$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa File: 3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa (raw, json) Hash identifier: iyKFhMb6Gdz4tBuYig57wSFMuScP57tgnJrMhWsURiQ= Subject key identifier: 62:A0:5C:72:7F:48:00:64:C7:88:2A:E1:A3:51:79:8D:A1:30:B0:C2 Certificate issuer: /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Certificate serial: 010D0C9F4328584566BDAB95DE8C4AC8D2544A00 Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa Signing time: Mon 01 Apr 2024 13:00:36 +0000 ROA not before: Mon 01 Apr 2024 13:00:36 +0000 ROA not after: Sun 30 Jun 2024 13:00:36 +0000 asID: 7224 IP address blocks: 192.111.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:66:bd:ab:95:de:8c:4a:c8:d2:54:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Validity Not Before: Apr 1 13:00:36 2024 GMT Not After : Jun 30 13:00:36 2024 GMT Subject: CN=24e82d7a-7de0-4e87-bf6f-b3c109a3e8bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:53:dd:9d:d2:15:fc:26:b9:a7:9f:8d:38:b4: d7:b4:91:a2:6b:57:0b:74:fc:b8:8a:96:05:c1:f7: 56:99:23:6d:25:41:d1:cb:ac:66:93:7a:b9:db:d4: 67:f6:18:b0:50:3d:ce:41:c0:27:a5:2e:f6:26:96: b9:36:f7:aa:95:df:70:2e:80:33:c5:24:f1:c7:0d: ef:cd:7a:45:02:74:87:d2:31:b5:09:c7:ad:aa:ec: fc:71:56:09:cd:b8:1c:ff:3b:f3:ed:e7:32:6a:62: 34:15:08:2a:1b:ab:df:32:ec:50:80:68:63:f4:a0: dd:e5:3b:65:9b:df:c4:26:83:d4:69:91:ea:fa:a7: da:68:61:39:9b:93:4c:a1:ee:7e:5b:d9:a2:ac:93: 5d:b5:48:cc:66:ce:a8:4b:06:75:11:d7:4b:f2:69: f8:b3:bf:43:2f:00:8a:43:df:74:22:2e:39:57:95: e6:13:31:0c:f0:b4:d6:ed:f7:2c:4b:df:85:c6:20: 48:4d:3e:4f:65:a0:82:5f:86:30:8a:70:e0:c9:c1: 83:f6:22:bf:b2:e3:f4:62:a5:8f:ee:8f:45:91:a2: f0:c1:2a:de:d1:ec:71:d0:16:19:2e:f7:44:91:51: 62:82:36:0a:61:40:8b:ba:92:6a:d0:f0:36:fb:77: f2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A0:5C:72:7F:48:00:64:C7:88:2A:E1:A3:51:79:8D:A1:30:B0:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl X509v3 Authority Key Identifier: keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer sbgp-ipAddrBlock: critical IPv4: 192.111.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:57:89:6f:b8:81:38:cb:78:6f:30:66:5b:90:7d:93:8c:c9: 6c:7b:20:0f:81:95:ca:d5:7a:2c:47:f2:57:c4:f5:f1:cd:bb: 6a:58:45:da:36:a9:54:c1:67:c5:2a:b4:eb:93:54:92:33:2b: ab:a8:63:7a:d2:cc:7f:d8:f4:84:4b:7e:67:5d:af:63:14:4b: b7:3b:43:df:be:9d:70:f2:39:86:6d:56:75:91:92:ee:3d:90: e7:35:0d:fb:20:f9:80:45:67:a3:7f:5c:9d:33:01:c5:7d:5c: 9e:46:80:25:17:2b:e3:5e:95:36:bd:a9:03:07:da:4c:f7:08: 3e:88:92:7c:0d:a3:88:f3:87:46:8e:31:1d:ca:11:2a:a7:0a: 47:77:22:f5:f2:25:ee:c5:f6:c2:4c:c5:a9:1b:41:a4:27:5d: c9:ae:61:f5:dd:69:56:ed:de:2d:cd:72:43:34:a8:2e:e5:a1: 54:7f:73:09:3a:48:41:c0:d0:04:ff:4c:9e:cf:52:1e:a4:78: 49:95:ea:d7:ce:3d:e1:bc:ce:50:63:7f:fa:b2:15:44:61:8e: 4d:b7:ae:bd:fa:ca:c0:32:a3:87:85:12:7c:df:6c:29:b5:b6: 91:d5:b6:d1:8f:62:44:6c:56:7d:60:f8:a6:0b:26:b3:57:c3: 53:df:cb:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVmvauV3oxKyNJUSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQ3MmFmMmYtYzYyYi00Yzk0LTkwNGItYWE3YmZmZGE0 ZmNiMB4XDTI0MDQwMTEzMDAzNloXDTI0MDYzMDEzMDAzNlowLzEtMCsGA1UEAxMk MjRlODJkN2EtN2RlMC00ZTg3LWJmNmYtYjNjMTA5YTNlOGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklPdndIV/Ca5p5+NOLTXtJGia1cLdPy4ipYF wfdWmSNtJUHRy6xmk3q529Rn9hiwUD3OQcAnpS72Jpa5Nveqld9wLoAzxSTxxw3v zXpFAnSH0jG1Ccetquz8cVYJzbgc/zvz7ecyamI0FQgqG6vfMuxQgGhj9KDd5Ttl m9/EJoPUaZHq+qfaaGE5m5NMoe5+W9mirJNdtUjMZs6oSwZ1EddL8mn4s79DLwCK Q990Ii45V5XmEzEM8LTW7fcsS9+FxiBITT5PZaCCX4YwinDgycGD9iK/suP0YqWP 7o9FkaLwwSre0exx0BYZLvdEkVFigjYKYUCLupJq0PA2+3fyNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKgXHJ/SABkx4gq4aNReY2hMLDCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcy YWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdiZmZkYTRmY2IvM2ZiMDhkYzctYmVlYS0z NDU4LTkwOGQtOWIxYThiZjZhMTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ3MmFmMmYtYzYyYi00Yzk0LTkw NGItYWE3YmZmZGE0ZmNiL2I0NzJhZjJmLWM2MmItNGM5NC05MDRiLWFhN2JmZmRh NGZjYi5jcmwwHwYDVR0jBBgwFoAUFwBOSXxFQPE9VlG69veLrWoVuz8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcyYWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdi ZmZkYTRmY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRXiW+4gTjLeG8wZluQfZOMyWx7IA+BlcrVeixH8lfE9fHNu2pYRdo2 qVTBZ8UqtOuTVJIzK6uoY3rSzH/Y9IRLfmddr2MUS7c7Q9++nXDyOYZtVnWRku49 kOc1Dfsg+YBFZ6N/XJ0zAcV9XJ5GgCUXK+NelTa9qQMH2kz3CD6IknwNo4jzh0aO MR3KESqnCkd3IvXyJe7F9sJMxakbQaQnXcmuYfXdaVbt3i3NckM0qC7loVR/cwk6 SEHA0AT/TJ7PUh6keEmV6tfOPeG8zlBjf/qyFURhjk23rr36ysAyo4eFEnzfbCm1 tpHVttGPYkRsVn1g+KYLJrNXw1Pfy1E= -----END CERTIFICATE-----Generated at Sat May 11 02:55:00 2024 by rpki-client on console-fra.rpki-client.org