$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0639a3ec-6704-3229-98c1-628460a5c2f0.roa File: 0639a3ec-6704-3229-98c1-628460a5c2f0.roa (raw, json) Hash identifier: tNtgROJgW2qEceBh0mO9wgiAmn4oUsU6T0cnbk33n08= Subject key identifier: C6:BA:77:50:1A:5B:E6:59:53:FD:08:48:6D:D6:F1:2E:48:75:D5:6E Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F43285844EED001D183B59086B14D8D00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0639a3ec-6704-3229-98c1-628460a5c2f0.roa Signing time: Sun 18 Feb 2024 14:00:30 +0000 ROA not before: Sun 18 Feb 2024 14:00:30 +0000 ROA not after: Sat 18 May 2024 13:00:30 +0000 asID: 11404 IP address blocks: 192.175.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:ee:d0:01:d1:83:b5:90:86:b1:4d:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Feb 18 14:00:30 2024 GMT Not After : May 18 13:00:30 2024 GMT Subject: CN=fb24e6e7-c0d3-4c5c-9762-3cbba33f61dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b1:de:20:fa:b0:37:64:df:9a:eb:de:fd:a6: 27:71:a2:d1:6c:c0:59:28:3e:47:ba:79:28:a1:af: 73:67:ff:9b:2d:41:dd:d8:7a:51:bf:0e:89:8c:47: 12:31:fd:36:58:dc:d7:b8:f3:89:cb:23:af:ff:f2: 6d:85:3e:0c:89:45:62:59:28:14:06:6b:af:40:90: 19:95:d5:3c:17:fa:ad:7f:58:b3:6a:63:07:95:03: 9b:0e:c7:88:a6:a6:c0:6b:10:ff:39:a0:7a:bd:d4: 98:c5:56:07:09:7f:46:eb:b1:07:7a:47:79:8a:3d: 1d:a9:fa:a5:61:4e:84:c5:94:03:92:2c:b5:6c:fb: 0d:12:cd:f5:f0:78:61:d4:f9:01:74:c5:d8:93:ff: 21:21:74:89:1b:35:6f:9c:64:8b:d8:b7:85:26:8f: be:bf:1b:f2:fd:3d:d2:9f:c0:b7:e7:62:04:a0:63: a3:f0:52:d7:39:dc:5b:34:13:7a:87:98:f8:bd:07: e7:e4:cf:94:e4:bb:01:d7:48:cb:3f:2c:6b:a0:25: ce:39:69:e7:40:86:8f:41:a9:dc:0c:94:08:95:7b: 5a:a1:3a:3d:2e:fb:c1:d7:2f:c4:42:29:17:6d:eb: 2a:40:da:a1:a4:61:3e:9d:af:dc:f9:29:f0:f2:dc: 0d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BA:77:50:1A:5B:E6:59:53:FD:08:48:6D:D6:F1:2E:48:75:D5:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0639a3ec-6704-3229-98c1-628460a5c2f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 192.175.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:11:ca:f8:61:fd:54:b7:a8:f6:3e:cc:d3:87:be:a8:76:e7: 2b:a7:bf:96:8a:67:e4:37:3a:c0:e7:17:3d:64:b6:a4:5c:b4: 5f:45:7f:95:73:da:09:46:20:27:50:10:99:9c:fe:dd:86:ff: 0c:fb:71:36:98:8f:ab:fd:d1:01:64:f0:9a:be:8d:c7:d4:06: a5:04:57:e9:fc:bd:63:2f:9e:36:a2:46:c4:9f:15:e2:26:60: 24:bd:b7:6b:ff:60:40:54:46:1e:b1:06:28:3b:8d:03:57:30: dc:d4:f1:ca:a4:4c:16:31:f4:94:4c:a2:97:98:39:88:22:4e: 44:25:c4:e8:18:ca:97:91:7c:3b:b3:5b:0c:dc:09:77:eb:f4: 85:6e:33:45:94:72:53:9e:21:d7:7a:90:3b:1e:20:ec:e5:fe: 18:69:20:a3:f2:f7:dd:6e:fd:2d:55:6f:e0:8e:35:96:8c:37: 7f:ca:6b:79:6f:81:74:0a:32:18:04:5e:a0:07:32:96:12:86: 50:ec:85:08:7c:34:b5:0f:e0:28:35:69:f2:1d:ff:f1:93:58: 5f:af:ea:2b:27:bd:56:69:66:0a:07:bf:3e:37:31:ca:b1:28: fe:eb:05:3e:6b:0e:4c:9e:a8:fe:98:3e:d3:c0:da:10:bb:31: 81:ce:ac:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETu0AHRg7WQhrFNjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI0MDIxODE0MDAzMFoXDTI0MDUxODEzMDAzMFowLzEtMCsGA1UEAxMk ZmIyNGU2ZTctYzBkMy00YzVjLTk3NjItM2NiYmEzM2Y2MWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrHeIPqwN2Tfmuve/aYncaLRbMBZKD5Hunko oa9zZ/+bLUHd2HpRvw6JjEcSMf02WNzXuPOJyyOv//JthT4MiUViWSgUBmuvQJAZ ldU8F/qtf1izamMHlQObDseIpqbAaxD/OaB6vdSYxVYHCX9G67EHekd5ij0dqfql YU6ExZQDkiy1bPsNEs318Hhh1PkBdMXYk/8hIXSJGzVvnGSL2LeFJo++vxvy/T3S n8C352IEoGOj8FLXOdxbNBN6h5j4vQfn5M+U5LsB10jLPyxroCXOOWnnQIaPQanc DJQIlXtaoTo9LvvB1y/EQikXbesqQNqhpGE+na/c+Snw8twNKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMa6d1AaW+ZZU/0ISG3W8S5IddVuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMDYzOWEzZWMtNjcwNC0z MjI5LTk4YzEtNjI4NDYwYTVjMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwK8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoRyvhh/VS3qPY+zNOHvqh25yunv5aKZ+Q3OsDnFz1ktqRctF9Ff5Vz 2glGICdQEJmc/t2G/wz7cTaYj6v90QFk8Jq+jcfUBqUEV+n8vWMvnjaiRsSfFeIm YCS9t2v/YEBURh6xBig7jQNXMNzU8cqkTBYx9JRMopeYOYgiTkQlxOgYypeRfDuz WwzcCXfr9IVuM0WUclOeIdd6kDseIOzl/hhpIKPy991u/S1Vb+CONZaMN3/Ka3lv gXQKMhgEXqAHMpYShlDshQh8NLUP4Cg1afId//GTWF+v6isnvVZpZgoHvz43Mcqx KP7rBT5rDkyeqP6YPtPA2hC7MYHOrMY= -----END CERTIFICATE-----Generated at Thu May 2 15:00:01 2024 by rpki-client on console-ams.rpki-client.org