$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa File: 3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa (raw, json) Hash identifier: kju0vZg+UXx1FViJK4eH+Oqw2u8H/MAJ0XLU5w6aplg= Subject key identifier: DE:7C:A8:F1:AB:D6:BA:20:16:A4:CC:4D:55:DD:41:3D:7C:BC:A3:9C Certificate issuer: /CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Certificate serial: 010D0C9F432858456822EAD3DEC664F3CD3FBB00 Authority key identifier: D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa Signing time: Tue 02 Apr 2024 01:00:26 +0000 ROA not before: Tue 02 Apr 2024 01:00:26 +0000 ROA not after: Mon 01 Jul 2024 01:00:26 +0000 asID: 16509 IP address blocks: 199.30.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:68:22:ea:d3:de:c6:64:f3:cd:3f:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Validity Not Before: Apr 2 01:00:26 2024 GMT Not After : Jul 1 01:00:26 2024 GMT Subject: CN=71638fdb-26cb-4d72-bbf2-e981f32f490a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:87:d5:0e:75:9d:9a:56:0c:77:73:e6:78:63: 00:c6:ec:fa:0a:24:d5:47:3c:33:04:7b:0c:84:e3: 7a:b5:0b:b6:ca:2d:f3:6d:18:7a:85:5c:e1:40:a7: 07:3f:47:38:fc:3d:67:93:af:0d:9d:95:df:65:07: 71:af:3e:ee:7f:e9:a2:c2:63:e1:b4:12:2f:ca:cc: d2:3f:de:5e:e1:5e:74:67:57:c3:c4:39:ee:b6:73: d1:d2:73:b0:e7:04:6e:ed:07:5c:9d:3a:0e:cc:fc: a8:06:e2:49:64:ca:bc:4b:5b:80:1b:96:38:01:8e: f0:94:94:9d:4d:37:bc:a9:9f:09:fb:e3:4c:8e:ed: 70:f1:b1:4f:88:f2:47:05:96:31:e7:c0:7a:42:41: 67:61:c5:0a:cc:0a:7a:de:eb:14:15:35:ac:a5:55: 93:08:5c:8b:78:42:dd:3c:f1:38:db:35:24:31:04: 37:92:cd:47:a7:1e:e3:85:71:ea:af:e5:f0:09:b1: 73:2e:25:7a:bb:f3:8e:32:bc:ca:26:a9:31:a0:b7: a7:2e:0a:19:a1:b8:c9:46:1d:40:b4:c2:65:ae:66: 43:b6:0a:75:bc:b9:4d:de:d0:2e:09:8e:5c:88:a2: 31:73:7c:7b:6f:ae:12:f5:97:53:52:4a:bc:cd:b1: 73:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7C:A8:F1:AB:D6:BA:20:16:A4:CC:4D:55:DD:41:3D:7C:BC:A3:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl X509v3 Authority Key Identifier: keyid:D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer sbgp-ipAddrBlock: critical IPv4: 199.30.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:19:1b:84:1b:0d:81:b1:8f:c4:09:f8:89:ba:71:1c:13:b5: 26:66:7c:59:a3:f6:94:b9:31:15:c5:84:ce:84:53:03:8b:7d: b6:ce:9d:e6:fe:84:21:d3:1a:44:41:ca:03:2f:20:05:5e:ab: a7:44:1d:97:83:06:71:96:b1:b6:2f:00:05:dd:b2:45:1f:c9: 1c:9e:2b:e5:78:56:3e:99:ed:b4:66:0b:45:c6:f5:16:c8:bf: 2f:93:6c:c9:75:45:a6:d3:27:2a:30:d1:e3:b3:b0:62:54:d0: 0e:00:32:58:4a:3f:bb:9d:e5:4d:64:41:ad:69:5b:d7:0f:a4: d1:ce:82:19:bf:9c:59:7a:c7:a3:d5:c3:5c:a1:4d:3e:59:34: 98:64:25:e0:a5:37:b0:c7:93:f2:85:5c:99:b0:23:aa:16:2d: 5c:6c:1b:17:7e:99:be:c7:21:5c:b2:9a:ae:48:53:2b:f0:13: 78:ba:97:8c:2a:23:80:f1:d3:3f:3c:63:53:8b:37:64:40:47: 3d:17:da:34:bd:87:04:86:74:da:0d:61:d9:0b:7b:91:9f:78: e0:f3:23:81:32:00:d0:8d:79:91:60:db:d0:fa:41:04:81:aa: c1:62:46:5a:3f:ce:18:7b:9a:03:3d:0a:e0:05:fb:4c:58:14: 4a:09:bd:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVoIurT3sZk880/uwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY0YjFjYjctNWZiMi00YTM5LWI0MzEtYzEzOTdmNjNh ODE4MB4XDTI0MDQwMjAxMDAyNloXDTI0MDcwMTAxMDAyNlowLzEtMCsGA1UEAxMk NzE2MzhmZGItMjZjYi00ZDcyLWJiZjItZTk4MWYzMmY0OTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYfVDnWdmlYMd3PmeGMAxuz6CiTVRzwzBHsM hON6tQu2yi3zbRh6hVzhQKcHP0c4/D1nk68NnZXfZQdxrz7uf+miwmPhtBIvyszS P95e4V50Z1fDxDnutnPR0nOw5wRu7QdcnToOzPyoBuJJZMq8S1uAG5Y4AY7wlJSd TTe8qZ8J++NMju1w8bFPiPJHBZYx58B6QkFnYcUKzAp63usUFTWspVWTCFyLeELd PPE42zUkMQQ3ks1Hpx7jhXHqr+XwCbFzLiV6u/OOMrzKJqkxoLenLgoZobjJRh1A tMJlrmZDtgp1vLlN3tAuCY5ciKIxc3x7b64S9ZdTUkq8zbFz0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN58qPGr1rogFqTMTVXdQT18vKOcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRi MWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5N2Y2M2E4MTgvMzk4OGU1YWQtYzFmMy0z YTI5LWIxOTYtNzBiMjk2YTNmODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDY0YjFjYjctNWZiMi00YTM5LWI0 MzEtYzEzOTdmNjNhODE4LzA2NGIxY2I3LTVmYjItNGEzOS1iNDMxLWMxMzk3ZjYz YTgxOC5jcmwwHwYDVR0jBBgwFoAU1T4vELW7cKEguZWHWaSc6pjU1OswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRiMWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5 N2Y2M2E4MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxx6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoZG4QbDYGxj8QJ+Im6cRwTtSZmfFmj9pS5MRXFhM6EUwOLfbbOneb+ hCHTGkRBygMvIAVeq6dEHZeDBnGWsbYvAAXdskUfyRyeK+V4Vj6Z7bRmC0XG9RbI vy+TbMl1RabTJyow0eOzsGJU0A4AMlhKP7ud5U1kQa1pW9cPpNHOghm/nFl6x6PV w1yhTT5ZNJhkJeClN7DHk/KFXJmwI6oWLVxsGxd+mb7HIVyymq5IUyvwE3i6l4wq I4Dx0z88Y1OLN2RARz0X2jS9hwSGdNoNYdkLe5GfeODzI4EyANCNeZFg29D6QQSB qsFiRlo/zhh7mgM9CuAF+0xYFEoJvRM= -----END CERTIFICATE-----Generated at Thu May 2 17:33:46 2024 by rpki-client on console-ams.rpki-client.org