$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/c0423400-0048-3038-acb3-c7d67eb17923.roa File: c0423400-0048-3038-acb3-c7d67eb17923.roa (raw, json) Hash identifier: EaeU3m9PxWNaaL6xArHxl+Fy0T/Y9NXl3hmUaBhEe0I= Subject key identifier: 99:62:01:CD:49:B7:1A:5C:FD:9B:FC:44:33:E5:EC:27:7D:FE:52:C4 Certificate issuer: /CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Certificate serial: 010D0C9F43285845A6F368619A17768B29F4B180 Authority key identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/c0423400-0048-3038-acb3-c7d67eb17923.roa Signing time: Wed 24 Apr 2024 13:00:33 +0000 ROA not before: Wed 24 Apr 2024 13:00:33 +0000 ROA not after: Tue 23 Jul 2024 13:00:33 +0000 asID: 14618 IP address blocks: 208.71.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a6:f3:68:61:9a:17:76:8b:29:f4:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Validity Not Before: Apr 24 13:00:33 2024 GMT Not After : Jul 23 13:00:33 2024 GMT Subject: CN=d91a3624-fa6b-4062-af23-9ce51a00feec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:df:2d:a1:98:11:81:85:8d:3f:33:f4:42:a9: 21:10:e7:34:47:6b:a1:98:47:54:eb:27:c5:f2:f5: d2:d8:de:e1:3a:6e:4f:25:b5:be:d4:c5:aa:59:b2: 22:d8:52:07:dc:9a:a4:af:3a:a8:67:fb:78:0b:0c: fa:6f:d4:08:0d:8f:24:8b:f2:c8:31:4d:37:1f:72: c3:ce:1a:f3:1d:18:6b:da:b5:7e:bd:86:91:de:6c: e6:dc:5b:04:15:51:f2:76:72:e0:1b:9f:ca:11:28: 1d:fa:12:8a:b2:ea:da:3b:4c:30:08:26:a6:36:1e: 76:be:2a:0c:e2:1c:5f:92:fc:45:32:d2:31:1f:02: f0:12:c2:9c:b5:d0:4b:42:39:3d:8b:0f:c9:dc:7f: 1b:44:8a:69:04:73:73:58:fe:a3:9c:2c:d4:7c:ae: 29:86:16:ad:e3:f8:13:9e:73:54:79:b4:a4:86:41: 92:5c:d2:07:7f:f4:4d:e6:fc:68:d0:12:5a:03:5b: e5:52:1a:3a:1e:18:f0:31:30:ff:c4:dc:0f:40:8a: 13:71:e6:f6:b5:b0:98:2a:22:69:68:b5:6b:55:d1: 72:94:66:0d:45:23:c7:96:1d:3f:e3:94:12:ba:14: f2:71:8f:51:22:80:a2:f8:42:1a:af:6e:1a:04:6a: c2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:62:01:CD:49:B7:1A:5C:FD:9B:FC:44:33:E5:EC:27:7D:FE:52:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/c0423400-0048-3038-acb3-c7d67eb17923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl X509v3 Authority Key Identifier: keyid:06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer sbgp-ipAddrBlock: critical IPv4: 208.71.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:67:2e:f5:e5:e9:6a:e0:30:b1:2d:98:65:a1:bb:fc:27:01: a6:5b:dc:73:2d:cd:77:da:1a:78:00:24:a1:08:77:bb:73:61: be:c2:8a:66:47:31:56:d2:1f:ac:0b:a1:68:cb:c1:a1:f4:b5: c4:ce:fd:f0:85:05:6d:95:75:04:18:28:0e:d3:62:d2:17:eb: d8:0d:dd:e6:98:b3:b8:f7:13:b2:ae:ad:99:fc:63:a8:9b:0d: cc:bf:14:8b:c1:36:e8:db:c7:9d:31:ca:76:c9:9c:08:0c:51: 7e:88:66:5c:98:f1:63:c8:72:11:79:b5:b6:ea:b4:cd:b3:5c: 49:6c:fb:87:57:23:05:4b:7e:fe:c7:8d:fb:72:a2:2c:9f:42: e6:d5:b4:72:b4:06:86:79:29:c5:31:b9:8c:c2:67:a4:86:b6: 27:7b:a7:c6:fb:be:29:b5:b8:02:e2:a9:4b:e9:53:97:e3:48: 02:ff:58:38:0e:37:89:b4:47:2f:f8:fe:b1:0c:33:8f:6a:4f: 2f:62:7e:45:3a:59:57:42:4c:0d:d7:3d:f0:64:6a:c9:ad:36: 5f:22:14:be:07:99:0d:b9:95:65:45:e5:27:a0:f6:56:29:2d: a4:21:7c:ce:4e:cd:8c:a4:49:16:22:71:0b:ea:c6:41:83:84: a6:95:28:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWm82hhmhd2iyn0sYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmZTMzYTgtNjFiOC00ZTNkLWFjNzUtNmEzY2RlMmYw NTdhMB4XDTI0MDQyNDEzMDAzM1oXDTI0MDcyMzEzMDAzM1owLzEtMCsGA1UEAxMk ZDkxYTM2MjQtZmE2Yi00MDYyLWFmMjMtOWNlNTFhMDBmZWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt8toZgRgYWNPzP0QqkhEOc0R2uhmEdU6yfF 8vXS2N7hOm5PJbW+1MWqWbIi2FIH3JqkrzqoZ/t4Cwz6b9QIDY8ki/LIMU03H3LD zhrzHRhr2rV+vYaR3mzm3FsEFVHydnLgG5/KESgd+hKKsuraO0wwCCamNh52vioM 4hxfkvxFMtIxHwLwEsKctdBLQjk9iw/J3H8bRIppBHNzWP6jnCzUfK4phhat4/gT nnNUebSkhkGSXNIHf/RN5vxo0BJaA1vlUho6HhjwMTD/xNwPQIoTceb2tbCYKiJp aLVrVdFylGYNRSPHlh0/45QSuhTycY9RIoCi+EIar24aBGrCMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJliAc1Jtxpc/Zv8RDPl7Cd9/lLEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZl MzNhOC02MWI4LTRlM2QtYWM3NS02YTNjZGUyZjA1N2EvYzA0MjM0MDAtMDA0OC0z MDM4LWFjYjMtYzdkNjdlYjE3OTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2JmZTMzYTgtNjFiOC00ZTNkLWFj NzUtNmEzY2RlMmYwNTdhL2NiZmUzM2E4LTYxYjgtNGUzZC1hYzc1LTZhM2NkZTJm MDU3YS5jcmwwHwYDVR0jBBgwFoAUBj/6j7Ngvw6CCzIXp8vTb1pEE6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZlMzNhOC02MWI4LTRlM2QtYWM3NS02YTNj ZGUyZjA1N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EcWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApnLvXl6WrgMLEtmGWhu/wnAaZb3HMtzXfaGngAJKEId7tzYb7CimZH MVbSH6wLoWjLwaH0tcTO/fCFBW2VdQQYKA7TYtIX69gN3eaYs7j3E7KurZn8Y6ib Dcy/FIvBNujbx50xynbJnAgMUX6IZlyY8WPIchF5tbbqtM2zXEls+4dXIwVLfv7H jftyoiyfQubVtHK0BoZ5KcUxuYzCZ6SGtid7p8b7vim1uALiqUvpU5fjSAL/WDgO N4m0Ry/4/rEMM49qTy9ifkU6WVdCTA3XPfBkasmtNl8iFL4HmQ25lWVF5Seg9lYp LaQhfM5OzYykSRYicQvqxkGDhKaVKKc= -----END CERTIFICATE-----Generated at Fri Apr 26 11:18:10 2024 by rpki-client on console-ams.rpki-client.org