$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/cba884a3-9e62-3f3b-91c7-48c3a9a5d175.roa File: cba884a3-9e62-3f3b-91c7-48c3a9a5d175.roa (raw, json) Hash identifier: n4tRG+8Ik176lSCDf0TxcpB6I5DgBb7hv9kpUlnNiis= Subject key identifier: 75:B5:77:BB:DE:A1:61:2D:1A:03:73:1F:31:9B:57:C3:64:77:44:67 Certificate issuer: /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d Certificate serial: 010D0C9F432858450EEAD729E0B6E11FB415B880 Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/cba884a3-9e62-3f3b-91c7-48c3a9a5d175.roa Signing time: Fri 01 Mar 2024 02:00:27 +0000 ROA not before: Fri 01 Mar 2024 02:00:27 +0000 ROA not after: Thu 30 May 2024 01:00:27 +0000 asID: 14618 IP address blocks: 64.95.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:0e:ea:d7:29:e0:b6:e1:1f:b4:15:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d Validity Not Before: Mar 1 02:00:27 2024 GMT Not After : May 30 01:00:27 2024 GMT Subject: CN=594d1370-7c36-42c0-9465-609208c0c8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2c:85:4b:20:bb:b4:d8:53:8d:a1:8e:4b:c3: ec:57:58:02:be:c6:d2:8f:87:27:d9:62:40:22:2c: 23:4b:7f:f9:63:1b:56:eb:ec:f5:e6:d0:e9:c3:9a: 77:1e:32:af:99:81:2a:c0:17:80:af:29:a4:64:b7: e2:01:ad:9e:1e:6c:7b:aa:0d:0f:7a:bb:a8:1c:fa: a7:60:ca:0c:92:8a:2e:c4:28:6c:73:96:8c:30:15: 3b:dc:fa:7e:88:e6:4a:6f:b2:e7:87:38:07:01:4b: fa:1b:f6:b7:45:00:be:0a:43:fe:4d:da:95:af:07: bd:3d:de:29:27:69:62:aa:19:fa:15:73:fd:02:4c: 5b:c5:2a:87:9a:aa:cf:3b:67:e8:3f:9a:9d:e6:fb: e7:d1:5b:cd:f7:d2:6b:c4:fd:70:83:ec:05:3e:55: 14:12:cb:ea:f1:e7:56:79:07:c7:50:87:df:23:f0: 6b:fb:7b:f3:39:13:a3:9e:b9:e2:2c:20:bd:26:96: 5e:94:ff:2a:24:ec:a9:63:3d:aa:c5:4a:f5:be:1a: dc:bf:ba:bb:6d:11:65:69:e8:c7:24:31:82:b3:91: 81:35:45:a0:dc:93:8d:33:25:cd:db:26:bd:5b:6f: c4:5d:f2:3c:cc:1a:1c:a3:71:0f:96:7a:82:fa:cc: f7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B5:77:BB:DE:A1:61:2D:1A:03:73:1F:31:9B:57:C3:64:77:44:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/cba884a3-9e62-3f3b-91c7-48c3a9a5d175.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl X509v3 Authority Key Identifier: keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer sbgp-ipAddrBlock: critical IPv4: 64.95.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:37:53:d6:c5:7e:f8:f2:49:4d:73:0c:86:a0:64:78:e0:76: f7:9a:af:8c:09:97:dd:e6:76:9f:b7:da:9c:1c:f1:4a:50:1e: 3e:6c:bd:de:16:63:46:3e:fd:54:13:ca:9a:58:87:37:42:ee: 27:b9:08:7e:89:9b:12:8d:cf:1d:cf:6c:d2:a7:47:06:28:71: 91:ce:f9:a3:e4:2b:a4:a1:a5:b3:fd:ff:5b:83:3e:23:6c:3b: ec:65:b5:2b:27:ee:37:30:80:d8:1f:8a:03:74:92:24:b0:09: 66:99:2d:db:95:6b:89:a5:53:d6:2c:37:71:1f:af:b3:55:f0: a6:9b:19:05:c9:b7:69:83:bf:6c:2b:a0:ae:2f:78:13:93:4c: be:e9:35:7a:58:3e:80:69:6f:5a:4f:08:e5:4b:31:81:17:cb: 5b:37:3a:d0:c7:50:ea:bf:ec:ef:2c:66:fc:28:be:99:19:c8: 8a:17:72:a0:d0:3c:54:b6:47:8b:74:9f:e9:b3:47:fc:24:69: 8d:47:d6:09:c1:b1:c6:5f:4c:0d:7c:14:24:9d:4e:d4:07:ae: d8:a5:9d:ff:22:d0:0b:c5:4f:71:89:46:e8:4a:1f:14:88:6d: c8:ca:77:1f:0d:84:74:a0:76:78:3e:a6:66:ec:43:e5:ca:7d: a9:a6:c1:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUO6tcp4LbhH7QVuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM2MzBmODItMTY5Yy00YjAzLWFkNDItYWE2ZjViNzFk OTFkMB4XDTI0MDMwMTAyMDAyN1oXDTI0MDUzMDAxMDAyN1owLzEtMCsGA1UEAxMk NTk0ZDEzNzAtN2MzNi00MmMwLTk0NjUtNjA5MjA4YzBjOGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCyFSyC7tNhTjaGOS8PsV1gCvsbSj4cn2WJA IiwjS3/5YxtW6+z15tDpw5p3HjKvmYEqwBeArymkZLfiAa2eHmx7qg0PeruoHPqn YMoMkoouxChsc5aMMBU73Pp+iOZKb7LnhzgHAUv6G/a3RQC+CkP+TdqVrwe9Pd4p J2liqhn6FXP9AkxbxSqHmqrPO2foP5qd5vvn0VvN99JrxP1wg+wFPlUUEsvq8edW eQfHUIffI/Br+3vzOROjnrniLCC9JpZelP8qJOypYz2qxUr1vhrcv7q7bRFlaejH JDGCs5GBNUWg3JONMyXN2ya9W2/EXfI8zBoco3EPlnqC+sz3UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHW1d7veoWEtGgNzHzGbV8Nkd0RnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzYz MGY4Mi0xNjljLTRiMDMtYWQ0Mi1hYTZmNWI3MWQ5MWQvY2JhODg0YTMtOWU2Mi0z ZjNiLTkxYzctNDhjM2E5YTVkMTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTM2MzBmODItMTY5Yy00YjAzLWFk NDItYWE2ZjViNzFkOTFkL2EzNjMwZjgyLTE2OWMtNGIwMy1hZDQyLWFhNmY1Yjcx ZDkxZC5jcmwwHwYDVR0jBBgwFoAUjLsSDojg5BDceZoRzF7g6sFADkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzYzMGY4Mi0xNjljLTRiMDMtYWQ0Mi1hYTZm NWI3MWQ5MWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQF/HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGU3U9bFfvjySU1zDIagZHjgdvear4wJl93mdp+32pwc8UpQHj5svd4W Y0Y+/VQTyppYhzdC7ie5CH6JmxKNzx3PbNKnRwYocZHO+aPkK6ShpbP9/1uDPiNs O+xltSsn7jcwgNgfigN0kiSwCWaZLduVa4mlU9YsN3Efr7NV8KabGQXJt2mDv2wr oK4veBOTTL7pNXpYPoBpb1pPCOVLMYEXy1s3OtDHUOq/7O8sZvwovpkZyIoXcqDQ PFS2R4t0n+mzR/wkaY1H1gnBscZfTA18FCSdTtQHrtilnf8i0AvFT3GJRuhKHxSI bcjKdx8NhHSgdng+pmbsQ+XKfammwaA= -----END CERTIFICATE-----Generated at Wed May 1 15:55:41 2024 by rpki-client on console-ams.rpki-client.org