$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af3a5234-4140-3d2e-adfd-0808848bbb55.roa File: af3a5234-4140-3d2e-adfd-0808848bbb55.roa (raw, json) Hash identifier: YQmaXA2pnHBpyV8EjgyUReJDgHRP1UwbMlvvHDp7d9I= Subject key identifier: A7:98:9D:8D:5C:D7:3E:36:4E:C1:01:9B:AB:35:B3:AC:28:3E:60:DE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285844F513BA35906FDD2E41EFE300 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af3a5234-4140-3d2e-adfd-0808848bbb55.roa Signing time: Tue 20 Feb 2024 19:51:56 +0000 ROA not before: Tue 20 Feb 2024 19:51:56 +0000 ROA not after: Mon 20 May 2024 18:51:56 +0000 asID: 8987 IP address blocks: 198.3.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f5:13:ba:35:90:6f:dd:2e:41:ef:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 20 19:51:56 2024 GMT Not After : May 20 18:51:56 2024 GMT Subject: CN=37b9eafc-0955-4a46-8d0b-ceda5b35afa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ec:22:e4:11:6e:1a:13:59:90:4c:d5:0a:8b: 1e:dd:b0:7e:e2:34:8d:7b:be:58:3c:fb:65:60:f2: af:ca:15:22:1d:de:6b:eb:0b:c3:81:b6:58:c5:02: 81:23:46:84:08:b0:5c:cc:d8:fa:a9:22:69:c1:f2: c9:4a:95:65:2c:57:97:48:e5:c9:a6:c0:d9:3a:06: 0f:66:a3:a4:b7:a1:03:b1:d9:a9:bb:ed:0a:57:23: 05:12:60:9e:26:78:4c:da:f3:fa:b4:74:77:cb:4f: e1:76:08:64:7f:cf:67:77:92:4d:d1:b5:be:85:00: 6d:e4:14:91:78:6d:dc:6e:b4:c1:26:8a:27:85:d0: 2b:68:d7:04:8c:99:ba:73:d4:74:8e:e1:e8:bd:5a: 45:46:f8:8c:87:41:9c:ef:77:2a:74:64:8f:d4:d8: 81:87:be:e2:57:61:ed:59:a6:cc:3c:f6:fe:72:88: 69:5f:c2:67:e7:5f:60:1c:0b:28:0c:71:0e:96:01: 14:02:26:a1:8a:fd:6b:04:50:d0:6f:26:1a:88:59: 1e:a0:e9:f6:a3:63:66:b1:98:bb:f4:63:2a:d6:af: 6d:7c:b3:12:16:4b:a2:5a:1d:9a:1a:cc:bc:34:06: 32:7a:ee:31:79:0a:e7:35:c5:b3:8d:ad:53:c0:1c: 0a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:98:9D:8D:5C:D7:3E:36:4E:C1:01:9B:AB:35:B3:AC:28:3E:60:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af3a5234-4140-3d2e-adfd-0808848bbb55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 198.3.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:2c:57:7b:5a:69:8d:2b:72:f2:32:dc:7d:f6:7b:6a:52:c3: 3a:4b:b8:a9:4f:c9:97:94:1d:bf:fa:cd:85:fd:d1:a2:40:f2: 9f:a6:11:74:86:d5:ab:22:b2:64:56:fc:1c:26:4d:a8:56:2e: 59:2e:30:33:a8:ab:be:09:94:a9:0e:63:bc:36:21:5e:e7:9b: 44:29:c2:6b:2d:51:a2:bc:7d:f8:0c:b3:08:41:ea:1b:b0:b7: 9b:73:e4:8c:91:88:f1:91:ff:de:53:09:a4:cb:2f:be:ca:40: df:0d:96:52:4e:87:1c:2c:86:c7:eb:2a:95:5a:90:0a:96:8b: 97:c2:8b:1e:bb:6d:27:f6:65:29:d2:a5:35:e9:45:7a:57:58: 8e:d1:7a:f8:06:2d:db:09:42:8a:35:22:81:4f:ee:56:09:52: 28:68:6a:24:69:a7:ab:41:5d:49:91:7a:36:bd:fa:a3:a0:e9: 77:a0:fc:6c:21:d4:3c:f6:c6:af:da:b7:e7:07:4c:6c:42:cf: 83:30:3c:7d:99:89:5a:4d:99:59:cc:d5:21:86:9b:7f:43:23: 31:57:10:e7:10:8f:dd:fa:ae:81:33:a3:09:7f:00:e8:86:77: 76:cf:2e:d2:8a:57:32:cf:09:e2:8f:1b:2e:82:a0:48:0b:eb: 4f:44:48:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET1E7o1kG/dLkHv4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDIyMDE5NTE1NloXDTI0MDUyMDE4NTE1NlowLzEtMCsGA1UEAxMk MzdiOWVhZmMtMDk1NS00YTQ2LThkMGItY2VkYTViMzVhZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiewi5BFuGhNZkEzVCose3bB+4jSNe75YPPtl YPKvyhUiHd5r6wvDgbZYxQKBI0aECLBczNj6qSJpwfLJSpVlLFeXSOXJpsDZOgYP ZqOkt6EDsdmpu+0KVyMFEmCeJnhM2vP6tHR3y0/hdghkf89nd5JN0bW+hQBt5BSR eG3cbrTBJoonhdAraNcEjJm6c9R0juHovVpFRviMh0Gc73cqdGSP1NiBh77iV2Ht WabMPPb+cohpX8Jn519gHAsoDHEOlgEUAiahiv1rBFDQbyYaiFkeoOn2o2NmsZi7 9GMq1q9tfLMSFkuiWh2aGsy8NAYyeu4xeQrnNcWzja1TwBwK/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeYnY1c1z42TsEBm6s1s6woPmDeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWYzYTUyMzQtNDE0MC0z ZDJlLWFkZmQtMDgwODg0OGJiYjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxgMcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIsV3taaY0rcvIy3H32e2pSwzpLuKlPyZeUHb/6zYX90aJA8p+mEXSG 1asismRW/BwmTahWLlkuMDOoq74JlKkOY7w2IV7nm0QpwmstUaK8ffgMswhB6huw t5tz5IyRiPGR/95TCaTLL77KQN8NllJOhxwshsfrKpVakAqWi5fCix67bSf2ZSnS pTXpRXpXWI7RevgGLdsJQoo1IoFP7lYJUihoaiRpp6tBXUmReja9+qOg6Xeg/Gwh 1Dz2xq/at+cHTGxCz4MwPH2ZiVpNmVnM1SGGm39DIzFXEOcQj936roEzowl/AOiG d3bPLtKKVzLPCeKPGy6CoEgL609ESLA= -----END CERTIFICATE-----Generated at Thu May 9 15:35:59 2024 by rpki-client on console-fra.rpki-client.org