$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2fb2f41b-197f-3998-95c5-b00e388ae797.roa File: 2fb2f41b-197f-3998-95c5-b00e388ae797.roa (raw, json) Hash identifier: x2qWh1axJDftOXBmuPFp5fqoFiVUCnfjaFqxM5vMy8M= Subject key identifier: 6C:2E:83:FC:6D:82:A1:3E:96:09:A7:C5:1A:C1:08:C8:53:65:24:D5 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F43285841E46CAE7F4D4CF574CF071600 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2fb2f41b-197f-3998-95c5-b00e388ae797.roa Signing time: Mon 15 May 2023 18:21:01 +0000 ROA not before: Mon 15 May 2023 18:21:01 +0000 ROA not after: Sat 01 Jul 2023 11:54:59 +0000 asID: 209181 IP address blocks: 198.145.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 May 2023 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:6c:ae:7f:4d:4c:f5:74:cf:07:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: May 15 18:21:01 2023 GMT Not After : Jul 1 11:54:59 2023 GMT Subject: CN=d99db150-23c9-487d-911c-74668cadcf67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bf:51:5a:07:35:c3:f5:d4:44:9e:f4:df:8a: 12:54:76:a8:39:5f:3e:d7:27:79:a7:9b:22:12:9a: 29:a0:d9:bd:c6:2f:bd:54:ae:7e:91:55:e6:56:80: 19:7a:ff:d5:98:09:a8:e6:13:1c:ea:d3:38:1d:5a: b3:81:bd:f8:6f:02:88:75:af:09:ef:d3:7e:20:ee: 9a:5a:67:22:f9:60:a1:45:84:04:fd:3f:06:44:31: 6d:f1:fd:57:46:e1:7c:a9:b4:0a:8f:c4:3e:28:99: a0:74:e8:40:29:00:10:b3:a4:6e:0c:b4:66:a2:d4: 5e:43:bd:fa:3c:ec:44:33:18:54:7e:23:be:22:a9: 44:da:f3:43:8b:80:ea:54:8a:e6:5d:02:75:a2:23: e9:71:bf:ae:ac:bb:1d:5f:ce:21:e7:a0:2b:12:ce: 11:68:f6:95:1c:41:cc:13:c1:29:ba:07:37:d9:1f: 3d:63:29:ee:b9:c5:9b:77:4b:a3:8f:2b:3f:77:0a: a0:90:d6:aa:5f:ed:3f:5c:e2:ff:9a:f1:4f:7e:ed: a4:54:1f:8c:af:a1:e8:6c:6c:a4:22:20:92:07:8b: 95:33:44:c8:3e:75:c8:bd:f0:23:3c:9a:b1:d2:e4: 03:2e:5d:0e:14:65:e0:fe:1f:ac:ce:d7:3d:80:e3: 97:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:2E:83:FC:6D:82:A1:3E:96:09:A7:C5:1A:C1:08:C8:53:65:24:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2fb2f41b-197f-3998-95c5-b00e388ae797.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:b1:3a:58:b8:f8:cf:af:2d:0a:4c:66:8b:bc:c5:70:53:b6: 5f:ab:49:39:56:12:f2:89:93:d8:2e:8f:92:11:c5:44:22:e3: 2b:8b:5e:74:cd:d4:43:69:d8:35:6c:3b:ac:a3:ac:20:c2:02: 8c:5c:84:f7:89:da:50:d4:6d:55:74:07:ba:cf:34:06:42:da: f6:37:91:6f:12:ad:e9:b0:3a:de:88:c0:87:1e:66:13:81:64: 2b:53:c0:c0:09:9c:f0:de:9b:a2:ea:84:e2:81:7d:4e:7d:b3: 71:70:9e:3b:06:a8:a3:40:27:b1:33:7d:08:cf:14:d6:5c:f3: 90:6c:1b:97:65:e6:4f:96:13:fa:9d:38:af:2a:00:b7:f8:dd: 72:5a:1d:23:de:c0:4e:53:f7:94:a4:d3:4f:11:73:cb:01:4b: 53:aa:72:fa:6b:1f:a3:a0:25:aa:ba:d0:66:c9:1a:1a:9f:61: 85:15:3b:3e:28:ca:d8:29:8e:37:b1:63:53:de:c4:e3:53:b2: f6:e9:4b:a7:ef:5a:46:6d:22:ac:25:48:0d:5a:a5:66:bf:43: 49:f7:e6:90:7d:76:d4:de:bf:2c:19:d2:42:af:a2:e7:e9:b5: f4:8b:16:62:79:42:ac:29:f0:6b:f2:4f:dd:23:0f:56:6b:40: af:39:b7:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkbK5/TUz1dM8HFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTIzMDUxNTE4MjEwMVoXDTIzMDcwMTExNTQ1OVowLzEtMCsGA1UEAxMk ZDk5ZGIxNTAtMjNjOS00ODdkLTkxMWMtNzQ2NjhjYWRjZjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL9RWgc1w/XURJ7034oSVHaoOV8+1yd5p5si EpopoNm9xi+9VK5+kVXmVoAZev/VmAmo5hMc6tM4HVqzgb34bwKIda8J79N+IO6a Wmci+WChRYQE/T8GRDFt8f1XRuF8qbQKj8Q+KJmgdOhAKQAQs6RuDLRmotReQ736 POxEMxhUfiO+IqlE2vNDi4DqVIrmXQJ1oiPpcb+urLsdX84h56ArEs4RaPaVHEHM E8Epugc32R89YynuucWbd0ujjys/dwqgkNaqX+0/XOL/mvFPfu2kVB+Mr6HobGyk IiCSB4uVM0TIPnXIvfAjPJqx0uQDLl0OFGXg/h+sztc9gOOX1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwug/xtgqE+lgmnxRrBCMhTZSTVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMmZiMmY0MWItMTk3Zi0z OTk4LTk1YzUtYjAwZTM4OGFlNzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpGfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISxOli4+M+vLQpMZou8xXBTtl+rSTlWEvKJk9guj5IRxUQi4yuLXnTN 1ENp2DVsO6yjrCDCAoxchPeJ2lDUbVV0B7rPNAZC2vY3kW8SremwOt6IwIceZhOB ZCtTwMAJnPDem6LqhOKBfU59s3FwnjsGqKNAJ7EzfQjPFNZc85BsG5dl5k+WE/qd OK8qALf43XJaHSPewE5T95Sk008Rc8sBS1OqcvprH6OgJaq60GbJGhqfYYUVOz4o ytgpjjexY1PexONTsvbpS6fvWkZtIqwlSA1apWa/Q0n35pB9dtTevywZ0kKvoufp tfSLFmJ5Qqwp8GvyT90jD1ZrQK85t0s= -----END CERTIFICATE-----Generated at Mon May 15 19:17:46 2023 by rpki-client on console-fra.rpki-client.org