$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8910d7e-5453-3dc5-a497-d488393f7f7e.roa File: c8910d7e-5453-3dc5-a497-d488393f7f7e.roa (raw, json) Hash identifier: 12D6ht0lINihRlYrGOuhe3JD7QQMeCscwtQ37IA/A6Y= Subject key identifier: 87:F0:02:F3:48:1C:AD:F9:70:6C:7C:26:0D:43:26:B1:BA:4B:14:2C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285845920322D35A8039171022F0C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8910d7e-5453-3dc5-a497-d488393f7f7e.roa Signing time: Wed 17 Apr 2024 01:00:24 +0000 ROA not before: Wed 17 Apr 2024 01:00:24 +0000 ROA not after: Tue 16 Jul 2024 01:00:24 +0000 asID: 212573 IP address blocks: 216.66.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:92:03:22:d3:5a:80:39:17:10:22:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 17 01:00:24 2024 GMT Not After : Jul 16 01:00:24 2024 GMT Subject: CN=106947ee-3f52-4e3e-8f40-2a65be1f2bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:06:74:e1:4c:e6:fb:be:83:ac:f7:0b:9d:95: 47:1a:aa:ae:6b:d9:76:5f:2a:bd:e7:63:c5:5a:5b: 17:f3:9a:87:10:1f:6f:8e:5f:0e:17:fb:e3:11:9d: bd:0d:40:9c:9b:c1:3c:42:5c:61:07:03:d9:b0:de: e5:b8:b4:37:fa:3f:ca:a2:58:8e:52:4c:93:c4:cb: 6a:0f:43:e0:e9:7a:48:af:c7:37:d8:61:02:03:79: f2:21:e2:ee:6c:01:25:39:3c:f1:85:b3:35:43:45: 38:41:ab:01:45:fb:02:ac:d0:ac:6f:69:c3:a6:df: 99:9c:12:40:c6:83:41:1d:fe:f0:80:ea:12:92:7a: d6:61:8e:11:bc:87:fa:74:51:df:9c:24:94:03:79: 25:a0:90:c4:14:42:44:4d:aa:43:b0:1b:71:e1:50: fa:ac:e2:1c:4b:61:53:c9:48:49:16:21:33:75:9c: 88:26:cb:28:ad:21:b5:11:12:3c:a2:ea:3e:12:4d: 16:a0:66:76:87:11:80:05:d8:d1:ff:0d:59:f6:5f: 9a:74:84:eb:e8:6d:c2:d4:64:a2:de:15:60:8a:b2: bf:19:06:37:79:b2:a0:db:cb:10:a7:83:47:22:37: 67:bd:2c:61:cf:af:7f:24:8f:91:4e:27:75:2f:a5: 33:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F0:02:F3:48:1C:AD:F9:70:6C:7C:26:0D:43:26:B1:BA:4B:14:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8910d7e-5453-3dc5-a497-d488393f7f7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 216.66.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:1d:0f:4c:b8:d5:1a:73:c0:93:3e:ac:4c:e2:8b:70:3a:7d: ce:01:ff:2b:7f:da:61:68:ef:65:e0:ad:99:7f:bc:11:d8:aa: 4f:3a:1b:ca:5f:6c:ff:f2:fd:96:75:6d:1e:87:ed:88:c8:a8: e4:7e:b3:d0:8e:05:ab:ae:0d:bd:32:92:83:5f:7a:90:10:4b: 10:83:9d:53:8b:dc:9d:90:da:88:f0:f3:ec:a5:89:84:f7:1e: d0:38:50:86:96:db:fd:02:b2:4e:d9:61:aa:ca:08:7b:ce:64: d3:d0:98:e6:b7:03:15:f5:ec:cc:a1:d8:ab:99:a9:fb:7a:3d: 68:1e:6b:31:9a:11:90:54:d3:69:b3:28:78:48:ac:dd:8f:bb: d9:6b:1a:8a:83:d6:13:af:e5:b1:18:f4:78:a4:e0:74:5e:67: 73:b4:36:bd:e2:ce:84:c2:e5:c3:9e:06:e0:38:64:a7:e3:a1: 6d:19:f8:37:94:cd:ec:aa:5e:87:d0:67:87:9d:d0:9e:ed:2a: 4a:37:c3:8b:28:ac:f3:17:e4:20:4b:20:ab:60:82:29:10:2a: 2c:02:ac:df:81:6d:5e:77:98:87:0b:d9:43:79:bd:06:cc:75: 60:c0:b7:b5:84:97:65:46:08:e6:58:02:c7:9c:b5:43:46:1a: d1:35:72:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWSAyLTWoA5FxAi8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDQxNzAxMDAyNFoXDTI0MDcxNjAxMDAyNFowLzEtMCsGA1UEAxMk MTA2OTQ3ZWUtM2Y1Mi00ZTNlLThmNDAtMmE2NWJlMWYyYmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwZ04Uzm+76DrPcLnZVHGqqua9l2Xyq952PF WlsX85qHEB9vjl8OF/vjEZ29DUCcm8E8QlxhBwPZsN7luLQ3+j/KoliOUkyTxMtq D0Pg6XpIr8c32GECA3nyIeLubAElOTzxhbM1Q0U4QasBRfsCrNCsb2nDpt+ZnBJA xoNBHf7wgOoSknrWYY4RvIf6dFHfnCSUA3kloJDEFEJETapDsBtx4VD6rOIcS2FT yUhJFiEzdZyIJssorSG1ERI8ouo+Ek0WoGZ2hxGABdjR/w1Z9l+adITr6G3C1GSi 3hVgirK/GQY3ebKg28sQp4NHIjdnvSxhz69/JI+RTid1L6UzEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfwAvNIHK35cGx8Jg1DJrG6SxQsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzg5MTBkN2UtNTQ1My0z ZGM1LWE0OTctZDQ4ODM5M2Y3ZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EJbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIdD0y41RpzwJM+rEzii3A6fc4B/yt/2mFo72XgrZl/vBHYqk86G8pf bP/y/ZZ1bR6H7YjIqOR+s9COBauuDb0ykoNfepAQSxCDnVOL3J2Q2ojw8+yliYT3 HtA4UIaW2/0Csk7ZYarKCHvOZNPQmOa3AxX17Myh2KuZqft6PWgeazGaEZBU02mz KHhIrN2Pu9lrGoqD1hOv5bEY9Hik4HReZ3O0Nr3izoTC5cOeBuA4ZKfjoW0Z+DeU zeyqXofQZ4ed0J7tKko3w4sorPMX5CBLIKtggikQKiwCrN+BbV53mIcL2UN5vQbM dWDAt7WEl2VGCOZYAsectUNGGtE1cmQ= -----END CERTIFICATE-----Generated at Mon May 6 03:09:29 2024 by rpki-client on console-fra.rpki-client.org