$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3da83a5f-2475-344d-bc7c-33066927f827.roa File: 3da83a5f-2475-344d-bc7c-33066927f827.roa (raw, json) Hash identifier: i5HmJFQVXKP9xpmLGdu5M5Sf9S+spGQY3U8OBV5QyPc= Subject key identifier: 4A:D2:4B:46:91:63:AE:61:CE:33:CD:C5:85:7A:32:4A:C6:40:96:6F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584548FC621FB9759F56BB6BB9C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3da83a5f-2475-344d-bc7c-33066927f827.roa Signing time: Thu 21 Mar 2024 21:12:48 +0000 ROA not before: Thu 21 Mar 2024 21:12:48 +0000 ROA not after: Wed 19 Jun 2024 21:12:48 +0000 asID: 15169 IP address blocks: 70.32.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:48:fc:62:1f:b9:75:9f:56:bb:6b:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 21:12:48 2024 GMT Not After : Jun 19 21:12:48 2024 GMT Subject: CN=3d02fa34-e98d-4fdd-ba72-a1e64bec1e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:73:84:98:06:f1:c7:29:f3:2d:21:19:51:06: 13:36:50:57:7d:0d:75:f3:0c:3a:c3:61:c2:d2:e1: 04:d1:f6:97:3a:93:96:0d:2b:cc:da:7b:90:bb:1b: 22:97:be:4f:21:31:3f:f5:e6:c6:c4:83:d8:99:f5: 3c:8e:ed:41:18:47:02:20:c1:a1:75:5d:ba:83:a7: c7:94:fb:9d:a5:b6:b6:5e:76:45:4e:8c:35:92:f6: 92:54:f0:40:2c:c2:05:46:19:5a:4e:27:63:63:5a: c5:12:1b:ff:e4:da:30:5c:17:c9:b7:62:ac:fd:05: 01:0a:ff:b5:a2:55:c7:fe:3f:c3:d5:7e:b6:1d:c3: c1:48:5f:44:93:60:10:74:1d:44:90:59:83:45:d9: 38:01:ad:6f:36:62:8f:ab:36:98:f5:a7:e3:9e:b4: 71:42:83:f9:4a:4d:8d:f2:e3:49:a2:ae:4e:a2:8b: aa:18:97:15:d8:b1:94:20:bf:5d:71:e5:12:fc:ce: b9:45:0b:6b:84:d5:05:86:ca:eb:69:c1:f9:fd:1c: b0:13:d2:69:f9:8d:e7:7a:aa:d3:40:39:28:5e:5d: 24:40:dc:89:58:aa:99:21:68:56:71:70:89:32:0b: a7:d0:c0:13:a2:6b:9f:a6:d3:7a:c4:67:bd:2f:0e: dc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D2:4B:46:91:63:AE:61:CE:33:CD:C5:85:7A:32:4A:C6:40:96:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3da83a5f-2475-344d-bc7c-33066927f827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:ad:ee:59:53:9f:e4:57:d2:ed:a6:d0:ad:15:2f:1a:d3:35: 8a:a7:1c:d2:7e:0c:32:25:c1:b0:97:ad:98:3c:a5:58:93:6b: 93:53:56:cb:b2:b7:cc:3b:10:bd:2b:10:62:af:e7:7f:ab:03: 33:c5:58:47:d1:95:cf:29:70:ec:c6:71:a6:a0:e8:69:13:1d: a3:96:42:3a:73:09:45:82:c9:8f:c7:1a:5d:65:30:8b:1b:1f: a0:79:99:93:70:47:c3:34:2c:9e:b4:3a:0b:22:6c:d8:34:75: e9:45:56:91:1b:28:60:70:ac:d0:47:93:fd:07:f7:98:87:aa: eb:6a:82:ef:fa:10:58:39:07:af:fc:de:8e:ee:4b:a5:a5:7e: 34:e2:b5:0f:f9:67:fb:4e:36:96:a1:d5:a7:58:4c:3d:cd:ac: 09:ff:b7:bf:d9:80:66:37:56:e8:93:2a:ba:c8:88:5f:a6:52: 54:00:a8:07:8a:d9:51:e6:8f:ca:b9:eb:dc:43:6b:d7:13:09: 05:3b:6b:a1:c5:93:bf:d4:2b:de:2a:8a:ca:61:8d:a8:e9:74: 22:90:ea:37:ce:09:5c:52:f2:c3:4b:30:78:f2:24:f4:f8:f6: 1c:da:9e:23:3a:a9:fc:ed:74:4f:da:69:e6:96:fa:bd:71:cb: 29:31:11:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVI/GIfuXWfVrtrucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMTIxMTI0OFoXDTI0MDYxOTIxMTI0OFowLzEtMCsGA1UEAxMk M2QwMmZhMzQtZTk4ZC00ZmRkLWJhNzItYTFlNjRiZWMxZTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHOEmAbxxynzLSEZUQYTNlBXfQ118ww6w2HC 0uEE0faXOpOWDSvM2nuQuxsil75PITE/9ebGxIPYmfU8ju1BGEcCIMGhdV26g6fH lPudpba2XnZFTow1kvaSVPBALMIFRhlaTidjY1rFEhv/5NowXBfJt2Ks/QUBCv+1 olXH/j/D1X62HcPBSF9Ek2AQdB1EkFmDRdk4Aa1vNmKPqzaY9afjnrRxQoP5Sk2N 8uNJoq5OoouqGJcV2LGUIL9dceUS/M65RQtrhNUFhsrracH5/RywE9Jp+Y3neqrT QDkoXl0kQNyJWKqZIWhWcXCJMgun0MATomufptN6xGe9Lw7c2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErSS0aRY65hzjPNxYV6MkrGQJZvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2RhODNhNWYtMjQ3NS0z NDRkLWJjN2MtMzMwNjY5MjdmODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGt7llTn+RX0u2m0K0VLxrTNYqnHNJ+DDIlwbCXrZg8pViTa5NTVsuy t8w7EL0rEGKv53+rAzPFWEfRlc8pcOzGcaag6GkTHaOWQjpzCUWCyY/HGl1lMIsb H6B5mZNwR8M0LJ60OgsibNg0delFVpEbKGBwrNBHk/0H95iHqutqgu/6EFg5B6/8 3o7uS6WlfjTitQ/5Z/tONpah1adYTD3NrAn/t7/ZgGY3VuiTKrrIiF+mUlQAqAeK 2VHmj8q569xDa9cTCQU7a6HFk7/UK94qisphjajpdCKQ6jfOCVxS8sNLMHjyJPT4 9hzaniM6qfztdE/aaeaW+r1xyykxEQs= -----END CERTIFICATE-----Generated at Fri May 17 22:54:39 2024 by rpki-client on console-fra.rpki-client.org