$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/fb3cec3c-e3f8-30b4-ad6e-5eceda10994a.roa File: fb3cec3c-e3f8-30b4-ad6e-5eceda10994a.roa (raw, json) Hash identifier: 4boc6042WvD0CyI9JX/6uCErU67LhZ2aKC6PNiXy3Nk= Subject key identifier: 12:56:40:9F:31:E9:72:3B:48:FB:C6:6B:CA:D6:7E:3F:9E:1E:96:EE Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945 Certificate serial: 010D0C9F432858458F388358658B79AD57098100 Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/fb3cec3c-e3f8-30b4-ad6e-5eceda10994a.roa Signing time: Tue 16 Apr 2024 01:00:26 +0000 ROA not before: Tue 16 Apr 2024 01:00:26 +0000 ROA not after: Mon 15 Jul 2024 01:00:26 +0000 asID: 16509 IP address blocks: 192.28.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:8f:38:83:58:65:8b:79:ad:57:09:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945 Validity Not Before: Apr 16 01:00:26 2024 GMT Not After : Jul 15 01:00:26 2024 GMT Subject: CN=4392d8ac-dab5-4334-8548-9da3eb01f6fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b5:35:70:c3:43:e5:4a:38:b0:f1:9c:37:4a: 25:ad:b1:a6:1a:ce:62:af:b3:83:3d:80:b7:cf:4c: 23:8c:89:23:af:75:e9:b1:32:68:bb:99:cd:b7:62: 61:42:b8:a5:f5:a3:04:91:83:b4:99:a3:32:d3:b4: 52:20:df:2c:01:98:5a:26:ab:58:f3:cf:29:04:3f: 48:b8:91:f2:ac:46:79:3b:f4:92:2e:b5:7f:35:36: f0:bb:1e:92:8d:d2:67:a6:ea:cd:2c:36:99:fa:dc: 9a:66:52:7a:4b:26:10:e2:35:fa:eb:32:08:e4:af: 95:35:b4:d8:7f:10:d0:27:b3:5a:7f:eb:0c:aa:7c: c4:f4:27:06:1e:1f:2e:13:e7:2d:fb:10:1b:71:45: 39:4a:54:db:73:d8:79:e7:4e:9f:ba:63:5f:c9:31: b3:95:25:73:2a:53:f2:c8:aa:0f:a3:d7:84:42:e1: 27:d9:9b:19:a8:73:4f:8c:e4:34:83:24:40:07:a3: f5:21:d8:b0:70:73:3f:b4:40:11:34:ab:80:a3:b0: b9:ba:cd:80:01:cb:16:f3:7f:f8:91:d4:1a:59:1e: 88:56:a8:f2:f3:4d:20:8f:53:75:1c:2f:13:4c:1e: 86:f4:f3:f9:aa:a9:ed:e9:12:9f:e2:d6:08:81:40: 1d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:56:40:9F:31:E9:72:3B:48:FB:C6:6B:CA:D6:7E:3F:9E:1E:96:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/fb3cec3c-e3f8-30b4-ad6e-5eceda10994a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl X509v3 Authority Key Identifier: keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer sbgp-ipAddrBlock: critical IPv4: 192.28.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:d1:74:1c:f2:55:35:c9:db:37:89:9c:6c:e6:ae:fb:15:ea: 6b:36:01:de:1a:2b:cd:5a:fb:a5:05:3b:f7:d6:b7:61:df:c1: e8:dc:62:92:46:1b:16:38:b1:72:73:ad:50:b5:2c:46:3c:2a: 36:98:20:21:d7:f6:0d:bd:57:4b:f8:0f:c1:e4:0e:65:33:08: 94:8a:1f:92:d7:a2:76:b5:09:79:7c:fa:d7:81:a0:5e:2b:3a: c6:5d:e1:80:df:05:da:4c:e6:02:c1:b8:3d:13:d9:6a:46:2a: 37:77:a6:d7:33:45:59:78:30:40:76:1a:e5:b0:38:06:12:3d: b3:71:05:47:1a:35:99:76:c3:cc:82:1c:30:bd:d0:6d:33:64: d5:a4:75:08:e3:b1:8d:e5:6c:c2:cd:f3:9c:97:70:16:50:46: 15:b0:76:9d:2e:2b:cd:bf:d7:be:57:02:04:21:ae:41:78:95: 97:f1:0c:b2:59:12:5b:09:74:c3:5a:db:9e:cb:6d:94:51:c9: cb:a3:c3:77:e8:12:c7:9d:f8:2f:1f:19:61:17:cb:db:18:d1: f6:a8:65:88:20:4f:52:ac:e4:4e:8f:c8:50:ec:97:f6:d7:ff: 93:0a:d7:56:58:6d:e5:3b:49:29:16:c4:6b:44:e4:8d:38:a7: b3:f0:d4:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWPOINYZYt5rVcJgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi OTQ1MB4XDTI0MDQxNjAxMDAyNloXDTI0MDcxNTAxMDAyNlowLzEtMCsGA1UEAxMk NDM5MmQ4YWMtZGFiNS00MzM0LTg1NDgtOWRhM2ViMDFmNmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7U1cMND5Uo4sPGcN0olrbGmGs5ir7ODPYC3 z0wjjIkjr3XpsTJou5nNt2JhQril9aMEkYO0maMy07RSIN8sAZhaJqtY888pBD9I uJHyrEZ5O/SSLrV/NTbwux6SjdJnpurNLDaZ+tyaZlJ6SyYQ4jX66zII5K+VNbTY fxDQJ7Naf+sMqnzE9CcGHh8uE+ct+xAbcUU5SlTbc9h5506fumNfyTGzlSVzKlPy yKoPo9eEQuEn2ZsZqHNPjOQ0gyRAB6P1IdiwcHM/tEARNKuAo7C5us2AAcsW83/4 kdQaWR6IVqjy800gj1N1HC8TTB6G9PP5qqnt6RKf4tYIgUAdAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJWQJ8x6XI7SPvGa8rWfj+eHpbuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2 ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvZmIzY2VjM2MtZTNmOC0z MGI0LWFkNmUtNWVjZWRhMTA5OTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwBwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfRdBzyVTXJ2zeJnGzmrvsV6ms2Ad4aK81a+6UFO/fWt2HfwejcYpJG GxY4sXJzrVC1LEY8KjaYICHX9g29V0v4D8HkDmUzCJSKH5LXona1CXl8+teBoF4r OsZd4YDfBdpM5gLBuD0T2WpGKjd3ptczRVl4MEB2GuWwOAYSPbNxBUcaNZl2w8yC HDC90G0zZNWkdQjjsY3lbMLN85yXcBZQRhWwdp0uK82/175XAgQhrkF4lZfxDLJZ ElsJdMNa257LbZRRycujw3foEsed+C8fGWEXy9sY0faoZYggT1Ks5E6PyFDsl/bX /5MK11ZYbeU7SSkWxGtE5I04p7Pw1DU= -----END CERTIFICATE-----Generated at Thu May 2 22:15:15 2024 by rpki-client on console-fra.rpki-client.org