$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/67efe0c1-1e58-3a26-99d2-98576c1a96d4.roa File: 67efe0c1-1e58-3a26-99d2-98576c1a96d4.roa (raw, json) Hash identifier: kGmjrjs7dXTyYoFIxFRCKo8AkhPue6QYwY8O34o1PLM= Subject key identifier: A3:AA:8D:3F:CF:4F:0C:14:C1:B7:27:72:64:60:D7:96:0A:51:3C:4B Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F43285844EED00A81C72850FADC165880 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/67efe0c1-1e58-3a26-99d2-98576c1a96d4.roa Signing time: Sun 18 Feb 2024 14:00:30 +0000 ROA not before: Sun 18 Feb 2024 14:00:30 +0000 ROA not after: Sat 18 May 2024 13:00:30 +0000 asID: 54858 IP address blocks: 199.59.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:ee:d0:0a:81:c7:28:50:fa:dc:16:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Feb 18 14:00:30 2024 GMT Not After : May 18 13:00:30 2024 GMT Subject: CN=71a09b71-4dbf-428a-ac3e-f0705b94a752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:da:2d:02:80:80:6c:6b:c1:2d:fa:d8:c0:f3: 55:08:76:59:5d:99:23:85:f1:d9:3c:6b:64:7b:98: 0d:54:7a:34:61:75:33:fb:4f:7b:59:b8:6c:3f:89: 04:7e:fa:70:14:fa:5a:a2:0c:a8:90:52:98:9b:fe: 18:d4:fb:8b:4a:50:19:09:d8:c7:38:07:22:0c:c8: 11:fc:df:94:47:ce:6d:5c:87:e1:c7:50:06:55:31: e9:c6:65:38:b4:79:3a:64:84:42:34:cb:e7:eb:77: 48:b0:e3:7d:fc:8d:7d:57:96:6d:22:e6:3b:73:1c: 4c:0e:c7:be:35:7a:7c:3a:d9:55:c1:4a:70:05:66: 13:13:ca:ab:5b:15:9d:ec:d1:5c:9a:a5:f1:e1:66: 54:bc:0f:88:5c:a8:08:91:b4:c4:84:55:42:36:ad: f6:d5:92:2d:46:3e:55:ea:3d:9b:ba:fb:3e:06:6f: d1:41:69:64:99:a9:2a:e6:ec:b0:b4:1a:d0:ab:54: 19:f6:77:92:2d:b1:a5:12:a8:f6:6b:a5:8b:9f:7a: d0:59:a0:15:09:92:06:62:36:4c:5a:23:2f:ca:b0: 80:37:59:98:63:9d:ef:44:04:f6:f8:2d:c3:98:1e: ae:32:eb:b3:1d:c7:9c:82:e3:d1:22:60:7f:e6:f0: ad:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AA:8D:3F:CF:4F:0C:14:C1:B7:27:72:64:60:D7:96:0A:51:3C:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/67efe0c1-1e58-3a26-99d2-98576c1a96d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.59.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:1a:c3:6a:60:9f:11:8d:b5:de:0d:46:14:25:bd:69:f1:e9: 33:ae:b5:cc:03:14:d8:47:16:c8:52:d2:0c:29:8b:32:41:5d: ea:d8:d0:1c:ab:bd:2b:c4:bf:6c:74:15:53:70:36:51:88:67: 0a:31:55:23:43:6d:ba:ff:a6:24:6b:c3:fd:93:63:e1:2a:a0: 02:d3:de:20:90:9f:4d:16:b3:d9:9b:f5:44:5b:51:e3:bb:1e: 40:bf:ba:3f:e1:e9:39:f7:66:78:45:a4:27:ca:2a:0f:2d:eb: c2:95:26:96:4f:60:ef:7a:f4:97:e8:02:2a:71:ed:7b:01:db: 87:ca:9b:03:68:a5:91:b2:ff:95:28:90:7e:b4:91:2b:18:c2: 60:81:bd:45:46:8c:c5:7c:48:6e:92:c5:a2:e0:d5:93:dd:17: 69:fb:30:e8:e6:2d:d9:c9:9f:4d:b2:f0:97:d8:88:66:2c:f8: 2f:23:54:ff:09:1f:80:b9:c4:94:c2:b5:52:1e:dc:6a:c9:3d: 57:0c:76:ff:99:c3:5e:e4:c8:29:7c:14:73:54:d8:0e:8e:3d: 87:be:d4:b3:80:7d:6b:2b:aa:c0:52:00:a9:45:1d:c8:2d:68: 04:55:93:a6:fe:f0:9f:e7:77:a9:06:e3:36:ba:05:7b:ac:a2: 43:0d:82:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETu0AqBxyhQ+twWWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI0MDIxODE0MDAzMFoXDTI0MDUxODEzMDAzMFowLzEtMCsGA1UEAxMk NzFhMDliNzEtNGRiZi00MjhhLWFjM2UtZjA3MDViOTRhNzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNotAoCAbGvBLfrYwPNVCHZZXZkjhfHZPGtk e5gNVHo0YXUz+097WbhsP4kEfvpwFPpaogyokFKYm/4Y1PuLSlAZCdjHOAciDMgR /N+UR85tXIfhx1AGVTHpxmU4tHk6ZIRCNMvn63dIsON9/I19V5ZtIuY7cxxMDse+ NXp8OtlVwUpwBWYTE8qrWxWd7NFcmqXx4WZUvA+IXKgIkbTEhFVCNq321ZItRj5V 6j2buvs+Bm/RQWlkmakq5uywtBrQq1QZ9neSLbGlEqj2a6WLn3rQWaAVCZIGYjZM WiMvyrCAN1mYY53vRAT2+C3DmB6uMuuzHcecguPRImB/5vCtEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOqjT/PTwwUwbcncmRg15YKUTxLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNjdlZmUwYzEtMWU1OC0z YTI2LTk5ZDItOTg1NzZjMWE5NmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxztoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQaw2pgnxGNtd4NRhQlvWnx6TOutcwDFNhHFshS0gwpizJBXerY0Byr vSvEv2x0FVNwNlGIZwoxVSNDbbr/piRrw/2TY+EqoALT3iCQn00Ws9mb9URbUeO7 HkC/uj/h6Tn3ZnhFpCfKKg8t68KVJpZPYO969JfoAipx7XsB24fKmwNopZGy/5Uo kH60kSsYwmCBvUVGjMV8SG6SxaLg1ZPdF2n7MOjmLdnJn02y8JfYiGYs+C8jVP8J H4C5xJTCtVIe3GrJPVcMdv+Zw17kyCl8FHNU2A6OPYe+1LOAfWsrqsBSAKlFHcgt aARVk6b+8J/nd6kG4za6BXusokMNgjs= -----END CERTIFICATE-----Generated at Thu May 2 14:57:52 2024 by rpki-client on console-fra.rpki-client.org