$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/6d25a8ab-f7d1-351f-8e2e-bd5c6086fe0b.roa File: 6d25a8ab-f7d1-351f-8e2e-bd5c6086fe0b.roa (raw, json) Hash identifier: qM+BP6nECQfOFsWAI8l02rfKU+PO9eTQdTZQUKPgy9w= Subject key identifier: 16:10:5A:19:66:49:33:61:B9:CF:0C:E0:95:DD:72:66:46:4C:37:F5 Certificate issuer: /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Certificate serial: 010D0C9F432858459368BFD9E7E091C619BBB740 Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/6d25a8ab-f7d1-351f-8e2e-bd5c6086fe0b.roa Signing time: Wed 17 Apr 2024 13:00:34 +0000 ROA not before: Wed 17 Apr 2024 13:00:34 +0000 ROA not after: Tue 16 Jul 2024 13:00:34 +0000 asID: 206092 IP address blocks: 172.98.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:93:68:bf:d9:e7:e0:91:c6:19:bb:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Validity Not Before: Apr 17 13:00:34 2024 GMT Not After : Jul 16 13:00:34 2024 GMT Subject: CN=589b4cf0-128b-402b-8037-2dd92406569d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f2:1c:6f:4b:91:77:2f:f2:d3:2b:f8:df:b4: 07:c5:6a:d8:45:46:00:b6:bf:9a:2d:e3:b7:b7:f0: df:cf:be:71:b2:40:e4:a3:cb:fe:19:36:67:ee:11: ae:5f:13:43:41:af:5f:2b:86:59:d5:2c:05:ed:a5: 69:81:6d:fa:95:09:14:02:e6:4a:b4:84:da:d1:5a: 36:1a:ad:15:4a:cc:0a:4d:70:73:1e:1b:1c:6d:b9: 00:7f:a4:6c:5f:24:9b:b5:44:53:31:ff:79:51:ac: 11:be:4d:bd:6b:87:1d:42:9d:ee:17:a6:d7:08:9b: 20:13:d1:52:4d:ae:d7:c2:85:1e:12:d5:94:ac:f3: 30:96:e8:23:fd:7b:aa:aa:fb:ea:af:31:70:2a:93: e7:c2:b8:d5:f2:a9:6b:8a:0d:04:40:51:14:79:2e: 2d:4e:55:c5:c3:53:cb:18:37:1d:f9:13:e6:72:12: 2d:75:41:35:79:87:f0:f0:a0:8b:fd:4a:c3:42:3c: 4b:de:d8:3a:ce:8c:94:99:14:3d:1f:cc:64:1e:61: 97:9a:95:65:82:9b:cf:f6:aa:12:a1:ec:a9:c8:fa: 17:a2:6a:8a:f2:43:a0:49:15:ef:3f:c0:4f:31:e1: e1:0a:0f:ad:b7:41:aa:ba:fb:d3:fb:66:e3:d5:9f: c7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:10:5A:19:66:49:33:61:B9:CF:0C:E0:95:DD:72:66:46:4C:37:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/6d25a8ab-f7d1-351f-8e2e-bd5c6086fe0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl X509v3 Authority Key Identifier: keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer sbgp-ipAddrBlock: critical IPv4: 172.98.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:7b:07:21:27:37:67:4b:6b:6d:c8:7b:56:ea:fb:d4:1a:d5: 61:39:f2:d0:a6:c1:ae:12:36:5a:fc:20:33:ad:1a:6e:17:3d: b4:a1:be:26:b6:bf:0b:11:27:54:84:9f:58:9e:72:08:bc:2a: 5c:da:cd:b5:fa:10:c5:b5:7f:e2:6e:b1:57:1e:19:47:a1:e8: a5:3c:73:3d:0a:6f:b2:ca:cb:d2:d3:51:a6:e6:24:e9:76:4e: 7a:a9:cd:7b:0d:26:3d:a1:3e:8c:16:54:5a:da:2e:63:1b:50: af:c0:f6:15:6c:45:2b:55:03:61:ce:bf:74:e1:0a:24:74:f5: 7c:92:d4:c9:5f:e4:a2:3b:a3:78:c3:7a:5d:59:4b:ce:c8:ad: 6b:13:8e:18:dc:e3:55:df:e8:25:4b:4a:49:38:30:c6:e7:64: 92:d2:62:bb:c1:b4:07:c0:70:74:9e:70:00:09:68:c2:b0:4c: 0f:90:d6:be:33:20:b5:e2:3b:23:0b:d4:17:24:38:19:53:7a: d1:27:c7:db:00:96:1a:5b:66:57:8b:db:07:4a:86:75:2a:f8: 95:d1:e9:74:87:49:f5:5b:cb:37:bb:88:a1:ad:fa:9b:59:78: c7:a0:fa:86:fb:a3:47:dc:fb:dd:1d:e1:0d:9f:fe:87:3d:49: 11:4c:f4:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWTaL/Z5+CRxhm7t0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5 YjEyMB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk NTg5YjRjZjAtMTI4Yi00MDJiLTgwMzctMmRkOTI0MDY1NjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvIcb0uRdy/y0yv437QHxWrYRUYAtr+aLeO3 t/Dfz75xskDko8v+GTZn7hGuXxNDQa9fK4ZZ1SwF7aVpgW36lQkUAuZKtITa0Vo2 Gq0VSswKTXBzHhscbbkAf6RsXySbtURTMf95UawRvk29a4cdQp3uF6bXCJsgE9FS Ta7XwoUeEtWUrPMwlugj/XuqqvvqrzFwKpPnwrjV8qlrig0EQFEUeS4tTlXFw1PL GDcd+RPmchItdUE1eYfw8KCL/UrDQjxL3tg6zoyUmRQ9H8xkHmGXmpVlgpvP9qoS oeypyPoXomqK8kOgSRXvP8BPMeHhCg+tt0GquvvT+2bj1Z/H4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYQWhlmSTNhuc8M4JXdcmZGTDf1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2 MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvNmQyNWE4YWItZjdkMS0z NTFmLThlMmUtYmQ1YzYwODZmZTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2ViNjAyNTMtZjAyZC00NzIzLTk5 OWYtZTJlM2UwZmQ5YjEyLzNlYjYwMjUzLWYwMmQtNDcyMy05OTlmLWUyZTNlMGZk OWIxMi5jcmwwHwYDVR0jBBgwFoAU9im9+NZQykOFMQUngSBjSDpKWFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUz ZTBmZDliMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB57ByEnN2dLa23Ie1bq+9Qa1WE58tCmwa4SNlr8IDOtGm4XPbShvia2 vwsRJ1SEn1iecgi8KlzazbX6EMW1f+JusVceGUeh6KU8cz0Kb7LKy9LTUabmJOl2 TnqpzXsNJj2hPowWVFraLmMbUK/A9hVsRStVA2HOv3ThCiR09XyS1Mlf5KI7o3jD el1ZS87IrWsTjhjc41Xf6CVLSkk4MMbnZJLSYrvBtAfAcHSecAAJaMKwTA+Q1r4z ILXiOyML1BckOBlTetEnx9sAlhpbZleL2wdKhnUq+JXR6XSHSfVbyze7iKGt+ptZ eMeg+ob7o0fc+90d4Q2f/oc9SRFM9BQ= -----END CERTIFICATE-----Generated at Fri Apr 26 11:15:50 2024 by rpki-client on console-ams.rpki-client.org