$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/5af1468e-e773-37fd-8eae-6322af02b768.roa File: 5af1468e-e773-37fd-8eae-6322af02b768.roa (raw, json) Hash identifier: sk4ITkRBg+/cW2hkANZzZ7ltBRUGwCbk6+/zUq50RoI= Subject key identifier: 32:C9:D6:BF:6A:13:A1:1B:16:F4:5C:44:5C:06:AE:C6:9F:D1:74:04 Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed Certificate serial: 010D0C9F4328584561286A7FA31F17B9FA8C6A80 Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/5af1468e-e773-37fd-8eae-6322af02b768.roa Signing time: Sat 30 Mar 2024 13:00:38 +0000 ROA not before: Sat 30 Mar 2024 13:00:38 +0000 ROA not after: Fri 28 Jun 2024 13:00:38 +0000 asID: 33139 IP address blocks: 66.49.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:61:28:6a:7f:a3:1f:17:b9:fa:8c:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed Validity Not Before: Mar 30 13:00:38 2024 GMT Not After : Jun 28 13:00:38 2024 GMT Subject: CN=09031b63-4c7c-4e99-9230-d16fc3a644c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:62:f4:ec:4d:1f:eb:cc:63:9b:fc:7d:0a:3a: 43:2b:18:0f:70:22:3b:e2:f9:01:33:8e:4c:c3:58: e4:66:0d:ee:11:4f:ae:01:ed:a4:53:23:4a:41:2d: 46:05:1e:4b:5f:d9:05:44:82:61:80:be:26:55:12: 2b:4b:72:4d:1e:cf:49:16:e2:42:b3:db:ba:2d:f8: e0:9c:68:fa:57:ab:f1:2a:d3:b8:a1:d8:a1:e3:73: 9b:29:07:2b:20:34:3d:ab:1e:48:6d:26:bc:89:a0: e5:86:ac:5c:8c:2d:c1:a5:53:63:94:2b:77:f1:c9: a5:68:20:62:eb:6a:db:3b:4b:2a:dd:9e:23:ea:b0: 1a:4e:89:a5:6a:8a:38:bc:b7:c0:4d:23:c2:5b:96: 9e:57:19:44:01:c1:69:22:4f:6f:0b:82:dd:25:23: 52:0f:dc:61:6f:71:fe:b1:ee:6f:64:af:64:12:e9: f0:d3:fd:52:85:46:80:ac:ea:fa:ac:01:54:11:b3: 52:59:55:b1:ad:60:36:bf:7c:cc:b3:53:8a:e6:10: 61:f9:9f:0c:7a:2e:73:8b:23:51:ab:5b:ad:aa:78: 17:81:05:7f:36:b5:2a:72:16:be:d2:9f:6c:62:25: e9:dc:07:df:fc:ae:89:5e:c9:f2:ac:fc:3f:09:78: 9e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C9:D6:BF:6A:13:A1:1B:16:F4:5C:44:5C:06:AE:C6:9F:D1:74:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/5af1468e-e773-37fd-8eae-6322af02b768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl X509v3 Authority Key Identifier: keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer sbgp-ipAddrBlock: critical IPv4: 66.49.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c5:9f:ad:21:a6:88:fa:86:57:b9:22:92:e0:af:60:f4:9b: 08:12:64:f5:97:8e:2c:66:12:24:e3:22:92:92:93:ff:77:f5: aa:17:20:19:98:ee:e6:f1:9c:19:69:3a:82:49:0e:dc:c9:a6: 02:54:09:38:34:fc:ed:2e:f5:32:de:cd:ec:30:64:c4:00:ed: f6:4f:ae:42:0e:3d:6c:81:93:fa:d6:04:6a:3c:c4:29:aa:13: d6:09:dc:85:92:cd:40:5e:b9:81:0d:23:21:44:e6:0e:d8:ec: c0:4f:01:0c:1a:5e:eb:62:de:d8:e3:56:4b:e1:2f:54:27:79: 99:60:77:a6:85:a4:f4:9d:f0:43:ba:33:3e:40:9b:10:e5:b5: e9:49:c5:7a:9b:c3:fb:2e:9c:8f:9e:24:48:5e:62:84:3e:e5: 97:26:29:6a:73:f9:07:7d:0b:18:e5:32:c2:c6:65:30:c1:de: 65:65:57:86:0b:ee:a2:d2:88:af:68:e1:94:f3:40:06:c3:f2: b8:6b:52:0b:67:0c:a0:69:c1:59:f3:6b:13:6f:5d:ff:b3:ca: 26:5c:c5:c1:4b:27:0e:20:6c:5e:e2:cc:a1:df:5c:a4:92:93: 72:8e:85:24:57:81:0e:85:87:61:e8:1f:1f:1f:51:7a:61:b3: 57:0c:ac:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVhKGp/ox8XufqMaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy NGVkMB4XDTI0MDMzMDEzMDAzOFoXDTI0MDYyODEzMDAzOFowLzEtMCsGA1UEAxMk MDkwMzFiNjMtNGM3Yy00ZTk5LTkyMzAtZDE2ZmMzYTY0NGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymL07E0f68xjm/x9CjpDKxgPcCI74vkBM45M w1jkZg3uEU+uAe2kUyNKQS1GBR5LX9kFRIJhgL4mVRIrS3JNHs9JFuJCs9u6Lfjg nGj6V6vxKtO4odih43ObKQcrIDQ9qx5IbSa8iaDlhqxcjC3BpVNjlCt38cmlaCBi 62rbO0sq3Z4j6rAaTomlaoo4vLfATSPCW5aeVxlEAcFpIk9vC4LdJSNSD9xhb3H+ se5vZK9kEunw0/1ShUaArOr6rAFUEbNSWVWxrWA2v3zMs1OK5hBh+Z8Mei5ziyNR q1utqngXgQV/NrUqcha+0p9sYiXp3Aff/K6JXsnyrPw/CXiewQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLJ1r9qE6EbFvRcRFwGrsaf0XQEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvNWFmMTQ2OGUtZTc3My0z N2ZkLThlYWUtNjMyMmFmMDJiNzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx OTEyZjI0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjH9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDFn60hpoj6hle5IpLgr2D0mwgSZPWXjixmEiTjIpKSk/939aoXIBmY 7ubxnBlpOoJJDtzJpgJUCTg0/O0u9TLezewwZMQA7fZPrkIOPWyBk/rWBGo8xCmq E9YJ3IWSzUBeuYENIyFE5g7Y7MBPAQwaXuti3tjjVkvhL1QneZlgd6aFpPSd8EO6 Mz5AmxDltelJxXqbw/sunI+eJEheYoQ+5ZcmKWpz+Qd9CxjlMsLGZTDB3mVlV4YL 7qLSiK9o4ZTzQAbD8rhrUgtnDKBpwVnzaxNvXf+zyiZcxcFLJw4gbF7izKHfXKSS k3KOhSRXgQ6Fh2HoHx8fUXphs1cMrP0= -----END CERTIFICATE-----Generated at Sun May 5 15:51:00 2024 by rpki-client on console-ams.rpki-client.org