$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/be561c6c-f232-343b-aeb6-fcddb1f42635.roa File: be561c6c-f232-343b-aeb6-fcddb1f42635.roa (raw, json) Hash identifier: 5MFN0ubhpVSL2wdub+/XuZi9ALwhXBxjrW2lhmS8o/A= Subject key identifier: 1C:45:BC:2A:40:3C:7E:D1:AF:11:1B:C2:08:38:99:F1:94:1E:E4:E4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285844F89560A96EC1228D9D69B180 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/be561c6c-f232-343b-aeb6-fcddb1f42635.roa Signing time: Thu 22 Feb 2024 02:00:27 +0000 ROA not before: Thu 22 Feb 2024 02:00:27 +0000 ROA not after: Wed 22 May 2024 01:00:27 +0000 asID: 63949 IP address blocks: 64.71.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f8:95:60:a9:6e:c1:22:8d:9d:69:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 22 02:00:27 2024 GMT Not After : May 22 01:00:27 2024 GMT Subject: CN=d525aad3-475a-4447-9af6-8ee5bf706e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:21:e3:94:01:48:92:f6:44:03:e8:2e:f6:33: dd:5b:40:ff:66:d1:50:d0:b1:83:02:59:08:bb:a9: 7f:53:53:03:61:35:8a:45:0a:4d:7a:f4:06:1f:b3: 2b:60:36:44:2c:5f:9b:a9:be:d7:b4:41:84:4d:53: ed:f6:8b:16:86:8f:87:8c:8e:5a:45:82:38:67:4c: 46:fa:a4:39:4a:82:eb:50:b9:83:15:d8:a4:9c:d7: 69:27:91:c0:d4:b4:46:03:a1:ae:0d:a1:44:c8:3c: 2d:59:52:8d:93:79:73:12:51:71:ae:a2:5e:c0:eb: a1:7d:63:97:46:07:8d:b9:ef:0d:3b:f8:2c:22:26: 48:75:5b:a8:5f:d2:8c:12:38:ff:45:54:e9:f5:97: 16:1b:16:ea:05:40:af:29:64:64:58:c8:0e:81:c3: 68:8c:f4:b8:70:a1:56:7e:ea:86:1c:76:48:dd:89: 4c:86:d0:fe:cb:aa:bf:48:b8:85:32:9b:01:9f:7f: 71:e0:50:ae:e8:11:fb:37:ac:5a:29:33:dc:9a:b2: 2f:15:5a:ec:18:81:84:e8:da:6e:f7:ee:38:36:b5: 9a:f4:c2:98:c6:cc:6a:c8:79:67:03:dd:c2:49:f7: 99:12:2a:cd:99:4f:d9:19:c1:6f:d4:8b:9d:df:3e: e7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:45:BC:2A:40:3C:7E:D1:AF:11:1B:C2:08:38:99:F1:94:1E:E4:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/be561c6c-f232-343b-aeb6-fcddb1f42635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.71.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:93:4d:a6:92:1c:e6:a5:1e:d3:ab:fa:de:95:60:19:0e:fc: 1c:5c:d4:1b:9b:2d:49:bb:62:16:bd:03:27:fb:f1:da:ae:87: c3:b1:5c:d9:e7:5d:da:2d:ac:ff:46:da:1e:b8:d6:f3:11:1a: 3b:30:91:43:88:fb:41:10:0a:f3:5e:3a:bb:32:30:c6:e9:2f: 4f:e1:fe:d5:b5:a3:bc:61:cd:70:77:60:e8:01:90:6e:68:74: b3:ef:5b:57:52:24:d9:24:6f:16:34:05:38:d2:20:ad:e2:df: f7:42:47:37:d3:48:c3:50:6e:1a:81:22:0c:19:81:c8:1d:a4: 78:ef:37:e5:29:48:72:19:64:84:0b:97:2e:a0:10:82:46:59: 56:f3:fc:a8:0b:51:b3:8c:44:c9:83:fd:de:34:6b:f2:67:59: 19:a0:c5:0f:fd:07:25:fc:1c:74:66:8a:d8:f6:93:81:59:7f: 66:85:14:b2:a6:49:c7:b3:01:e5:55:10:b7:5d:41:14:86:e4: 52:38:5d:80:dc:e5:95:6e:40:ed:f1:cd:ef:b4:0a:42:4d:30: 3e:bf:96:e4:8b:16:81:e6:66:d1:95:68:91:ed:d0:56:dd:82: de:3d:b5:8c:29:c8:cf:0e:e7:41:6f:df:04:97:c7:72:51:d0: 04:b2:ef:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET4lWCpbsEijZ1psYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDIyMjAyMDAyN1oXDTI0MDUyMjAxMDAyN1owLzEtMCsGA1UEAxMk ZDUyNWFhZDMtNDc1YS00NDQ3LTlhZjYtOGVlNWJmNzA2ZTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCHjlAFIkvZEA+gu9jPdW0D/ZtFQ0LGDAlkI u6l/U1MDYTWKRQpNevQGH7MrYDZELF+bqb7XtEGETVPt9osWho+HjI5aRYI4Z0xG +qQ5SoLrULmDFdiknNdpJ5HA1LRGA6GuDaFEyDwtWVKNk3lzElFxrqJewOuhfWOX RgeNue8NO/gsIiZIdVuoX9KMEjj/RVTp9ZcWGxbqBUCvKWRkWMgOgcNojPS4cKFW fuqGHHZI3YlMhtD+y6q/SLiFMpsBn39x4FCu6BH7N6xaKTPcmrIvFVrsGIGE6Npu 9+44NrWa9MKYxsxqyHlnA93CSfeZEirNmU/ZGcFv1Iud3z7n8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxFvCpAPH7RrxEbwgg4mfGUHuTkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmU1NjFjNmMtZjIzMi0z NDNiLWFlYjYtZmNkZGIxZjQyNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEeYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaTTaaSHOalHtOr+t6VYBkO/Bxc1BubLUm7Yha9Ayf78dquh8OxXNnn XdotrP9G2h641vMRGjswkUOI+0EQCvNeOrsyMMbpL0/h/tW1o7xhzXB3YOgBkG5o dLPvW1dSJNkkbxY0BTjSIK3i3/dCRzfTSMNQbhqBIgwZgcgdpHjvN+UpSHIZZIQL ly6gEIJGWVbz/KgLUbOMRMmD/d40a/JnWRmgxQ/9ByX8HHRmitj2k4FZf2aFFLKm ScezAeVVELddQRSG5FI4XYDc5ZVuQO3xze+0CkJNMD6/luSLFoHmZtGVaJHt0Fbd gt49tYwpyM8O50Fv3wSXx3JR0ASy7zo= -----END CERTIFICATE-----Generated at Mon May 6 15:20:38 2024 by rpki-client on console-ams.rpki-client.org