$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/adf8ca17-f454-38d8-8818-6ba2724ad500.roa File: adf8ca17-f454-38d8-8818-6ba2724ad500.roa (raw, json) Hash identifier: L+FxzOvxSvWP/t/foo8/STAxmmAnQqGF0XVudBmmb14= Subject key identifier: 9B:6D:F0:4C:4B:97:DB:FC:6F:48:67:1E:9C:DD:DF:44:1F:A2:1B:0C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858457083076007B890658D8A3B7A Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/adf8ca17-f454-38d8-8818-6ba2724ad500.roa Signing time: Fri 05 Apr 2024 01:00:28 +0000 ROA not before: Fri 05 Apr 2024 01:00:28 +0000 ROA not after: Thu 04 Jul 2024 01:00:28 +0000 asID: 0 IP address blocks: 208.238.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:70:83:07:60:07:b8:90:65:8d:8a:3b:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 5 01:00:28 2024 GMT Not After : Jul 4 01:00:28 2024 GMT Subject: CN=b08265a7-170a-47c7-8bb2-22e14dd356a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4d:40:5a:58:0d:70:10:fc:57:0d:a1:87:35: 62:01:45:bd:c7:fc:91:14:8e:ce:05:70:7e:5e:c2: 10:50:24:de:e1:ef:e1:15:aa:6a:46:5e:94:25:0e: c8:ad:47:ec:aa:8e:1e:e6:30:27:78:79:35:04:3f: f7:99:07:4e:f0:d7:15:a0:ef:88:f4:90:d5:6f:e7: af:33:d8:17:cd:e0:a5:69:39:36:56:68:a6:3c:c0: 75:11:c1:de:51:90:78:9c:8c:ad:31:94:8d:9d:f3: c5:7a:16:a6:cc:49:bd:a4:23:96:cd:b3:8f:f1:3e: 1d:61:12:50:a8:a2:34:9d:d8:1c:bf:6a:e7:38:08: b1:55:b3:68:dc:9d:37:e5:2b:91:82:fc:25:1d:9f: 57:ee:49:15:c0:db:af:28:86:ce:f2:e1:7d:de:be: 8f:5f:9d:8b:36:35:02:0b:0b:e1:1c:d2:88:6e:9b: 9e:5c:7d:d4:e6:9c:d4:64:9c:e0:1b:8b:90:8e:50: ed:1a:eb:4a:e9:f3:f2:83:77:b9:67:db:9e:e8:fb: 5e:fa:51:95:91:83:78:11:7b:74:50:a8:58:9b:5a: 5a:cf:e4:8a:da:f7:d4:d5:ce:d4:8c:b8:49:7b:6f: f6:31:30:94:96:50:a7:05:af:e3:61:f0:ca:e3:02: 29:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:6D:F0:4C:4B:97:DB:FC:6F:48:67:1E:9C:DD:DF:44:1F:A2:1B:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/adf8ca17-f454-38d8-8818-6ba2724ad500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.238.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:c5:8b:db:10:a8:c4:e2:ea:ea:ed:87:71:0e:44:c6:f0:bf: 4a:48:c5:42:25:7a:37:ae:91:75:83:61:22:92:25:ad:8a:a4: e4:75:23:1c:16:3f:e0:f5:9c:d8:e3:09:82:2d:6f:49:5b:48: e8:9d:df:92:3d:cd:de:b9:c8:ee:0b:04:de:e7:00:b1:e0:f9: b4:4a:c3:a2:12:25:c1:0d:b0:08:92:87:2a:ea:94:70:c2:2d: b3:d0:ce:97:09:70:d2:39:ce:fc:a0:12:3c:98:c9:a8:47:a4: d7:a8:d9:af:6c:d9:f6:c3:23:0f:0a:95:1e:a0:3d:0b:a0:90: b0:9b:dd:b4:47:ff:89:61:bf:49:b5:65:f9:23:a4:32:ad:bc: 25:a7:f4:3f:3c:f4:0a:a2:8d:63:1b:a9:cf:9a:7a:ff:cc:5a: 22:f8:cd:37:2f:5f:01:a9:c1:f8:5a:de:b0:0b:44:2b:60:12: 83:54:33:6c:b6:73:2f:e5:12:a2:bc:50:d5:e0:1e:a8:f2:85: 8b:dd:26:76:6d:5c:3a:2a:d4:bb:84:5a:34:37:21:8c:e1:30: 4e:e2:e4:f4:13:73:42:42:b1:a6:97:f7:fa:09:05:bf:47:cc: 35:69:1d:c0:80:a6:2d:e4:9b:66:9d:be:26:5f:4c:83:de:b5: 09:1f:ab:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVwgwdgB7iQZY2KO3owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDQwNTAxMDAyOFoXDTI0MDcwNDAxMDAyOFowLzEtMCsGA1UEAxMk YjA4MjY1YTctMTcwYS00N2M3LThiYjItMjJlMTRkZDM1NmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU1AWlgNcBD8Vw2hhzViAUW9x/yRFI7OBXB+ XsIQUCTe4e/hFapqRl6UJQ7IrUfsqo4e5jAneHk1BD/3mQdO8NcVoO+I9JDVb+ev M9gXzeClaTk2VmimPMB1EcHeUZB4nIytMZSNnfPFehamzEm9pCOWzbOP8T4dYRJQ qKI0ndgcv2rnOAixVbNo3J035SuRgvwlHZ9X7kkVwNuvKIbO8uF93r6PX52LNjUC CwvhHNKIbpueXH3U5pzUZJzgG4uQjlDtGutK6fPyg3e5Z9ue6Pte+lGVkYN4EXt0 UKhYm1paz+SK2vfU1c7UjLhJe2/2MTCUllCnBa/jYfDK4wIpLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtt8ExLl9v8b0hnHpzd30QfohsMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWRmOGNhMTctZjQ1NC0z OGQ4LTg4MTgtNmJhMjcyNGFkNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0O6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzFi9sQqMTi6urth3EORMbwv0pIxUIlejeukXWDYSKSJa2KpOR1IxwW P+D1nNjjCYItb0lbSOid35I9zd65yO4LBN7nALHg+bRKw6ISJcENsAiShyrqlHDC LbPQzpcJcNI5zvygEjyYyahHpNeo2a9s2fbDIw8KlR6gPQugkLCb3bRH/4lhv0m1 ZfkjpDKtvCWn9D889AqijWMbqc+aev/MWiL4zTcvXwGpwfha3rALRCtgEoNUM2y2 cy/lEqK8UNXgHqjyhYvdJnZtXDoq1LuEWjQ3IYzhME7i5PQTc0JCsaaX9/oJBb9H zDVpHcCApi3km2adviZfTIPetQkfq+w= -----END CERTIFICATE-----Generated at Fri Apr 26 11:17:20 2024 by rpki-client on console-ams.rpki-client.org