$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/b46b4dad-f5a3-330d-a444-f9e584c07909.roa File: b46b4dad-f5a3-330d-a444-f9e584c07909.roa (raw, json) Hash identifier: mTfQkJCjWl8vZZHQP/OI7nqYZg0P4YbiFqPSGt/Yzpw= Subject key identifier: 99:BB:77:9E:33:FA:D9:03:A7:B7:FC:39:A6:25:6E:43:B4:3A:F0:4E Certificate issuer: /CN=59c9f46b-742f-4b2d-929b-267fefccc50a Certificate serial: 010D0C9F4328584503C01D5F2D363D6B01010880 Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/b46b4dad-f5a3-330d-a444-f9e584c07909.roa Signing time: Mon 26 Feb 2024 02:00:26 +0000 ROA not before: Mon 26 Feb 2024 02:00:26 +0000 ROA not after: Sun 26 May 2024 01:00:26 +0000 asID: 54702 IP address blocks: 208.74.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:03:c0:1d:5f:2d:36:3d:6b:01:01:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a Validity Not Before: Feb 26 02:00:26 2024 GMT Not After : May 26 01:00:26 2024 GMT Subject: CN=26a53744-745d-49a6-b67d-0e048bb9afdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a7:7d:c2:90:3a:82:0b:b0:18:58:cc:b2:6a: e0:36:ef:ce:71:e5:35:a4:c5:a3:9f:5b:1a:fe:7c: 5f:0d:80:26:d1:62:12:63:3a:1e:54:14:38:10:04: d8:9b:f1:44:4d:04:71:6f:2b:b7:a7:72:b6:b9:55: 69:73:dc:3b:36:41:10:61:4b:a7:9c:fb:00:d4:7c: 94:ea:29:ac:b8:d1:d5:c7:2e:c8:16:c9:7e:ad:85: fb:1c:da:e6:46:c5:9c:93:97:03:f5:86:2b:45:87: 17:d0:13:01:b1:14:57:ff:03:a9:18:f5:e5:42:39: 73:28:6d:8c:c4:d5:7c:00:e2:93:c5:14:1b:e8:19: 40:75:3f:86:d6:4d:b7:dd:48:68:5c:c8:56:9b:d6: 12:8d:14:ac:d9:bf:46:d9:21:77:7d:cc:c6:1a:39: 71:39:5e:c5:f4:33:af:89:40:9e:ca:c3:0c:36:22: 8e:14:ae:ab:00:bd:f2:8d:2d:f0:73:6b:93:5c:b2: ec:40:81:5c:f7:73:52:8c:a0:4b:2c:d3:e0:fd:e0: 17:24:da:4d:d7:f8:8e:09:fb:19:4c:f7:21:dc:e2: e4:c4:3a:e1:cd:1d:c4:5c:9c:97:77:c0:40:54:88: 29:34:f3:ed:48:d5:4b:2c:af:0a:47:12:2a:89:3b: fd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BB:77:9E:33:FA:D9:03:A7:B7:FC:39:A6:25:6E:43:B4:3A:F0:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/b46b4dad-f5a3-330d-a444-f9e584c07909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl X509v3 Authority Key Identifier: keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer sbgp-ipAddrBlock: critical IPv4: 208.74.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:b8:97:57:81:8e:b0:3a:fd:69:4f:13:05:51:ad:9f:0a:c2: a5:75:00:c5:5f:d0:4a:91:e3:01:23:c8:c9:41:bd:64:b5:db: 2c:1d:f6:ec:b9:3c:e8:f8:e2:97:04:a7:8d:50:42:8d:5c:75: cb:b5:32:27:b9:67:e6:f2:36:a5:45:96:70:d4:15:88:49:2a: 2c:13:64:ba:dc:de:8d:71:7b:cd:9d:b2:44:11:3c:00:9e:26: 46:e6:b7:91:e4:ca:57:bb:28:cb:28:c5:32:18:28:00:9b:c5: 1a:44:12:47:3f:ba:45:ba:5b:61:d6:ec:1f:a4:54:d4:ea:02: 5d:fc:5d:13:b6:ec:7a:a9:5b:f1:06:2b:f1:9e:ff:46:88:2f: de:19:53:49:b9:8e:21:fb:04:36:a9:f2:9a:83:cb:dc:64:d8: 42:a2:67:29:20:14:1e:74:82:3a:f3:7b:c9:64:d2:85:d2:0a: 21:a5:0a:fb:a2:74:49:97:59:91:4d:5f:f8:12:b8:84:96:28: 79:64:f6:85:ce:85:18:12:c0:94:e8:5a:92:d9:53:fe:ce:bd: 2b:b2:80:bc:f9:75:02:b6:e7:8e:a7:2e:3a:2d:3a:17:39:68: 13:a3:5b:5d:94:67:a4:a6:0f:e2:19:8a:96:b7:8e:a5:f0:43: 6d:0a:02:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUDwB1fLTY9awEBCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTljOWY0NmItNzQyZi00YjJkLTkyOWItMjY3ZmVmY2Nj NTBhMB4XDTI0MDIyNjAyMDAyNloXDTI0MDUyNjAxMDAyNlowLzEtMCsGA1UEAxMk MjZhNTM3NDQtNzQ1ZC00OWE2LWI2N2QtMGUwNDhiYjlhZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjad9wpA6gguwGFjMsmrgNu/OceU1pMWjn1sa /nxfDYAm0WISYzoeVBQ4EATYm/FETQRxbyu3p3K2uVVpc9w7NkEQYUunnPsA1HyU 6imsuNHVxy7IFsl+rYX7HNrmRsWck5cD9YYrRYcX0BMBsRRX/wOpGPXlQjlzKG2M xNV8AOKTxRQb6BlAdT+G1k233UhoXMhWm9YSjRSs2b9G2SF3fczGGjlxOV7F9DOv iUCeysMMNiKOFK6rAL3yjS3wc2uTXLLsQIFc93NSjKBLLNPg/eAXJNpN1/iOCfsZ TPch3OLkxDrhzR3EXJyXd8BAVIgpNPPtSNVLLK8KRxIqiTv9lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJm7d54z+tkDp7f8OaYlbkO0OvBOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5 ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdmZWZjY2M1MGEvYjQ2YjRkYWQtZjVhMy0z MzBkLWE0NDQtZjllNTg0YzA3OTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTljOWY0NmItNzQyZi00YjJkLTky OWItMjY3ZmVmY2NjNTBhLzU5YzlmNDZiLTc0MmYtNGIyZC05MjliLTI2N2ZlZmNj YzUwYS5jcmwwHwYDVR0jBBgwFoAUMZTLBk+ktjymSkjMqIYBkqcOoE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdm ZWZjY2M1MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGu4l1eBjrA6/WlPEwVRrZ8KwqV1AMVf0EqR4wEjyMlBvWS12ywd9uy5 POj44pcEp41QQo1cdcu1Mie5Z+byNqVFlnDUFYhJKiwTZLrc3o1xe82dskQRPACe Jkbmt5Hkyle7KMsoxTIYKACbxRpEEkc/ukW6W2HW7B+kVNTqAl38XRO27HqpW/EG K/Ge/0aIL94ZU0m5jiH7BDap8pqDy9xk2EKiZykgFB50gjrze8lk0oXSCiGlCvui dEmXWZFNX/gSuISWKHlk9oXOhRgSwJToWpLZU/7OvSuygLz5dQK2546nLjotOhc5 aBOjW12UZ6SmD+IZipa3jqXwQ20KArU= -----END CERTIFICATE-----