$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/f9afc641-80e9-35b5-a87c-dd68d73febac.roa File: f9afc641-80e9-35b5-a87c-dd68d73febac.roa (raw, json) Hash identifier: wOe9u/CHzhBXehjGc9xVPNYquzpli63KvXlOgxpD47o= Subject key identifier: B6:AA:C9:77:AE:F4:CD:C9:09:A3:1D:70:B1:46:00:EB:AD:DA:48:1E Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584569886F8E598CA38380B76880 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/f9afc641-80e9-35b5-a87c-dd68d73febac.roa Signing time: Tue 02 Apr 2024 13:00:37 +0000 ROA not before: Tue 02 Apr 2024 13:00:37 +0000 ROA not after: Mon 01 Jul 2024 13:00:37 +0000 asID: 137443 IP address blocks: 107.151.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:69:88:6f:8e:59:8c:a3:83:80:b7:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Apr 2 13:00:37 2024 GMT Not After : Jul 1 13:00:37 2024 GMT Subject: CN=7473bcbd-2d0a-45d6-b05e-1680ba5c0079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a1:36:6a:8c:d2:43:07:0d:c2:a5:27:d3:99: cd:a1:c9:03:5e:d4:c0:47:3f:59:c4:ad:ea:20:5b: ee:81:22:c4:56:41:71:2d:a7:cb:04:5b:f7:99:89: 70:29:ad:38:6b:99:e9:f3:6f:9f:f0:fe:59:df:cc: 91:65:7a:65:76:64:a8:e9:98:90:5a:25:02:66:f4: cc:0b:20:6b:9b:55:72:30:9e:f0:29:78:1a:6c:5c: 20:27:46:fc:ea:24:c9:f4:81:04:e9:8e:20:65:a4: d7:71:33:cf:e9:28:20:0f:b2:41:c6:31:34:7b:1c: 50:45:3b:26:76:39:7f:38:38:be:8d:7a:14:74:51: 98:8b:f2:c5:1c:07:c4:e6:04:58:20:31:94:8d:33: c9:c2:ea:90:68:0c:3e:d5:43:64:3b:cb:f5:58:56: 2a:6d:02:5e:6f:94:5a:12:a6:69:05:44:db:f0:86: e7:7e:90:c4:65:30:ed:4d:16:1f:e2:85:49:f3:12: 99:e9:64:42:bc:e6:d6:74:d0:42:57:cd:09:5e:4b: ec:d0:88:a8:c5:d7:d8:76:02:39:d0:1d:bd:e1:21: 1e:f8:ca:9e:04:85:9c:e6:2f:23:d9:a1:09:69:a6: 17:9e:51:42:03:f0:29:42:82:9c:7d:74:a4:84:f6: ea:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AA:C9:77:AE:F4:CD:C9:09:A3:1D:70:B1:46:00:EB:AD:DA:48:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/f9afc641-80e9-35b5-a87c-dd68d73febac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:2e:79:1c:54:57:4d:f1:56:4c:51:92:45:26:ff:32:b6:c6: 5f:78:44:9f:6a:4a:d5:cd:0c:06:9b:9f:32:d6:2c:29:f3:56: 79:0d:33:30:0d:5c:5c:e7:54:9c:ce:25:a4:af:f1:8d:45:5a: 47:be:f1:ba:9b:88:03:81:e1:e8:f1:c4:58:b6:7a:a8:aa:c5: ef:06:7f:85:5e:f2:b7:f5:ef:bf:03:31:f8:dd:20:a9:c3:2a: 24:56:21:0f:5b:36:ab:03:d0:10:a0:99:b7:90:6a:e7:bd:89: e2:60:e0:85:4f:2c:99:b0:94:3d:0e:26:a2:44:35:44:6f:cb: 38:ba:5a:2a:89:eb:a4:09:07:08:c6:31:07:47:24:a4:b9:34: 3a:92:ab:67:1f:05:c9:2a:02:76:17:d8:4f:7f:d0:3c:b0:4d: fc:ae:b0:79:23:b8:42:55:f5:12:06:66:a2:39:6c:7d:b0:a1: 7b:16:29:41:4d:c1:77:e9:cc:f2:20:6c:5e:34:45:5a:fd:3b: 76:ba:9f:f4:5b:73:6c:12:51:61:42:88:08:eb:21:e0:cb:fc: 71:b4:23:ff:c2:08:fe:5b:56:4b:14:04:df:9c:70:86:e8:c8: 7d:f2:8e:4b:66:f1:fc:b4:80:4a:7b:7e:63:38:d6:54:eb:b8: 48:8b:dd:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVpiG+OWYyjg4C3aIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI0MDQwMjEzMDAzN1oXDTI0MDcwMTEzMDAzN1owLzEtMCsGA1UEAxMk NzQ3M2JjYmQtMmQwYS00NWQ2LWIwNWUtMTY4MGJhNWMwMDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6E2aozSQwcNwqUn05nNockDXtTARz9ZxK3q IFvugSLEVkFxLafLBFv3mYlwKa04a5np82+f8P5Z38yRZXpldmSo6ZiQWiUCZvTM CyBrm1VyMJ7wKXgabFwgJ0b86iTJ9IEE6Y4gZaTXcTPP6SggD7JBxjE0exxQRTsm djl/ODi+jXoUdFGYi/LFHAfE5gRYIDGUjTPJwuqQaAw+1UNkO8v1WFYqbQJeb5Ra EqZpBUTb8IbnfpDEZTDtTRYf4oVJ8xKZ6WRCvObWdNBCV80JXkvs0IioxdfYdgI5 0B294SEe+MqeBIWc5i8j2aEJaaYXnlFCA/ApQoKcfXSkhPbqfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLaqyXeu9M3JCaMdcLFGAOut2kgeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvZjlhZmM2NDEtODBlOS0z NWI1LWE4N2MtZGQ2OGQ3M2ZlYmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5fHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEueRxUV03xVkxRkkUm/zK2xl94RJ9qStXNDAabnzLWLCnzVnkNMzAN XFznVJzOJaSv8Y1FWke+8bqbiAOB4ejxxFi2eqiqxe8Gf4Ve8rf1778DMfjdIKnD KiRWIQ9bNqsD0BCgmbeQaue9ieJg4IVPLJmwlD0OJqJENURvyzi6WiqJ66QJBwjG MQdHJKS5NDqSq2cfBckqAnYX2E9/0DywTfyusHkjuEJV9RIGZqI5bH2woXsWKUFN wXfpzPIgbF40RVr9O3a6n/Rbc2wSUWFCiAjrIeDL/HG0I//CCP5bVksUBN+ccIbo yH3yjktm8fy0gEp7fmM41lTruEiL3VQ= -----END CERTIFICATE-----Generated at Thu May 2 17:33:36 2024 by rpki-client on console-ams.rpki-client.org