$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/2447bcc4-96e5-3c96-98e6-cfbb76fcd991.roa File: 2447bcc4-96e5-3c96-98e6-cfbb76fcd991.roa (raw, json) Hash identifier: pQB2YJKzuOKVThUo+Ekv4B9FeOmxn62AXrveq2VLCPw= Subject key identifier: EB:DF:91:E5:31:C3:C1:CC:A3:D0:2F:F0:FD:CF:9C:EC:47:5A:ED:86 Certificate issuer: /CN=61f164dd-db39-470d-8805-3aa514d5e7b0 Certificate serial: 010D0C9F43285845CB3E55DD727BE896806C5240 Authority key identifier: 9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/2447bcc4-96e5-3c96-98e6-cfbb76fcd991.roa Signing time: Tue 07 May 2024 13:00:35 +0000 ROA not before: Tue 07 May 2024 13:00:35 +0000 ROA not after: Mon 05 Aug 2024 13:00:35 +0000 asID: 52347 IP address blocks: 192.34.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:cb:3e:55:dd:72:7b:e8:96:80:6c:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f164dd-db39-470d-8805-3aa514d5e7b0 Validity Not Before: May 7 13:00:35 2024 GMT Not After : Aug 5 13:00:35 2024 GMT Subject: CN=3edb372f-b025-41ef-bd26-ed0d6dd17f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:20:c8:11:8d:6d:b2:da:4f:e1:13:09:2d:db: 54:77:2d:0d:fb:e3:e8:9b:a7:f8:ae:5b:1f:04:7a: f7:9f:27:f6:a5:55:d1:8f:15:72:5b:30:05:d0:59: 7f:76:5b:f8:69:62:51:b2:77:2e:5a:64:5d:20:56: 6a:4f:05:8e:86:19:23:2e:88:c8:a0:77:79:ed:4b: c1:c9:dc:be:94:e4:71:c0:de:3d:32:74:db:04:ba: 87:d5:13:0b:bc:73:83:21:49:c9:13:26:71:5e:c3: 08:2b:b1:f3:74:42:ca:c0:74:25:29:0c:97:2d:8c: 21:2e:20:43:36:d7:f8:8b:2b:19:17:3c:6e:2c:30: bc:bc:7a:67:94:eb:48:3f:7b:d9:89:c8:d2:47:72: 28:4c:b2:45:db:08:c0:26:00:08:58:a4:3d:ef:6d: a7:b7:e8:58:85:7e:54:db:00:6f:3a:88:46:44:ba: 84:4d:bf:34:0a:26:1a:93:62:0b:c4:03:8b:3a:d9: 43:a1:6c:19:74:79:4d:10:49:d0:e3:e7:a2:cc:d3: 3d:b0:07:5a:91:10:65:0f:81:58:35:49:78:87:ed: d5:32:a3:d4:76:61:85:7a:3e:e6:e4:69:3e:95:a9: 53:f0:31:4c:08:97:c5:9c:b8:ce:f6:3e:39:57:bd: 54:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DF:91:E5:31:C3:C1:CC:A3:D0:2F:F0:FD:CF:9C:EC:47:5A:ED:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/2447bcc4-96e5-3c96-98e6-cfbb76fcd991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl X509v3 Authority Key Identifier: keyid:9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer sbgp-ipAddrBlock: critical IPv4: 192.34.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:77:68:f0:bd:0e:a5:23:05:0e:d8:6e:57:38:15:94:ae:fb: d4:42:86:1e:32:d4:fe:a1:23:03:b1:50:7e:3b:05:04:c3:22: 61:a2:af:7e:e6:22:b6:ac:56:d5:04:6b:3a:6d:f3:5b:04:21: 5c:4f:25:17:70:69:87:63:65:9d:26:60:89:60:ba:19:4f:41: 01:7a:3a:8d:48:aa:bf:23:ec:7a:31:0f:77:aa:95:21:17:9d: 4b:58:ce:99:c0:4c:a3:03:47:ca:5b:4c:8c:30:6c:fe:19:b1: 6a:60:5c:28:4c:08:68:c5:47:d3:3d:14:2b:8e:ae:07:90:b2: 32:e8:fe:63:06:83:14:b1:14:8e:dd:27:a2:71:5a:5e:04:d0: 27:fa:08:40:27:63:ed:86:ac:89:af:bc:78:7b:90:6c:22:3c: b6:b7:42:25:09:5b:d2:90:5a:a6:02:5a:15:12:6a:0c:35:79: 40:98:9e:9b:8f:ae:20:c4:ed:84:8c:fd:84:c9:87:e1:8b:e2: 94:39:c6:8c:77:6c:24:77:35:07:40:44:a6:a7:45:92:f0:e4: 74:9d:50:05:f5:bd:aa:eb:ac:21:c7:25:b2:c9:25:54:31:0e: 8a:f6:bf:0a:db:71:ba:6f:b9:2b:13:bf:44:14:a1:f4:c5:94: f1:92:ae:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXLPlXdcnvoloBsUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmMTY0ZGQtZGIzOS00NzBkLTg4MDUtM2FhNTE0ZDVl N2IwMB4XDTI0MDUwNzEzMDAzNVoXDTI0MDgwNTEzMDAzNVowLzEtMCsGA1UEAxMk M2VkYjM3MmYtYjAyNS00MWVmLWJkMjYtZWQwZDZkZDE3ZjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliDIEY1tstpP4RMJLdtUdy0N++Pom6f4rlsf BHr3nyf2pVXRjxVyWzAF0Fl/dlv4aWJRsncuWmRdIFZqTwWOhhkjLojIoHd57UvB ydy+lORxwN49MnTbBLqH1RMLvHODIUnJEyZxXsMIK7HzdELKwHQlKQyXLYwhLiBD Ntf4iysZFzxuLDC8vHpnlOtIP3vZicjSR3IoTLJF2wjAJgAIWKQ9722nt+hYhX5U 2wBvOohGRLqETb80CiYak2ILxAOLOtlDoWwZdHlNEEnQ4+eizNM9sAdakRBlD4FY NUl4h+3VMqPUdmGFej7m5Gk+lalT8DFMCJfFnLjO9j45V71UVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvfkeUxw8HMo9Av8P3PnOxHWu2GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MWYx NjRkZC1kYjM5LTQ3MGQtODgwNS0zYWE1MTRkNWU3YjAvMjQ0N2JjYzQtOTZlNS0z Yzk2LTk4ZTYtY2ZiYjc2ZmNkOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjFmMTY0ZGQtZGIzOS00NzBkLTg4 MDUtM2FhNTE0ZDVlN2IwLzYxZjE2NGRkLWRiMzktNDcwZC04ODA1LTNhYTUxNGQ1 ZTdiMC5jcmwwHwYDVR0jBBgwFoAUn+qdbiydJN8Iu7seOhQEldnw9LYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82MWYxNjRkZC1kYjM5LTQ3MGQtODgwNS0zYWE1 MTRkNWU3YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwCIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJ3aPC9DqUjBQ7Yblc4FZSu+9RChh4y1P6hIwOxUH47BQTDImGir37m IrasVtUEazpt81sEIVxPJRdwaYdjZZ0mYIlguhlPQQF6Oo1Iqr8j7HoxD3eqlSEX nUtYzpnATKMDR8pbTIwwbP4ZsWpgXChMCGjFR9M9FCuOrgeQsjLo/mMGgxSxFI7d J6JxWl4E0Cf6CEAnY+2GrImvvHh7kGwiPLa3QiUJW9KQWqYCWhUSagw1eUCYnpuP riDE7YSM/YTJh+GL4pQ5xox3bCR3NQdARKanRZLw5HSdUAX1varrrCHHJbLJJVQx Dor2vwrbcbpvuSsTv0QUofTFlPGSrhM= -----END CERTIFICATE-----Generated at Thu May 9 01:32:10 2024 by rpki-client on console-ams.rpki-client.org