$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/fa68b0de-950c-3c2b-93c2-0c01d381801f.roa File: fa68b0de-950c-3c2b-93c2-0c01d381801f.roa (raw, json) Hash identifier: uNDUDpg45Jh3Ne3kzcvpT/pu+/TplFp5xc6yWlq5RLU= Subject key identifier: 2F:35:87:50:45:77:D8:98:4F:68:C2:0A:F4:A5:75:5D:89:AE:B0:AE Certificate issuer: /CN=1f5fe3e7-3c15-4742-a824-8c933974ab55 Certificate serial: 010D0C9F4328584582A89692772CA4FCF8D2D500 Authority key identifier: 04:16:CB:E5:BD:0C:1A:59:30:EB:0E:72:5C:7A:4E:81:7C:0E:C5:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/fa68b0de-950c-3c2b-93c2-0c01d381801f.roa Signing time: Thu 11 Apr 2024 13:00:36 +0000 ROA not before: Thu 11 Apr 2024 13:00:36 +0000 ROA not after: Wed 10 Jul 2024 13:00:36 +0000 asID: 16509 IP address blocks: 198.99.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/1f5fe3e7-3c15-4742-a824-8c933974ab55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/1f5fe3e7-3c15-4742-a824-8c933974ab55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:82:a8:96:92:77:2c:a4:fc:f8:d2:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f5fe3e7-3c15-4742-a824-8c933974ab55 Validity Not Before: Apr 11 13:00:36 2024 GMT Not After : Jul 10 13:00:36 2024 GMT Subject: CN=9f35cba1-3b6d-4e96-acb0-2b73d4aa8ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:39:65:5f:1d:b4:a5:7f:da:e7:98:5f:72:e1: 90:0d:fc:2f:13:45:54:fb:51:a2:62:f0:ee:df:18: 2e:c8:eb:29:7b:80:4c:f7:ba:56:5b:18:fe:f6:8e: 7a:f5:8a:60:f6:2a:70:87:16:fe:5b:b2:3f:4a:8a: 4e:d2:ef:cb:93:ea:9a:d7:d0:5b:43:64:52:57:1b: 93:d2:67:e1:e9:1e:30:7a:d9:68:55:c4:f1:fa:90: e1:7a:20:3f:7f:3d:00:98:20:39:5a:4c:a8:10:02: ea:f0:e6:43:fb:4f:3f:c2:37:03:c0:45:2f:25:2f: 39:6d:54:e5:30:01:2c:ff:0a:d5:79:7e:56:4f:76: c9:3d:75:e8:13:44:e9:2d:17:f6:2d:58:be:22:37: fb:e5:52:0c:7a:8b:91:cf:37:d9:bd:03:ae:18:33: c9:af:5f:64:93:d8:2d:68:3a:53:c3:2e:a0:39:78: 79:4d:a8:c3:72:d8:70:8f:4c:46:65:df:ca:c8:6f: 15:ca:ce:94:1a:2f:69:71:82:19:fb:b1:58:72:a7: 1a:b4:98:4f:2b:94:9c:e7:9d:b3:05:8e:0a:c6:6e: 2d:5c:fd:51:84:b3:6c:98:3d:bc:71:dc:bd:87:31: 6d:aa:20:99:15:67:49:16:14:d3:84:98:4c:0e:87: f7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:35:87:50:45:77:D8:98:4F:68:C2:0A:F4:A5:75:5D:89:AE:B0:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/fa68b0de-950c-3c2b-93c2-0c01d381801f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/1f5fe3e7-3c15-4742-a824-8c933974ab55.crl X509v3 Authority Key Identifier: keyid:04:16:CB:E5:BD:0C:1A:59:30:EB:0E:72:5C:7A:4E:81:7C:0E:C5:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer sbgp-ipAddrBlock: critical IPv4: 198.99.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:35:be:7d:d0:1f:dd:7a:b2:9f:ae:8a:c4:83:40:40:66:4f: 04:96:4f:e1:3b:1b:4f:7d:f3:b6:92:f6:36:d2:76:46:10:82: bf:49:a9:c1:41:e3:6a:06:e1:6f:a4:25:df:c2:1a:be:51:3d: e1:e0:df:11:e9:12:6a:73:3b:65:b2:c9:dc:8d:79:cf:bf:8f: 5d:2b:c9:e2:ab:97:6f:fd:c6:d8:73:52:c6:24:68:99:28:86: bb:97:cc:92:5f:bf:fb:1e:f5:84:5d:3d:d8:c5:95:66:be:1b: 39:2a:42:62:e4:b7:ac:71:3b:75:9d:cb:07:2d:b1:b1:35:e6: 6d:7e:87:05:9c:b4:d8:99:e7:d4:2b:63:3e:43:f9:f9:9a:02: 40:33:b8:71:ac:e9:8c:66:1f:d1:d3:30:cd:25:0e:ed:70:b2: 93:3f:ad:de:b0:9b:34:ca:ca:5b:8a:98:58:52:18:1d:86:a6: af:69:bc:77:c5:dd:9e:03:cf:0e:36:fd:da:16:24:6f:28:3e: 78:f3:f3:07:8e:b1:fe:11:d1:af:8d:ce:6d:a8:63:37:dd:9d: ad:23:3a:c0:a2:1c:42:b4:ac:93:81:62:74:d5:ba:8c:79:31: 35:f0:d2:a7:87:a3:12:b5:1f:97:8c:3b:b4:2f:3c:92:43:89: fc:fb:7a:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWCqJaSdyyk/PjS1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1ZmUzZTctM2MxNS00NzQyLWE4MjQtOGM5MzM5NzRh YjU1MB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk OWYzNWNiYTEtM2I2ZC00ZTk2LWFjYjAtMmI3M2Q0YWE4YWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjllXx20pX/a55hfcuGQDfwvE0VU+1GiYvDu 3xguyOspe4BM97pWWxj+9o569Ypg9ipwhxb+W7I/SopO0u/Lk+qa19BbQ2RSVxuT 0mfh6R4wetloVcTx+pDheiA/fz0AmCA5WkyoEALq8OZD+08/wjcDwEUvJS85bVTl MAEs/wrVeX5WT3bJPXXoE0TpLRf2LVi+Ijf75VIMeouRzzfZvQOuGDPJr19kk9gt aDpTwy6gOXh5TajDcthwj0xGZd/KyG8Vys6UGi9pcYIZ+7FYcqcatJhPK5Sc552z BY4Kxm4tXP1RhLNsmD28cdy9hzFtqiCZFWdJFhTThJhMDof3ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC81h1BFd9iYT2jCCvSldV2JrrCuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjVm ZTNlNy0zYzE1LTQ3NDItYTgyNC04YzkzMzk3NGFiNTUvZmE2OGIwZGUtOTUwYy0z YzJiLTkzYzItMGMwMWQzODE4MDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWY1ZmUzZTctM2MxNS00NzQyLWE4 MjQtOGM5MzM5NzRhYjU1LzFmNWZlM2U3LTNjMTUtNDc0Mi1hODI0LThjOTMzOTc0 YWI1NS5jcmwwHwYDVR0jBBgwFoAUBBbL5b0MGlkw6w5yXHpOgXwOxfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjVmZTNlNy0zYzE1LTQ3NDItYTgyNC04Yzkz Mzk3NGFiNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmN7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGw1vn3QH916sp+uisSDQEBmTwSWT+E7G09987aS9jbSdkYQgr9JqcFB 42oG4W+kJd/CGr5RPeHg3xHpEmpzO2WyydyNec+/j10ryeKrl2/9xthzUsYkaJko hruXzJJfv/se9YRdPdjFlWa+GzkqQmLkt6xxO3WdywctsbE15m1+hwWctNiZ59Qr Yz5D+fmaAkAzuHGs6YxmH9HTMM0lDu1wspM/rd6wmzTKyluKmFhSGB2Gpq9pvHfF 3Z4Dzw42/doWJG8oPnjz8weOsf4R0a+Nzm2oYzfdna0jOsCiHEK0rJOBYnTVuox5 MTXw0qeHoxK1H5eMO7QvPJJDifz7eik= -----END CERTIFICATE-----Generated at Sun Apr 28 03:26:24 2024 by rpki-client on console-ams.rpki-client.org