$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/cb74f0af-7659-30b1-9411-47e725d27122.roa File: cb74f0af-7659-30b1-9411-47e725d27122.roa (raw, json) Hash identifier: pkydPsqkdIw7K6PwAkLNYX24skdXWFmxHHyb6BhK2MI= Subject key identifier: D0:FD:70:78:C9:7A:DD:76:7D:07:07:87:E0:98:1B:DB:0A:25:4A:16 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285845A15E1AE10D82D2B09FB31680 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/cb74f0af-7659-30b1-9411-47e725d27122.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 174 IP address blocks: 198.67.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5e:1a:e1:0d:82:d2:b0:9f:b3:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=a4211b28-3e61-4bd6-8cbf-c533b4163d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:80:5d:f5:86:a2:ba:bb:73:fe:de:d2:58:24: cf:a9:bc:c0:cb:6c:8e:7a:4e:58:f4:97:18:09:a9: 14:60:1f:1c:49:eb:8c:7f:f8:59:52:8d:5d:46:a9: b8:0b:5c:51:ae:d1:b1:af:21:93:d1:6f:d0:2a:69: 4b:b0:1b:1d:dc:9d:ac:1e:3b:61:74:39:0a:da:ef: ff:ee:29:40:0a:da:2f:b7:ed:16:57:87:05:27:bb: cc:04:45:45:a6:17:34:2c:0c:8b:96:cb:8d:96:28: 1f:66:09:24:c1:b5:9a:bb:a5:10:87:0e:c3:41:73: 1a:17:be:fe:05:6b:9a:de:70:1c:11:18:0b:a3:4d: d0:3a:b9:a0:35:e8:4e:a1:e1:b0:13:94:03:fa:b7: e8:e0:4d:fe:6a:1f:52:3b:95:6f:1b:6a:26:13:eb: 3c:57:0f:37:0c:e1:d7:f0:b7:7f:71:4b:ac:df:c1: a5:5a:26:67:a8:84:26:ac:ad:d0:ae:94:e8:12:fb: 0d:1e:9e:8d:fe:a1:b5:9a:d2:9d:f5:1c:3f:9d:0d: f9:f4:2c:36:e1:4b:a6:72:0d:db:f2:a2:38:56:7a: 64:23:59:73:67:98:36:5f:f6:f3:c1:17:31:36:d2: 88:54:f5:80:cd:a9:db:0a:1b:d5:9c:86:63:86:7f: 23:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:FD:70:78:C9:7A:DD:76:7D:07:07:87:E0:98:1B:DB:0A:25:4A:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/cb74f0af-7659-30b1-9411-47e725d27122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 198.67.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:65:bf:b1:68:af:d4:15:22:22:a1:95:0f:18:de:af:17:49: 2a:5e:ce:86:7c:7b:19:f1:1f:b6:15:2d:cb:67:c5:44:25:2a: f6:9d:36:b5:63:dc:27:3d:4f:e9:72:ab:3a:ac:24:5e:e7:25: 0d:55:5d:a4:8e:92:34:14:8f:43:b5:49:4c:09:99:6e:9f:48: d9:1a:eb:02:b0:4c:2e:84:2b:21:f2:2d:04:f7:1a:49:98:0d: 74:5a:b9:cf:61:a1:47:5c:f3:53:d5:54:9c:1e:de:81:8f:b0: 48:45:8f:b4:90:49:d3:30:99:9c:56:d0:39:55:fb:5d:80:8d: b1:12:2a:f2:5e:5d:07:fa:43:92:46:50:c3:d1:72:19:46:0c: e1:be:8e:6c:1a:ab:d3:19:d0:41:80:f4:44:c6:de:b0:12:a9: db:b7:83:8e:33:ee:38:0e:34:14:77:5a:c3:c5:ef:fa:ca:18: ae:57:c9:b8:6d:14:a5:97:88:71:a2:8e:27:96:e4:2a:81:8a: 7d:58:25:d3:cb:62:4d:61:e6:61:ed:94:21:3f:ff:a2:d2:53: c4:05:9f:1c:62:01:32:df:6d:e1:c0:dd:71:d3:2f:da:c0:f3: 02:47:74:a9:00:85:92:c1:42:e0:c5:8b:a6:89:fe:cf:b4:5c: 58:6f:58:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXhrhDYLSsJ+zFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk YTQyMTFiMjgtM2U2MS00YmQ2LThjYmYtYzUzM2I0MTYzZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYBd9Yaiurtz/t7SWCTPqbzAy2yOek5Y9JcY CakUYB8cSeuMf/hZUo1dRqm4C1xRrtGxryGT0W/QKmlLsBsd3J2sHjthdDkK2u// 7ilACtovt+0WV4cFJ7vMBEVFphc0LAyLlsuNligfZgkkwbWau6UQhw7DQXMaF77+ BWua3nAcERgLo03QOrmgNehOoeGwE5QD+rfo4E3+ah9SO5VvG2omE+s8Vw83DOHX 8Ld/cUus38GlWiZnqIQmrK3QrpToEvsNHp6N/qG1mtKd9Rw/nQ359Cw24Uumcg3b 8qI4VnpkI1lzZ5g2X/bzwRcxNtKIVPWAzanbChvVnIZjhn8jcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFND9cHjJet12fQcHh+CYG9sKJUoWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvY2I3NGYwYWYtNzY1OS0z MGIxLTk0MTEtNDdlNzI1ZDI3MTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkMJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVlv7For9QVIiKhlQ8Y3q8XSSpezoZ8exnxH7YVLctnxUQlKvadNrVj 3Cc9T+lyqzqsJF7nJQ1VXaSOkjQUj0O1SUwJmW6fSNka6wKwTC6EKyHyLQT3GkmY DXRauc9hoUdc81PVVJwe3oGPsEhFj7SQSdMwmZxW0DlV+12AjbESKvJeXQf6Q5JG UMPRchlGDOG+jmwaq9MZ0EGA9ETG3rASqdu3g44z7jgONBR3WsPF7/rKGK5Xybht FKWXiHGijieW5CqBin1YJdPLYk1h5mHtlCE//6LSU8QFnxxiATLfbeHA3XHTL9rA 8wJHdKkAhZLBQuDFi6aJ/s+0XFhvWEE= -----END CERTIFICATE-----Generated at Sat Apr 27 15:31:08 2024 by rpki-client on console-ams.rpki-client.org