:df: 14:85:83:f0:99:d3:bb:4d:e5:0e:9c:24:ca:56:b0:75:84:9e: c9:3c:c8:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVsUyJfx4dUrRlQvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZmN2UzNTItZjM3MC00MTE1LThjZjgtZWQ2MDg0MWRm ZTBkMB4XDTI0MDQwMzEzMDAzN1oXDTI0MDcwMjEzMDAzN1owLzEtMCsGA1UEAxMk MzExODg5M2UtZWE0NC00OTRiLWFiNzItMGU2ZmJhZGMxYjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaQXVi1OHOCoeMb7/eich2YPazvYiwh3hNa6 PC5W4FHvjVXXrrNxc828BjkySS8JM7lywBGX7aUtgZgM9+mKy/79ZX2Ph/rfvtTU lM8gT4FNcvoLNo5yN80H3dNquP9FCjWhdqqRtIahamsiHjZd3vDovnfdSRIKmMV8 e2LexmBJM44zeY6+rORxJh/WQhZ79FPvnr2+D2orWEmHtcqfS2vfZYxe8u89phaU 9nLk7kLNvQ5/hkfU6NZJLiVhtVcGRR1zwx1wcE+uGwu1jO6CogYVq85qtJ9Y+mec r3TgesEXHo5KH18RDZsZYbtid4VtRwaxKo3lVyaPlkp+UHxLcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbbW1Skiewaslvcwba3kFQj+NbaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZmY3 ZTM1Mi1mMzcwLTQxMTUtOGNmOC1lZDYwODQxZGZlMGQvMjhlZmJhM2YtNGVlMy0z ZWMzLWJiZmUtZGJlM2E5YjBmNjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmZmN2UzNTItZjM3MC00MTE1LThj ZjgtZWQ2MDg0MWRmZTBkL2JmZjdlMzUyLWYzNzAtNDExNS04Y2Y4LWVkNjA4NDFk ZmUwZC5jcmwwHwYDVR0jBBgwFoAUSmwzQMsZgfBoaa4uLEO10Ivj3HowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZmY3ZTM1Mi1mMzcwLTQxMTUtOGNmOC1lZDYw ODQxZGZlMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz6dCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+ZejHChvxFVZLHb2TzsyOSg50j584hdOA5LuK8tZJIa81KNwIctSDF +fyRe/R/Hq1Y5g4Jn1aA1+etyoDw9wpy6zBLsmKmQsVQgqcziwI5Y0NGI8gaN5Ow W4+29ZqlBNcqzf1OOf3H9Ur/ujErDlHjtcuBGtXsSA7377GQAO+BOVhxgcaWSjiL 4PN+YDg6OMZgkDm4tGe0Q+dea/W6MsGqkeisAt+9lCYuNlcduDVIzLo/ZTNsFoe/ QfP8mYqFckz/QEdd4PX20H6mlP6QaMdPFlWaza1hNOLOoUAGYbK04//ELiwXUIlU 3xSFg/CZ07tN5Q6cJMpWsHWEnsk8yMQ= -----END CERTIFICATE-----Generated at Wed May 8 05:34:37 2024 by rpki-client on console-ams.rpki-client.org