$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa File: cf38211e-a9ed-37ec-9041-432fd370bc59.roa (raw, json) Hash identifier: 0LI5zUf4KOl+U3sBn/pIx8pyXFqPNPhFDmhsYAj2Uk4= Subject key identifier: CB:BC:68:12:75:97:01:62:FD:2C:68:7D:47:9C:81:61:B3:41:0A:65 Certificate issuer: /CN=84bfb9e8-1bae-4540-9cae-b6811ecadff5 Certificate serial: 010D0C9F43285845410D4C6DE0410DC0B1DEA840 Authority key identifier: 33:87:39:DF:1C:AC:F8:79:BB:E8:E9:5D:84:6F:84:56:83:2C:A5:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa Signing time: Tue 19 Mar 2024 01:00:24 +0000 ROA not before: Tue 19 Mar 2024 01:00:24 +0000 ROA not after: Mon 17 Jun 2024 01:00:24 +0000 asID: 398653 IP address blocks: 198.62.160.0/24 maxlen: 24 2602:fbd3::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:41:0d:4c:6d:e0:41:0d:c0:b1:de:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84bfb9e8-1bae-4540-9cae-b6811ecadff5 Validity Not Before: Mar 19 01:00:24 2024 GMT Not After : Jun 17 01:00:24 2024 GMT Subject: CN=d28056ad-5711-4aa8-ae78-a272143ff81f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:39:1c:5e:ad:4f:91:c5:16:9e:35:a3:a2:a0: 18:b5:13:90:c5:e5:f6:5f:02:6d:75:69:f5:1c:c7: 4f:bb:10:49:bf:35:23:88:ad:66:d2:ac:e5:3f:e8: 57:63:d2:01:5f:78:25:dc:5d:18:37:c5:07:d4:32: 6b:72:a3:64:b6:b5:e5:91:30:ac:89:8f:bb:02:be: 3a:6c:61:f5:95:6c:06:51:53:a6:a1:a5:19:e1:4d: 3a:83:1c:a8:b4:07:bc:1a:54:fd:75:b8:52:66:30: 72:d4:ad:00:0c:71:d2:9a:05:0d:44:80:38:f8:70: c2:35:2e:95:0d:55:99:a0:eb:43:f1:2d:03:7d:40: 23:52:f3:fb:21:e8:25:a5:d4:dd:b6:0c:f1:a6:74: f9:5f:18:9b:c8:1c:66:98:cb:21:d0:db:a4:25:d3: 05:e7:6a:c8:49:5e:44:61:33:97:6c:2d:07:10:7b: 94:73:7a:34:b2:99:c2:f3:06:8c:39:ad:45:34:98: d9:cb:68:1e:56:c1:8d:9f:3a:56:4b:94:78:c0:5e: 07:02:61:0e:ad:a5:44:2e:7a:9c:1d:70:ae:73:e2: b5:96:be:08:8d:7b:ea:01:0c:0d:50:3b:19:1a:4b: 4d:ee:88:1b:00:b4:a2:42:1b:e9:62:1d:65:9b:10: 7a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BC:68:12:75:97:01:62:FD:2C:68:7D:47:9C:81:61:B3:41:0A:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.crl X509v3 Authority Key Identifier: keyid:33:87:39:DF:1C:AC:F8:79:BB:E8:E9:5D:84:6F:84:56:83:2C:A5:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer sbgp-ipAddrBlock: critical IPv4: 198.62.160.0/24 IPv6: 2602:fbd3::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:9c:2a:7f:92:76:38:12:cc:24:8a:e0:35:c6:1b:fe:31:1c: 63:fb:3a:f0:03:68:92:c8:e1:80:56:fb:8c:f1:80:2f:3d:27: d3:e0:be:ce:44:b7:d5:13:53:da:8d:95:8e:6f:05:ea:b6:a2: fc:dc:15:3e:64:f3:74:0b:44:0f:e0:91:ff:8f:15:f1:71:8a: 53:a1:f4:fd:6c:62:b3:0b:9f:b4:f3:4e:2e:34:6d:3f:05:5e: 50:41:d9:ba:85:ac:fe:d6:b0:33:22:38:44:34:5d:87:42:6f: 46:00:ad:c6:14:54:25:93:bf:02:cc:a5:cf:13:91:95:78:4d: cb:55:7c:cd:e3:45:c2:3a:cf:58:17:5b:75:bb:c7:10:6b:bd: 0d:39:64:98:3e:a2:0f:7a:aa:9f:dd:4d:90:55:d1:5c:53:74: ce:61:1c:d7:8c:5c:dc:72:c3:db:7e:fc:b8:29:7f:d1:d7:6a: 41:f1:0a:ad:f4:5d:4c:bb:af:38:3b:d3:d2:04:2d:c4:6c:df: ed:1f:17:d0:5a:78:25:d7:41:e8:f1:df:70:00:05:4c:49:8f: 6a:ca:cb:2a:bd:aa:a4:24:4f:70:01:ba:60:1d:0c:d8:2b:18: 4b:2b:35:ad:7a:f4:80:fa:09:a0:84:c8:e1:cf:b6:c6:38:3d: 15:b5:39:1e -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEVBDUxt4EENwLHeqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRiZmI5ZTgtMWJhZS00NTQwLTljYWUtYjY4MTFlY2Fk ZmY1MB4XDTI0MDMxOTAxMDAyNFoXDTI0MDYxNzAxMDAyNFowLzEtMCsGA1UEAxMk ZDI4MDU2YWQtNTcxMS00YWE4LWFlNzgtYTI3MjE0M2ZmODFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTkcXq1PkcUWnjWjoqAYtROQxeX2XwJtdWn1 HMdPuxBJvzUjiK1m0qzlP+hXY9IBX3gl3F0YN8UH1DJrcqNktrXlkTCsiY+7Ar46 bGH1lWwGUVOmoaUZ4U06gxyotAe8GlT9dbhSZjBy1K0ADHHSmgUNRIA4+HDCNS6V DVWZoOtD8S0DfUAjUvP7IeglpdTdtgzxpnT5XxibyBxmmMsh0NukJdMF52rISV5E YTOXbC0HEHuUc3o0spnC8waMOa1FNJjZy2geVsGNnzpWS5R4wF4HAmEOraVELnqc HXCuc+K1lr4IjXvqAQwNUDsZGktN7ogbALSiQhvpYh1lmxB6iQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMu8aBJ1lwFi/SxofUecgWGzQQplMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84NGJm YjllOC0xYmFlLTQ1NDAtOWNhZS1iNjgxMWVjYWRmZjUvY2YzODIxMWUtYTllZC0z N2VjLTkwNDEtNDMyZmQzNzBiYzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODRiZmI5ZTgtMWJhZS00NTQwLTlj YWUtYjY4MTFlY2FkZmY1Lzg0YmZiOWU4LTFiYWUtNDU0MC05Y2FlLWI2ODExZWNh ZGZmNS5jcmwwHwYDVR0jBBgwFoAUM4c53xys+Hm76OldhG+EVoMspWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84NGJmYjllOC0xYmFlLTQ1NDAtOWNhZS1iNjgx MWVjYWRmZjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAxj6gMA4E AgACMAgDBgAmAvvTADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDnCp/knY4EswkiuA1xhv+MRxj+zrwA2iS yOGAVvuM8YAvPSfT4L7ORLfVE1PajZWObwXqtqL83BU+ZPN0C0QP4JH/jxXxcYpT ofT9bGKzC5+0804uNG0/BV5QQdm6haz+1rAzIjhENF2HQm9GAK3GFFQlk78CzKXP E5GVeE3LVXzN40XCOs9YF1t1u8cQa70NOWSYPqIPeqqf3U2QVdFcU3TOYRzXjFzc csPbfvy4KX/R12pB8Qqt9F1Mu684O9PSBC3EbN/tHxfQWngl10Ho8d9wAAVMSY9q yssqvaqkJE9wAbpgHQzYKxhLKzWtevSA+gmghMjhz7bGOD0VtTke -----END CERTIFICATE-----Generated at Fri May 3 23:54:06 2024 by rpki-client on console-ams.rpki-client.org