$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/fd05dd98-3073-3868-a202-0a6c4f041811.roa File: fd05dd98-3073-3868-a202-0a6c4f041811.roa (raw, json) Hash identifier: 3e42jRK5J3LnMfW2QCNXdTX7ec2j+OyFXgjaDUT2G3U= Subject key identifier: E0:19:E9:0F:0C:77:B3:F5:C3:E4:D2:BC:8D:B8:2E:12:DB:1B:2A:25 Certificate issuer: /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2 Certificate serial: 010D0C9F43285845679228A3F975B22501395280 Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/fd05dd98-3073-3868-a202-0a6c4f041811.roa Signing time: Mon 01 Apr 2024 20:08:50 +0000 ROA not before: Mon 01 Apr 2024 20:08:50 +0000 ROA not after: Sun 30 Jun 2024 20:08:50 +0000 asID: 203 IP address blocks: 161.151.162.0/23 maxlen: 24 161.151.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:67:92:28:a3:f9:75:b2:25:01:39:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2 Validity Not Before: Apr 1 20:08:50 2024 GMT Not After : Jun 30 20:08:50 2024 GMT Subject: CN=cce1a2dc-96d6-4a67-b9b4-6439041d27b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bf:01:ee:ad:59:02:96:4a:d3:32:cb:9f:60: 30:4c:df:2b:79:aa:54:e6:92:c8:02:12:79:1d:b2: 30:1f:eb:a0:6b:6f:ce:5f:e2:b4:d2:02:e1:cc:d1: 97:80:b9:d4:45:19:1e:c8:25:05:d5:83:ed:54:0c: 25:cc:8d:69:75:46:2a:3e:9d:3c:41:47:92:88:0f: 36:ee:83:b8:b4:3f:d7:cc:22:3d:e2:c6:2f:86:49: 12:8a:eb:b9:45:a2:39:7b:43:2b:55:65:1f:80:4c: 91:37:10:3b:74:97:f0:e6:73:ca:d1:18:10:fb:b4: 30:f0:83:0f:77:0f:79:d2:45:29:ad:9f:ed:02:e6: cd:35:e4:b7:34:47:c0:e8:3a:02:4f:87:5e:68:0f: 59:16:18:fd:c4:7e:c7:2e:98:f7:2a:7a:ec:89:5c: ba:36:63:d4:a7:21:6f:45:64:33:3c:82:60:4c:9e: 10:13:b8:6a:af:a1:80:35:e5:e4:01:fc:00:ee:9b: b1:6f:60:df:76:c4:6a:43:45:aa:6e:71:03:e7:dd: 74:48:84:5a:26:f8:0a:d4:01:4e:b6:99:e1:9c:ac: 96:72:5f:41:f7:fb:0e:d9:f3:cb:6c:ba:3b:a0:77: 68:81:fa:6a:3f:ec:62:da:07:5e:e7:58:ac:38:c7: dd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:19:E9:0F:0C:77:B3:F5:C3:E4:D2:BC:8D:B8:2E:12:DB:1B:2A:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/fd05dd98-3073-3868-a202-0a6c4f041811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl X509v3 Authority Key Identifier: keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer sbgp-ipAddrBlock: critical IPv4: 161.151.162.0/23 161.151.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:44:b8:13:18:25:3e:00:fc:b5:e2:4f:1e:52:0c:f2:37:30: 3e:a0:aa:15:ac:bd:90:b4:e1:68:02:23:dc:21:b0:2a:26:2f: b3:8b:48:74:97:4d:12:f4:5b:49:cc:25:dc:0c:de:15:c8:be: 49:5e:b6:6c:c2:55:4f:f3:69:a6:a2:8e:08:05:2a:b1:04:aa: 0d:af:a4:c5:22:54:6a:e6:87:2d:1e:cb:c9:e6:e8:3c:a6:e3: 6a:02:e9:bf:b6:f3:a9:79:2c:89:0b:ab:4d:3b:6d:1a:9a:ef: 9b:e5:e0:be:78:44:4d:13:84:27:71:cd:64:20:50:4b:61:31: 2b:d9:db:66:76:56:5d:9d:6b:6a:ae:33:c2:70:9c:c5:4d:f1: d3:75:f6:bd:7b:7a:6b:33:d8:fa:1b:dd:65:5d:bd:06:96:73: df:57:cb:5a:d4:7a:8a:b4:64:82:b1:5a:e3:0f:3e:db:25:72: f4:f6:ed:bb:76:a8:56:8a:8a:26:0e:9f:19:81:4d:84:27:1e: 95:7d:73:14:8a:ce:63:15:e7:10:12:ea:70:6f:35:1f:e3:d9: d7:0e:01:e9:25:3c:4e:f1:f7:e7:ef:d8:0f:2a:02:08:60:b6: 62:f1:43:25:95:bf:ec:a9:e5:97:4c:44:09:df:73:91:14:98: dd:9e:90:32 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEVnkiij+XWyJQE5UoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmMyYjY0NzAtOTRlNC00Zjc3LTlkNDgtMTNkNWFhYTJi M2MyMB4XDTI0MDQwMTIwMDg1MFoXDTI0MDYzMDIwMDg1MFowLzEtMCsGA1UEAxMk Y2NlMWEyZGMtOTZkNi00YTY3LWI5YjQtNjQzOTA0MWQyN2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4b8B7q1ZApZK0zLLn2AwTN8reapU5pLIAhJ5 HbIwH+uga2/OX+K00gLhzNGXgLnURRkeyCUF1YPtVAwlzI1pdUYqPp08QUeSiA82 7oO4tD/XzCI94sYvhkkSiuu5RaI5e0MrVWUfgEyRNxA7dJfw5nPK0RgQ+7Qw8IMP dw950kUprZ/tAubNNeS3NEfA6DoCT4deaA9ZFhj9xH7HLpj3KnrsiVy6NmPUpyFv RWQzPIJgTJ4QE7hqr6GANeXkAfwA7puxb2DfdsRqQ0WqbnED5910SIRaJvgK1AFO tpnhnKyWcl9B9/sO2fPLbLo7oHdogfpqP+xi2gde51isOMfdMwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOAZ6Q8Md7P1w+TSvI24LhLbGyolMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YzJi NjQ3MC05NGU0LTRmNzctOWQ0OC0xM2Q1YWFhMmIzYzIvZmQwNWRkOTgtMzA3My0z ODY4LWEyMDItMGE2YzRmMDQxODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmMyYjY0NzAtOTRlNC00Zjc3LTlk NDgtMTNkNWFhYTJiM2MyLzZjMmI2NDcwLTk0ZTQtNGY3Ny05ZDQ4LTEzZDVhYWEy YjNjMi5jcmwwHwYDVR0jBBgwFoAUcB+1v9C/q2uyxPfYNx7so1nBbvcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YzJiNjQ3MC05NGU0LTRmNzctOWQ0OC0xM2Q1 YWFhMmIzYzIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBoZeiAwQB oZf8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAG1EuBMYJT4A/LXiTx5SDPI3MD6gqhWsvZC04WgCI9whsCom L7OLSHSXTRL0W0nMJdwM3hXIvkletmzCVU/zaaaijggFKrEEqg2vpMUiVGrmhy0e y8nm6Dym42oC6b+286l5LIkLq007bRqa75vl4L54RE0ThCdxzWQgUEthMSvZ22Z2 Vl2da2quM8JwnMVN8dN19r17emsz2Pob3WVdvQaWc99Xy1rUeoq0ZIKxWuMPPtsl cvT27bt2qFaKiiYOnxmBTYQnHpV9cxSKzmMV5xAS6nBvNR/j2dcOAeklPE7x9+fv 2A8qAghgtmLxQyWVv+yp5ZdMRAnfc5EUmN2ekDI= -----END CERTIFICATE-----Generated at Thu May 2 22:30:31 2024 by rpki-client on console-ams.rpki-client.org