$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/1bc1a61a-434a-3e22-9c8f-6248ad17612b.roa File: 1bc1a61a-434a-3e22-9c8f-6248ad17612b.roa (raw, json) Hash identifier: YMr8RF1raXKEeidQdWX+m87oq0wAY2LwGjCBhpMoBg4= Subject key identifier: 6A:E6:A3:C2:63:4F:93:A9:C2:E5:03:EE:B7:21:0C:C5:2E:CA:BB:C8 Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F432858450C201D7503A4B0A9D81B3080 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/1bc1a61a-434a-3e22-9c8f-6248ad17612b.roa Signing time: Thu 29 Feb 2024 02:00:27 +0000 ROA not before: Thu 29 Feb 2024 02:00:27 +0000 ROA not after: Wed 29 May 2024 01:00:27 +0000 asID: 396194 IP address blocks: 104.153.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:0c:20:1d:75:03:a4:b0:a9:d8:1b:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Feb 29 02:00:27 2024 GMT Not After : May 29 01:00:27 2024 GMT Subject: CN=fcf50f55-a3ba-4c4e-a5db-cca33e8bbe1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0c:20:5b:23:30:ca:27:7b:c8:99:4e:a4:26: 67:80:f6:2c:10:08:83:4d:32:6f:33:b2:63:47:58: a6:e8:10:3c:b2:1a:e9:e2:29:bb:5b:09:5b:7b:7f: 34:ef:26:1b:59:1e:1b:72:cb:d4:f7:5b:e3:e4:10: 85:28:cd:f3:d9:49:b6:58:99:e1:1e:d7:2c:e9:77: d2:de:92:e0:38:87:e8:db:05:73:2b:fd:e5:06:e7: b0:f4:1c:1b:d3:ea:60:64:3a:41:d5:2e:10:38:86: 2a:db:84:b6:f5:86:b8:e3:e4:cd:92:09:22:f5:cd: 03:1e:f6:6e:e3:fd:16:5a:44:ba:64:90:21:28:36: 26:da:14:b8:21:c0:bb:3e:e6:d2:a0:4c:d8:db:cd: a4:83:4e:e0:d2:61:85:6e:2b:f5:0f:d3:77:b9:61: 3e:2b:de:7c:08:65:dd:97:09:fa:b3:62:aa:6b:94: b8:e4:dd:c3:a5:78:6c:7d:3f:a0:63:e3:f5:e6:e3: f8:72:df:be:9a:00:d1:a6:f8:43:8a:ea:81:0a:45: 4d:a4:e5:84:86:69:8e:63:8f:f0:2b:fa:d5:1c:8c: 09:b0:99:ba:0d:12:64:44:c1:98:38:56:0b:93:62: 0c:9c:28:4e:cf:cf:50:2f:11:86:0c:bd:8b:58:c1: 8c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E6:A3:C2:63:4F:93:A9:C2:E5:03:EE:B7:21:0C:C5:2E:CA:BB:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/1bc1a61a-434a-3e22-9c8f-6248ad17612b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 104.153.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:b0:37:87:f4:92:89:10:1d:18:e3:a6:fa:51:64:0a:88:22: 6a:8d:a0:a1:7f:d5:bf:6f:25:34:80:d4:48:91:b6:1e:fb:c7: e9:cd:29:ac:a7:85:aa:72:74:50:d2:22:cd:b1:a5:41:27:ae: 0f:66:46:c9:b0:75:40:db:97:ff:a5:38:03:0a:5b:17:98:c4: a9:c8:cb:91:17:52:06:f2:db:70:bf:18:6b:93:f2:23:55:b9: 69:27:7a:06:3b:0c:f7:70:4c:b3:c4:bb:2d:eb:26:19:f2:58: 45:20:a0:4d:ce:91:00:3b:4a:c9:32:4a:54:73:7d:4e:09:e8: 3a:1f:1b:b5:5c:fb:82:cd:43:68:02:cf:46:7e:00:65:2b:cb: 7c:99:71:29:b9:57:0a:3b:4b:a3:93:4d:0e:5a:60:e2:62:44: 05:33:1e:f2:ba:bf:96:f5:f0:59:1e:f8:b3:0c:f6:a0:d1:b2: f3:e9:3b:3f:c7:55:b8:91:ff:92:f1:a0:98:05:27:c8:80:54: f5:cf:59:70:09:1e:be:a1:40:26:84:91:fb:d8:c2:70:05:f3: 6d:91:50:13:13:e5:77:1e:85:10:c8:8d:6c:19:0c:25:e5:93: 69:5c:e3:3d:68:1f:e9:13:c2:ff:01:49:26:9d:be:5c:cb:61: 4b:c7:60:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUMIB11A6SwqdgbMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI0MDIyOTAyMDAyN1oXDTI0MDUyOTAxMDAyN1owLzEtMCsGA1UEAxMk ZmNmNTBmNTUtYTNiYS00YzRlLWE1ZGItY2NhMzNlOGJiZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gwgWyMwyid7yJlOpCZngPYsEAiDTTJvM7Jj R1im6BA8shrp4im7Wwlbe3807yYbWR4bcsvU91vj5BCFKM3z2Um2WJnhHtcs6XfS 3pLgOIfo2wVzK/3lBuew9Bwb0+pgZDpB1S4QOIYq24S29Ya44+TNkgki9c0DHvZu 4/0WWkS6ZJAhKDYm2hS4IcC7PubSoEzY282kg07g0mGFbiv1D9N3uWE+K958CGXd lwn6s2Kqa5S45N3DpXhsfT+gY+P15uP4ct++mgDRpvhDiuqBCkVNpOWEhmmOY4/w K/rVHIwJsJm6DRJkRMGYOFYLk2IMnChOz89QLxGGDL2LWMGMAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrmo8JjT5OpwuUD7rchDMUuyrvIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvMWJjMWE2MWEtNDM0YS0z ZTIyLTljOGYtNjI0OGFkMTc2MTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJmWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOwN4f0kokQHRjjpvpRZAqIImqNoKF/1b9vJTSA1EiRth77x+nNKayn hapydFDSIs2xpUEnrg9mRsmwdUDbl/+lOAMKWxeYxKnIy5EXUgby23C/GGuT8iNV uWknegY7DPdwTLPEuy3rJhnyWEUgoE3OkQA7SskySlRzfU4J6DofG7Vc+4LNQ2gC z0Z+AGUry3yZcSm5Vwo7S6OTTQ5aYOJiRAUzHvK6v5b18Fke+LMM9qDRsvPpOz/H VbiR/5LxoJgFJ8iAVPXPWXAJHr6hQCaEkfvYwnAF822RUBMT5XcehRDIjWwZDCXl k2lc4z1oH+kTwv8BSSadvlzLYUvHYAM= -----END CERTIFICATE-----Generated at Mon May 6 14:53:55 2024 by rpki-client on console-fra.rpki-client.org