$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/1bfd927a-7bde-365b-a1e3-52dd07daa7d8.roa File: 1bfd927a-7bde-365b-a1e3-52dd07daa7d8.roa (raw, json) Hash identifier: 7rPRMLXlwugb55xc/DjTkwxgGaj0iyKJEDmV5Z/n+a0= Subject key identifier: 6F:03:18:EB:83:68:8F:5E:67:BA:F7:F8:E8:C2:F0:D8:F1:03:B7:87 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F43285844F730035B36C95F807533C0A0 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/1bfd927a-7bde-365b-a1e3-52dd07daa7d8.roa Signing time: Wed 21 Feb 2024 14:00:32 +0000 ROA not before: Wed 21 Feb 2024 14:00:32 +0000 ROA not after: Tue 21 May 2024 13:00:32 +0000 asID: 209242 IP address blocks: 66.81.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f7:30:03:5b:36:c9:5f:80:75:33:c0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Feb 21 14:00:32 2024 GMT Not After : May 21 13:00:32 2024 GMT Subject: CN=187cb76a-1979-4127-9820-df87a717bc8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:30:81:55:8c:b3:41:da:da:eb:f9:c6:cc:e7: a5:e6:16:5e:d0:14:93:9f:fa:6e:1e:3c:12:1c:3d: de:02:e2:70:8b:88:c6:24:c9:af:1a:e0:5f:f6:f4: 92:8f:2d:8f:5a:dc:27:34:ab:45:e5:2b:c7:01:3c: c3:d0:41:06:72:a4:a3:85:f2:84:12:8c:1d:b7:22: 6e:34:09:a7:f2:7d:ad:98:ec:b7:bd:ff:36:a0:1a: 73:57:90:5b:1a:fa:05:c6:58:2c:9e:9f:3a:f0:a5: 9b:48:67:89:ab:93:5d:3f:79:15:90:63:83:e0:9d: ac:7f:9f:e0:ec:5e:e3:b2:17:db:a0:5a:51:fc:10: fc:40:22:0e:e8:d7:a1:cd:96:09:a0:08:8f:7d:55: 27:d3:47:cd:20:dd:03:14:26:a1:a8:e3:8a:a0:73: 10:97:eb:56:ee:a8:ca:2e:ea:03:24:c9:ca:6b:89: d7:2b:ee:2d:9a:b1:88:5e:60:e6:f5:25:a6:e4:28: 97:5b:87:36:8c:b3:a4:b4:52:9f:2b:97:aa:6b:67: 9e:b4:95:c2:cf:eb:df:ab:08:51:94:39:ba:88:c4: 1b:41:ed:b0:05:9b:09:02:66:07:41:ff:23:7f:e7: e7:66:52:58:d3:af:9c:36:3b:81:24:0f:99:9a:a6: 40:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:03:18:EB:83:68:8F:5E:67:BA:F7:F8:E8:C2:F0:D8:F1:03:B7:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/1bfd927a-7bde-365b-a1e3-52dd07daa7d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:38:8f:a9:6d:e1:f7:39:7e:5b:73:1b:ff:37:33:bb:35:cf: 49:1e:c1:03:83:24:72:6d:d6:44:2b:dd:48:6f:7b:97:dc:33: e4:d4:d8:85:44:1d:e8:96:d3:23:60:4f:25:3b:12:18:06:f0: fd:a5:77:12:34:4f:6f:06:da:2d:c1:34:f4:73:06:10:31:60: 5e:bd:15:c1:7b:54:0f:56:78:c2:86:f3:22:a3:c8:a0:d2:bd: d4:79:5b:b4:29:fa:b0:ec:ad:01:4c:2e:87:71:cd:dc:da:68: 60:be:49:b2:4e:c5:50:4a:61:c2:b7:2a:f9:13:7d:83:1a:54: c5:5c:6a:ff:aa:14:86:ed:7b:d2:d8:ed:af:3f:0b:98:cc:5b: 90:9b:ec:09:47:e6:b0:3a:c2:7a:45:49:f6:81:f1:77:75:7b: f5:01:32:1c:86:54:06:eb:11:94:55:2e:0b:d3:68:f3:8c:d6: ec:17:62:90:9e:ec:c0:c5:7d:5f:f4:c4:32:6e:48:0f:7a:55: 37:7f:78:8c:7e:d2:70:db:bd:fb:ac:9c:69:92:10:98:33:dd: 36:ab:0f:d1:74:a4:66:69:3e:3d:d1:b3:5a:08:e3:28:d5:76: a4:42:8e:f3:c4:67:e4:32:9b:05:9f:91:9f:25:f1:c7:11:75: ee:d0:a1:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET3MANbNslfgHUzwKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI0MDIyMTE0MDAzMloXDTI0MDUyMTEzMDAzMlowLzEtMCsGA1UEAxMk MTg3Y2I3NmEtMTk3OS00MTI3LTk4MjAtZGY4N2E3MTdiYzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DCBVYyzQdra6/nGzOel5hZe0BSTn/puHjwS HD3eAuJwi4jGJMmvGuBf9vSSjy2PWtwnNKtF5SvHATzD0EEGcqSjhfKEEowdtyJu NAmn8n2tmOy3vf82oBpzV5BbGvoFxlgsnp868KWbSGeJq5NdP3kVkGOD4J2sf5/g 7F7jshfboFpR/BD8QCIO6NehzZYJoAiPfVUn00fNIN0DFCahqOOKoHMQl+tW7qjK LuoDJMnKa4nXK+4tmrGIXmDm9SWm5CiXW4c2jLOktFKfK5eqa2eetJXCz+vfqwhR lDm6iMQbQe2wBZsJAmYHQf8jf+fnZlJY06+cNjuBJA+ZmqZARwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8DGOuDaI9eZ7r3+OjC8NjxA7eHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvMWJmZDkyN2EtN2JkZS0z NjViLWExZTMtNTJkZDA3ZGFhN2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlH3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAA4j6lt4fc5fltzG/83M7s1z0kewQODJHJt1kQr3Uhve5fcM+TU2IVE HeiW0yNgTyU7EhgG8P2ldxI0T28G2i3BNPRzBhAxYF69FcF7VA9WeMKG8yKjyKDS vdR5W7Qp+rDsrQFMLodxzdzaaGC+SbJOxVBKYcK3KvkTfYMaVMVcav+qFIbte9LY 7a8/C5jMW5Cb7AlH5rA6wnpFSfaB8Xd1e/UBMhyGVAbrEZRVLgvTaPOM1uwXYpCe 7MDFfV/0xDJuSA96VTd/eIx+0nDbvfusnGmSEJgz3TarD9F0pGZpPj3Rs1oI4yjV dqRCjvPEZ+QymwWfkZ8l8ccRde7QoSs= -----END CERTIFICATE-----Generated at Tue May 7 02:14:20 2024 by rpki-client on console-ams.rpki-client.org