$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7b830ed5-b3d6-3990-beeb-54615389aaea.roa File: 7b830ed5-b3d6-3990-beeb-54615389aaea.roa (raw, json) Hash identifier: TUYsvwFin2gACb+3TjcYFK9yZmbRvqgwf/LUHcMpo6M= Subject key identifier: 57:06:67:63:AA:98:60:C8:63:22:4D:41:99:0C:57:FA:73:9C:77:1D Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F43285844EED0037B12441E1C3D897A00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7b830ed5-b3d6-3990-beeb-54615389aaea.roa Signing time: Sun 18 Feb 2024 14:00:30 +0000 ROA not before: Sun 18 Feb 2024 14:00:30 +0000 ROA not after: Sat 18 May 2024 13:00:30 +0000 asID: 54858 IP address blocks: 64.187.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:ee:d0:03:7b:12:44:1e:1c:3d:89:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Feb 18 14:00:30 2024 GMT Not After : May 18 13:00:30 2024 GMT Subject: CN=cd241fa4-2f9b-49ad-a0dc-134dac236d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e0:79:0e:e7:66:94:fd:52:3a:be:7b:1a:78: 21:28:6f:16:cb:c7:2d:ad:b5:33:f5:b5:9f:41:b8: 10:71:0f:3f:a7:ae:e0:e8:a5:bf:f3:93:58:db:48: d7:1b:7e:34:e9:42:b8:e3:8c:00:86:24:38:bd:db: d6:57:e1:cd:28:7c:38:fd:33:d7:ab:65:98:ac:d0: 86:fa:5f:bc:a0:de:a3:cb:98:b1:0d:db:02:7c:5d: 8a:7a:d9:f8:09:cd:a2:17:85:72:53:75:a0:3f:0f: fd:a1:da:48:04:4e:43:e4:60:db:cd:c2:34:c5:9e: 80:2d:07:07:96:00:e3:a8:85:78:b8:b9:0e:2a:d5: 3d:29:54:58:a9:07:0a:0e:8e:d1:f9:b9:d5:42:cc: 3e:13:15:b7:ad:a8:20:de:89:e9:7f:5a:5c:af:d3: e7:41:57:67:69:5d:fd:c7:29:cf:d6:db:71:38:9f: a6:00:04:0b:57:fb:93:08:a4:58:cb:97:8a:5a:05: 08:ae:9d:43:81:da:2a:71:6d:c6:bc:28:4e:15:33: 19:b8:e5:58:43:65:ab:55:e4:3f:5d:06:f8:16:0c: a6:72:47:c9:02:ad:01:2b:9f:79:99:eb:cc:20:62: 69:4e:b2:d6:ca:3c:7f:fe:d9:ab:fb:73:0b:17:de: f4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:06:67:63:AA:98:60:C8:63:22:4D:41:99:0C:57:FA:73:9C:77:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7b830ed5-b3d6-3990-beeb-54615389aaea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 64.187.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:7b:bf:63:9a:34:86:49:f8:89:b7:ed:d2:44:b0:95:1d:b4: 0b:a6:d4:26:05:a2:f3:31:d9:f3:df:74:ce:9e:46:75:21:9b: fb:ae:ca:6c:56:56:51:c5:c9:c1:de:1e:20:32:d8:c9:98:43: ad:92:b5:22:81:5d:1b:f7:f4:cc:2a:17:b2:26:57:e9:27:f4: 98:79:ed:f5:0c:46:93:d3:46:68:61:04:b7:82:14:b0:a2:35: f8:c2:4f:c6:b0:2c:16:69:67:53:c8:fd:42:45:95:8e:d8:84: 3c:d2:9e:4c:3a:ae:b6:f6:82:b2:f6:76:4c:db:5d:a2:e0:cf: b6:a4:26:d1:7f:94:98:59:99:cb:50:ea:93:75:4b:99:3f:d8: 01:12:48:6c:40:12:2d:86:c3:31:3e:61:83:63:1b:53:a5:a4: 59:7c:54:a5:7a:5b:64:79:15:a4:66:66:d6:d7:83:26:8d:15: 4f:c4:e9:96:f1:1d:a9:43:00:75:54:42:a6:e3:ca:58:fe:29: da:1e:7c:81:92:c8:6c:e1:2f:0f:65:99:9b:db:af:c0:07:0a: 9d:de:34:7b:4f:46:01:d5:49:49:8a:13:72:83:84:f5:4c:72: e4:97:87:f3:ed:68:55:cd:57:37:0d:cc:2a:25:7a:2a:b9:8c: 68:38:9b:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETu0AN7EkQeHD2JegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI0MDIxODE0MDAzMFoXDTI0MDUxODEzMDAzMFowLzEtMCsGA1UEAxMk Y2QyNDFmYTQtMmY5Yi00OWFkLWEwZGMtMTM0ZGFjMjM2ZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+B5DudmlP1SOr57GnghKG8Wy8ctrbUz9bWf QbgQcQ8/p67g6KW/85NY20jXG3406UK444wAhiQ4vdvWV+HNKHw4/TPXq2WYrNCG +l+8oN6jy5ixDdsCfF2Ketn4Cc2iF4VyU3WgPw/9odpIBE5D5GDbzcI0xZ6ALQcH lgDjqIV4uLkOKtU9KVRYqQcKDo7R+bnVQsw+ExW3ragg3onpf1pcr9PnQVdnaV39 xynP1ttxOJ+mAAQLV/uTCKRYy5eKWgUIrp1DgdoqcW3GvChOFTMZuOVYQ2WrVeQ/ XQb4FgymckfJAq0BK595mevMIGJpTrLWyjx//tmr+3MLF970PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcGZ2OqmGDIYyJNQZkMV/pznHcdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvN2I4MzBlZDUtYjNkNi0z OTkwLWJlZWItNTQ2MTUzODlhYWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQLugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFB7v2OaNIZJ+Im37dJEsJUdtAum1CYFovMx2fPfdM6eRnUhm/uuymxW VlHFycHeHiAy2MmYQ62StSKBXRv39MwqF7ImV+kn9Jh57fUMRpPTRmhhBLeCFLCi NfjCT8awLBZpZ1PI/UJFlY7YhDzSnkw6rrb2grL2dkzbXaLgz7akJtF/lJhZmctQ 6pN1S5k/2AESSGxAEi2GwzE+YYNjG1OlpFl8VKV6W2R5FaRmZtbXgyaNFU/E6Zbx HalDAHVUQqbjylj+KdoefIGSyGzhLw9lmZvbr8AHCp3eNHtPRgHVSUmKE3KDhPVM cuSXh/PtaFXNVzcNzColeiq5jGg4m+s= -----END CERTIFICATE-----Generated at Thu May 2 15:00:02 2024 by rpki-client on console-ams.rpki-client.org