$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cbf96851-ba9e-38bf-a963-da65f7f37210.roa File: cbf96851-ba9e-38bf-a963-da65f7f37210.roa (raw, json) Hash identifier: YwTBNKVzN3iF24/UCNHk8YWCdUfJtPQOChzAkRnoWKc= Subject key identifier: FD:86:9C:65:D3:C2:E5:1E:74:72:31:42:6D:84:31:68:6B:91:7C:52 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285844EA9FEAB60E4736E060DD4180 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cbf96851-ba9e-38bf-a963-da65f7f37210.roa Signing time: Sat 17 Feb 2024 02:00:27 +0000 ROA not before: Sat 17 Feb 2024 02:00:27 +0000 ROA not after: Fri 17 May 2024 01:00:27 +0000 asID: 16509 IP address blocks: 67.217.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:ea:9f:ea:b6:0e:47:36:e0:60:dd:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Feb 17 02:00:27 2024 GMT Not After : May 17 01:00:27 2024 GMT Subject: CN=bf04a4bd-918b-46bb-a341-c1f533d075d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:af:6b:c1:7b:1c:e5:22:be:ee:35:88:6f:87: a5:f2:dd:f9:21:79:38:fe:6c:98:c8:e5:1d:1a:2a: f5:37:23:3c:36:54:bb:ce:a9:f8:af:6c:4d:20:4b: 85:8a:67:9e:03:d2:8d:a1:f3:5f:1c:82:9f:31:db: 60:1e:2e:d0:b1:5d:41:80:ac:3e:44:af:65:72:14: 42:3f:d9:1f:f1:fc:44:a6:e4:14:e0:a1:bb:0c:df: 1d:8a:43:55:69:20:75:85:06:cb:7b:d9:e4:49:87: cd:22:86:93:9a:bb:45:3e:45:8f:9b:bd:da:73:e1: 13:99:0a:e1:bd:bc:8b:5e:00:4e:cd:39:34:6f:6d: 1b:72:58:25:99:00:16:03:cf:6d:b5:f6:18:de:f5: 68:8e:42:14:39:c5:43:79:ec:ed:b3:6c:71:85:52: 3a:2c:6c:94:15:eb:51:18:e0:97:04:b8:a2:3e:8a: 0f:48:f9:4d:34:7e:ac:ae:5f:30:80:9b:66:9c:a6: 39:c6:25:53:3a:bb:d8:53:f9:e4:58:aa:3c:77:56: 30:71:f3:a1:6b:35:8b:59:9e:e3:8c:ae:b4:49:cf: 25:b5:36:e6:fc:23:fb:9b:69:f9:3b:e8:54:02:38: ce:72:cd:93:de:34:b7:43:4d:ef:99:0a:7f:e6:f2: 7e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:86:9C:65:D3:C2:E5:1E:74:72:31:42:6D:84:31:68:6B:91:7C:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cbf96851-ba9e-38bf-a963-da65f7f37210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e6:3e:cb:57:08:b4:80:41:5c:f7:09:53:ad:9a:cb:25:34:d6: 02:0b:f5:a2:b0:e6:1d:48:e9:2e:b2:13:d0:2a:ae:fd:a4:62: c6:06:9e:7c:58:a1:19:f4:a3:36:7e:3f:dd:8b:fc:da:ae:4e: 0d:0c:c7:c1:66:4a:65:86:d9:70:bf:e5:dc:6e:dc:02:a8:8b: 36:7c:52:6e:8b:ad:3a:8f:87:f6:48:22:c8:1c:83:a4:c3:54: 5b:63:29:07:8b:a2:74:d9:24:95:f9:37:97:d8:8a:fb:92:17: cb:c7:ab:ce:73:26:7c:3b:a0:d7:c3:c9:1d:57:d1:ea:88:44: bf:a2:72:e3:ba:03:ce:2e:bf:17:13:22:a7:13:50:58:0b:3e: ae:9d:e2:ec:03:a9:7a:79:cd:c0:15:cb:24:b6:39:3f:4b:4d: f0:ec:46:43:0f:36:cd:a4:7f:cc:c0:e6:10:f7:f0:85:27:c0: 72:e7:24:2e:9c:ea:71:5a:0d:7f:e3:45:3d:c5:b5:6a:c5:38: 5e:5a:66:e0:18:d3:64:d4:ba:75:f3:65:28:c2:04:ca:ab:65: 98:5c:3d:79:f9:1d:c1:8a:14:dd:2e:51:16:71:1b:26:76:4d: 28:8b:6e:c0:f3:08:aa:51:92:5d:52:03:dd:c9:e4:f6:8f:cf: 69:a8:56:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETqn+q2Dkc24GDdQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI0MDIxNzAyMDAyN1oXDTI0MDUxNzAxMDAyN1owLzEtMCsGA1UEAxMk YmYwNGE0YmQtOTE4Yi00NmJiLWEzNDEtYzFmNTMzZDA3NWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK9rwXsc5SK+7jWIb4el8t35IXk4/myYyOUd Gir1NyM8NlS7zqn4r2xNIEuFimeeA9KNofNfHIKfMdtgHi7QsV1BgKw+RK9lchRC P9kf8fxEpuQU4KG7DN8dikNVaSB1hQbLe9nkSYfNIoaTmrtFPkWPm73ac+ETmQrh vbyLXgBOzTk0b20bclglmQAWA89ttfYY3vVojkIUOcVDeezts2xxhVI6LGyUFetR GOCXBLiiPooPSPlNNH6srl8wgJtmnKY5xiVTOrvYU/nkWKo8d1YwcfOhazWLWZ7j jK60Sc8ltTbm/CP7m2n5O+hUAjjOcs2T3jS3Q03vmQp/5vJ+MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2GnGXTwuUedHIxQm2EMWhrkXxSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvY2JmOTY4NTEtYmE5ZS0z OGJmLWE5NjMtZGE2NWY3ZjM3MjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOY+y1cItIBBXPcJU62ayyU01gIL9aKw5h1I6S6yE9Aqrv2kYsYGnnxY oRn0ozZ+P92L/NquTg0Mx8FmSmWG2XC/5dxu3AKoizZ8Um6LrTqPh/ZIIsgcg6TD VFtjKQeLonTZJJX5N5fYivuSF8vHq85zJnw7oNfDyR1X0eqIRL+icuO6A84uvxcT IqcTUFgLPq6d4uwDqXp5zcAVyyS2OT9LTfDsRkMPNs2kf8zA5hD38IUnwHLnJC6c 6nFaDX/jRT3FtWrFOF5aZuAY02TUunXzZSjCBMqrZZhcPXn5HcGKFN0uURZxGyZ2 TSiLbsDzCKpRkl1SA93J5PaPz2moVvs= -----END CERTIFICATE-----Generated at Thu May 2 15:00:00 2024 by rpki-client on console-fra.rpki-client.org