$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa File: a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa (raw, json) Hash identifier: TnJ2drbM/QM1d0mKP78QlEGcb/ItAubDydcEFtWoQaw= Subject key identifier: F4:C2:5A:9E:E8:FE:91:49:EA:DE:F1:25:93:41:7B:94:31:BC:11:B9 Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F43285845ADEE18F4803906E1F7899C80 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa Signing time: Sat 27 Apr 2024 01:00:26 +0000 ROA not before: Sat 27 Apr 2024 01:00:26 +0000 ROA not after: Fri 26 Jul 2024 01:00:26 +0000 asID: 398465 IP address blocks: 208.58.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ad:ee:18:f4:80:39:06:e1:f7:89:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Apr 27 01:00:26 2024 GMT Not After : Jul 26 01:00:26 2024 GMT Subject: CN=c3874e46-d77f-4717-bd82-fd4abc05bfd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ed:13:6c:7b:9e:78:11:58:66:69:f0:01:a6: 30:1d:f2:e4:39:b7:8b:2c:c4:e5:1c:5f:db:7e:5e: ef:ee:e1:c8:c9:8c:76:50:ed:b5:22:14:c4:42:73: 6f:4a:2e:29:b1:05:c9:46:e0:ee:4b:86:22:67:ae: 58:99:4d:0e:a2:71:c0:27:fd:2b:e3:f0:68:64:d1: 3f:26:3d:b6:84:c4:6a:41:c9:ae:3f:ce:ea:85:28: ef:6f:18:c2:11:db:11:d5:c8:fe:73:bb:5b:1a:d7: 6e:b6:6a:88:16:ab:00:cd:02:cd:c5:83:8d:61:df: 9a:da:82:62:63:73:38:92:27:0d:18:30:7c:53:e9: 75:ff:16:42:34:91:8a:a8:c4:94:73:2e:69:49:10: 88:59:14:dc:e2:57:1e:40:9f:67:81:7f:c2:bb:10: 40:2a:57:f4:7f:1a:6b:d1:bb:40:66:89:3f:44:ca: 29:ed:bf:49:e9:0b:0d:5b:83:c3:ef:59:f0:ec:95: 82:4f:ad:32:60:32:81:78:35:c5:75:cd:45:14:31: fb:d4:b3:df:c5:73:e5:b4:dd:3f:33:a4:d5:03:31: 79:64:be:5b:d5:cc:c7:fb:30:01:eb:03:0e:a3:a3: 74:1a:9b:d1:b9:a1:2e:2e:c4:26:56:3c:cf:76:78: f0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C2:5A:9E:E8:FE:91:49:EA:DE:F1:25:93:41:7B:94:31:BC:11:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 208.58.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:ef:62:84:10:c0:7b:4e:18:3b:98:f0:05:5c:c3:9d:e8:85: 52:30:53:21:22:1d:1e:36:4b:5e:ce:9e:9a:44:44:8d:36:59: c1:01:4a:5d:fc:87:39:8c:ab:6b:ef:b7:79:cf:c2:59:6d:c7: 4c:fa:30:c4:96:cc:04:f7:b5:fc:1a:f1:3a:04:15:14:ad:04: 2d:f3:df:27:15:2b:48:90:35:2b:e7:4b:07:f0:88:92:c0:92: 87:c0:83:9f:a7:9f:3c:a4:f1:4d:a0:e3:f5:dc:bb:7f:99:bb: 41:8c:42:e5:f0:8f:b0:85:a2:f1:03:9c:96:55:98:bb:4d:73: 24:39:bd:50:0f:78:9e:d5:2e:0d:5f:ea:2f:ad:ba:6e:2e:7e: 9f:c5:79:9b:24:bf:0c:9a:b3:dc:44:f6:2c:66:d4:7d:b0:a2: d3:32:38:4f:b0:f3:08:9d:10:38:0e:bf:ed:97:55:b7:92:76: 6d:a1:b6:0b:69:a3:62:8a:bd:e8:95:7b:0d:34:e2:95:0a:86: 54:97:02:b9:1d:bc:94:f2:7c:13:4b:b5:1d:2c:ac:d9:4a:29: 0a:ee:d0:bb:08:70:a8:53:38:fa:0b:6c:0e:e5:ce:65:99:83: f9:ce:24:dc:f2:b9:ef:f3:c0:7e:76:55:1a:a5:b0:3c:6b:b1: 99:8a:64:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWt7hj0gDkG4feJnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI0MDQyNzAxMDAyNloXDTI0MDcyNjAxMDAyNlowLzEtMCsGA1UEAxMk YzM4NzRlNDYtZDc3Zi00NzE3LWJkODItZmQ0YWJjMDViZmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO0TbHueeBFYZmnwAaYwHfLkObeLLMTlHF/b fl7v7uHIyYx2UO21IhTEQnNvSi4psQXJRuDuS4YiZ65YmU0OonHAJ/0r4/BoZNE/ Jj22hMRqQcmuP87qhSjvbxjCEdsR1cj+c7tbGtdutmqIFqsAzQLNxYONYd+a2oJi Y3M4kicNGDB8U+l1/xZCNJGKqMSUcy5pSRCIWRTc4lceQJ9ngX/CuxBAKlf0fxpr 0btAZok/RMop7b9J6QsNW4PD71nw7JWCT60yYDKBeDXFdc1FFDH71LPfxXPltN0/ M6TVAzF5ZL5b1czH+zAB6wMOo6N0GpvRuaEuLsQmVjzPdnjwuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTCWp7o/pFJ6t7xJZNBe5QxvBG5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvYTdjYjQxNDktZWE4Yi0z ZDBlLTgwNzItMWU1ZmNlMjdjNmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DoCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXvYoQQwHtOGDuY8AVcw53ohVIwUyEiHR42S17OnppERI02WcEBSl38 hzmMq2vvt3nPwlltx0z6MMSWzAT3tfwa8ToEFRStBC3z3ycVK0iQNSvnSwfwiJLA kofAg5+nnzyk8U2g4/Xcu3+Zu0GMQuXwj7CFovEDnJZVmLtNcyQ5vVAPeJ7VLg1f 6i+tum4ufp/FeZskvwyas9xE9ixm1H2wotMyOE+w8widEDgOv+2XVbeSdm2htgtp o2KKveiVew004pUKhlSXArkdvJTyfBNLtR0srNlKKQru0LsIcKhTOPoLbA7lzmWZ g/nOJNzyue/zwH52VRqlsDxrsZmKZCc= -----END CERTIFICATE-----Generated at Mon May 6 01:59:08 2024 by rpki-client on console-ams.rpki-client.org