$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/4958a300-389c-3447-9137-eb63e47ab7a1.roa File: 4958a300-389c-3447-9137-eb63e47ab7a1.roa (raw, json) Hash identifier: qtQTw0jXCurVPjRFBo7w8uuKDcWP5GVEVp9wgnBnH/Y= Subject key identifier: 9B:C7:A8:72:C7:80:05:AA:5D:A0:46:84:C4:65:86:29:9E:B9:C5:82 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F43285841E46D55824A60B80F9C611980 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/4958a300-389c-3447-9137-eb63e47ab7a1.roa Signing time: Mon 15 May 2023 18:21:01 +0000 ROA not before: Mon 15 May 2023 18:21:01 +0000 ROA not after: Tue 27 Jun 2023 10:51:59 +0000 asID: 262287 IP address blocks: 198.145.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 May 2023 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:6d:55:82:4a:60:b8:0f:9c:61:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: May 15 18:21:01 2023 GMT Not After : Jun 27 10:51:59 2023 GMT Subject: CN=1d1fba42-baf5-4961-a2c3-177fdb17a8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e1:5a:8b:dc:12:b1:17:dd:d9:98:42:49:68: 3f:2d:35:b7:a5:3a:4d:3a:ad:a8:a0:6a:2c:b9:57: 8c:ac:92:e3:63:ad:9d:c9:cd:c5:92:30:14:b6:96: 0d:dc:22:ad:4b:64:03:f8:52:8e:45:db:23:6a:94: c6:74:c6:b0:e8:5a:70:5d:2b:e8:5a:d2:21:23:c0: 5f:01:f4:f8:3c:3e:24:18:2b:3d:72:35:9f:2b:4b: 80:33:0f:67:0f:6a:fb:52:00:24:5d:98:c9:9e:18: 3d:9a:60:a7:29:1b:57:c9:76:62:76:17:07:51:f7: 36:63:45:94:99:f6:d2:fc:07:be:e8:21:de:b5:ed: b0:74:f9:de:ee:21:b7:7b:10:38:ee:97:1d:8d:28: cb:4f:ed:51:71:da:c4:2c:7d:61:62:99:aa:17:ce: 26:4e:e9:34:9b:a9:3d:f5:6b:c6:5b:c1:7d:69:19: 9e:23:72:ff:de:6c:b1:e2:57:01:14:72:58:98:e7: ad:6e:1d:d6:61:e3:02:7b:d8:9a:59:d5:cc:a4:2f: 91:47:22:c7:f9:6a:94:52:51:dc:3e:af:f2:75:6a: 4d:ea:1d:9b:4e:79:5d:d7:7b:b2:bf:8e:1a:4d:fe: e6:2c:4a:63:e5:52:55:f4:ca:50:72:e5:ab:df:d0: 53:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C7:A8:72:C7:80:05:AA:5D:A0:46:84:C4:65:86:29:9E:B9:C5:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/4958a300-389c-3447-9137-eb63e47ab7a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ac:2d:3a:6e:30:ff:5c:99:99:85:6d:fa:fe:d0:e5:2b:cd: 0a:bb:b5:66:d3:6a:b4:0d:af:d9:56:61:84:c4:aa:7f:57:99: f8:00:4b:b8:c7:39:d4:2a:5c:fc:f5:b2:8c:57:91:3c:09:50: ea:05:6a:6c:32:8c:19:5d:8c:2e:db:4f:a0:26:a6:af:11:cb: d2:5d:c7:d4:39:e1:45:ca:e0:c6:a4:8b:3b:9b:21:f7:cb:2b: a3:2a:ff:09:8f:4e:fb:47:b5:d5:6f:97:eb:5a:d9:4b:3e:f7: 71:38:f8:ed:36:6f:c7:34:fe:ec:4d:c2:b1:d7:61:10:e7:a3: 78:67:46:8f:5b:f3:2e:44:13:bb:7a:34:6a:19:25:1f:21:a0: 7d:e2:15:e5:0e:79:fa:2b:05:00:9a:6d:fa:60:8d:fa:33:a9: 61:a6:6e:4a:46:09:76:bc:21:96:c0:fb:4f:cd:02:29:80:26: d6:0a:56:ee:e0:78:ab:d9:87:27:d1:ad:8a:dd:2f:5f:9f:e6: 4c:4c:ee:97:ec:83:27:cc:41:53:fd:e1:ac:2b:aa:37:69:3a: 17:b6:0a:60:a7:76:e5:cb:a6:c9:41:c0:df:70:05:b1:c6:99: dd:85:8f:83:90:8d:c5:d6:fa:03:06:15:f2:c3:cb:38:d1:b2: fa:de:6a:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkbVWCSmC4D5xhGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTIzMDUxNTE4MjEwMVoXDTIzMDYyNzEwNTE1OVowLzEtMCsGA1UEAxMk MWQxZmJhNDItYmFmNS00OTYxLWEyYzMtMTc3ZmRiMTdhOGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOFai9wSsRfd2ZhCSWg/LTW3pTpNOq2ooGos uVeMrJLjY62dyc3FkjAUtpYN3CKtS2QD+FKORdsjapTGdMaw6FpwXSvoWtIhI8Bf AfT4PD4kGCs9cjWfK0uAMw9nD2r7UgAkXZjJnhg9mmCnKRtXyXZidhcHUfc2Y0WU mfbS/Ae+6CHete2wdPne7iG3exA47pcdjSjLT+1RcdrELH1hYpmqF84mTuk0m6k9 9WvGW8F9aRmeI3L/3myx4lcBFHJYmOetbh3WYeMCe9iaWdXMpC+RRyLH+WqUUlHc Pq/ydWpN6h2bTnld13uyv44aTf7mLEpj5VJV9MpQcuWr39BT5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvHqHLHgAWqXaBGhMRlhimeucWCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNDk1OGEzMDAtMzg5Yy0z NDQ3LTkxMzctZWI2M2U0N2FiN2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpGXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFasLTpuMP9cmZmFbfr+0OUrzQq7tWbTarQNr9lWYYTEqn9XmfgAS7jH OdQqXPz1soxXkTwJUOoFamwyjBldjC7bT6Ampq8Ry9Jdx9Q54UXK4MakizubIffL K6Mq/wmPTvtHtdVvl+ta2Us+93E4+O02b8c0/uxNwrHXYRDno3hnRo9b8y5EE7t6 NGoZJR8hoH3iFeUOeforBQCabfpgjfozqWGmbkpGCXa8IZbA+0/NAimAJtYKVu7g eKvZhyfRrYrdL1+f5kxM7pfsgyfMQVP94awrqjdpOhe2CmCnduXLpslBwN9wBbHG md2Fj4OQjcXW+gMGFfLDyzjRsvreatk= -----END CERTIFICATE-----Generated at Mon May 15 19:17:46 2023 by rpki-client on console-fra.rpki-client.org