$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/119efa02-bc16-325b-b145-d57dc37c530b.roa File: 119efa02-bc16-325b-b145-d57dc37c530b.roa (raw, json) Hash identifier: cu28KQK6JEuFO9mu1PBW4pb9prkR8vb+t7FqblMg1xo= Subject key identifier: 87:F6:DF:AE:07:61:13:EE:7A:1C:3D:86:FC:B4:DB:E5:61:44:9F:8D Certificate issuer: /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Certificate serial: 010D0C9F43285845A162F178D727C4747AAA5100 Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/119efa02-bc16-325b-b145-d57dc37c530b.roa Signing time: Mon 22 Apr 2024 13:10:35 +0000 ROA not before: Mon 22 Apr 2024 13:10:35 +0000 ROA not after: Sun 21 Jul 2024 13:10:35 +0000 asID: 400238 IP address blocks: 206.225.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Jun 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:62:f1:78:d7:27:c4:74:7a:aa:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Validity Not Before: Apr 22 13:10:35 2024 GMT Not After : Jul 21 13:10:35 2024 GMT Subject: CN=3a14c3d4-28de-4f5a-9efe-76da9b1e7908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ba:0c:a1:08:78:e8:bd:6f:d0:77:f0:04:25: b0:87:0c:bd:a6:47:12:45:0b:4c:1c:ae:06:42:83: 3a:8c:9d:2a:e8:40:d5:2b:38:fa:bf:ba:ce:a6:bd: de:f9:c8:31:6a:86:f2:f0:5c:99:4c:65:c5:d1:15: ff:0d:5d:46:49:7e:0b:bc:98:38:43:33:96:0c:81: 72:be:e1:29:d3:41:49:69:a5:c1:86:10:1f:8b:f4: b8:dc:15:61:7c:ba:de:c9:ef:2e:18:46:b2:bb:f0: f5:3f:fe:ce:5c:88:97:6b:af:30:62:09:ea:d1:4e: 8d:31:f7:ce:23:fd:ba:1a:0b:6e:27:19:92:e4:62: 5e:64:e2:d7:8f:79:82:2b:e4:a7:86:d7:3e:5c:25: c5:60:56:17:7c:5d:a9:66:83:39:54:60:dd:6d:a6: b8:1d:ba:fa:15:71:0d:66:44:62:f5:ee:36:ac:e2: 0d:33:b9:7f:e9:bf:42:bf:7a:ab:88:1a:33:48:b9: d9:89:91:2b:65:92:8a:3a:95:f3:04:c8:ce:bb:55: 12:74:e0:98:62:d1:d3:c5:0f:87:98:72:ed:70:28: 1c:0a:cf:5e:ed:15:75:99:6c:7b:8f:92:ae:f5:11: 98:40:4b:43:47:49:98:5e:b7:fe:64:b4:f8:77:c3: aa:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F6:DF:AE:07:61:13:EE:7A:1C:3D:86:FC:B4:DB:E5:61:44:9F:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/119efa02-bc16-325b-b145-d57dc37c530b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl X509v3 Authority Key Identifier: keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer sbgp-ipAddrBlock: critical IPv4: 206.225.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:3c:2f:72:37:be:64:57:d0:f6:db:2c:c3:17:dd:a2:9f:dd: 1f:5f:17:bb:c3:86:ff:ca:0a:32:c9:0e:ae:a1:a0:93:22:72: 6e:8e:1a:4d:64:5b:da:00:5a:8d:dd:d2:4f:05:db:98:b2:b0: 53:0f:4e:b8:df:46:47:f2:13:76:4d:3d:04:d0:62:bd:2c:4a: 4b:f9:cc:94:03:62:75:1e:b7:8b:6b:3f:f8:22:c6:c1:0c:a5: 6d:6d:1d:66:39:44:10:aa:ea:72:4e:6f:a7:9b:7f:47:28:64: 92:af:cb:95:4e:4f:75:b9:be:eb:2e:6b:27:f7:8f:3a:56:5e: 85:d4:70:3d:c5:86:3b:ee:82:d8:2a:21:f7:38:b4:3d:c3:01: c7:f6:b0:38:57:8e:b7:a1:45:00:c6:ca:1f:75:98:09:c0:68: cf:68:b5:32:cd:8b:d7:03:0c:f5:fd:20:cb:4b:07:e9:5b:0d: 3f:1f:63:21:9f:f7:59:c7:35:4a:a0:bb:66:19:d4:18:14:52: be:f0:43:14:2f:a0:d5:df:cd:07:89:48:05:c2:ed:00:82:60: 56:44:50:9f:e5:5f:8c:0c:4b:9b:4e:42:de:f6:37:04:de:cc: 25:45:95:fb:37:e1:81:29:5e:9b:46:10:c3:99:01:31:e5:0b: f9:bf:e7:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhYvF41yfEdHqqUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY2YTZjOGUtYWE3My00ZDgyLWEyYjEtZTYxOWViM2Yy YWVjMB4XDTI0MDQyMjEzMTAzNVoXDTI0MDcyMTEzMTAzNVowLzEtMCsGA1UEAxMk M2ExNGMzZDQtMjhkZS00ZjVhLTllZmUtNzZkYTliMWU3OTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7oMoQh46L1v0HfwBCWwhwy9pkcSRQtMHK4G QoM6jJ0q6EDVKzj6v7rOpr3e+cgxaoby8FyZTGXF0RX/DV1GSX4LvJg4QzOWDIFy vuEp00FJaaXBhhAfi/S43BVhfLreye8uGEayu/D1P/7OXIiXa68wYgnq0U6NMffO I/26GgtuJxmS5GJeZOLXj3mCK+Snhtc+XCXFYFYXfF2pZoM5VGDdbaa4Hbr6FXEN ZkRi9e42rOINM7l/6b9Cv3qriBozSLnZiZErZZKKOpXzBMjOu1USdOCYYtHTxQ+H mHLtcCgcCs9e7RV1mWx7j5Ku9RGYQEtDR0mYXrf+ZLT4d8OqmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIf2364HYRPuehw9hvy02+VhRJ+NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZh NmM4ZS1hYTczLTRkODItYTJiMS1lNjE5ZWIzZjJhZWMvMTE5ZWZhMDItYmMxNi0z MjViLWIxNDUtZDU3ZGMzN2M1MzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWY2YTZjOGUtYWE3My00ZDgyLWEy YjEtZTYxOWViM2YyYWVjLzFmNmE2YzhlLWFhNzMtNGQ4Mi1hMmIxLWU2MTllYjNm MmFlYy5jcmwwHwYDVR0jBBgwFoAU4cKiXdGkcBTXif4pkOW5K7a7dxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZhNmM4ZS1hYTczLTRkODItYTJiMS1lNjE5 ZWIzZjJhZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzuEdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACI8L3I3vmRX0PbbLMMX3aKf3R9fF7vDhv/KCjLJDq6hoJMicm6OGk1k W9oAWo3d0k8F25iysFMPTrjfRkfyE3ZNPQTQYr0sSkv5zJQDYnUet4trP/gixsEM pW1tHWY5RBCq6nJOb6ebf0coZJKvy5VOT3W5vusuayf3jzpWXoXUcD3Fhjvugtgq Ifc4tD3DAcf2sDhXjrehRQDGyh91mAnAaM9otTLNi9cDDPX9IMtLB+lbDT8fYyGf 91nHNUqgu2YZ1BgUUr7wQxQvoNXfzQeJSAXC7QCCYFZEUJ/lX4wMS5tOQt72NwTe zCVFlfs34YEpXptGEMOZATHlC/m/58A= -----END CERTIFICATE-----Generated at Sun Jun 23 20:58:52 2024 by rpki-client on console-ams.rpki-client.org