$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/68297118-8e1b-3493-8b7f-527471d8a180.roa File: 68297118-8e1b-3493-8b7f-527471d8a180.roa (raw, json) Hash identifier: bQ+Xfqnw6YGMCzMP4La8LqdqpFuv67MDvh+o6mHXAJ8= Subject key identifier: 5A:F6:9A:47:1A:7C:C9:BF:C8:DA:76:9D:68:62:63:D8:2F:88:C6:5B Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285844EF54C7C905CD28A50880A400 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/68297118-8e1b-3493-8b7f-527471d8a180.roa Signing time: Sun 18 Feb 2024 18:28:09 +0000 ROA not before: Sun 18 Feb 2024 18:28:09 +0000 ROA not after: Sat 18 May 2024 17:28:09 +0000 asID: 30058 IP address blocks: 67.159.24.0/23 maxlen: 23 67.159.28.0/24 maxlen: 24 67.159.29.0/24 maxlen: 24 2001:49f0:d11a::/48 maxlen: 48 2001:49f0:d124::/48 maxlen: 48 2001:49f0:d125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:ef:54:c7:c9:05:cd:28:a5:08:80:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Feb 18 18:28:09 2024 GMT Not After : May 18 17:28:09 2024 GMT Subject: CN=b6bd1093-7dd6-4214-88a3-878743a2c011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e0:cd:79:a5:d3:b5:39:b3:d2:0f:9f:06:f3: 8c:13:7e:22:b5:47:b9:ca:ce:8f:f9:82:5d:8f:d0: 15:65:d1:9c:bc:4e:a3:1b:01:00:d3:16:db:3e:73: f5:2e:f7:3f:86:f6:12:1f:23:d8:d3:68:b5:10:b9: 54:c4:70:c9:ec:2f:81:3c:90:f0:96:28:08:d3:c5: cf:66:74:d3:57:45:70:ae:3b:a4:2f:54:b7:4d:12: 34:4d:23:5a:66:e9:28:74:3d:f0:fa:9c:5f:73:dc: b4:c0:d8:63:f7:fe:38:f4:c4:5e:ad:a2:e4:fd:9b: 6a:21:7c:e9:d7:2f:58:4e:69:73:2f:9e:b2:88:3c: b6:2a:b9:1f:a5:bb:2c:28:a6:47:2f:15:e2:79:c9: e1:8e:7b:37:85:3a:5e:40:a8:21:99:6a:5a:af:52: d8:37:fd:98:6e:17:7a:27:3c:e5:e6:05:cf:c0:15: 90:74:27:22:63:a2:db:c9:88:c1:dc:6f:f1:5a:93: e8:78:f5:1f:45:00:47:74:c7:ba:cb:ea:0a:d5:4a: 66:dc:6a:d5:1f:63:78:c0:84:7a:60:f9:a1:f8:ca: 51:82:62:b9:56:2c:b1:1c:5f:8a:93:70:e4:d1:5f: 7b:00:56:81:83:34:3a:76:92:80:c9:6c:12:b9:2d: 12:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F6:9A:47:1A:7C:C9:BF:C8:DA:76:9D:68:62:63:D8:2F:88:C6:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/68297118-8e1b-3493-8b7f-527471d8a180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.24.0/23 67.159.28.0/23 IPv6: 2001:49f0:d11a::/48 2001:49f0:d124::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:c6:f8:02:8a:ab:b9:4d:2e:a2:61:08:22:28:0e:9d:ca:5f: 0c:9d:f3:74:1f:02:9e:88:a0:e2:e9:f2:89:f1:83:ca:fe:2f: bb:bd:a3:f5:40:bf:e0:51:d2:20:84:54:8c:7b:f1:3d:3e:bd: 4b:d1:8b:0b:9d:4c:9c:39:95:a3:b9:b2:7d:3d:be:d0:a3:10: fd:60:0b:54:4f:76:63:e1:19:e2:be:94:b0:24:d0:63:ab:31: 9d:7a:4e:7e:60:99:b6:a6:6f:7e:e2:4b:98:f5:4e:37:97:ce: 04:d0:11:b8:45:5c:b5:56:47:3e:8f:e9:27:ef:26:82:b1:e4: 28:8b:de:8b:3a:0f:97:11:dd:31:35:9c:59:eb:14:65:45:52: 95:86:ec:38:cd:95:5f:74:1e:74:d9:c9:3a:45:34:bc:c0:08: a6:d7:6b:d8:7e:51:3e:24:6b:46:2d:bf:9b:bc:cd:ae:1c:b5: 55:47:c9:e8:24:27:49:40:19:7c:3b:0f:23:bd:00:f1:ea:75: 03:a8:a7:f4:a0:2d:5e:ad:ec:9f:b7:f1:a7:64:cf:ff:99:f3: 20:25:91:c9:34:b7:36:ea:40:b1:f7:8b:bb:01:72:66:54:0a: a8:e1:f9:9c:e0:d6:d2:f4:8b:b4:b0:5f:7a:c5:2a:20:3f:74: de:84:5c:a0 -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWETvVMfJBc0opQiApAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI0MDIxODE4MjgwOVoXDTI0MDUxODE3MjgwOVowLzEtMCsGA1UEAxMk YjZiZDEwOTMtN2RkNi00MjE0LTg4YTMtODc4NzQzYTJjMDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneDNeaXTtTmz0g+fBvOME34itUe5ys6P+YJd j9AVZdGcvE6jGwEA0xbbPnP1Lvc/hvYSHyPY02i1ELlUxHDJ7C+BPJDwligI08XP ZnTTV0VwrjukL1S3TRI0TSNaZukodD3w+pxfc9y0wNhj9/449MReraLk/ZtqIXzp 1y9YTmlzL56yiDy2KrkfpbssKKZHLxXiecnhjns3hTpeQKghmWpar1LYN/2Ybhd6 Jzzl5gXPwBWQdCciY6LbyYjB3G/xWpPoePUfRQBHdMe6y+oK1Upm3GrVH2N4wIR6 YPmh+MpRgmK5ViyxHF+Kk3Dk0V97AFaBgzQ6dpKAyWwSuS0SGwIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFFr2mkcafMm/yNp2nWhiY9gviMZbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNjgyOTcxMTgtOGUxYi0z NDkzLThiN2YtNTI3NDcxZDhhMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBQ58YAwQB Q58cMBgEAgACMBIDBwAgAUnw0RoDBwEgAUnw0SQwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfMb4AoqruU0u omEIIigOncpfDJ3zdB8Cnoig4unyifGDyv4vu72j9UC/4FHSIIRUjHvxPT69S9GL C51MnDmVo7myfT2+0KMQ/WALVE92Y+EZ4r6UsCTQY6sxnXpOfmCZtqZvfuJLmPVO N5fOBNARuEVctVZHPo/pJ+8mgrHkKIveizoPlxHdMTWcWesUZUVSlYbsOM2VX3Qe dNnJOkU0vMAIptdr2H5RPiRrRi2/m7zNrhy1VUfJ6CQnSUAZfDsPI70A8ep1A6in 9KAtXq3sn7fxp2TP/5nzICWRyTS3NupAsfeLuwFyZlQKqOH5nODW0vSLtLBfesUq ID903oRcoA== -----END CERTIFICATE-----Generated at Thu May 2 03:30:02 2024 by rpki-client on console-ams.rpki-client.org