$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/59042824-a974-3473-be58-532204e52132.roa File: 59042824-a974-3473-be58-532204e52132.roa (raw, json) Hash identifier: dXB/njN7pCIZHRUuDfwCilHKZwA9YwgPgR+SErMM4Pc= Subject key identifier: A7:13:BB:54:88:CA:71:EB:A9:F1:2F:86:53:F9:11:31:D9:47:49:07 Certificate issuer: /CN=60b944fb-40a6-4574-a25b-dd101d7b668d Certificate serial: 010D0C9F432858457082FE9BC2F5F94E14BFD9C0 Authority key identifier: 7D:A3:CC:7C:7B:D7:DD:68:2A:7F:4B:57:8D:7B:AC:45:0B:11:A0:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/59042824-a974-3473-be58-532204e52132.roa Signing time: Fri 05 Apr 2024 01:00:28 +0000 ROA not before: Fri 05 Apr 2024 01:00:28 +0000 ROA not after: Thu 04 Jul 2024 01:00:28 +0000 asID: 46445 IP address blocks: 192.40.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/60b944fb-40a6-4574-a25b-dd101d7b668d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/60b944fb-40a6-4574-a25b-dd101d7b668d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:70:82:fe:9b:c2:f5:f9:4e:14:bf:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60b944fb-40a6-4574-a25b-dd101d7b668d Validity Not Before: Apr 5 01:00:28 2024 GMT Not After : Jul 4 01:00:28 2024 GMT Subject: CN=64764a32-c798-4058-85a2-8b56b590d39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a0:b9:e2:09:8e:f9:98:9c:27:74:2c:14:f0: 9f:31:da:35:12:8a:65:31:c2:bc:b5:f9:41:7b:97: 6f:c8:3f:10:7b:66:5d:36:1b:7c:eb:49:a9:4d:16: 82:fa:ee:f4:54:54:7e:8b:17:96:33:50:50:78:d1: 3c:e0:fb:a4:cf:b0:74:11:94:b3:0e:58:b9:83:54: 47:cb:b9:b8:da:33:bf:0b:25:fe:13:8c:2a:2e:1a: 1d:d2:22:d2:d3:f6:7d:f5:d9:8a:d6:b9:24:51:8b: b1:f2:53:05:bf:e2:d4:2e:69:da:79:a8:d1:3d:2b: 8d:3d:14:0d:70:d6:4f:9c:39:f1:a7:4b:cd:5a:c9: 77:f5:be:ff:8a:7f:87:25:49:1a:69:17:6f:54:c6: 7a:a9:67:55:a4:60:bc:76:89:62:80:57:14:ac:e5: cf:cc:85:09:ac:2e:cb:31:03:b4:99:c4:1a:8a:bf: b4:31:dd:6e:b2:23:07:69:74:02:82:72:b9:84:9c: a4:66:fb:70:b3:e2:d2:77:27:71:04:35:79:87:85: 90:e2:5e:f4:9a:09:f9:bb:09:b1:74:e9:2a:ef:b7: ed:87:96:aa:86:98:e3:7b:a1:73:f2:df:b2:ed:89: 75:64:97:3a:d2:20:4e:56:53:4c:69:c8:69:9b:a7: 29:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:13:BB:54:88:CA:71:EB:A9:F1:2F:86:53:F9:11:31:D9:47:49:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/59042824-a974-3473-be58-532204e52132.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/60b944fb-40a6-4574-a25b-dd101d7b668d.crl X509v3 Authority Key Identifier: keyid:7D:A3:CC:7C:7B:D7:DD:68:2A:7F:4B:57:8D:7B:AC:45:0B:11:A0:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d.cer sbgp-ipAddrBlock: critical IPv4: 192.40.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:c6:f5:85:d1:0d:b1:93:de:ff:e3:05:22:e9:8f:a0:dd:40: 59:aa:74:cf:95:8a:db:20:e5:e5:26:fb:c4:1b:2d:45:0e:22: e5:90:52:11:18:cd:bc:31:0d:e7:de:db:a1:a2:bd:62:64:d1: 98:e9:51:9d:d6:56:23:a2:0a:49:85:24:d5:4c:bb:1c:87:ab: 68:02:cc:d3:82:4f:f3:53:3f:0d:d0:7b:8f:15:5c:ed:4a:8f: 32:c5:da:66:98:f6:87:3e:16:8f:c2:56:2d:06:34:91:6a:be: 6e:6d:c8:1b:40:41:b8:5c:ed:b9:6f:4c:40:9b:80:64:4b:00: e7:74:60:d0:f3:bd:4c:3e:38:75:86:f2:d6:98:1d:36:1c:e3: fa:ed:e8:67:fb:bc:23:b7:3f:b1:c8:19:f5:fc:90:cd:4a:1b: 0c:ee:7a:48:57:46:ba:2c:bd:ad:3f:c0:39:02:23:25:33:35: 54:a5:ba:7b:6b:82:a5:92:06:62:86:eb:2d:f7:ba:2e:86:1b: a7:d0:26:28:f2:98:64:14:98:ae:6b:8d:80:40:84:89:6f:49: 79:ba:af:16:96:57:ad:5f:8f:c2:bc:3a:42:71:6c:8a:ad:95: 82:aa:91:73:fb:5b:91:3a:f5:78:e5:4c:99:ad:9e:b5:0d:3f: f4:03:6b:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVwgv6bwvX5ThS/2cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBiOTQ0ZmItNDBhNi00NTc0LWEyNWItZGQxMDFkN2I2 NjhkMB4XDTI0MDQwNTAxMDAyOFoXDTI0MDcwNDAxMDAyOFowLzEtMCsGA1UEAxMk NjQ3NjRhMzItYzc5OC00MDU4LTg1YTItOGI1NmI1OTBkMzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqC54gmO+ZicJ3QsFPCfMdo1EoplMcK8tflB e5dvyD8Qe2ZdNht860mpTRaC+u70VFR+ixeWM1BQeNE84Pukz7B0EZSzDli5g1RH y7m42jO/CyX+E4wqLhod0iLS0/Z99dmK1rkkUYux8lMFv+LULmnaeajRPSuNPRQN cNZPnDnxp0vNWsl39b7/in+HJUkaaRdvVMZ6qWdVpGC8doligFcUrOXPzIUJrC7L MQO0mcQair+0Md1usiMHaXQCgnK5hJykZvtws+LSdydxBDV5h4WQ4l70mgn5uwmx dOkq77fth5aqhpjje6Fz8t+y7Yl1ZJc60iBOVlNMachpm6cpYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcTu1SIynHrqfEvhlP5ETHZR0kHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82MGI5 NDRmYi00MGE2LTQ1NzQtYTI1Yi1kZDEwMWQ3YjY2OGQvNTkwNDI4MjQtYTk3NC0z NDczLWJlNTgtNTMyMjA0ZTUyMTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjBiOTQ0ZmItNDBhNi00NTc0LWEy NWItZGQxMDFkN2I2NjhkLzYwYjk0NGZiLTQwYTYtNDU3NC1hMjViLWRkMTAxZDdi NjY4ZC5jcmwwHwYDVR0jBBgwFoAUfaPMfHvX3Wgqf0tXjXusRQsRoPswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82MGI5NDRmYi00MGE2LTQ1NzQtYTI1Yi1kZDEw MWQ3YjY2OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwCh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANPG9YXRDbGT3v/jBSLpj6DdQFmqdM+Vitsg5eUm+8QbLUUOIuWQUhEY zbwxDefe26GivWJk0ZjpUZ3WViOiCkmFJNVMuxyHq2gCzNOCT/NTPw3Qe48VXO1K jzLF2maY9oc+Fo/CVi0GNJFqvm5tyBtAQbhc7blvTECbgGRLAOd0YNDzvUw+OHWG 8taYHTYc4/rt6Gf7vCO3P7HIGfX8kM1KGwzuekhXRrosva0/wDkCIyUzNVSluntr gqWSBmKG6y33ui6GG6fQJijymGQUmK5rjYBAhIlvSXm6rxaWV61fj8K8OkJxbIqt lYKqkXP7W5E69XjlTJmtnrUNP/QDa+c= -----END CERTIFICATE-----Generated at Tue May 21 07:18:57 2024 by rpki-client on console-ams.rpki-client.org