$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/06141f40-0ed6-3044-b153-d74b76cba921.roa File: 06141f40-0ed6-3044-b153-d74b76cba921.roa (raw, json) Hash identifier: ifaxnWrx1R4Eo1yIzLLqNzv0vpHuyKyOdSv9T6V/hVQ= Subject key identifier: 9D:E9:6A:52:4C:B4:9F:B4:B5:0F:5F:9B:53:99:EC:1A:21:5A:FA:DF Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F43285844F9FABCD25171BEF2F2850700 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/06141f40-0ed6-3044-b153-d74b76cba921.roa Signing time: Thu 22 Feb 2024 14:00:30 +0000 ROA not before: Thu 22 Feb 2024 14:00:30 +0000 ROA not after: Wed 22 May 2024 13:00:30 +0000 asID: 30103 IP address blocks: 149.137.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f9:fa:bc:d2:51:71:be:f2:f2:85:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Feb 22 14:00:30 2024 GMT Not After : May 22 13:00:30 2024 GMT Subject: CN=5e95cab3-8bfb-4ec9-896a-5e2aaa6c0ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c0:cc:8c:c7:78:f6:cb:e8:c6:53:aa:3c:f8: 68:02:82:2f:93:51:3e:7a:c6:29:74:cd:40:b6:0d: a5:28:78:ee:b1:4b:7f:9f:b6:9e:9a:d6:0c:9c:e9: a0:17:dd:c9:69:cf:d2:8b:fc:ac:58:2f:0f:c8:0f: 8e:fb:a2:68:6c:77:6f:a7:6d:c3:fe:d1:a5:5a:d3: fa:fa:44:ee:21:9b:e1:ff:a1:b7:41:c8:d4:07:02: e7:7f:24:ae:f3:65:e8:21:6f:d4:95:f2:fa:5c:18: 93:8e:39:b8:a0:17:15:e4:3e:b0:c7:fb:f0:e7:85: c6:1d:c5:98:d1:8a:ba:5a:41:84:f0:7a:ec:f1:c6: a7:f4:92:c2:8c:02:30:ae:3c:04:1b:3e:9c:be:62: 61:3d:d2:66:90:69:73:58:96:5b:e8:93:02:62:55: 30:03:b9:74:d6:32:82:f3:d7:f4:ac:6b:e9:c8:6b: b9:19:b9:c5:fa:1d:7a:20:10:4c:40:dd:8e:96:5f: ba:c1:0c:9d:38:ad:6a:ea:c6:df:5c:e1:30:a1:d1: 1c:53:36:89:87:34:d6:51:14:34:98:69:ce:82:26: b7:0e:64:c6:b1:2e:c0:cc:61:ff:f5:8f:13:2d:5f: 34:f8:73:8b:87:e9:50:ab:58:ad:cb:50:b0:88:c8: 00:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E9:6A:52:4C:B4:9F:B4:B5:0F:5F:9B:53:99:EC:1A:21:5A:FA:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/06141f40-0ed6-3044-b153-d74b76cba921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 149.137.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:aa:20:f2:65:3b:d3:31:5b:20:a4:2a:7c:4e:45:f9:50:1c: cd:2a:6f:a2:2b:c0:9b:c0:90:5f:b0:b1:6b:38:0d:9a:77:4c: 67:c3:2e:74:96:ef:75:e8:9e:9b:c3:d1:86:82:ef:5b:47:67: 53:9d:e3:bb:ff:e0:00:c5:fe:29:e0:f7:1a:3f:e2:8e:a9:b9: 91:75:43:c5:08:eb:c6:59:1b:fe:e5:29:95:e0:cd:3b:d8:d1: a2:9a:d7:1d:4c:65:62:45:c3:47:20:40:80:f5:3b:29:ea:59: b6:3d:87:5d:5b:2a:3e:9a:d5:45:5d:d9:46:72:00:bc:47:25: f9:ef:cc:f4:02:11:c5:a6:89:2d:3a:ef:f2:89:f8:cd:6f:92: 0c:77:05:8f:65:52:ed:23:32:79:5c:c6:de:65:d8:6c:45:e2: 62:0b:60:2b:96:74:21:b7:ff:a9:71:08:16:d1:b5:fe:34:06: 6f:11:0d:9f:bf:f6:6f:22:7a:4e:50:92:f6:ea:08:c0:44:78: b7:c9:71:e9:65:b5:bb:2c:e2:65:1f:d8:ca:03:4e:86:96:ba: 1d:68:34:90:63:08:da:6e:53:e0:80:86:da:e4:ca:5d:e7:44: e7:ce:1a:0a:13:5d:2d:69:a8:99:21:d9:b7:80:8d:33:cd:02: 64:b5:e0:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET5+rzSUXG+8vKFBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI0MDIyMjE0MDAzMFoXDTI0MDUyMjEzMDAzMFowLzEtMCsGA1UEAxMk NWU5NWNhYjMtOGJmYi00ZWM5LTg5NmEtNWUyYWFhNmMwZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMDMjMd49svoxlOqPPhoAoIvk1E+esYpdM1A tg2lKHjusUt/n7aemtYMnOmgF93Jac/Si/ysWC8PyA+O+6JobHdvp23D/tGlWtP6 +kTuIZvh/6G3QcjUBwLnfySu82XoIW/UlfL6XBiTjjm4oBcV5D6wx/vw54XGHcWY 0Yq6WkGE8Hrs8can9JLCjAIwrjwEGz6cvmJhPdJmkGlzWJZb6JMCYlUwA7l01jKC 89f0rGvpyGu5GbnF+h16IBBMQN2Oll+6wQydOK1q6sbfXOEwodEcUzaJhzTWURQ0 mGnOgia3DmTGsS7AzGH/9Y8TLV80+HOLh+lQq1ity1CwiMgA9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3palJMtJ+0tQ9fm1OZ7BohWvrfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMDYxNDFmNDAtMGVkNi0z MDQ0LWIxNTMtZDc0Yjc2Y2JhOTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClYlEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaqIPJlO9MxWyCkKnxORflQHM0qb6IrwJvAkF+wsWs4DZp3TGfDLnSW 73XonpvD0YaC71tHZ1Od47v/4ADF/ing9xo/4o6puZF1Q8UI68ZZG/7lKZXgzTvY 0aKa1x1MZWJFw0cgQID1OynqWbY9h11bKj6a1UVd2UZyALxHJfnvzPQCEcWmiS06 7/KJ+M1vkgx3BY9lUu0jMnlcxt5l2GxF4mILYCuWdCG3/6lxCBbRtf40Bm8RDZ+/ 9m8iek5QkvbqCMBEeLfJcelltbss4mUf2MoDToaWuh1oNJBjCNpuU+CAhtrkyl3n ROfOGgoTXS1pqJkh2beAjTPNAmS14DY= -----END CERTIFICATE-----Generated at Thu May 9 15:36:52 2024 by rpki-client on console-fra.rpki-client.org