$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/f285d95a-b783-3400-8db8-8b30c968f7c0.roa File: f285d95a-b783-3400-8db8-8b30c968f7c0.roa (raw, json) Hash identifier: 1aIzQ1dzgvDwq8olSKHcaWJF0FXwzINQ774aIIr9Kps= Subject key identifier: 4E:20:C2:3D:22:49:1C:22:EA:44:D5:58:EB:F8:A1:25:79:19:B0:EC Certificate issuer: /CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Certificate serial: 010D0C9F43285845734DAB9E3A45953D99645000 Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/f285d95a-b783-3400-8db8-8b30c968f7c0.roa Signing time: Sat 06 Apr 2024 01:00:26 +0000 ROA not before: Sat 06 Apr 2024 01:00:26 +0000 ROA not after: Fri 05 Jul 2024 01:00:26 +0000 asID: 174 IP address blocks: 204.15.220.0/22 maxlen: 24 208.86.120.0/21 maxlen: 24 2606:3840::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:73:4d:ab:9e:3a:45:95:3d:99:64:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Validity Not Before: Apr 6 01:00:26 2024 GMT Not After : Jul 5 01:00:26 2024 GMT Subject: CN=76d98371-d957-48aa-b116-923ddacea5c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:dd:2f:a0:ab:a7:7f:24:bb:b9:46:0c:5a:3c: f8:e5:4c:16:e2:a5:ba:bd:90:b6:31:8f:5f:47:e4: df:d0:c2:39:ce:4a:b3:5c:c4:ad:60:59:71:e2:58: 4b:32:4a:88:e9:ca:29:68:35:8b:31:5f:72:14:33: 94:2c:c8:17:51:29:ae:ff:e9:33:6c:04:62:69:e2: 31:5e:a6:49:e2:f1:6d:e8:20:36:b8:7a:fc:5f:85: 12:bb:d0:bc:b0:bb:03:d2:8e:f2:c1:9b:92:7e:83: 03:19:95:62:09:0d:ea:8a:85:39:b8:78:c1:23:02: 7e:c0:a1:ac:19:a8:cb:0a:4e:84:f3:46:e2:af:46: 79:51:94:3d:c4:f4:3f:74:ad:a3:14:7f:db:c4:1c: 81:7b:14:6e:d8:3f:cf:e1:d1:f4:12:94:bf:47:1b: a8:df:75:c6:61:d9:7c:1f:dc:93:fb:f7:29:42:99: ce:55:29:3a:55:28:28:4c:9e:62:30:af:f7:17:4d: db:da:91:f9:b3:bb:71:a7:ec:87:4e:a6:1c:98:65: 5e:d5:7c:75:a1:68:70:67:9b:b3:48:37:9e:77:04: bd:be:00:75:3e:86:7f:87:b2:4c:b4:01:e6:3a:0a: 26:0b:80:2d:d7:ea:b5:f5:cf:76:47:c6:df:bc:73: 53:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:20:C2:3D:22:49:1C:22:EA:44:D5:58:EB:F8:A1:25:79:19:B0:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/f285d95a-b783-3400-8db8-8b30c968f7c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl X509v3 Authority Key Identifier: keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer sbgp-ipAddrBlock: critical IPv4: 204.15.220.0/22 208.86.120.0/21 IPv6: 2606:3840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:6a:36:22:f4:e5:3f:30:ac:8d:67:8b:8a:49:9d:80:97:36: 31:b8:d5:3a:22:2c:45:39:56:2c:b7:89:b6:2e:13:52:82:58: db:57:74:dc:19:45:f5:3a:d5:b9:d2:2f:5a:a4:79:79:b5:90: 84:a5:54:83:b4:3c:ca:04:3a:a0:d3:0a:5f:0f:36:a4:dc:f2: 81:fc:f5:b5:65:f3:23:f9:bb:f3:db:5a:37:65:88:f2:c8:0b: ce:88:7f:53:7b:38:72:19:9d:0d:0f:2b:96:c5:3f:cd:24:68: be:4e:33:52:a1:1b:eb:6e:a1:cf:0b:18:e9:57:b0:06:dd:ab: 79:dd:07:8f:97:43:6a:83:56:f2:af:2b:09:14:12:36:3f:c1: 31:36:f8:a4:4f:57:b0:ae:dd:53:e8:93:de:41:b2:69:9f:7c: 7a:bb:99:03:f3:8c:3e:fe:4e:98:96:2e:90:61:4e:04:8e:8a: d2:8b:82:c0:74:d6:69:28:a3:9f:48:03:20:3a:c5:d3:20:3b: ba:20:ce:ac:45:44:20:90:79:ec:93:44:18:60:ca:bd:fd:1c: 14:fd:2a:13:f1:59:20:61:40:51:0b:23:2f:0f:94:67:dd:cc: 79:fe:bc:c5:f0:b3:88:f1:fb:02:b3:2b:b4:44:5d:d7:b3:61: b9:bb:49:47 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEVzTaueOkWVPZlkUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmNlOTVjYjItMzk4Zi00NTc0LWJhZTAtNTIyYjc0ZTAz ZjcxMB4XDTI0MDQwNjAxMDAyNloXDTI0MDcwNTAxMDAyNlowLzEtMCsGA1UEAxMk NzZkOTgzNzEtZDk1Ny00OGFhLWIxMTYtOTIzZGRhY2VhNWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd0voKunfyS7uUYMWjz45UwW4qW6vZC2MY9f R+Tf0MI5zkqzXMStYFlx4lhLMkqI6copaDWLMV9yFDOULMgXUSmu/+kzbARiaeIx XqZJ4vFt6CA2uHr8X4USu9C8sLsD0o7ywZuSfoMDGZViCQ3qioU5uHjBIwJ+wKGs GajLCk6E80bir0Z5UZQ9xPQ/dK2jFH/bxByBexRu2D/P4dH0EpS/Rxuo33XGYdl8 H9yT+/cpQpnOVSk6VSgoTJ5iMK/3F03b2pH5s7txp+yHTqYcmGVe1Xx1oWhwZ5uz SDeedwS9vgB1PoZ/h7JMtAHmOgomC4At1+q19c92R8bfvHNT+wIDAQABo4IDajCC A2YwHQYDVR0OBBYEFE4gwj0iSRwi6kTVWOv4oSV5GbDsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5 NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJiNzRlMDNmNzEvZjI4NWQ5NWEtYjc4My0z NDAwLThkYjgtOGIzMGM5NjhmN2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmNlOTVjYjItMzk4Zi00NTc0LWJh ZTAtNTIyYjc0ZTAzZjcxLzZjZTk1Y2IyLTM5OGYtNDU3NC1iYWUwLTUyMmI3NGUw M2Y3MS5jcmwwHwYDVR0jBBgwFoAUzKkX+OZFOjFthwb20W42PmyEf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJi NzRlMDNmNzEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCzA/cAwQD 0FZ4MA0EAgACMAcDBQAmBjhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADtqNiL05T8wrI1ni4pJnYCXNjG4 1ToiLEU5Viy3ibYuE1KCWNtXdNwZRfU61bnSL1qkeXm1kISlVIO0PMoEOqDTCl8P NqTc8oH89bVl8yP5u/PbWjdliPLIC86If1N7OHIZnQ0PK5bFP80kaL5OM1KhG+tu oc8LGOlXsAbdq3ndB4+XQ2qDVvKvKwkUEjY/wTE2+KRPV7Cu3VPok95BsmmffHq7 mQPzjD7+TpiWLpBhTgSOitKLgsB01mkoo59IAyA6xdMgO7ogzqxFRCCQeeyTRBhg yr39HBT9KhPxWSBhQFELIy8PlGfdzHn+vMXws4jx+wKzK7REXdezYbm7SUc= -----END CERTIFICATE-----Generated at Sat Apr 27 15:34:25 2024 by rpki-client on console-ams.rpki-client.org