$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/aa3453a3-370d-3411-bd8b-7c7173848656.roa File: aa3453a3-370d-3411-bd8b-7c7173848656.roa (raw, json) Hash identifier: zMxvbIMjtNEXbS503r26/vdx9DcaTat2//Y7t2xtPnY= Subject key identifier: 66:5C:A1:A2:E5:62:8E:FA:31:B0:B7:05:DC:32:0E:01:76:EB:C7:87 Certificate issuer: /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Certificate serial: 010D0C9F432858453FA808CB9C21DF9EEB65E380 Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/aa3453a3-370d-3411-bd8b-7c7173848656.roa Signing time: Mon 18 Mar 2024 13:00:30 +0000 ROA not before: Mon 18 Mar 2024 13:00:30 +0000 ROA not after: Sun 16 Jun 2024 13:00:30 +0000 asID: 16509 IP address blocks: 66.197.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:3f:a8:08:cb:9c:21:df:9e:eb:65:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Validity Not Before: Mar 18 13:00:30 2024 GMT Not After : Jun 16 13:00:30 2024 GMT Subject: CN=8eb6bd05-0035-4b61-af54-379398b5a1f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4d:fd:be:05:a9:cc:16:78:5e:47:2c:2e:14: 23:31:b0:93:16:48:28:0e:4e:2c:c1:31:e5:88:e5: 19:3f:82:8d:3c:85:6d:b1:60:f4:d0:20:9c:e5:d2: 05:91:90:e9:95:33:6a:06:a0:6d:03:b9:a4:60:5b: 3d:d7:8f:23:84:ff:1e:c1:93:90:bf:2b:9e:69:34: 39:81:9c:29:4e:b1:5c:06:2a:09:57:b7:d6:31:a8: ae:c9:bf:31:43:1d:bf:3e:03:1d:c5:3c:19:c9:24: cb:a2:18:54:5a:65:29:20:75:26:cb:9e:03:13:c7: 4b:1a:fc:b7:22:f9:59:1d:76:eb:8e:d2:ba:fd:66: 13:2e:21:35:39:4d:73:bd:21:81:18:32:65:ae:d1: cd:a3:64:28:f8:78:0b:0c:04:fb:70:de:c3:c6:68: 03:60:f3:87:3e:46:98:6a:e7:33:69:95:89:4a:b2: 1e:4c:e2:be:79:d7:bb:07:4d:ca:dd:88:07:b4:2b: 26:d8:a3:2f:3f:b3:45:bd:57:2b:69:05:62:83:57: 8f:55:8d:be:dc:52:04:5a:84:91:97:25:0d:ca:b8: bd:8d:5d:6b:b5:f5:7f:31:f2:76:fa:6a:75:dd:4f: 30:f5:c2:da:a1:d5:96:a7:29:ba:02:77:b5:43:40: 51:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5C:A1:A2:E5:62:8E:FA:31:B0:B7:05:DC:32:0E:01:76:EB:C7:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/aa3453a3-370d-3411-bd8b-7c7173848656.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl X509v3 Authority Key Identifier: keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer sbgp-ipAddrBlock: critical IPv4: 66.197.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:aa:69:e3:0d:29:14:13:76:e4:f2:b7:28:e1:48:fb:50:77: 0a:ac:18:57:b1:41:8c:d2:5b:13:22:75:99:ce:af:07:d4:69: 37:cc:89:13:fb:5c:c9:fe:a5:dc:bf:a0:fa:0a:d2:35:00:f8: d0:a5:ec:b4:74:73:f1:eb:da:9f:19:e5:83:a2:81:a4:cd:e0: 62:18:51:a5:d1:74:4c:fd:9c:10:b6:cb:ed:c8:01:c8:11:cb: eb:dc:06:43:46:e8:01:4b:4f:12:5f:23:8c:e0:87:12:12:eb: de:8d:97:1b:5f:da:c4:29:a4:81:1b:ce:92:57:ad:23:73:92: 74:a5:d4:37:6a:d0:dd:36:c8:7e:a2:16:af:f4:9c:2c:cc:32: 14:2e:19:c5:ce:28:80:07:b4:05:45:6c:0c:5d:8b:94:93:fc: 7f:ba:4b:ce:18:6c:4a:57:8b:2a:ab:ae:c6:c9:59:45:6d:0f: 15:92:f4:40:65:00:e3:9d:c8:1a:3c:cb:1e:95:86:64:0b:db: 21:14:c0:4a:54:75:ed:bc:ba:b0:eb:ea:c7:4b:14:c0:61:d5: 68:0b:53:a2:9d:cd:ea:40:81:ea:de:71:ca:26:0b:b1:7f:1c: 9f:30:cc:b9:66:2a:eb:8d:bf:af:ff:61:83:6b:44:40:5d:f2: 5e:09:d3:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU/qAjLnCHfnutl44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ4NjYzOGEtMmUxMi00YWE0LWJkY2QtMjI2NjViMjZl NTdjMB4XDTI0MDMxODEzMDAzMFoXDTI0MDYxNjEzMDAzMFowLzEtMCsGA1UEAxMk OGViNmJkMDUtMDAzNS00YjYxLWFmNTQtMzc5Mzk4YjVhMWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE39vgWpzBZ4XkcsLhQjMbCTFkgoDk4swTHl iOUZP4KNPIVtsWD00CCc5dIFkZDplTNqBqBtA7mkYFs9148jhP8ewZOQvyueaTQ5 gZwpTrFcBioJV7fWMaiuyb8xQx2/PgMdxTwZySTLohhUWmUpIHUmy54DE8dLGvy3 IvlZHXbrjtK6/WYTLiE1OU1zvSGBGDJlrtHNo2Qo+HgLDAT7cN7DxmgDYPOHPkaY auczaZWJSrIeTOK+ede7B03K3YgHtCsm2KMvP7NFvVcraQVig1ePVY2+3FIEWoSR lyUNyri9jV1rtfV/MfJ2+mp13U8w9cLaodWWpym6Ane1Q0BR1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZcoaLlYo76MbC3BdwyDgF268eHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2 NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIyNmU1N2MvYWEzNDUzYTMtMzcwZC0z NDExLWJkOGItN2M3MTczODQ4NjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGQ4NjYzOGEtMmUxMi00YWE0LWJk Y2QtMjI2NjViMjZlNTdjLzBkODY2MzhhLTJlMTItNGFhNC1iZGNkLTIyNjY1YjI2 ZTU3Yy5jcmwwHwYDVR0jBBgwFoAUWEZxtOubjmMGeKRywWglQLM/E9cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2 NWIyNmU1N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQsWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqqaeMNKRQTduTytyjhSPtQdwqsGFexQYzSWxMidZnOrwfUaTfMiRP7 XMn+pdy/oPoK0jUA+NCl7LR0c/Hr2p8Z5YOigaTN4GIYUaXRdEz9nBC2y+3IAcgR y+vcBkNG6AFLTxJfI4zghxIS696Nlxtf2sQppIEbzpJXrSNzknSl1Ddq0N02yH6i Fq/0nCzMMhQuGcXOKIAHtAVFbAxdi5ST/H+6S84YbEpXiyqrrsbJWUVtDxWS9EBl AOOdyBo8yx6VhmQL2yEUwEpUde28urDr6sdLFMBh1WgLU6KdzepAgereccomC7F/ HJ8wzLlmKuuNv6//YYNrREBd8l4J0yw= -----END CERTIFICATE-----Generated at Thu May 2 14:58:26 2024 by rpki-client on console-fra.rpki-client.org