$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/46e9f517-eb87-34a5-9509-23f3b4683a98.roa File: 46e9f517-eb87-34a5-9509-23f3b4683a98.roa (raw, json) Hash identifier: 6ZN3mVo80Ja/V3+Qh4zoFNEo8Tpru60wdOscb87Ywa8= Subject key identifier: 84:00:3F:79:88:4A:91:9C:CE:DD:A7:10:C1:81:DD:4D:7F:46:96:FD Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F43285841E46CAC3F1399AFD4635D4980 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/46e9f517-eb87-34a5-9509-23f3b4683a98.roa Signing time: Mon 15 May 2023 18:21:01 +0000 ROA not before: Mon 15 May 2023 18:21:01 +0000 ROA not after: Wed 21 Jun 2023 18:38:37 +0000 asID: 32780 IP address blocks: 198.145.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 May 2023 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:6c:ac:3f:13:99:af:d4:63:5d:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: May 15 18:21:01 2023 GMT Not After : Jun 21 18:38:37 2023 GMT Subject: CN=2c4814a0-b589-48d1-ba5e-b82d3fd08cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4e:6b:5b:76:4d:13:b8:5b:68:ca:a8:c5:e1: 7e:a2:3d:f6:e4:29:0d:c5:8f:5f:57:b1:ee:05:f2: e5:12:f9:3f:f1:f6:21:c3:75:94:d7:ab:de:4b:26: 75:f2:52:c0:d1:7e:12:9c:30:24:3e:a3:2d:75:3c: b8:64:84:4b:79:e3:13:be:41:05:d3:17:7a:41:5b: ce:be:ce:c7:11:31:6c:22:62:bc:e2:6d:52:b6:49: 9f:b3:b5:1e:84:3b:50:fe:4c:03:73:09:da:72:df: d8:d6:8b:0e:a4:44:02:6c:2f:db:2f:53:46:7a:25: 65:eb:64:82:22:a0:d2:06:b4:4d:cf:0c:3b:d0:1c: 5d:82:fc:7a:14:ed:76:ef:02:a6:2c:1a:22:87:c9: 03:ed:9f:d8:57:ad:fd:a9:01:ca:56:94:14:c7:87: a5:7c:00:81:3c:42:93:14:59:da:06:a4:72:fd:a9: 6c:be:90:37:dc:69:3b:a6:1d:94:98:d0:21:45:07: 35:96:b3:d8:cf:49:9e:3d:1f:45:db:c0:74:55:55: 3a:67:71:77:f6:4d:77:16:a2:b6:01:5d:bc:fe:46: a6:3d:63:3c:e2:54:06:e3:7f:43:27:20:c1:04:e6: 55:70:32:cc:7e:62:46:50:ab:cb:de:7f:dd:f6:1c: 81:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:00:3F:79:88:4A:91:9C:CE:DD:A7:10:C1:81:DD:4D:7F:46:96:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/46e9f517-eb87-34a5-9509-23f3b4683a98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:58:da:07:fe:59:a1:b6:c0:d7:9e:ae:f9:6b:b6:ec:a3:40: cd:57:73:0a:84:07:6e:f6:af:f2:30:d4:5c:84:d9:f3:80:4e: b2:53:ba:6a:05:3e:7e:c8:09:e7:07:ec:63:f9:08:5b:4c:4a: 1b:99:27:ec:c3:cc:0a:5a:0e:90:51:ef:0f:0b:46:a9:9b:ca: 95:b1:9a:d4:40:7f:f6:a8:6c:e9:bf:44:d5:ed:5b:73:de:fd: 9a:6d:19:bb:0a:7b:82:d3:70:dc:3b:7d:70:1e:c4:c6:a3:53: a6:54:8f:64:ae:fc:69:ea:01:f3:17:8d:87:1f:a0:0c:78:33: 76:a3:30:a9:80:79:40:ef:1e:a9:93:c6:a4:af:85:a5:5d:f2: d8:a6:a7:64:5c:50:c4:b3:39:05:eb:03:92:f6:3c:30:df:1c: 29:2f:fd:c6:0a:ee:8e:7b:ee:56:32:a1:fd:a5:5c:42:41:f6: 49:1e:00:a1:89:e5:59:0d:9d:15:2c:a2:49:7c:e0:92:a5:26: 32:1d:d9:73:5b:99:1e:42:0b:b3:31:6d:24:6d:6b:61:cf:d8: 66:0b:c0:b0:c9:25:de:0c:f3:3d:72:3c:1d:6c:b5:54:b2:52: 2a:70:84:21:d9:0e:5f:da:fa:81:0a:0d:77:14:23:7b:5d:57: ba:fd:1e:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkbKw/E5mv1GNdSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTIzMDUxNTE4MjEwMVoXDTIzMDYyMTE4MzgzN1owLzEtMCsGA1UEAxMk MmM0ODE0YTAtYjU4OS00OGQxLWJhNWUtYjgyZDNmZDA4Y2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhE5rW3ZNE7hbaMqoxeF+oj325CkNxY9fV7Hu BfLlEvk/8fYhw3WU16veSyZ18lLA0X4SnDAkPqMtdTy4ZIRLeeMTvkEF0xd6QVvO vs7HETFsImK84m1Stkmfs7UehDtQ/kwDcwnact/Y1osOpEQCbC/bL1NGeiVl62SC IqDSBrRNzww70Bxdgvx6FO127wKmLBoih8kD7Z/YV639qQHKVpQUx4elfACBPEKT FFnaBqRy/alsvpA33Gk7ph2UmNAhRQc1lrPYz0mePR9F28B0VVU6Z3F39k13FqK2 AV28/kamPWM84lQG439DJyDBBOZVcDLMfmJGUKvL3n/d9hyBFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQAP3mISpGczt2nEMGB3U1/Rpb9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNDZlOWY1MTctZWI4Ny0z NGE1LTk1MDktMjNmM2I0NjgzYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5Y2gf+WaG2wNeervlrtuyjQM1XcwqEB272r/Iw1FyE2fOATrJTumoF Pn7ICecH7GP5CFtMShuZJ+zDzApaDpBR7w8LRqmbypWxmtRAf/aobOm/RNXtW3Pe /ZptGbsKe4LTcNw7fXAexMajU6ZUj2Su/GnqAfMXjYcfoAx4M3ajMKmAeUDvHqmT xqSvhaVd8timp2RcUMSzOQXrA5L2PDDfHCkv/cYK7o577lYyof2lXEJB9kkeAKGJ 5VkNnRUsokl84JKlJjId2XNbmR5CC7MxbSRta2HP2GYLwLDJJd4M8z1yPB1stVSy UipwhCHZDl/a+oEKDXcUI3tdV7r9HmQ= -----END CERTIFICATE-----Generated at Mon May 15 18:57:13 2023 by rpki-client on console-ams.rpki-client.org