$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/cbb76420-5b33-379d-88fa-43707aba002e.roa File: cbb76420-5b33-379d-88fa-43707aba002e.roa (raw, json) Hash identifier: m6xdSMZeKlxVFsdm2PT0boWQHNHlEIU4V6vdRezTiTY= Subject key identifier: CB:45:20:D5:BB:F8:FC:8B:1E:0B:31:8C:BD:69:44:9D:2C:57:80:6C Certificate issuer: /CN=1c5adecb-4ac8-432f-817c-84bec47b7708 Certificate serial: 010D0C9F43285844F2FFF799663E421F29FD5140 Authority key identifier: 55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/cbb76420-5b33-379d-88fa-43707aba002e.roa Signing time: Tue 20 Feb 2024 02:00:26 +0000 ROA not before: Tue 20 Feb 2024 02:00:26 +0000 ROA not after: Mon 20 May 2024 01:00:26 +0000 asID: 23167 IP address blocks: 149.234.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f2:ff:f7:99:66:3e:42:1f:29:fd:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5adecb-4ac8-432f-817c-84bec47b7708 Validity Not Before: Feb 20 02:00:26 2024 GMT Not After : May 20 01:00:26 2024 GMT Subject: CN=e53ebccd-4457-4f28-80bb-576ae7f91892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bf:b3:8e:36:98:dd:69:5e:48:95:8e:73:c2: 0c:7f:d5:86:de:55:01:77:fb:a1:02:5e:4f:a9:88: 8d:e1:29:29:34:05:8e:12:70:6f:a9:c1:33:1c:be: 28:14:72:d9:ef:1b:0c:fd:a3:46:19:9a:81:71:78: e1:46:7b:ff:c5:cd:33:11:8a:5e:28:d7:20:91:1c: 7c:52:a7:93:72:d3:f3:d4:0e:78:d4:97:31:a7:19: 0f:d0:b4:4c:c8:c8:b2:29:e0:02:6c:6c:32:2f:ef: 4a:43:66:86:76:13:1f:92:d9:05:ca:5a:69:6f:75: 75:94:9f:3b:da:65:a6:58:27:2d:8f:69:e2:39:73: 4f:f7:5f:ed:50:78:a5:a8:bb:19:ea:fd:51:6a:cc: c4:44:d5:3d:04:52:2e:af:7e:e4:8b:d6:01:20:44: 7f:c9:a1:f1:58:c4:5d:57:19:ed:e5:fc:d5:4c:00: e0:df:38:81:d6:0b:1f:fd:05:ed:73:b8:2a:c0:75: 0b:df:b2:34:cf:22:10:6f:05:0c:3f:2c:12:62:81: f6:6f:49:c0:ef:f5:57:a7:12:74:29:31:5e:68:9d: ad:f9:9c:97:8a:ff:7b:67:b5:1a:b5:af:85:c3:96: 48:cd:cb:06:90:6a:1d:e4:9e:e4:cc:3d:ec:58:8f: 97:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:45:20:D5:BB:F8:FC:8B:1E:0B:31:8C:BD:69:44:9D:2C:57:80:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/cbb76420-5b33-379d-88fa-43707aba002e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl X509v3 Authority Key Identifier: keyid:55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer sbgp-ipAddrBlock: critical IPv4: 149.234.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:e5:64:81:9d:9d:2c:9f:2f:f6:b3:cc:86:d2:1b:39:6e:4c: 15:f3:1f:c6:16:88:22:66:d3:b1:cc:a9:d6:07:20:c4:77:9e: 43:b4:d6:26:81:34:8c:02:06:ef:a5:0d:50:33:2f:72:92:03: a1:8f:df:5d:4d:4d:dc:3d:33:39:69:47:03:c7:de:38:71:42: bb:fb:a8:00:ba:7e:97:5d:49:21:b0:e6:f6:ba:b4:a9:ee:14: d5:0b:5a:a1:9c:93:e3:3f:2f:b0:c7:39:a2:a0:d8:fb:23:8a: 25:3f:99:d9:cf:47:b6:6b:e3:d5:73:a4:24:b6:b6:b5:6e:64: 0c:bb:9d:a2:e1:2f:50:65:5e:67:a2:46:ba:f9:c3:42:8d:25: df:48:27:28:c7:1b:18:0c:af:6b:4f:46:c8:8d:f0:f3:48:c1: 62:74:25:32:71:9b:2d:dd:b5:aa:96:a9:0b:c8:d7:27:08:4b: db:d0:ad:27:00:0e:d6:19:99:0b:2d:97:ca:b1:a1:95:7a:d5: 38:56:e9:a2:fc:e9:b1:6b:a9:35:c1:fc:c3:60:92:38:f5:41: 7c:d5:89:80:b5:94:fc:99:14:51:9a:83:b6:22:be:13:97:c6: a3:68:84:63:c6:60:0a:37:c6:66:e3:85:07:04:db:2f:be:74: 02:d6:4e:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETy//eZZj5CHyn9UUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWRlY2ItNGFjOC00MzJmLTgxN2MtODRiZWM0N2I3 NzA4MB4XDTI0MDIyMDAyMDAyNloXDTI0MDUyMDAxMDAyNlowLzEtMCsGA1UEAxMk ZTUzZWJjY2QtNDQ1Ny00ZjI4LTgwYmItNTc2YWU3ZjkxODkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL+zjjaY3WleSJWOc8IMf9WG3lUBd/uhAl5P qYiN4SkpNAWOEnBvqcEzHL4oFHLZ7xsM/aNGGZqBcXjhRnv/xc0zEYpeKNcgkRx8 UqeTctPz1A541JcxpxkP0LRMyMiyKeACbGwyL+9KQ2aGdhMfktkFylppb3V1lJ87 2mWmWCctj2niOXNP91/tUHilqLsZ6v1RaszERNU9BFIur37ki9YBIER/yaHxWMRd Vxnt5fzVTADg3ziB1gsf/QXtc7gqwHUL37I0zyIQbwUMPywSYoH2b0nA7/VXpxJ0 KTFeaJ2t+ZyXiv97Z7Uata+Fw5ZIzcsGkGod5J7kzD3sWI+X/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtFINW7+PyLHgsxjL1pRJ0sV4BsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZGVjYi00YWM4LTQzMmYtODE3Yy04NGJlYzQ3Yjc3MDgvY2JiNzY0MjAtNWIzMy0z NzlkLTg4ZmEtNDM3MDdhYmEwMDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWRlY2ItNGFjOC00MzJmLTgx N2MtODRiZWM0N2I3NzA4LzFjNWFkZWNiLTRhYzgtNDMyZi04MTdjLTg0YmVjNDdi NzcwOC5jcmwwHwYDVR0jBBgwFoAUVaoUdtgDOMPMCm7zFN4yMK4vgBswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZGVjYi00YWM4LTQzMmYtODE3Yy04NGJl YzQ3Yjc3MDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAler6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjlZIGdnSyfL/azzIbSGzluTBXzH8YWiCJm07HMqdYHIMR3nkO01iaB NIwCBu+lDVAzL3KSA6GP311NTdw9MzlpRwPH3jhxQrv7qAC6fpddSSGw5va6tKnu FNULWqGck+M/L7DHOaKg2PsjiiU/mdnPR7Zr49VzpCS2trVuZAy7naLhL1BlXmei Rrr5w0KNJd9IJyjHGxgMr2tPRsiN8PNIwWJ0JTJxmy3dtaqWqQvI1ycIS9vQrScA DtYZmQstl8qxoZV61ThW6aL86bFrqTXB/MNgkjj1QXzViYC1lPyZFFGag7YivhOX xqNohGPGYAo3xmbjhQcE2y++dALWTvQ= -----END CERTIFICATE-----Generated at Wed May 1 15:59:21 2024 by rpki-client on console-ams.rpki-client.org