$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa File: f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa (raw, json) Hash identifier: Xae7rWyu0Yve5T4YYUH1/SFpwYqNHEPMrcf+LqBY2RA= Subject key identifier: 01:71:9C:70:24:7B:25:74:00:65:AD:EF:1F:4E:63:23:99:B3:89:38 Certificate issuer: /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Certificate serial: 010D0C9F4328584510502B65B6F40C9A549A7080 Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa Signing time: Fri 01 Mar 2024 14:00:30 +0000 ROA not before: Fri 01 Mar 2024 14:00:30 +0000 ROA not after: Thu 30 May 2024 13:00:30 +0000 asID: 53768 IP address blocks: 162.134.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:10:50:2b:65:b6:f4:0c:9a:54:9a:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Validity Not Before: Mar 1 14:00:30 2024 GMT Not After : May 30 13:00:30 2024 GMT Subject: CN=942e4d0a-c3e9-4fc4-b327-8399ffa29509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:33:8e:59:cf:1e:cb:ec:d2:23:3c:35:33:7d: 52:2a:e2:4a:f8:03:d6:8b:0b:3c:a1:d2:e8:35:b5: 8a:92:39:f1:19:45:dc:27:4c:5f:b5:91:a6:78:b2: b3:18:c7:80:af:32:2d:0f:45:fd:cb:ad:3d:16:59: 01:f3:a7:32:29:3b:00:06:bf:37:11:72:89:ca:5c: 0c:4f:76:7a:3f:a5:4b:51:e7:53:8e:75:8b:c4:62: 91:d7:77:a3:8c:3e:64:1a:fe:1f:4e:15:81:1e:18: 0e:e6:ef:c0:c0:86:b9:19:65:5f:cc:17:ac:8b:37: 0d:8c:23:68:a7:04:be:c4:ca:b4:6b:c9:e6:9d:3d: cf:d5:ae:98:cc:c0:43:1e:2b:a9:b9:b3:b0:0f:17: a4:c3:74:07:ec:79:f9:ee:49:d2:c8:53:ef:0c:b8: 89:67:d9:10:d4:b5:f7:5d:01:b2:cf:17:29:4c:67: 84:b5:21:df:58:99:86:d9:e1:ca:5b:d2:ba:c3:8a: e9:30:09:9a:71:cc:79:cf:98:a6:36:8f:ee:fd:ce: 54:97:5e:82:86:84:1a:79:9c:09:9b:66:1f:b3:1e: c2:4e:69:83:b9:87:55:73:2b:04:b0:98:f7:29:f6: b7:e0:22:68:a3:30:ac:bc:ab:49:48:c1:ea:4f:44: 9e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:71:9C:70:24:7B:25:74:00:65:AD:EF:1F:4E:63:23:99:B3:89:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl X509v3 Authority Key Identifier: keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer sbgp-ipAddrBlock: critical IPv4: 162.134.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:c8:e6:b6:df:36:f2:4a:46:2e:31:bc:50:57:59:81:0f:2c: 7d:7f:11:bf:6c:23:ed:e2:c9:ef:3c:1d:70:32:85:24:6d:e7: 54:98:85:b6:8a:42:ee:cb:b0:be:41:e2:3e:52:1f:4d:1b:4d: bd:db:e9:88:0b:db:1e:9d:ba:a6:ce:3b:f3:56:89:54:19:d5: 2c:cc:c6:68:91:cc:73:fc:c0:5e:26:84:39:df:a8:45:ed:87: f3:23:4a:81:ef:03:0a:ac:4d:2a:ee:55:be:ac:00:77:f5:07: 04:a5:9f:44:3d:25:03:cd:d1:14:cc:9a:61:0b:4c:fd:83:09: 85:82:ed:77:10:da:55:7a:e4:3b:f7:7e:7a:53:eb:64:55:23: 34:94:32:1b:28:27:9b:9b:3c:fd:70:82:aa:4e:5b:f3:18:74: 74:de:f1:69:b3:be:ca:ff:5b:e6:8a:09:f8:93:f9:2f:b3:bd: 57:d1:6a:11:24:84:c3:4a:1f:07:6e:4d:05:2b:20:a1:36:71: ba:7c:4d:72:06:da:de:e3:5d:ec:3c:38:c5:7d:67:1b:05:07: 06:ff:46:4f:95:2f:d0:b1:5f:88:b7:1c:56:f0:e1:3b:15:96: 02:61:a6:f8:f7:19:74:96:d4:08:92:5f:f5:95:35:3b:04:9e: 39:9c:d1:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUQUCtltvQMmlSacIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTBmOWFjZjItNWExMS00OTJmLTkzZTEtMWUyMjFhNmY0 YTkyMB4XDTI0MDMwMTE0MDAzMFoXDTI0MDUzMDEzMDAzMFowLzEtMCsGA1UEAxMk OTQyZTRkMGEtYzNlOS00ZmM0LWIzMjctODM5OWZmYTI5NTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDOOWc8ey+zSIzw1M31SKuJK+APWiws8odLo NbWKkjnxGUXcJ0xftZGmeLKzGMeArzItD0X9y609FlkB86cyKTsABr83EXKJylwM T3Z6P6VLUedTjnWLxGKR13ejjD5kGv4fThWBHhgO5u/AwIa5GWVfzBesizcNjCNo pwS+xMq0a8nmnT3P1a6YzMBDHiupubOwDxekw3QH7Hn57knSyFPvDLiJZ9kQ1LX3 XQGyzxcpTGeEtSHfWJmG2eHKW9K6w4rpMAmaccx5z5imNo/u/c5Ul16ChoQaeZwJ m2Yfsx7CTmmDuYdVcysEsJj3Kfa34CJoozCsvKtJSMHqT0Se8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFxnHAkeyV0AGWt7x9OYyOZs4k4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5 YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIyMWE2ZjRhOTIvZjUzOWNmZDEtOTUwMy0z MWUwLWEzODMtMmRiZTNiYWNkODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTBmOWFjZjItNWExMS00OTJmLTkz ZTEtMWUyMjFhNmY0YTkyL2EwZjlhY2YyLTVhMTEtNDkyZi05M2UxLTFlMjIxYTZm NGE5Mi5jcmwwHwYDVR0jBBgwFoAU/4vCxbqVi6kRyVwnWnCARvtLmYgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIy MWE2ZjRhOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAooaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7I5rbfNvJKRi4xvFBXWYEPLH1/Eb9sI+3iye88HXAyhSRt51SYhbaK Qu7LsL5B4j5SH00bTb3b6YgL2x6duqbOO/NWiVQZ1SzMxmiRzHP8wF4mhDnfqEXt h/MjSoHvAwqsTSruVb6sAHf1BwSln0Q9JQPN0RTMmmELTP2DCYWC7XcQ2lV65Dv3 fnpT62RVIzSUMhsoJ5ubPP1wgqpOW/MYdHTe8Wmzvsr/W+aKCfiT+S+zvVfRahEk hMNKHwduTQUrIKE2cbp8TXIG2t7jXew8OMV9ZxsFBwb/Rk+VL9CxX4i3HFbw4TsV lgJhpvj3GXSW1AiSX/WVNTsEnjmc0Vk= -----END CERTIFICATE-----Generated at Sun May 5 01:28:14 2024 by rpki-client on console-ams.rpki-client.org