$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/d5ee5953-1179-38f3-9cd8-1324c853f484.roa File: d5ee5953-1179-38f3-9cd8-1324c853f484.roa (raw, json) Hash identifier: 1Yut4XfnsKA9sWt0bjlRkkGKK4gBY4oOMZsn0u21n80= Subject key identifier: 7E:06:9C:87:6E:BD:B7:61:51:8E:87:A4:43:47:B3:C3:A0:8F:7F:2D Certificate issuer: /CN=b02b2a27-63d2-435f-8114-d98e289edc6c Certificate serial: 010D0C9F4328584511B5924FF1908D955BBFB300 Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/d5ee5953-1179-38f3-9cd8-1324c853f484.roa Signing time: Sat 02 Mar 2024 02:00:26 +0000 ROA not before: Sat 02 Mar 2024 02:00:26 +0000 ROA not after: Fri 31 May 2024 01:00:26 +0000 asID: 14618 IP address blocks: 208.71.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:11:b5:92:4f:f1:90:8d:95:5b:bf:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c Validity Not Before: Mar 2 02:00:26 2024 GMT Not After : May 31 01:00:26 2024 GMT Subject: CN=24d6a1c2-b992-401f-8657-e03989654723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:50:e5:b3:78:18:a9:a8:f1:47:a1:8e:00:96: c0:8a:1c:41:69:26:d3:35:9d:be:19:96:50:8f:f7: 36:cf:38:32:9a:03:77:90:8b:16:1b:9e:02:fb:8f: cd:3c:1b:fa:31:b6:11:89:72:2d:ae:77:97:8f:23: 47:bd:f6:c7:fc:f2:8f:6a:56:08:33:77:56:d8:fd: 25:3b:76:01:57:6a:d9:95:69:c1:8b:4e:93:17:8e: d6:91:4f:0b:d8:5d:da:72:91:2e:2d:d9:64:dc:55: 12:68:58:8c:95:cd:4e:32:4a:2a:39:9a:0b:d9:d6: 50:cd:5b:01:93:11:f8:bc:76:7c:7c:01:a3:b9:2c: 8c:1c:ff:7c:2f:00:b8:c2:79:7b:9f:10:d1:da:fa: fc:cb:93:46:4a:b6:0b:39:0c:f3:1b:73:4f:9d:e6: 2e:57:20:27:49:2f:64:f6:77:aa:87:64:a9:72:86: 54:f1:cc:da:33:e3:79:6f:37:72:7a:ec:43:a5:dd: 6b:fb:a8:bd:22:1e:e0:3c:35:f3:e0:57:b4:38:42: b1:63:14:07:74:d8:1a:b0:d1:77:74:e9:67:6d:89: 17:13:27:d5:63:dd:bf:09:62:ba:bc:c1:a1:9f:83: af:0f:66:f0:ce:9d:1f:89:b7:df:3f:96:88:43:57: 72:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:06:9C:87:6E:BD:B7:61:51:8E:87:A4:43:47:B3:C3:A0:8F:7F:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/d5ee5953-1179-38f3-9cd8-1324c853f484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl X509v3 Authority Key Identifier: keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer sbgp-ipAddrBlock: critical IPv4: 208.71.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:98:22:92:94:9c:4f:d4:8d:db:4f:52:54:1f:49:05:4c:13: 3f:4b:3f:54:89:01:d2:4c:b5:ed:f8:db:17:cd:1a:28:04:1d: 74:8b:92:99:60:93:80:8a:40:bd:65:aa:71:38:d4:f7:7a:56: a7:e6:37:3e:7c:99:b4:5d:77:8f:b9:a9:f7:cd:c2:6a:03:f3: 34:4e:6f:96:51:ab:5d:2d:c9:9c:6d:63:6e:40:3a:31:4e:e3: 34:c2:f8:e5:4a:7b:82:7a:df:db:47:cb:8c:41:51:20:ec:f7: bc:a4:fe:2d:8e:1b:ec:1e:97:66:7e:2f:63:bb:52:b5:48:20: 02:00:71:a2:73:79:fb:9f:f4:91:23:e8:e6:f1:1d:74:19:07: eb:a5:3b:6b:b2:ee:3c:04:d5:0f:dc:fe:c8:82:10:65:ea:9c: 83:6d:3f:d1:07:80:de:8a:5b:1b:29:34:4a:dc:9b:8a:f9:91: 8f:73:38:61:4c:70:35:29:ae:10:03:6f:b7:78:a5:ef:d2:f9: 8a:b9:f0:13:b6:26:b5:30:56:99:d8:90:33:88:ec:05:c3:78: c5:00:83:5d:29:c4:da:e2:2f:69:a3:4e:c9:b9:88:25:bb:8b: 0e:02:3d:db:1d:dd:23:5a:20:af:8a:67:aa:de:ab:a5:e8:e1: 5e:48:c5:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEURtZJP8ZCNlVu/swAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyYjJhMjctNjNkMi00MzVmLTgxMTQtZDk4ZTI4OWVk YzZjMB4XDTI0MDMwMjAyMDAyNloXDTI0MDUzMTAxMDAyNlowLzEtMCsGA1UEAxMk MjRkNmExYzItYjk5Mi00MDFmLTg2NTctZTAzOTg5NjU0NzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1Dls3gYqajxR6GOAJbAihxBaSbTNZ2+GZZQ j/c2zzgymgN3kIsWG54C+4/NPBv6MbYRiXItrneXjyNHvfbH/PKPalYIM3dW2P0l O3YBV2rZlWnBi06TF47WkU8L2F3acpEuLdlk3FUSaFiMlc1OMkoqOZoL2dZQzVsB kxH4vHZ8fAGjuSyMHP98LwC4wnl7nxDR2vr8y5NGSrYLOQzzG3NPneYuVyAnSS9k 9neqh2SpcoZU8czaM+N5bzdyeuxDpd1r+6i9Ih7gPDXz4Fe0OEKxYxQHdNgasNF3 dOlnbYkXEyfVY92/CWK6vMGhn4OvD2bwzp0fibffP5aIQ1dy2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4GnIduvbdhUY6HpENHs8Ogj38tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMDJi MmEyNy02M2QyLTQzNWYtODExNC1kOThlMjg5ZWRjNmMvZDVlZTU5NTMtMTE3OS0z OGYzLTljZDgtMTMyNGM4NTNmNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjAyYjJhMjctNjNkMi00MzVmLTgx MTQtZDk4ZTI4OWVkYzZjL2IwMmIyYTI3LTYzZDItNDM1Zi04MTE0LWQ5OGUyODll ZGM2Yy5jcmwwHwYDVR0jBBgwFoAUaP0QqXb6CaxECs/rlUyyMr81kckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMDJiMmEyNy02M2QyLTQzNWYtODExNC1kOThl Mjg5ZWRjNmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EfTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOYIpKUnE/UjdtPUlQfSQVMEz9LP1SJAdJMte342xfNGigEHXSLkplg k4CKQL1lqnE41Pd6VqfmNz58mbRdd4+5qffNwmoD8zROb5ZRq10tyZxtY25AOjFO 4zTC+OVKe4J639tHy4xBUSDs97yk/i2OG+wel2Z+L2O7UrVIIAIAcaJzefuf9JEj 6ObxHXQZB+ulO2uy7jwE1Q/c/siCEGXqnINtP9EHgN6KWxspNErcm4r5kY9zOGFM cDUprhADb7d4pe/S+Yq58BO2JrUwVpnYkDOI7AXDeMUAg10pxNriL2mjTsm5iCW7 iw4CPdsd3SNaIK+KZ6req6Xo4V5IxVU= -----END CERTIFICATE-----Generated at Thu May 2 03:30:04 2024 by rpki-client on console-ams.rpki-client.org