$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29d2661b-69c8-32a7-b452-f472e6cc8873.roa File: 29d2661b-69c8-32a7-b452-f472e6cc8873.roa (raw, json) Hash identifier: xVfjwMcHN8hGsQDsuAWYkOr1ygAyqPUi7Ms4/k1fU8g= Subject key identifier: A0:34:25:67:CD:72:FB:2B:99:1E:93:88:29:D1:65:DD:6B:BD:A9:F9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285844F895706AA1DA373E4E1A8140 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29d2661b-69c8-32a7-b452-f472e6cc8873.roa Signing time: Thu 22 Feb 2024 02:00:27 +0000 ROA not before: Thu 22 Feb 2024 02:00:27 +0000 ROA not after: Wed 22 May 2024 01:00:27 +0000 asID: 46491 IP address blocks: 74.82.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f8:95:70:6a:a1:da:37:3e:4e:1a:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 22 02:00:27 2024 GMT Not After : May 22 01:00:27 2024 GMT Subject: CN=417a0539-a872-4ff3-82a3-4202e052ccc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a1:5e:bf:4b:31:04:78:f1:24:d8:ff:aa:63: 0a:d1:4e:08:8e:60:93:ad:e2:50:f1:18:f6:f6:80: cb:3a:cd:89:14:c3:59:1a:47:6e:bb:a9:44:12:18: 98:49:6a:a6:55:78:a0:64:be:b9:de:5f:26:77:1b: e2:31:c3:9a:c9:be:36:5b:d8:7b:59:31:28:23:9e: f8:07:cd:2d:80:01:9a:e9:fa:9e:5b:91:77:34:7f: dd:51:35:34:18:de:3f:9d:fd:83:d2:72:ff:1f:db: a3:3b:d6:0f:e1:5d:db:c5:69:4c:af:fd:01:66:2c: 08:7e:ed:4b:ee:50:4b:2d:73:be:91:7a:d0:cf:40: 25:f7:6d:f3:c8:39:27:32:b0:ae:48:74:8a:99:ab: 4b:bb:9a:3a:9f:dd:a6:13:ca:26:e7:e0:dc:d0:9b: 07:0d:21:0c:83:40:c1:67:24:c5:49:0c:e9:02:46: e6:a4:71:1b:45:72:2f:8a:fe:11:45:79:e9:4c:a9: 8f:e3:d0:0a:aa:af:d1:d6:c1:45:26:17:96:bc:13: a9:f2:54:a2:07:96:00:01:63:5d:bc:72:fd:3a:9b: 48:8a:35:a0:b3:3e:7a:b7:8f:c5:33:82:52:c7:1b: 14:58:dd:2d:a8:05:60:5d:c2:a0:ef:ed:e9:46:b2: 3b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:34:25:67:CD:72:FB:2B:99:1E:93:88:29:D1:65:DD:6B:BD:A9:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29d2661b-69c8-32a7-b452-f472e6cc8873.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 74.82.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:6d:aa:fc:7b:b8:a5:02:73:8e:c5:fe:3a:cf:7b:df:d6:5c: e4:87:ee:02:d2:e0:b2:18:82:b0:c7:cb:8f:f9:54:d7:5f:d7: ce:cd:8a:56:5a:c1:ff:ef:6b:78:b0:88:63:55:67:62:2a:e5: 68:f7:37:71:00:bb:e6:f4:e2:ad:d9:b1:0b:e9:2a:f1:37:c2: bd:ca:68:7b:15:20:97:0c:73:85:72:cd:50:fd:90:73:03:99: 68:74:84:16:81:bf:7b:a0:12:16:8f:a4:61:70:77:d7:5b:73: 0c:00:04:ad:10:79:d2:16:6a:f0:ce:7b:7e:db:3e:f8:67:8e: e9:9d:ed:b2:71:35:2e:83:11:ce:c4:db:09:fc:28:88:29:e3: 44:b8:4c:99:f6:2b:96:8c:91:23:1b:81:18:11:fe:8d:d5:35: 53:e1:ed:da:c8:e6:7e:cd:63:04:e0:29:1e:4d:b2:6c:d5:aa: 42:2d:f1:6b:0c:a2:e4:ad:9c:49:67:c1:47:98:ce:cf:b8:22: f5:7e:c1:09:96:77:42:24:7a:d4:11:70:0b:40:04:59:fd:04: bc:6f:3b:c7:7f:31:7b:54:78:c7:92:0e:aa:2f:b7:1f:e9:e3: 17:74:04:d7:4a:49:7f:b7:e4:8d:f3:08:bc:6c:13:9c:de:92: b5:62:61:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET4lXBqodo3Pk4agUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDIyMjAyMDAyN1oXDTI0MDUyMjAxMDAyN1owLzEtMCsGA1UEAxMk NDE3YTA1MzktYTg3Mi00ZmYzLTgyYTMtNDIwMmUwNTJjY2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqFev0sxBHjxJNj/qmMK0U4IjmCTreJQ8Rj2 9oDLOs2JFMNZGkduu6lEEhiYSWqmVXigZL653l8mdxviMcOayb42W9h7WTEoI574 B80tgAGa6fqeW5F3NH/dUTU0GN4/nf2D0nL/H9ujO9YP4V3bxWlMr/0BZiwIfu1L 7lBLLXO+kXrQz0Al923zyDknMrCuSHSKmatLu5o6n92mE8om5+Dc0JsHDSEMg0DB ZyTFSQzpAkbmpHEbRXIviv4RRXnpTKmP49AKqq/R1sFFJheWvBOp8lSiB5YAAWNd vHL9OptIijWgsz56t4/FM4JSxxsUWN0tqAVgXcKg7+3pRrI75QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKA0JWfNcvsrmR6TiCnRZd1rvan5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjlkMjY2MWItNjljOC0z MmE3LWI0NTItZjQ3MmU2Y2M4ODczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdtqvx7uKUCc47F/jrPe9/WXOSH7gLS4LIYgrDHy4/5VNdf187NilZa wf/va3iwiGNVZ2Iq5Wj3N3EAu+b04q3ZsQvpKvE3wr3KaHsVIJcMc4VyzVD9kHMD mWh0hBaBv3ugEhaPpGFwd9dbcwwABK0QedIWavDOe37bPvhnjumd7bJxNS6DEc7E 2wn8KIgp40S4TJn2K5aMkSMbgRgR/o3VNVPh7drI5n7NYwTgKR5NsmzVqkIt8WsM ouStnElnwUeYzs+4IvV+wQmWd0IketQRcAtABFn9BLxvO8d/MXtUeMeSDqovtx/p 4xd0BNdKSX+35I3zCLxsE5zekrViYUI= -----END CERTIFICATE-----Generated at Tue May 7 03:13:54 2024 by rpki-client on console-fra.rpki-client.org