$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/99ee8cf6-7047-378e-91c7-a5d27665d772.roa File: 99ee8cf6-7047-378e-91c7-a5d27665d772.roa (raw, json) Hash identifier: 6DH4/WEnWolb6egZilicDGy8tRAFVSRwL94MuOKeHmg= Subject key identifier: E7:57:0D:81:F1:85:7C:75:CE:82:AE:4D:76:80:93:75:B2:B8:7A:0B Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584521CA791BE23B5F24B0683B67 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/99ee8cf6-7047-378e-91c7-a5d27665d772.roa Signing time: Thu 07 Mar 2024 20:15:42 +0000 ROA not before: Thu 07 Mar 2024 20:15:42 +0000 ROA not after: Wed 05 Jun 2024 19:15:42 +0000 asID: 1239 IP address blocks: 64.20.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:21:ca:79:1b:e2:3b:5f:24:b0:68:3b:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Mar 7 20:15:42 2024 GMT Not After : Jun 5 19:15:42 2024 GMT Subject: CN=08cb250e-3b00-4b41-ba92-a94c0a808512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:68:60:3d:28:7f:42:78:f3:73:33:05:53:ea: f6:68:3e:c7:4b:06:72:48:c9:ab:19:fa:6f:61:56: 49:04:14:9f:50:09:c0:2f:ca:a7:02:37:67:5d:a6: 8f:98:54:64:cc:3a:4b:a5:17:dc:d4:37:eb:1b:f3: 85:3a:a8:79:11:e2:99:e2:89:4f:14:11:95:3a:6f: 69:c0:f2:2e:53:0e:20:91:95:9b:b8:41:26:b6:93: d8:ed:0d:32:b3:2e:e5:f5:ca:cf:88:47:51:8f:99: 18:51:49:c0:fa:f5:e1:bf:b3:13:80:3c:b3:84:2e: 5f:ce:34:cc:37:2b:d2:d2:62:db:54:1c:b2:43:45: e8:ab:79:4a:e0:5d:05:e8:cd:3e:df:f2:1b:71:71: 03:d2:c6:80:94:8e:31:04:4b:65:5c:ec:1b:c9:99: 18:fc:c2:21:96:40:af:56:14:1b:1b:26:08:2b:7e: d5:40:e7:57:0d:13:2d:76:af:ea:8f:e1:05:b5:1c: 23:0a:51:8a:fa:ee:53:c0:bc:34:1e:0b:51:89:0e: 00:ef:80:40:33:26:c0:d6:45:41:41:f1:1d:98:ae: c5:74:ca:d1:1e:5a:76:1b:ea:c1:6d:9e:2e:b6:38: 30:d7:9b:b4:c5:e9:e5:3d:c8:dc:d6:aa:9c:49:18: 9a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:57:0D:81:F1:85:7C:75:CE:82:AE:4D:76:80:93:75:B2:B8:7A:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/99ee8cf6-7047-378e-91c7-a5d27665d772.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 64.20.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:fb:ad:46:9e:31:b5:87:e1:b6:5f:04:1b:dc:c8:5a:59:ac: e9:d2:b6:07:d6:0f:9a:4f:5e:6d:9e:4b:39:3d:c8:25:e1:c2: e2:44:c8:19:a2:4e:06:34:dc:ef:91:96:de:70:e8:43:80:1e: 15:40:81:6d:ca:67:c3:71:32:d7:5a:f7:dd:59:39:b6:0b:05: 4e:e3:ba:c4:2b:38:35:28:c8:22:95:24:f9:f9:e4:33:6a:61: 81:bf:54:64:d9:b0:8d:9a:4c:0c:39:57:55:af:1a:31:72:dc: bb:d9:be:88:ce:52:a5:04:bb:9b:d2:84:15:0b:dc:5a:95:6b: 7c:06:de:ef:2f:69:40:82:84:6c:78:ec:1c:0c:a4:84:1c:00: 42:5d:fa:c0:b5:ed:1d:d1:de:7f:b1:51:18:11:42:1f:3d:57: ef:bd:d6:95:69:3b:7e:e3:9c:5e:da:a5:e9:a7:63:c0:c1:43: be:78:5b:6b:78:a3:ce:53:cb:42:2b:d7:74:33:51:56:fd:5a: b0:e5:cd:71:da:66:7c:af:2d:e0:2a:0f:d9:da:67:9e:f2:3c: d2:f6:ec:f3:bb:95:e7:de:87:d8:37:84:1f:0a:b9:9d:dc:85: e6:93:5c:1c:2c:31:bf:25:f5:a0:11:c9:f9:6f:d7:12:45:cf: 2b:46:a4:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUhynkb4jtfJLBoO2cwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI0MDMwNzIwMTU0MloXDTI0MDYwNTE5MTU0MlowLzEtMCsGA1UEAxMk MDhjYjI1MGUtM2IwMC00YjQxLWJhOTItYTk0YzBhODA4NTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2hgPSh/QnjzczMFU+r2aD7HSwZySMmrGfpv YVZJBBSfUAnAL8qnAjdnXaaPmFRkzDpLpRfc1DfrG/OFOqh5EeKZ4olPFBGVOm9p wPIuUw4gkZWbuEEmtpPY7Q0ysy7l9crPiEdRj5kYUUnA+vXhv7MTgDyzhC5fzjTM NyvS0mLbVByyQ0Xoq3lK4F0F6M0+3/IbcXED0saAlI4xBEtlXOwbyZkY/MIhlkCv VhQbGyYIK37VQOdXDRMtdq/qj+EFtRwjClGK+u5TwLw0HgtRiQ4A74BAMybA1kVB QfEdmK7FdMrRHlp2G+rBbZ4utjgw15u0xenlPcjc1qqcSRiaIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdXDYHxhXx1zoKuTXaAk3WyuHoLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvOTllZThjZjYtNzA0Ny0z NzhlLTkxYzctYTVkMjc2NjVkNzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBTSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADH7rUaeMbWH4bZfBBvcyFpZrOnStgfWD5pPXm2eSzk9yCXhwuJEyBmi TgY03O+Rlt5w6EOAHhVAgW3KZ8NxMtda991ZObYLBU7jusQrODUoyCKVJPn55DNq YYG/VGTZsI2aTAw5V1WvGjFy3LvZvojOUqUEu5vShBUL3FqVa3wG3u8vaUCChGx4 7BwMpIQcAEJd+sC17R3R3n+xURgRQh89V++91pVpO37jnF7apemnY8DBQ754W2t4 o85Ty0Ir13QzUVb9WrDlzXHaZnyvLeAqD9naZ57yPNL27PO7lefeh9g3hB8KuZ3c heaTXBwsMb8l9aARyflv1xJFzytGpP0= -----END CERTIFICATE-----Generated at Thu May 9 15:21:22 2024 by rpki-client on console-ams.rpki-client.org