$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/6b7c028f-569f-32db-a599-301f156d588d.roa File: 6b7c028f-569f-32db-a599-301f156d588d.roa (raw, json) Hash identifier: KxNQU/IRqpQjiCO6nuAEtEZjSrwvgrvIHJOv2FzXLkQ= Subject key identifier: F5:BB:A0:6E:BB:11:BA:CB:5F:D9:F5:31:C6:79:77:1D:3A:65:39:FD Certificate issuer: /CN=4ce3c22e-2449-4367-bcc9-96ec877f3e23 Certificate serial: 010D0C9F43285844F2FFFD238A1063691F7CB6C0 Authority key identifier: FA:5F:B7:2E:8E:85:81:CF:9B:DD:C7:DD:A2:E0:4C:7D:C4:10:8A:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/6b7c028f-569f-32db-a599-301f156d588d.roa Signing time: Tue 20 Feb 2024 02:00:26 +0000 ROA not before: Tue 20 Feb 2024 02:00:26 +0000 ROA not after: Mon 20 May 2024 01:00:26 +0000 asID: 16509 IP address blocks: 148.59.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/4ce3c22e-2449-4367-bcc9-96ec877f3e23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/4ce3c22e-2449-4367-bcc9-96ec877f3e23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f2:ff:fd:23:8a:10:63:69:1f:7c:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce3c22e-2449-4367-bcc9-96ec877f3e23 Validity Not Before: Feb 20 02:00:26 2024 GMT Not After : May 20 01:00:26 2024 GMT Subject: CN=680eb67e-923c-49e7-90f5-f50f2063f127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:32:eb:ea:33:ae:e1:77:b3:6e:a4:7f:9c:fa: d4:04:8d:7d:f6:d6:86:fa:ee:07:d3:31:f7:17:fb: f5:e7:3b:51:29:d3:09:01:f1:d7:eb:a2:24:bc:80: ed:e3:d3:7d:2e:97:87:13:11:64:00:07:f1:77:35: 74:6d:45:4d:27:a1:8b:7f:3a:99:99:f3:43:a0:05: 9a:3f:26:f0:77:c5:2a:d6:8d:7a:c3:63:38:e3:d8: 93:75:7e:e6:00:49:12:06:ce:13:0a:3f:58:32:5d: 1b:05:e4:73:7b:6b:3c:46:bc:1b:31:0b:d5:ed:83: 57:fd:d0:80:b5:41:e0:f0:6c:be:53:97:89:db:1b: 49:b1:c7:7e:48:20:09:02:0f:b6:37:26:3b:eb:25: ca:95:dd:d0:88:c3:56:ed:c9:50:6b:7d:29:84:98: 2a:46:5e:00:02:14:3c:9c:1d:5e:d0:f6:36:ce:ea: ee:7b:dc:d4:be:f5:02:1e:f1:e0:22:08:03:94:d8: 31:8f:6e:b9:c2:a8:d1:40:ed:0a:3f:13:0c:4e:7f: 4b:3b:2a:31:3e:fb:1b:06:07:c3:37:25:d6:16:ec: 67:5f:70:c3:8c:13:b1:a0:d1:6c:3a:80:aa:62:94: a5:30:a7:2b:67:da:f9:60:93:db:ea:87:53:a5:5a: 85:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BB:A0:6E:BB:11:BA:CB:5F:D9:F5:31:C6:79:77:1D:3A:65:39:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/6b7c028f-569f-32db-a599-301f156d588d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/4ce3c22e-2449-4367-bcc9-96ec877f3e23.crl X509v3 Authority Key Identifier: keyid:FA:5F:B7:2E:8E:85:81:CF:9B:DD:C7:DD:A2:E0:4C:7D:C4:10:8A:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23.cer sbgp-ipAddrBlock: critical IPv4: 148.59.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:cb:bb:c3:07:a0:d8:36:05:85:c0:1c:29:dd:cc:8b:48:16: 3b:19:dc:8a:cb:2a:b4:8e:61:23:4a:fa:57:1e:94:d5:d9:aa: 4a:95:4d:22:6c:77:c0:1b:47:32:a6:2f:17:13:c1:16:74:43: ac:b0:b9:66:68:2d:ca:0c:97:c9:47:ad:cf:13:4b:0f:5e:71: a1:19:56:5d:d9:21:f6:c4:20:00:e1:94:4f:6b:1d:86:3e:5c: dc:42:54:17:11:3c:6e:8b:27:7f:46:06:22:be:0d:bd:7a:d9: ec:04:61:bd:07:db:37:1e:96:af:ec:8e:a6:eb:83:4a:15:83: 5a:b8:b7:5c:76:1b:e3:e5:c2:b9:da:b6:a1:c1:ac:9e:6c:b2: fd:35:19:80:38:b5:56:2f:e8:38:7d:ba:fd:ae:5c:bc:3a:20: 28:ad:89:d5:0c:0b:b0:72:94:62:81:b7:c6:89:8d:c3:06:05: 68:12:ac:31:87:32:33:02:93:e3:ce:82:9b:0f:69:7f:2d:15: 5e:37:51:2a:1b:26:90:a2:c7:1e:42:00:5c:f4:6e:b8:21:84: 5d:35:21:6c:00:ad:60:58:20:14:92:75:e1:d2:a0:3b:3a:80: 2a:1b:05:f7:0a:03:cd:0e:06:36:c9:2a:68:a8:48:6d:59:c6: 2e:68:ef:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETy//0jihBjaR98tsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNlM2MyMmUtMjQ0OS00MzY3LWJjYzktOTZlYzg3N2Yz ZTIzMB4XDTI0MDIyMDAyMDAyNloXDTI0MDUyMDAxMDAyNlowLzEtMCsGA1UEAxMk NjgwZWI2N2UtOTIzYy00OWU3LTkwZjUtZjUwZjIwNjNmMTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TLr6jOu4XezbqR/nPrUBI199taG+u4H0zH3 F/v15ztRKdMJAfHX66IkvIDt49N9LpeHExFkAAfxdzV0bUVNJ6GLfzqZmfNDoAWa Pybwd8Uq1o16w2M449iTdX7mAEkSBs4TCj9YMl0bBeRze2s8RrwbMQvV7YNX/dCA tUHg8Gy+U5eJ2xtJscd+SCAJAg+2NyY76yXKld3QiMNW7clQa30phJgqRl4AAhQ8 nB1e0PY2zurue9zUvvUCHvHgIggDlNgxj265wqjRQO0KPxMMTn9LOyoxPvsbBgfD NyXWFuxnX3DDjBOxoNFsOoCqYpSlMKcrZ9r5YJPb6odTpVqFfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPW7oG67EbrLX9n1McZ5dx06ZTn9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80Y2Uz YzIyZS0yNDQ5LTQzNjctYmNjOS05NmVjODc3ZjNlMjMvNmI3YzAyOGYtNTY5Zi0z MmRiLWE1OTktMzAxZjE1NmQ1ODhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGNlM2MyMmUtMjQ0OS00MzY3LWJj YzktOTZlYzg3N2YzZTIzLzRjZTNjMjJlLTI0NDktNDM2Ny1iY2M5LTk2ZWM4Nzdm M2UyMy5jcmwwHwYDVR0jBBgwFoAU+l+3Lo6Fgc+b3cfdouBMfcQQirowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80Y2UzYzIyZS0yNDQ5LTQzNjctYmNjOS05NmVj ODc3ZjNlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDurMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPLu8MHoNg2BYXAHCndzItIFjsZ3IrLKrSOYSNK+lcelNXZqkqVTSJs d8AbRzKmLxcTwRZ0Q6ywuWZoLcoMl8lHrc8TSw9ecaEZVl3ZIfbEIADhlE9rHYY+ XNxCVBcRPG6LJ39GBiK+Db162ewEYb0H2zcelq/sjqbrg0oVg1q4t1x2G+Plwrna tqHBrJ5ssv01GYA4tVYv6Dh9uv2uXLw6ICitidUMC7BylGKBt8aJjcMGBWgSrDGH MjMCk+POgpsPaX8tFV43USobJpCixx5CAFz0brghhF01IWwArWBYIBSSdeHSoDs6 gCobBfcKA80OBjbJKmioSG1Zxi5o7zM= -----END CERTIFICATE-----Generated at Thu May 2 22:15:23 2024 by rpki-client on console-fra.rpki-client.org