$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/02919a81-7f34-3ce8-96c2-dc6922518d5e.roa File: 02919a81-7f34-3ce8-96c2-dc6922518d5e.roa (raw, json) Hash identifier: d5XDsFUSa6rZzKkYwwTSookxjvqDHkjrTLNxRE6Vg5w= Subject key identifier: 93:18:97:BD:31:2C:D2:C0:7B:3C:2C:C6:F7:C8:35:7E:D9:19:73:D7 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F43285844E7D53AADFBD8157052233600 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/02919a81-7f34-3ce8-96c2-dc6922518d5e.roa Signing time: Fri 16 Feb 2024 02:00:26 +0000 ROA not before: Fri 16 Feb 2024 02:00:26 +0000 ROA not after: Thu 16 May 2024 01:00:26 +0000 asID: 394437 IP address blocks: 198.145.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:e7:d5:3a:ad:fb:d8:15:70:52:23:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Feb 16 02:00:26 2024 GMT Not After : May 16 01:00:26 2024 GMT Subject: CN=1ba815ab-268a-414f-ba61-7b6bb3519a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:4e:bc:dc:c6:c8:c1:0e:d6:98:37:c8:d0: 73:3e:14:ea:5c:ca:80:16:cc:dd:de:52:49:35:cf: f7:66:da:6c:24:12:39:f8:ef:ea:43:c4:bc:10:52: d6:ba:53:43:e0:fc:37:79:24:d8:db:3e:68:49:e6: 6e:86:f7:31:04:82:46:fb:3a:23:19:c4:3e:f3:5b: db:08:91:4d:c4:fb:65:96:fc:07:9c:46:eb:6f:a8: a2:ea:4b:86:fd:33:b4:60:c1:53:75:47:34:e3:36: 5f:1f:eb:ed:7e:81:10:f8:30:c7:26:5a:1b:34:51: 1e:a8:0a:79:55:fc:ff:c0:03:52:d7:95:d3:78:99: 54:30:fe:b8:7c:8e:e6:2e:59:92:15:2e:b1:56:24: 3c:08:11:ca:70:1d:61:14:c1:e2:79:9d:dc:47:98: 53:8d:98:a3:c4:cf:4a:ec:48:72:44:fc:9c:cc:cf: 5b:a3:23:f0:63:54:40:5a:02:b6:a2:22:97:bd:d5: 91:3e:ce:91:c1:57:33:9a:1f:df:f7:f9:dd:b6:65: 20:8e:fd:89:9f:b2:d9:d4:1a:47:e9:20:55:cb:18: 59:cf:44:50:b0:d3:26:b2:43:5b:a0:57:e9:fd:27: 34:41:cc:fd:c9:09:b7:9f:41:22:6e:86:53:91:41: 21:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:18:97:BD:31:2C:D2:C0:7B:3C:2C:C6:F7:C8:35:7E:D9:19:73:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/02919a81-7f34-3ce8-96c2-dc6922518d5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:84:cb:af:76:54:59:50:56:be:f5:81:e1:d9:f7:e6:f5:44: e3:66:93:90:86:be:a7:10:0d:16:65:61:2d:cb:be:93:10:83: 75:2e:ac:f1:b0:40:11:44:89:06:ab:fd:a1:a6:83:59:d2:c5: 5a:e9:de:4e:6e:51:0e:19:4d:cb:2c:88:e4:a0:54:d3:0c:65: 78:5f:2a:76:9b:bb:d1:eb:12:00:7c:78:32:48:31:af:b9:a0: 71:42:e3:cf:50:8b:d4:57:52:5e:2b:ba:0f:b2:9e:3b:bc:5f: 2b:35:d3:3d:e0:fa:4f:26:37:63:5d:ca:79:2f:d5:6f:e8:45: 23:03:bb:3c:0a:a6:5f:77:b9:96:20:b1:f7:10:62:49:4c:69: d3:09:13:81:bc:e6:e6:0e:7d:72:57:fb:fe:75:2e:47:99:29: d1:31:68:4a:2e:7f:1a:17:cd:5f:d7:be:40:0b:77:22:1e:08: de:33:0f:b0:c6:af:78:e5:69:5b:7c:5c:c0:cb:b4:7c:60:e8: af:92:74:e0:c9:4c:6f:30:b4:b7:04:2e:df:f4:0b:f0:34:de: 48:32:55:b4:04:e5:31:a4:be:33:44:11:fc:10:98:41:8d:4a: 43:8c:d8:53:84:3b:56:de:04:2a:9d:33:3d:ec:c3:d9:58:28: c1:0b:43:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETn1Tqt+9gVcFIjNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI0MDIxNjAyMDAyNloXDTI0MDUxNjAxMDAyNlowLzEtMCsGA1UEAxMk MWJhODE1YWItMjY4YS00MTRmLWJhNjEtN2I2YmIzNTE5YTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsepOvNzGyMEO1pg3yNBzPhTqXMqAFszd3lJJ Nc/3ZtpsJBI5+O/qQ8S8EFLWulND4Pw3eSTY2z5oSeZuhvcxBIJG+zojGcQ+81vb CJFNxPtllvwHnEbrb6ii6kuG/TO0YMFTdUc04zZfH+vtfoEQ+DDHJlobNFEeqAp5 Vfz/wANS15XTeJlUMP64fI7mLlmSFS6xViQ8CBHKcB1hFMHieZ3cR5hTjZijxM9K 7EhyRPyczM9boyPwY1RAWgK2oiKXvdWRPs6RwVczmh/f9/ndtmUgjv2Jn7LZ1BpH 6SBVyxhZz0RQsNMmskNboFfp/Sc0Qcz9yQm3n0EiboZTkUEhzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMYl70xLNLAezwsxvfINX7ZGXPXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMDI5MTlhODEtN2YzNC0z Y2U4LTk2YzItZGM2OTIyNTE4ZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpHsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaEy692VFlQVr71geHZ9+b1RONmk5CGvqcQDRZlYS3LvpMQg3UurPGw QBFEiQar/aGmg1nSxVrp3k5uUQ4ZTcssiOSgVNMMZXhfKnabu9HrEgB8eDJIMa+5 oHFC489Qi9RXUl4rug+ynju8Xys10z3g+k8mN2Ndynkv1W/oRSMDuzwKpl93uZYg sfcQYklMadMJE4G85uYOfXJX+/51LkeZKdExaEoufxoXzV/XvkALdyIeCN4zD7DG r3jlaVt8XMDLtHxg6K+SdODJTG8wtLcELt/0C/A03kgyVbQE5TGkvjNEEfwQmEGN SkOM2FOEO1beBCqdMz3sw9lYKMELQzg= -----END CERTIFICATE-----Generated at Sat Apr 20 05:45:55 2024 by rpki-client on console-fra.rpki-client.org