$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/4c65c8f7-0c55-3b24-a874-c6a45b727e98.roa File: 4c65c8f7-0c55-3b24-a874-c6a45b727e98.roa (raw, json) Hash identifier: zgtEvoWWts+Ybtxmjw6k1XdVnQeO/CD7fshx6RcFY4s= Subject key identifier: F0:E8:84:AF:E1:49:86:E0:54:D6:CE:03:E8:00:43:4A:CA:8B:5D:E0 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584521B9239F3FCF2438C9691500 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/4c65c8f7-0c55-3b24-a874-c6a45b727e98.roa Signing time: Thu 07 Mar 2024 19:40:47 +0000 ROA not before: Thu 07 Mar 2024 19:40:47 +0000 ROA not after: Wed 05 Jun 2024 18:40:47 +0000 asID: 174 IP address blocks: 64.20.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:21:b9:23:9f:3f:cf:24:38:c9:69:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Mar 7 19:40:47 2024 GMT Not After : Jun 5 18:40:47 2024 GMT Subject: CN=17135700-8b53-466e-85d0-87a4a78d16b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:77:e3:96:ae:56:3c:21:16:af:e3:95:29:6c: 17:d1:ca:ea:bb:89:41:cd:a6:7a:da:08:d0:8e:06: c1:9e:60:4a:6f:8a:d4:10:e3:b9:5c:1a:19:63:43: 2e:84:87:06:ac:98:9d:e2:23:ed:6f:fa:fb:b3:c1: ee:02:c2:ef:ca:f3:70:5c:1c:ac:0a:cf:3b:2e:8d: 50:10:60:70:c4:d8:99:b5:88:5f:ac:25:33:b0:61: bb:ec:ca:91:45:b9:0b:76:69:f2:ef:5c:06:20:a3: ea:f2:db:33:56:51:37:8e:fa:31:69:7b:e9:df:32: 90:7b:0e:79:46:2a:f3:11:b5:1b:85:12:d9:59:c5: 8e:32:b1:25:82:03:ee:d1:cf:44:66:5a:ec:f4:cb: 7f:d1:d8:5b:2b:c7:be:02:82:11:22:b5:42:27:76: 98:47:b1:ab:de:c5:47:e2:e5:fe:e7:9f:14:21:33: 92:d9:60:eb:1c:41:42:2f:58:e6:de:45:9d:25:f2: 70:6c:bd:18:6f:1e:4c:8e:ea:7e:05:c8:1f:3b:91: da:82:62:3f:04:08:2f:f3:c0:71:41:0d:20:25:b8: 3d:71:dd:0a:55:cb:68:9a:e9:d4:03:aa:43:c2:f3: 4c:31:39:8b:1a:69:e5:23:9a:4f:b3:cb:ff:0c:4d: 88:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E8:84:AF:E1:49:86:E0:54:D6:CE:03:E8:00:43:4A:CA:8B:5D:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/4c65c8f7-0c55-3b24-a874-c6a45b727e98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 64.20.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:7b:53:ee:8f:54:01:ca:73:1e:24:14:96:e7:92:61:bb:3c: c5:92:00:18:6c:47:79:a0:78:41:47:80:53:eb:d3:49:bb:a9: 15:45:65:ac:97:b4:70:7f:e7:2a:a1:9f:26:d1:da:3d:19:9e: 81:fc:22:31:da:f1:3a:d7:15:82:09:b8:27:2b:62:13:67:66: bf:c7:e5:dc:30:3d:7e:03:6a:27:3f:61:6a:43:fd:c1:60:2b: da:49:4c:66:1a:9d:51:ec:ab:99:6b:35:6b:3c:fd:50:a0:cf: 98:6b:4d:e2:59:13:a0:e3:1f:a3:a9:6e:ca:b2:e1:8e:0b:dc: 2f:81:b5:84:83:37:83:44:c3:69:17:17:dd:c3:d5:08:71:cd: bc:97:03:53:f8:13:fb:d7:c1:c9:6a:73:05:ec:68:42:7d:eb: 9f:6a:c7:e3:29:2a:9a:2a:46:ae:fe:a6:16:67:9e:77:75:a3: 4e:6b:bd:31:b0:4f:7a:c5:ce:d6:ba:e7:8a:14:9f:b1:18:4f: 50:94:2c:dd:f3:b8:00:10:93:1b:f3:08:80:67:56:37:25:c1: f7:d5:b1:eb:10:d1:00:0c:d6:75:d2:9c:10:9f:bf:d5:08:5d: 70:4d:5d:33:29:e4:0c:d5:49:cc:2e:fb:0a:b9:d5:c1:41:1a: 21:f3:c7:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUhuSOfP88kOMlpFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI0MDMwNzE5NDA0N1oXDTI0MDYwNTE4NDA0N1owLzEtMCsGA1UEAxMk MTcxMzU3MDAtOGI1My00NjZlLTg1ZDAtODdhNGE3OGQxNmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3fjlq5WPCEWr+OVKWwX0crqu4lBzaZ62gjQ jgbBnmBKb4rUEOO5XBoZY0MuhIcGrJid4iPtb/r7s8HuAsLvyvNwXBysCs87Lo1Q EGBwxNiZtYhfrCUzsGG77MqRRbkLdmny71wGIKPq8tszVlE3jvoxaXvp3zKQew55 RirzEbUbhRLZWcWOMrElggPu0c9EZlrs9Mt/0dhbK8e+AoIRIrVCJ3aYR7Gr3sVH 4uX+558UITOS2WDrHEFCL1jm3kWdJfJwbL0Ybx5Mjup+BcgfO5HagmI/BAgv88Bx QQ0gJbg9cd0KVctomunUA6pDwvNMMTmLGmnlI5pPs8v/DE2INQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDohK/hSYbgVNbOA+gAQ0rKi13gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvNGM2NWM4ZjctMGM1NS0z YjI0LWE4NzQtYzZhNDViNzI3ZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBTSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIB7U+6PVAHKcx4kFJbnkmG7PMWSABhsR3mgeEFHgFPr00m7qRVFZayX tHB/5yqhnybR2j0ZnoH8IjHa8TrXFYIJuCcrYhNnZr/H5dwwPX4Daic/YWpD/cFg K9pJTGYanVHsq5lrNWs8/VCgz5hrTeJZE6DjH6Opbsqy4Y4L3C+BtYSDN4NEw2kX F93D1QhxzbyXA1P4E/vXwclqcwXsaEJ9659qx+MpKpoqRq7+phZnnnd1o05rvTGw T3rFzta654oUn7EYT1CULN3zuAAQkxvzCIBnVjclwffVsesQ0QAM1nXSnBCfv9UI XXBNXTMp5AzVScwu+wq51cFBGiHzx5Y= -----END CERTIFICATE-----Generated at Sat Apr 27 15:31:10 2024 by rpki-client on console-ams.rpki-client.org