$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/a8f35c59-b971-3d84-a662-b03a19638ac2.roa File: a8f35c59-b971-3d84-a662-b03a19638ac2.roa (raw, json) Hash identifier: Pyeq9tLMy/ElfoIX/rw6jmBj5NwHoXmhJAMNXJcwiug= Subject key identifier: 5B:08:D5:1A:95:47:9E:68:DF:7B:04:01:2F:FA:64:56:5D:22:2E:61 Certificate issuer: /CN=cadf002a-d081-4e51-89c4-f7121259516d Certificate serial: 010D0C9F432858454F02C3D63C8C9B6E8D546180 Authority key identifier: BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/a8f35c59-b971-3d84-a662-b03a19638ac2.roa Signing time: Sun 24 Mar 2024 01:00:24 +0000 ROA not before: Sun 24 Mar 2024 01:00:24 +0000 ROA not after: Sat 22 Jun 2024 01:00:24 +0000 asID: 14877 IP address blocks: 166.66.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:4f:02:c3:d6:3c:8c:9b:6e:8d:54:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cadf002a-d081-4e51-89c4-f7121259516d Validity Not Before: Mar 24 01:00:24 2024 GMT Not After : Jun 22 01:00:24 2024 GMT Subject: CN=dca4e474-3ae3-4931-9d9d-d3a36f521172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:01:1b:39:0d:59:f9:02:d9:bf:65:74:d5:c2: 67:ec:e3:10:74:55:87:7d:05:25:15:ce:f1:19:2b: d1:7e:02:d6:7e:7b:fd:9b:46:b3:25:ea:3b:20:ac: 32:ae:e1:7b:3d:37:cd:9a:21:1a:2c:8e:25:43:6e: 32:35:35:57:e4:51:8a:f3:c1:14:4d:d5:db:fa:8d: 86:c7:8a:f3:3d:ba:ea:4a:37:69:94:87:ad:37:37: ff:2a:f3:f1:b1:40:f4:de:03:f5:6c:4a:84:25:f5: 6a:af:b5:fc:b1:c8:4e:6c:dc:54:83:83:44:ff:15: 55:bb:31:b2:64:18:33:ca:60:85:c5:c7:ba:9b:43: 86:af:c7:a6:ba:3a:15:44:14:c9:40:26:78:9a:08: 54:72:57:b2:eb:03:65:dc:f5:cd:e1:bc:87:56:69: 9f:59:9c:50:74:da:9b:e5:df:32:e3:d6:a7:76:d0: f1:06:1e:5e:f9:90:77:c0:5d:0a:f7:64:4b:a3:b1: 5d:5c:fa:25:6f:46:95:f5:df:eb:da:33:6b:68:fb: 03:29:8b:b7:66:a8:12:b5:ab:87:d3:48:3f:a8:7b: 99:cf:3c:73:13:db:9e:12:b7:b4:46:ec:5c:5d:71: 98:6b:09:39:b5:3e:7f:91:b4:28:bd:7c:ba:8e:d4: e7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:08:D5:1A:95:47:9E:68:DF:7B:04:01:2F:FA:64:56:5D:22:2E:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/a8f35c59-b971-3d84-a662-b03a19638ac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl X509v3 Authority Key Identifier: keyid:BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer sbgp-ipAddrBlock: critical IPv4: 166.66.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:c2:5c:5c:9b:c1:78:ab:9c:4b:64:69:3b:f7:aa:22:93:65: 46:8a:25:72:4c:04:57:ac:d9:0a:9c:d5:53:f1:94:f7:49:cb: cd:28:aa:b3:8f:25:d3:5f:7a:e7:51:9e:6c:3c:bb:3e:aa:59: f2:62:d5:73:3b:6c:d8:53:67:d2:16:b9:57:ae:99:45:3b:0a: 30:d9:01:4a:ae:44:99:69:5d:86:07:32:06:33:21:29:4b:96: e5:37:e3:d4:31:a9:06:30:a1:f7:56:18:62:cd:18:09:d1:ec: 2d:ad:e1:65:06:80:88:dc:a8:66:14:bd:de:c0:69:26:c5:2f: 34:40:16:60:19:b1:6c:fd:a1:3e:64:11:e0:79:3b:33:a2:38: 03:6e:ac:2f:44:f5:da:c4:c8:6b:dc:36:52:26:99:d8:7f:2d: 16:13:10:b3:b3:a1:ae:94:33:3e:45:0f:70:ca:f9:8e:3b:bd: 2d:e3:13:98:b3:23:c7:8a:fb:e1:35:04:a5:e4:37:1a:71:d2: 4d:af:4d:4c:43:96:d5:21:d0:cf:d3:cb:ce:ae:b6:56:99:02: 10:57:af:18:41:e6:54:94:c1:39:a2:11:9c:90:4c:42:08:c5: 9d:f5:7e:64:27:f2:40:7a:2b:91:0a:b2:8c:94:99:51:9b:07: 7f:f4:8d:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVPAsPWPIybbo1UYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FkZjAwMmEtZDA4MS00ZTUxLTg5YzQtZjcxMjEyNTk1 MTZkMB4XDTI0MDMyNDAxMDAyNFoXDTI0MDYyMjAxMDAyNFowLzEtMCsGA1UEAxMk ZGNhNGU0NzQtM2FlMy00OTMxLTlkOWQtZDNhMzZmNTIxMTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQEbOQ1Z+QLZv2V01cJn7OMQdFWHfQUlFc7x GSvRfgLWfnv9m0azJeo7IKwyruF7PTfNmiEaLI4lQ24yNTVX5FGK88EUTdXb+o2G x4rzPbrqSjdplIetNzf/KvPxsUD03gP1bEqEJfVqr7X8schObNxUg4NE/xVVuzGy ZBgzymCFxce6m0OGr8emujoVRBTJQCZ4mghUcley6wNl3PXN4byHVmmfWZxQdNqb 5d8y49andtDxBh5e+ZB3wF0K92RLo7FdXPolb0aV9d/r2jNraPsDKYu3ZqgStauH 00g/qHuZzzxzE9ueEre0RuxcXXGYawk5tT5/kbQovXy6jtTnNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsI1RqVR55o33sEAS/6ZFZdIi5hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRm MDAyYS1kMDgxLTRlNTEtODljNC1mNzEyMTI1OTUxNmQvYThmMzVjNTktYjk3MS0z ZDg0LWE2NjItYjAzYTE5NjM4YWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2FkZjAwMmEtZDA4MS00ZTUxLTg5 YzQtZjcxMjEyNTk1MTZkL2NhZGYwMDJhLWQwODEtNGU1MS04OWM0LWY3MTIxMjU5 NTE2ZC5jcmwwHwYDVR0jBBgwFoAUukhTra5FpaDtmUiUa8Bn0qNDHa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRmMDAyYS1kMDgxLTRlNTEtODljNC1mNzEy MTI1OTUxNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApkLKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzCXFybwXirnEtkaTv3qiKTZUaKJXJMBFes2Qqc1VPxlPdJy80oqrOP JdNfeudRnmw8uz6qWfJi1XM7bNhTZ9IWuVeumUU7CjDZAUquRJlpXYYHMgYzISlL luU349QxqQYwofdWGGLNGAnR7C2t4WUGgIjcqGYUvd7AaSbFLzRAFmAZsWz9oT5k EeB5OzOiOANurC9E9drEyGvcNlImmdh/LRYTELOzoa6UMz5FD3DK+Y47vS3jE5iz I8eK++E1BKXkNxpx0k2vTUxDltUh0M/Ty86utlaZAhBXrxhB5lSUwTmiEZyQTEII xZ31fmQn8kB6K5EKsoyUmVGbB3/0jZM= -----END CERTIFICATE-----Generated at Sun May 19 20:55:09 2024 by rpki-client on console-ams.rpki-client.org