$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bff7e352-f370-4115-8cf8-ed60841dfe0d/3117fada-bca9-35b0-8d19-0b0c8ef4195f.roa File: 3117fada-bca9-35b0-8d19-0b0c8ef4195f.roa (raw, json) Hash identifier: ufQzov1lzgc0scF4paj8+RgGdtmWpKcTHZv+XukS0yk= Subject key identifier: 66:C9:3C:B6:F9:C6:3A:CF:5B:D6:0D:C0:8D:F6:27:56:1E:EA:2F:E7 Certificate issuer: /CN=bff7e352-f370-4115-8cf8-ed60841dfe0d Certificate serial: 010D0C9F4328584529529166DCF594FB63D1BC40 Authority key identifier: 4A:6C:33:40:CB:19:81:F0:68:69:AE:2E:2C:43:B5:D0:8B:E3:DC:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bff7e352-f370-4115-8cf8-ed60841dfe0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bff7e352-f370-4115-8cf8-ed60841dfe0d/3117fada-bca9-35b0-8d19-0b0c8ef4195f.roa Signing time: Sun 10 Mar 2024 13:00:31 +0000 ROA not before: Sun 10 Mar 2024 13:00:31 +0000 ROA not after: Sat 08 Jun 2024 13:00:31 +0000 asID: 399045 IP address blocks: 207.167.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bff7e352-f370-4115-8cf8-ed60841dfe0d/bff7e352-f370-4115-8cf8-ed60841dfe0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bff7e352-f370-4115-8cf8-ed60841dfe0d/bff7e352-f370-4115-8cf8-ed60841dfe0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bff7e352-f370-4115-8cf8-ed60841dfe0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:29:52:91:66:dc:f5:94:fb:63:d1:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bff7e352-f370-4115-8cf8-ed60841dfe0d Validity Not Before: Mar 10 13:00:31 2024 GMT Not After : Jun 8 13:00:31 2024 GMT Subject: CN=e3cf9891-58c3-44be-8e3c-a8d577eb4a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6d:ac:b3:7a:ec:8d:0c:e5:64:68:32:6e:01: 90:d6:97:41:a9:a7:f7:78:4a:50:07:76:e8:dc:d5: e3:80:69:db:59:6c:33:2b:4a:cd:c4:d3:06:4b:44: 59:12:c5:78:b8:4b:58:ae:44:61:69:6e:7e:02:f0: 1a:4c:eb:0e:4d:a9:48:52:47:41:0f:9b:09:1e:ce: 0d:fb:f9:17:00:00:ba:9d:0f:17:df:2c:dd:c5:cf: 7c:61:60:76:81:42:9f:25:fe:33:b2:b6:c2:90:74: af:69:b7:98:3b:15:47:59:b0:da:71:51:32:77:84: 1b:ee:c1:98:9a:56:bc:ea:8e:21:3e:1c:d6:62:94: 6a:d9:76:bf:46:34:2b:32:93:d4:99:20:25:3f:0b: d4:ff:7f:90:3d:75:c7:23:80:1c:90:d3:2a:15:6a: 69:79:6f:10:6d:6f:c2:52:97:4c:8d:c9:c3:c2:c7: 65:d7:34:a0:b5:83:97:1e:ec:bf:10:b7:59:ba:54: f7:da:3c:37:1c:e2:77:e1:e9:11:9a:46:86:c9:84: 07:3c:3e:f9:74:d8:b0:83:db:3e:af:71:d7:07:5c: c2:22:a9:02:6d:9b:ac:26:95:02:a4:ff:e8:22:dd: 42:3e:77:51:c5:e1:14:e8:43:61:49:4a:3d:d4:3f: 13:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C9:3C:B6:F9:C6:3A:CF:5B:D6:0D:C0:8D:F6:27:56:1E:EA:2F:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bff7e352-f370-4115-8cf8-ed60841dfe0d/3117fada-bca9-35b0-8d19-0b0c8ef4195f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bff7e352-f370-4115-8cf8-ed60841dfe0d/bff7e352-f370-4115-8cf8-ed60841dfe0d.crl X509v3 Authority Key Identifier: keyid:4A:6C:33:40:CB:19:81:F0:68:69:AE:2E:2C:43:B5:D0:8B:E3:DC:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bff7e352-f370-4115-8cf8-ed60841dfe0d.cer sbgp-ipAddrBlock: critical IPv4: 207.167.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:47:03:df:2b:2a:1f:d8:73:0d:9b:9d:50:94:a1:bd:c2:a9: a4:9f:8f:c3:8a:63:68:b6:de:ad:b0:68:1e:d0:68:00:8c:bb: b3:6b:89:b9:1f:69:c8:49:1a:98:21:6f:cf:93:f5:cb:07:1e: e5:ab:79:7a:0b:d4:6d:f6:fc:9a:6a:a8:d2:10:8c:9c:17:b0: 2b:a6:78:56:3b:2e:90:ba:98:9a:36:a7:69:1c:79:94:15:a9: f4:10:4c:8b:48:39:3f:3a:5e:4f:a9:47:29:2d:90:69:e8:8c: 7d:48:4d:ad:ca:0d:ae:96:34:f0:cd:c1:1b:a0:cc:66:dd:5e: 4a:36:c3:5b:42:52:2b:45:45:1b:c2:90:0f:da:30:64:1a:d8: 0b:4d:49:40:ff:c3:b5:be:84:f1:43:50:db:16:33:d2:47:ee: e8:d0:19:67:8f:49:15:69:27:ed:d9:94:ed:ca:1a:31:76:d7: 95:7b:8f:0c:b3:6b:5b:ef:2f:b9:ff:16:48:64:26:fa:e5:d3: 65:b7:e6:18:92:39:44:c0:3e:1b:1b:a3:a7:a5:75:d1:5a:a1: 31:35:8d:2a:23:e6:6c:6a:8f:24:35:31:f6:ad:e2:0b:70:3f: 82:5c:38:77:fc:49:72:1d:fe:71:02:ad:cc:14:df:5d:61:f8: 8b:ee:c9:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUpUpFm3PWU+2PRvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZmN2UzNTItZjM3MC00MTE1LThjZjgtZWQ2MDg0MWRm ZTBkMB4XDTI0MDMxMDEzMDAzMVoXDTI0MDYwODEzMDAzMVowLzEtMCsGA1UEAxMk ZTNjZjk4OTEtNThjMy00NGJlLThlM2MtYThkNTc3ZWI0YTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm2ss3rsjQzlZGgybgGQ1pdBqaf3eEpQB3bo 3NXjgGnbWWwzK0rNxNMGS0RZEsV4uEtYrkRhaW5+AvAaTOsOTalIUkdBD5sJHs4N +/kXAAC6nQ8X3yzdxc98YWB2gUKfJf4zsrbCkHSvabeYOxVHWbDacVEyd4Qb7sGY mla86o4hPhzWYpRq2Xa/RjQrMpPUmSAlPwvU/3+QPXXHI4AckNMqFWppeW8QbW/C UpdMjcnDwsdl1zSgtYOXHuy/ELdZulT32jw3HOJ34ekRmkaGyYQHPD75dNiwg9s+ r3HXB1zCIqkCbZusJpUCpP/oIt1CPndRxeEU6ENhSUo91D8TowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbJPLb5xjrPW9YNwI32J1Ye6i/nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZmY3 ZTM1Mi1mMzcwLTQxMTUtOGNmOC1lZDYwODQxZGZlMGQvMzExN2ZhZGEtYmNhOS0z NWIwLThkMTktMGIwYzhlZjQxOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmZmN2UzNTItZjM3MC00MTE1LThj ZjgtZWQ2MDg0MWRmZTBkL2JmZjdlMzUyLWYzNzAtNDExNS04Y2Y4LWVkNjA4NDFk ZmUwZC5jcmwwHwYDVR0jBBgwFoAUSmwzQMsZgfBoaa4uLEO10Ivj3HowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZmY3ZTM1Mi1mMzcwLTQxMTUtOGNmOC1lZDYw ODQxZGZlMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6dCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdHA98rKh/Ycw2bnVCUob3CqaSfj8OKY2i23q2waB7QaACMu7Nribkf achJGpghb8+T9csHHuWreXoL1G32/JpqqNIQjJwXsCumeFY7LpC6mJo2p2kceZQV qfQQTItIOT86Xk+pRyktkGnojH1ITa3KDa6WNPDNwRugzGbdXko2w1tCUitFRRvC kA/aMGQa2AtNSUD/w7W+hPFDUNsWM9JH7ujQGWePSRVpJ+3ZlO3KGjF215V7jwyz a1vvL7n/FkhkJvrl02W35hiSOUTAPhsbo6elddFaoTE1jSoj5mxqjyQ1Mfat4gtw P4JcOHf8SXId/nECrcwU311h+IvuyTQ= -----END CERTIFICATE-----Generated at Wed May 8 20:39:02 2024 by rpki-client on console-ams.rpki-client.org