$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08c33d31-01e9-3f84-ae5b-c22d6322f47b.roa File: 08c33d31-01e9-3f84-ae5b-c22d6322f47b.roa (raw, json) Hash identifier: 8vlxyUEBB2uJPJep6r5wUVBIYavPgCQRiPu3GpMU5Zo= Subject key identifier: 2E:D8:18:DD:A6:9E:7C:A5:53:2C:C2:49:70:8D:67:A0:59:DC:29:97 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858459368B23C395181D414511B00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08c33d31-01e9-3f84-ae5b-c22d6322f47b.roa Signing time: Wed 17 Apr 2024 13:00:34 +0000 ROA not before: Wed 17 Apr 2024 13:00:34 +0000 ROA not after: Tue 16 Jul 2024 13:00:34 +0000 asID: 701 IP address blocks: 71.167.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:93:68:b2:3c:39:51:81:d4:14:51:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 17 13:00:34 2024 GMT Not After : Jul 16 13:00:34 2024 GMT Subject: CN=55be1fca-1368-4221-b4ea-f11cf6671381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5d:a2:bd:b1:de:67:31:51:fd:1a:fd:db:d7: 34:03:1a:60:90:d5:b3:49:93:b0:12:a1:95:be:72: 2a:31:4f:7c:af:95:e1:53:40:33:79:ce:14:42:58: 98:2d:36:f1:34:6c:21:24:4c:44:8e:08:9f:79:fc: 04:d4:d2:d6:36:89:84:c7:7e:a0:cc:11:70:94:0f: ee:c3:59:3b:e1:05:ae:5c:6f:ab:96:f8:06:44:f3: 37:f7:ef:55:b4:94:a5:cb:78:2e:68:20:ce:b6:14: 4e:fc:70:9d:75:4c:52:a0:ac:4f:84:25:bb:9d:9d: cf:b2:da:2b:51:ee:a4:f6:84:3a:2f:36:d5:1a:d6: 1a:a6:ea:ee:57:ff:70:32:d1:01:da:a0:8c:0d:b3: 39:da:5d:58:92:e7:44:24:6c:7f:c7:d5:53:21:94: 56:3a:b8:c2:99:bb:28:6b:a0:a2:db:f0:12:c7:7b: 29:05:c4:1b:28:78:be:e6:ce:c7:6b:b1:60:d6:87: c3:75:6f:38:c3:d1:ae:c2:ec:bd:5e:17:cd:4d:d1: 51:c4:d4:47:9d:29:6c:4f:c4:88:92:b4:66:6b:83: 65:11:39:24:e6:96:8b:2e:bb:c3:7a:d0:1d:49:65: 9f:f4:47:86:6c:db:9e:fc:4a:9f:d7:51:3c:1d:e1: a5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D8:18:DD:A6:9E:7C:A5:53:2C:C2:49:70:8D:67:A0:59:DC:29:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08c33d31-01e9-3f84-ae5b-c22d6322f47b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.167.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:30:3f:2a:5c:36:ca:9f:b9:0c:5b:2b:8a:e3:8b:77:42:76: 5c:5f:22:e8:58:8c:1e:86:15:e8:77:88:f9:d2:4e:df:09:80: 82:e8:01:b6:3d:92:5e:95:99:cb:6c:15:6b:e9:3c:9c:8b:76: e0:0f:aa:ba:be:cf:58:83:87:23:fe:15:df:d5:18:7f:f9:b3: 5d:6a:dc:3a:6d:8f:6d:12:60:8a:3d:c5:ef:79:00:9f:76:15: 85:03:28:7b:30:e2:cb:24:38:de:6b:ef:df:20:ad:25:06:99: 3e:bb:67:9c:60:b6:23:c6:7d:d4:b2:f9:93:0d:35:ad:f9:39: 25:a2:e7:13:33:4f:3f:ca:18:b5:ac:0d:e4:5a:e8:30:2e:cc: 71:62:69:3d:75:c3:10:e5:d2:a2:3d:49:8b:ce:92:7d:a9:99: b1:fc:49:d3:21:1e:0a:48:30:e0:ec:59:fd:72:2c:f4:2f:50: 97:bc:ee:06:f8:e5:32:62:c8:f3:70:07:08:8f:ef:95:ce:ba: 99:dd:ec:42:09:71:2e:43:ab:52:af:a8:84:55:8a:a7:63:01: 97:7d:49:9f:bc:70:87:52:96:23:79:b8:2a:42:ea:3a:11:6e: c4:31:97:a6:cd:59:79:4f:46:3e:66:98:52:bf:7a:5b:32:64: 91:ea:ee:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWTaLI8OVGB1BRRGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk NTViZTFmY2EtMTM2OC00MjIxLWI0ZWEtZjExY2Y2NjcxMzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkV2ivbHeZzFR/Rr929c0AxpgkNWzSZOwEqGV vnIqMU98r5XhU0Azec4UQliYLTbxNGwhJExEjgifefwE1NLWNomEx36gzBFwlA/u w1k74QWuXG+rlvgGRPM39+9VtJSly3guaCDOthRO/HCddUxSoKxPhCW7nZ3Pstor Ue6k9oQ6LzbVGtYapuruV/9wMtEB2qCMDbM52l1YkudEJGx/x9VTIZRWOrjCmbso a6Ci2/ASx3spBcQbKHi+5s7Ha7Fg1ofDdW84w9Guwuy9XhfNTdFRxNRHnSlsT8SI krRma4NlETkk5paLLrvDetAdSWWf9EeGbNue/Eqf11E8HeGlLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7YGN2mnnylUyzCSXCNZ6BZ3CmXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDhjMzNkMzEtMDFlOS0z Zjg0LWFlNWItYzIyZDYzMjJmNDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR6eAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYwPypcNsqfuQxbK4rji3dCdlxfIuhYjB6GFeh3iPnSTt8JgILoAbY9 kl6VmctsFWvpPJyLduAPqrq+z1iDhyP+Fd/VGH/5s11q3Dptj20SYIo9xe95AJ92 FYUDKHsw4sskON5r798grSUGmT67Z5xgtiPGfdSy+ZMNNa35OSWi5xMzTz/KGLWs DeRa6DAuzHFiaT11wxDl0qI9SYvOkn2pmbH8SdMhHgpIMODsWf1yLPQvUJe87gb4 5TJiyPNwBwiP75XOupnd7EIJcS5Dq1KvqIRViqdjAZd9SZ+8cIdSliN5uCpC6joR bsQxl6bNWXlPRj5mmFK/elsyZJHq7ns= -----END CERTIFICATE-----Generated at Thu May 9 15:24:56 2024 by rpki-client on console-ams.rpki-client.org