$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b89a753b-43d3-3a4a-a4cb-143a6b861725.roa File: b89a753b-43d3-3a4a-a4cb-143a6b861725.roa (raw, json) Hash identifier: c+q29ppTmwh9dREX6nHlB8B0heVEmy+jw+KUvefA3RE= Subject key identifier: D3:56:9F:24:F6:BB:D5:AF:7F:6D:D9:F9:A7:2A:95:A7:05:A6:B5:24 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285844F895751A4C56DA61F07D2960 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b89a753b-43d3-3a4a-a4cb-143a6b861725.roa Signing time: Thu 22 Feb 2024 02:00:27 +0000 ROA not before: Thu 22 Feb 2024 02:00:27 +0000 ROA not after: Wed 22 May 2024 01:00:27 +0000 asID: 393259 IP address blocks: 64.71.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f8:95:75:1a:4c:56:da:61:f0:7d:29:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 22 02:00:27 2024 GMT Not After : May 22 01:00:27 2024 GMT Subject: CN=ef07814c-5e9e-4378-82f1-8c255105a91b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4d:6e:1a:9c:e2:ae:d1:f0:3f:de:00:98:91: 52:ed:3e:fc:45:35:4d:72:19:1f:f7:f4:b0:61:c4: 96:0c:e4:e1:43:e2:17:39:e7:a8:a2:29:5a:92:0c: 4b:f1:86:eb:bc:fd:eb:15:74:ac:3f:05:3e:34:d2: ab:f7:f3:04:05:dd:86:52:97:9c:10:e9:55:b8:45: 57:18:d7:a8:0e:23:7d:ed:d1:c5:5a:97:72:0a:0d: d4:91:6d:a2:44:4c:11:c6:46:3b:1d:21:b6:0d:21: 52:51:57:ea:17:cf:51:e5:06:3e:15:8f:47:0c:53: 82:2c:ed:02:f7:40:f5:0f:59:fc:48:76:ef:74:f0: 82:7f:95:18:8d:ab:80:79:1c:f9:f2:28:4d:fb:e6: e5:70:40:b6:ea:38:b5:03:dd:c4:b4:0b:8f:c5:e6: 54:47:47:64:14:83:f4:ae:b6:09:f8:3d:b6:18:f8: 29:0e:e6:93:6a:d3:12:1f:d9:dc:73:4a:4d:1f:85: 8c:01:79:a7:7f:b8:d1:3b:a2:f1:fe:24:31:02:81: f3:23:4e:95:aa:83:44:49:8e:75:4b:8d:b4:4a:5e: c4:69:d6:73:18:46:f1:67:8b:3c:9b:d2:90:58:7e: 43:1f:82:ac:d3:64:7f:8c:08:37:7a:22:e9:cd:20: 84:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:56:9F:24:F6:BB:D5:AF:7F:6D:D9:F9:A7:2A:95:A7:05:A6:B5:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b89a753b-43d3-3a4a-a4cb-143a6b861725.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.71.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:7a:13:b7:91:bf:b4:1b:2c:1e:dd:5e:17:41:80:75:1f:0b: d1:f2:d8:7d:5f:01:a7:db:97:1b:d5:ec:97:0a:70:eb:a3:0f: 14:e4:dc:89:0b:8f:ac:b9:13:85:8b:53:b8:6d:01:ea:3e:b9: 1a:6f:2e:9b:21:a4:46:ac:2b:23:31:bd:69:54:f8:ba:17:ef: 27:a2:4d:a6:c2:d7:f5:4d:77:2d:4c:0a:52:70:1f:f5:e8:10: 8f:21:4e:d9:4c:9a:7c:4b:17:a1:78:97:65:bd:3a:a2:fa:7a: 3b:53:bf:56:f2:ef:d1:09:52:11:09:ef:f7:45:61:a0:00:1d: 11:08:d0:09:c4:31:18:d6:13:4b:e8:24:31:9e:34:96:09:3e: 79:25:d9:6d:d6:74:26:44:07:d8:2d:92:e3:5b:01:0a:cc:f4: d8:1a:8a:e6:70:87:7d:27:26:87:2c:65:a2:84:51:17:28:07: b2:65:a0:40:08:0d:35:11:49:86:f8:e7:33:4f:22:8d:8d:fe: 1a:1d:7b:52:35:19:70:b5:bd:06:7b:bb:cc:07:15:82:13:38: 93:a2:35:ff:c4:a9:c0:29:34:bf:83:ff:5b:4e:0b:0e:35:ce: e2:76:b1:13:e5:c7:28:88:f5:88:07:09:b0:47:4c:db:e2:b7: 3b:ce:f7:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET4lXUaTFbaYfB9KWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDIyMjAyMDAyN1oXDTI0MDUyMjAxMDAyN1owLzEtMCsGA1UEAxMk ZWYwNzgxNGMtNWU5ZS00Mzc4LTgyZjEtOGMyNTUxMDVhOTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy01uGpzirtHwP94AmJFS7T78RTVNchkf9/Sw YcSWDOThQ+IXOeeooilakgxL8YbrvP3rFXSsPwU+NNKr9/MEBd2GUpecEOlVuEVX GNeoDiN97dHFWpdyCg3UkW2iREwRxkY7HSG2DSFSUVfqF89R5QY+FY9HDFOCLO0C 90D1D1n8SHbvdPCCf5UYjauAeRz58ihN++blcEC26ji1A93EtAuPxeZUR0dkFIP0 rrYJ+D22GPgpDuaTatMSH9ncc0pNH4WMAXmnf7jRO6Lx/iQxAoHzI06VqoNESY51 S420Sl7EadZzGEbxZ4s8m9KQWH5DH4Ks02R/jAg3eiLpzSCE6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNWnyT2u9Wvf23Z+acqlacFprUkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjg5YTc1M2ItNDNkMy0z YTRhLWE0Y2ItMTQzYTZiODYxNzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEehMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKx6E7eRv7QbLB7dXhdBgHUfC9Hy2H1fAafblxvV7JcKcOujDxTk3IkL j6y5E4WLU7htAeo+uRpvLpshpEasKyMxvWlU+LoX7yeiTabC1/VNdy1MClJwH/Xo EI8hTtlMmnxLF6F4l2W9OqL6ejtTv1by79EJUhEJ7/dFYaAAHREI0AnEMRjWE0vo JDGeNJYJPnkl2W3WdCZEB9gtkuNbAQrM9NgaiuZwh30nJocsZaKEURcoB7JloEAI DTURSYb45zNPIo2N/hode1I1GXC1vQZ7u8wHFYITOJOiNf/EqcApNL+D/1tOCw41 zuJ2sRPlxyiI9YgHCbBHTNvitzvO94M= -----END CERTIFICATE-----Generated at Mon May 6 03:09:29 2024 by rpki-client on console-fra.rpki-client.org