$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/970f83c3-3c6a-3774-9e07-c3406c859184.roa File: 970f83c3-3c6a-3774-9e07-c3406c859184.roa (raw, json) Hash identifier: 88yTS2Izgu4XcID1n30LeMziORj1kVsghRBJbZ1d9B8= Subject key identifier: A8:69:99:31:6D:27:6D:1A:DE:7B:61:21:7D:07:B1:5F:5B:4D:51:A2 Certificate issuer: /CN=fd61a214-d867-444e-b2f4-ca291d4c4419 Certificate serial: 010D0C9F43285845DBFE6C7FBCCB923D05FD1D00 Authority key identifier: 92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/970f83c3-3c6a-3774-9e07-c3406c859184.roa Signing time: Mon 13 May 2024 13:00:34 +0000 ROA not before: Mon 13 May 2024 13:00:34 +0000 ROA not after: Sun 11 Aug 2024 13:00:34 +0000 asID: 151338 IP address blocks: 207.167.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:db:fe:6c:7f:bc:cb:92:3d:05:fd:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd61a214-d867-444e-b2f4-ca291d4c4419 Validity Not Before: May 13 13:00:34 2024 GMT Not After : Aug 11 13:00:34 2024 GMT Subject: CN=3114f528-8d57-4f05-9ed8-7b6ac43dc205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b7:75:a4:09:e9:a9:e3:42:ac:42:0b:85:ea: 78:39:db:19:cf:88:17:c9:ae:cf:93:64:05:84:cf: ed:bc:09:0a:04:0e:5c:90:5c:a9:c2:c5:00:ac:e7: c7:1c:79:bd:65:ad:44:9d:c3:fd:54:7d:2e:f1:9d: 81:0b:b9:50:d3:af:47:fa:5d:d9:5d:f8:11:9b:ed: 00:be:c7:fe:bc:5c:2c:e7:da:ee:f6:19:09:8d:aa: ca:46:79:d6:7e:88:e8:0f:82:dd:0e:9e:bc:36:3d: 70:ff:63:cd:c8:9c:6c:f0:8f:35:54:3b:2a:a3:7b: 78:f7:ce:f0:65:42:c0:fd:2e:d9:f3:56:8c:6e:19: 52:cd:9d:a7:32:55:d3:1f:61:06:66:2c:3d:f0:f4: 42:13:0f:f8:c0:b9:74:71:4b:f0:bc:80:7e:bc:78: 14:dd:0f:78:b4:30:ae:ae:da:28:12:cf:a4:cf:3e: 3d:6d:7a:86:1c:82:09:40:4f:28:ec:68:e3:c8:78: ed:4b:d7:02:4c:5e:a4:1a:88:6e:1b:36:99:2d:b9: 13:97:8d:59:8f:46:5c:2d:19:5d:98:78:b6:6b:80: 58:e3:33:3d:b2:99:0b:76:7a:89:02:91:2e:09:68: de:ec:8d:6a:4a:bc:3e:ad:75:91:00:f5:e6:09:5a: 84:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:69:99:31:6D:27:6D:1A:DE:7B:61:21:7D:07:B1:5F:5B:4D:51:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/970f83c3-3c6a-3774-9e07-c3406c859184.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl X509v3 Authority Key Identifier: keyid:92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer sbgp-ipAddrBlock: critical IPv4: 207.167.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:33:0f:37:8e:e5:50:23:fd:02:75:24:5e:b4:02:7a:e0:dd: 88:55:70:0b:83:14:8c:37:48:dd:55:f1:8f:1b:ef:5c:c0:dc: 85:10:06:5e:2e:0e:df:5f:a3:14:05:e2:a9:18:ee:74:44:83: 3c:f6:07:f0:8c:a9:0e:39:98:d4:0c:7d:92:f7:bc:fb:ca:f9: ae:67:7a:bc:44:7f:2d:1c:25:71:3f:1e:5c:18:f4:1a:8a:eb: 35:54:cd:bc:19:6e:c2:97:51:4a:b3:da:a5:61:8c:e9:86:4d: 75:a2:67:48:06:35:55:64:78:f9:b7:6a:10:3e:c4:a2:9d:0f: 88:45:3a:c7:e6:4c:4d:84:d7:a8:10:2d:cd:72:cf:07:1f:6a: 34:3f:b4:50:53:26:e1:43:62:04:ae:d8:92:df:e8:26:da:ae: 0c:d1:16:2a:16:4a:be:d7:06:1c:55:4f:4a:ce:c3:01:a0:ea: 22:a5:1b:72:d7:29:dd:52:c2:5d:2e:a5:d8:cd:c3:f7:fb:39: 4c:a1:ee:34:31:16:d2:2c:71:ff:23:fc:bd:bb:73:39:f5:69: 54:59:49:7e:dc:f7:22:56:ea:1e:43:a2:71:a3:af:55:d4:21: 5d:0e:24:44:0d:97:4b:e4:cd:be:eb:bf:f1:e2:c1:75:7d:c6: 84:5b:71:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXb/mx/vMuSPQX9HQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ2MWEyMTQtZDg2Ny00NDRlLWIyZjQtY2EyOTFkNGM0 NDE5MB4XDTI0MDUxMzEzMDAzNFoXDTI0MDgxMTEzMDAzNFowLzEtMCsGA1UEAxMk MzExNGY1MjgtOGQ1Ny00ZjA1LTllZDgtN2I2YWM0M2RjMjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrd1pAnpqeNCrEILhep4OdsZz4gXya7Pk2QF hM/tvAkKBA5ckFypwsUArOfHHHm9Za1EncP9VH0u8Z2BC7lQ069H+l3ZXfgRm+0A vsf+vFws59ru9hkJjarKRnnWfojoD4LdDp68Nj1w/2PNyJxs8I81VDsqo3t4987w ZULA/S7Z81aMbhlSzZ2nMlXTH2EGZiw98PRCEw/4wLl0cUvwvIB+vHgU3Q94tDCu rtooEs+kzz49bXqGHIIJQE8o7GjjyHjtS9cCTF6kGohuGzaZLbkTl41Zj0ZcLRld mHi2a4BY4zM9spkLdnqJApEuCWje7I1qSrw+rXWRAPXmCVqE7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhpmTFtJ20a3nthIX0HsV9bTVGiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZDYx YTIxNC1kODY3LTQ0NGUtYjJmNC1jYTI5MWQ0YzQ0MTkvOTcwZjgzYzMtM2M2YS0z Nzc0LTllMDctYzM0MDZjODU5MTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmQ2MWEyMTQtZDg2Ny00NDRlLWIy ZjQtY2EyOTFkNGM0NDE5L2ZkNjFhMjE0LWQ4NjctNDQ0ZS1iMmY0LWNhMjkxZDRj NDQxOS5jcmwwHwYDVR0jBBgwFoAUksvOm7LOK/AGOs800+OjDwhvc1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZDYxYTIxNC1kODY3LTQ0NGUtYjJmNC1jYTI5 MWQ0YzQ0MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz6dWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgzDzeO5VAj/QJ1JF60Anrg3YhVcAuDFIw3SN1V8Y8b71zA3IUQBl4u Dt9foxQF4qkY7nREgzz2B/CMqQ45mNQMfZL3vPvK+a5nerxEfy0cJXE/HlwY9BqK 6zVUzbwZbsKXUUqz2qVhjOmGTXWiZ0gGNVVkePm3ahA+xKKdD4hFOsfmTE2E16gQ Lc1yzwcfajQ/tFBTJuFDYgSu2JLf6CbargzRFioWSr7XBhxVT0rOwwGg6iKlG3LX Kd1Swl0updjNw/f7OUyh7jQxFtIscf8j/L27czn1aVRZSX7c9yJW6h5DonGjr1XU IV0OJEQNl0vkzb7rv/HiwXV9xoRbcX0= -----END CERTIFICATE-----Generated at Sat May 18 01:41:10 2024 by rpki-client on console-fra.rpki-client.org