$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/337f6349-eb96-3d85-8d88-4d78539f1677.roa File: 337f6349-eb96-3d85-8d88-4d78539f1677.roa (raw, json) Hash identifier: UexUzgAWP3GVOs6WYxcfG9TJS/K1Z1Uvc7Tm0kGRTvg= Subject key identifier: 16:CC:C1:A6:A8:24:2D:69:1D:92:D0:B1:C0:59:AC:4E:81:03:DD:86 Certificate issuer: /CN=3bb3e110-2f65-4e7f-8ffa-0a6719192f20 Certificate serial: 010D0C9F43285844DCAA7C9415EF1D76F815A200 Authority key identifier: 5D:85:67:E2:D0:90:6B:9D:55:2F:8C:A2:02:A1:80:D0:38:74:11:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/337f6349-eb96-3d85-8d88-4d78539f1677.roa Signing time: Mon 12 Feb 2024 02:00:25 +0000 ROA not before: Mon 12 Feb 2024 02:00:25 +0000 ROA not after: Sun 12 May 2024 01:00:25 +0000 asID: 198949 IP address blocks: 162.129.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:dc:aa:7c:94:15:ef:1d:76:f8:15:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb3e110-2f65-4e7f-8ffa-0a6719192f20 Validity Not Before: Feb 12 02:00:25 2024 GMT Not After : May 12 01:00:25 2024 GMT Subject: CN=baa76de5-1c18-41d9-95f3-ff75b78eb2d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:49:93:1a:b3:cb:15:20:67:6b:b5:56:90:65: be:a8:ec:67:0d:00:38:c1:70:bc:76:e3:60:92:00: 7b:86:99:c1:e6:85:f5:17:1b:c3:82:2f:c7:8a:bc: b3:c3:58:76:be:79:8d:c5:e2:7d:78:f5:9b:17:01: a5:12:03:2f:a5:81:6b:c3:dc:59:e8:60:71:c6:12: e0:6e:0f:38:ac:81:10:80:8f:25:25:b0:7c:1b:b4: 98:0d:3f:5c:7e:4d:34:6d:a1:73:75:1c:67:62:ef: 67:61:e8:3b:48:48:76:8c:85:39:bb:18:ae:20:d0: 33:60:76:0c:70:de:25:ba:ba:3c:b3:88:ac:55:e6: 85:23:d1:1f:a1:1d:26:57:40:58:68:e9:8d:e7:b6: de:a8:01:c3:4d:6f:fd:af:44:ee:09:e8:92:e6:ee: 5c:05:54:c7:a6:ee:47:f0:ac:4b:4d:c3:75:16:6b: b1:44:87:0f:c4:a0:59:10:60:fb:78:da:a2:bf:89: 2b:ba:a9:f4:d4:ca:62:24:3f:37:c4:92:64:46:dc: 2b:a5:c9:16:51:81:a5:87:be:c3:e8:fe:6d:3b:81: 44:c2:8a:b1:9b:32:76:34:51:51:e7:11:d9:80:b9: eb:c4:40:97:63:e2:35:b9:4b:05:05:1f:75:53:93: f3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CC:C1:A6:A8:24:2D:69:1D:92:D0:B1:C0:59:AC:4E:81:03:DD:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/337f6349-eb96-3d85-8d88-4d78539f1677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.crl X509v3 Authority Key Identifier: keyid:5D:85:67:E2:D0:90:6B:9D:55:2F:8C:A2:02:A1:80:D0:38:74:11:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer sbgp-ipAddrBlock: critical IPv4: 162.129.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:18:14:ea:40:bc:58:93:30:2e:ec:a6:78:6a:12:18:7d:92: f8:86:63:26:84:f5:58:aa:8e:d7:16:e1:63:ef:06:ca:9b:3c: b7:6e:16:48:30:3a:76:b4:97:3f:d4:c0:cb:54:33:96:b6:9f: 1d:ce:1f:6e:d2:39:fe:60:7a:01:71:cf:1b:cc:9d:e0:bd:fc: 6d:da:67:78:ef:18:ca:53:13:7e:92:d8:23:3d:8d:c7:8b:28: 6d:b9:1c:41:cf:bb:c8:5b:9c:1b:6c:93:81:b6:c3:2f:c6:60: 61:82:51:2e:8c:ae:37:32:40:1f:82:1f:40:3c:58:cf:d9:55: f3:82:af:8b:5d:99:3b:1f:9f:d4:19:9c:08:a7:38:43:5a:e2: ed:a1:1a:64:4c:d8:d2:1e:d2:90:5c:30:6f:8a:09:ec:82:91: 88:30:a1:3a:14:e3:58:e4:e0:03:95:7d:11:c8:eb:81:e3:27: 5d:10:5a:89:d7:e7:07:78:f6:2d:4e:2c:89:ce:29:2c:79:e8: 0c:93:db:b9:0b:70:0e:4b:66:55:fb:eb:bf:1f:e4:0f:a0:f3: 1f:01:c1:04:ce:f1:34:ce:fd:9a:f4:1a:cc:2a:03:05:49:69: 8a:89:b5:50:f7:46:36:12:38:80:81:8f:35:68:11:a9:09:2a: dd:c5:1f:e6 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWETcqnyUFe8ddvgVogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiM2UxMTAtMmY2NS00ZTdmLThmZmEtMGE2NzE5MTky ZjIwMB4XDTI0MDIxMjAyMDAyNVoXDTI0MDUxMjAxMDAyNVowLzEtMCsGA1UEAxMk YmFhNzZkZTUtMWMxOC00MWQ5LTk1ZjMtZmY3NWI3OGViMmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkmTGrPLFSBna7VWkGW+qOxnDQA4wXC8duNg kgB7hpnB5oX1FxvDgi/Hiryzw1h2vnmNxeJ9ePWbFwGlEgMvpYFrw9xZ6GBxxhLg bg84rIEQgI8lJbB8G7SYDT9cfk00baFzdRxnYu9nYeg7SEh2jIU5uxiuINAzYHYM cN4luro8s4isVeaFI9EfoR0mV0BYaOmN57beqAHDTW/9r0TuCeiS5u5cBVTHpu5H 8KxLTcN1FmuxRIcPxKBZEGD7eNqiv4kruqn01MpiJD83xJJkRtwrpckWUYGlh77D 6P5tO4FEwoqxmzJ2NFFR5xHZgLnrxECXY+I1uUsFBR91U5Pz0QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBbMwaaoJC1pHZLQscBZrE6BA92GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYmIz ZTExMC0yZjY1LTRlN2YtOGZmYS0wYTY3MTkxOTJmMjAvMzM3ZjYzNDktZWI5Ni0z ZDg1LThkODgtNGQ3ODUzOWYxNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2JiM2UxMTAtMmY2NS00ZTdmLThm ZmEtMGE2NzE5MTkyZjIwLzNiYjNlMTEwLTJmNjUtNGU3Zi04ZmZhLTBhNjcxOTE5 MmYyMC5jcmwwHwYDVR0jBBgwFoAUXYVn4tCQa51VL4yiAqGA0Dh0EVswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYmIzZTExMC0yZjY1LTRlN2YtOGZmYS0wYTY3 MTkxOTJmMjAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAooEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAQBgU6kC8WJMwLuymeGoSGH2S+IZjJoT1WKqO1xbhY+8Gyps8t24WSDA6 drSXP9TAy1QzlrafHc4fbtI5/mB6AXHPG8yd4L38bdpneO8YylMTfpLYIz2Nx4so bbkcQc+7yFucG2yTgbbDL8ZgYYJRLoyuNzJAH4IfQDxYz9lV84Kvi12ZOx+f1Bmc CKc4Q1ri7aEaZEzY0h7SkFwwb4oJ7IKRiDChOhTjWOTgA5V9EcjrgeMnXRBaidfn B3j2LU4sic4pLHnoDJPbuQtwDktmVfvrvx/kD6DzHwHBBM7xNM79mvQazCoDBUlp iom1UPdGNhI4gIGPNWgRqQkq3cUf5g== -----END CERTIFICATE-----Generated at Sat Apr 20 02:52:10 2024 by rpki-client on console-ams.rpki-client.org