$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/95c458cd-7579-34ee-9462-870ea766ae4e.roa File: 95c458cd-7579-34ee-9462-870ea766ae4e.roa (raw, json) Hash identifier: 2njyuamTm5piyMitmArk6NfESPB5a/rP0J4goD2L5dE= Subject key identifier: AA:50:29:D5:47:6C:53:08:E0:33:16:BD:4B:65:88:F1:2B:87:E1:8C Certificate issuer: /CN=928cccc8-4c1d-457b-a709-2f2c5d83c939 Certificate serial: 010D0C9F4328584566BDAD96B351F04D1CB6BF80 Authority key identifier: E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/95c458cd-7579-34ee-9462-870ea766ae4e.roa Signing time: Mon 01 Apr 2024 13:00:36 +0000 ROA not before: Mon 01 Apr 2024 13:00:36 +0000 ROA not after: Sun 30 Jun 2024 13:00:36 +0000 asID: 16509 IP address blocks: 67.226.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:66:bd:ad:96:b3:51:f0:4d:1c:b6:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=928cccc8-4c1d-457b-a709-2f2c5d83c939 Validity Not Before: Apr 1 13:00:36 2024 GMT Not After : Jun 30 13:00:36 2024 GMT Subject: CN=ca0cd767-e974-4246-a08f-164651aa1630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7a:2a:1b:08:56:06:40:01:57:09:ee:d8:72: e9:31:64:ea:50:52:7f:a3:f3:72:8e:e0:82:1a:59: c8:47:a5:c8:f0:8e:8b:1d:9c:09:72:03:0e:89:1a: 4d:f0:79:d2:b5:0c:4c:72:79:9b:75:75:77:d0:c1: 81:5a:2c:3b:a4:15:cd:86:0e:62:07:56:8e:87:44: 99:3e:0f:d8:00:4b:55:13:e2:50:70:77:d0:b2:66: 58:dc:4e:c3:c2:93:ae:c0:67:31:09:49:33:ef:46: 80:7e:64:59:fd:72:34:fe:fa:b8:28:0f:05:ef:13: f6:b3:b9:52:73:d6:41:eb:d5:17:b0:7e:af:40:56: 29:f0:fb:f6:03:05:44:19:bf:49:3f:41:2b:41:b7: ed:54:34:4e:c7:29:74:d7:5e:7e:45:d2:06:4f:ce: 2a:08:4d:f0:03:b1:a3:48:c3:00:6b:6f:64:6e:c6: 44:8b:d3:44:a9:aa:68:c4:b0:32:0b:f7:50:13:98: 38:de:fb:b8:61:e1:98:c3:2f:e0:62:bd:b2:86:44: b1:49:a7:5c:8b:7f:e4:c8:27:a6:35:b8:07:0f:05: af:93:c7:1d:cd:4f:6d:b2:d4:e5:23:1b:f7:bc:6f: d6:c8:7c:31:86:8e:44:c6:7d:57:4c:4d:f7:52:0a: de:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:50:29:D5:47:6C:53:08:E0:33:16:BD:4B:65:88:F1:2B:87:E1:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/95c458cd-7579-34ee-9462-870ea766ae4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl X509v3 Authority Key Identifier: keyid:E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer sbgp-ipAddrBlock: critical IPv4: 67.226.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:da:c6:be:92:cb:eb:33:32:95:f0:be:78:e8:8e:2c:e5:58: 52:53:16:9e:b8:6e:2d:ba:4f:c1:d5:7a:a3:32:55:26:c5:78: af:52:1d:c9:b9:7d:75:40:25:ec:15:15:4a:8e:a0:ef:e1:c1: fe:f6:57:3e:08:67:87:c9:e9:ad:ac:1f:87:4c:3b:d5:fc:30: c1:e6:2b:b4:2b:e8:08:37:ab:3d:83:1b:6b:e0:05:8b:6e:9e: a7:bd:e6:d7:e8:1a:f7:c4:4f:11:83:0c:4f:4f:9b:3d:c4:94: ac:a7:3f:77:32:e3:13:2f:98:9f:65:93:d5:14:70:90:dc:a3: 3a:8e:a9:21:36:a0:e1:a5:96:0d:0b:6d:7b:7d:f8:e9:13:00: c7:88:36:17:6f:63:da:37:e3:17:b4:c7:43:cb:8d:b5:a6:bf: c6:08:8f:ab:55:5c:d4:fd:cd:57:b7:dd:ab:2a:4d:4d:88:57: c3:a5:76:d7:99:b2:77:50:68:d6:ad:e5:07:3c:77:50:c6:16: 6a:09:4c:70:78:ad:86:f3:84:76:b9:df:7b:3b:82:39:5e:0f: a4:56:3d:a1:9e:1a:12:f9:e4:b5:05:fa:02:90:53:49:56:a1: 8c:bf:9b:e3:af:7d:3d:c1:66:b3:6d:48:5a:66:71:c6:28:47: 55:59:36:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVmva2Ws1HwTRy2v4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI4Y2NjYzgtNGMxZC00NTdiLWE3MDktMmYyYzVkODNj OTM5MB4XDTI0MDQwMTEzMDAzNloXDTI0MDYzMDEzMDAzNlowLzEtMCsGA1UEAxMk Y2EwY2Q3NjctZTk3NC00MjQ2LWEwOGYtMTY0NjUxYWExNjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3oqGwhWBkABVwnu2HLpMWTqUFJ/o/NyjuCC GlnIR6XI8I6LHZwJcgMOiRpN8HnStQxMcnmbdXV30MGBWiw7pBXNhg5iB1aOh0SZ Pg/YAEtVE+JQcHfQsmZY3E7DwpOuwGcxCUkz70aAfmRZ/XI0/vq4KA8F7xP2s7lS c9ZB69UXsH6vQFYp8Pv2AwVEGb9JP0ErQbftVDROxyl0115+RdIGT84qCE3wA7Gj SMMAa29kbsZEi9NEqapoxLAyC/dQE5g43vu4YeGYwy/gYr2yhkSxSadci3/kyCem NbgHDwWvk8cdzU9tstTlIxv3vG/WyHwxho5Exn1XTE33UgreaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpQKdVHbFMI4DMWvUtliPErh+GMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85Mjhj Y2NjOC00YzFkLTQ1N2ItYTcwOS0yZjJjNWQ4M2M5MzkvOTVjNDU4Y2QtNzU3OS0z NGVlLTk0NjItODcwZWE3NjZhZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTI4Y2NjYzgtNGMxZC00NTdiLWE3 MDktMmYyYzVkODNjOTM5LzkyOGNjY2M4LTRjMWQtNDU3Yi1hNzA5LTJmMmM1ZDgz YzkzOS5jcmwwHwYDVR0jBBgwFoAU50jP7N+pFw+ueUr7PjNtsErFiKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MjhjY2NjOC00YzFkLTQ1N2ItYTcwOS0yZjJj NWQ4M2M5MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ+LfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPaxr6Sy+szMpXwvnjojizlWFJTFp64bi26T8HVeqMyVSbFeK9SHcm5 fXVAJewVFUqOoO/hwf72Vz4IZ4fJ6a2sH4dMO9X8MMHmK7Qr6Ag3qz2DG2vgBYtu nqe95tfoGvfETxGDDE9Pmz3ElKynP3cy4xMvmJ9lk9UUcJDcozqOqSE2oOGllg0L bXt9+OkTAMeINhdvY9o34xe0x0PLjbWmv8YIj6tVXNT9zVe33asqTU2IV8OldteZ sndQaNat5Qc8d1DGFmoJTHB4rYbzhHa533s7gjleD6RWPaGeGhL55LUF+gKQU0lW oYy/m+OvfT3BZrNtSFpmccYoR1VZNmI= -----END CERTIFICATE-----Generated at Thu May 2 22:17:00 2024 by rpki-client on console-fra.rpki-client.org