$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/867ba8c6-b8e0-3c0d-b890-3ac9aa19524a.roa File: 867ba8c6-b8e0-3c0d-b890-3ac9aa19524a.roa (raw, json) Hash identifier: 80nTqXfW8pMXoJ6MOKRZd2jenXwI/d6xNCV49et054g= Subject key identifier: EF:29:F8:AA:C6:73:F3:69:78:0A:E0:D4:94:F8:28:BB:E4:E9:B6:4D Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584548081F4FE3058D2D6E986280 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/867ba8c6-b8e0-3c0d-b890-3ac9aa19524a.roa Signing time: Thu 21 Mar 2024 13:00:33 +0000 ROA not before: Thu 21 Mar 2024 13:00:33 +0000 ROA not after: Wed 19 Jun 2024 13:00:33 +0000 asID: 14618 IP address blocks: 170.114.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:48:08:1f:4f:e3:05:8d:2d:6e:98:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Mar 21 13:00:33 2024 GMT Not After : Jun 19 13:00:33 2024 GMT Subject: CN=1567dda5-a357-4110-9ba1-207b7cdd4b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a8:3a:5c:d1:3c:8c:bd:3d:f3:87:58:31:10: a6:31:32:eb:67:d6:d3:d4:05:8d:af:4a:5e:0f:09: 66:c3:5a:4f:07:87:7b:7d:77:22:98:f7:be:43:44: ac:d8:81:d2:db:cf:59:9f:1b:37:ee:5a:7c:0d:62: ea:7c:d2:a7:8b:c2:64:1e:21:22:ae:15:a1:39:d3: 69:7f:98:b4:8b:36:53:bb:5e:14:78:39:b2:4a:46: ef:af:c6:cd:05:40:92:ba:c7:a8:d0:1d:9f:91:8a: 99:3f:07:4c:42:75:a5:76:2f:79:6a:f5:f8:ea:8c: aa:e6:bb:fb:09:3a:85:51:d1:1c:d3:9a:a7:f0:ad: 1b:e1:e0:03:21:4f:cc:50:23:09:81:f3:b2:e8:9a: dc:1a:bc:bc:fc:f4:a6:d7:9e:f7:53:4e:bb:d3:57: 31:8b:03:7f:92:90:6e:2e:92:de:1f:c6:e1:50:5c: b0:55:4d:14:de:f2:7a:8b:61:d4:ed:dd:f8:22:38: ad:53:47:35:ec:72:e8:df:3a:55:db:95:2b:de:8f: 5f:98:e9:7d:6d:72:7a:bb:4e:07:96:13:54:d7:3a: ea:13:32:a5:37:c4:50:6f:5a:c6:ff:8c:d5:11:dd: 51:52:3e:28:e6:74:f5:15:03:60:5e:52:8f:fc:12: 0e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:29:F8:AA:C6:73:F3:69:78:0A:E0:D4:94:F8:28:BB:E4:E9:B6:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/867ba8c6-b8e0-3c0d-b890-3ac9aa19524a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:be:76:98:cb:2b:fc:73:3a:8f:0b:69:61:f1:a1:05:3c:f8: 57:77:97:44:9f:15:c4:da:48:5c:ee:b9:12:09:f0:08:bb:e7: b7:04:26:3e:cb:0b:3f:db:46:b3:24:f5:85:d1:49:78:a3:c0: f9:08:71:ce:60:db:42:46:ce:a8:15:18:94:83:96:55:7f:57: bc:6d:bc:07:f3:e5:a4:18:69:aa:39:92:3f:47:25:3a:02:8a: 01:5c:4e:23:f1:e6:ed:50:b1:a6:72:c9:aa:7e:b6:d5:00:62: 44:43:b3:f7:a6:d0:fe:af:2d:47:4c:17:3f:d1:2f:4f:e6:16: 09:fb:bb:d1:89:b9:22:07:1e:cc:fa:14:f8:da:7b:be:28:53: a7:06:42:3d:cc:50:c5:95:d2:40:67:b1:04:a4:89:60:23:ed: f0:68:06:4b:14:20:45:97:45:38:ba:c7:77:43:a6:1e:6f:e7: 36:2b:62:38:84:ba:b2:8a:eb:22:da:22:2d:e9:3c:7e:98:97: d6:90:30:31:7f:09:f8:e5:c7:e3:f1:47:69:88:55:01:c5:54: b1:d2:04:28:04:ed:9c:95:71:fb:e5:02:d1:18:b8:ee:e7:02: 4d:50:4c:4e:f2:b4:f9:b2:b1:52:af:68:44:cc:af:af:7d:1f: 22:c8:24:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVICB9P4wWNLW6YYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI0MDMyMTEzMDAzM1oXDTI0MDYxOTEzMDAzM1owLzEtMCsGA1UEAxMk MTU2N2RkYTUtYTM1Ny00MTEwLTliYTEtMjA3YjdjZGQ0YjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKg6XNE8jL0984dYMRCmMTLrZ9bT1AWNr0pe Dwlmw1pPB4d7fXcimPe+Q0Ss2IHS289Znxs37lp8DWLqfNKni8JkHiEirhWhOdNp f5i0izZTu14UeDmySkbvr8bNBUCSuseo0B2fkYqZPwdMQnWldi95avX46oyq5rv7 CTqFUdEc05qn8K0b4eADIU/MUCMJgfOy6JrcGry8/PSm1573U06701cxiwN/kpBu LpLeH8bhUFywVU0U3vJ6i2HU7d34IjitU0c17HLo3zpV25Ur3o9fmOl9bXJ6u04H lhNU1zrqEzKlN8RQb1rG/4zVEd1RUj4o5nT1FQNgXlKP/BIOuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8p+KrGc/NpeArg1JT4KLvk6bZNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvODY3YmE4YzYtYjhlMC0z YzBkLWI4OTAtM2FjOWFhMTk1MjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnI9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKm+dpjLK/xzOo8LaWHxoQU8+Fd3l0SfFcTaSFzuuRIJ8Ai757cEJj7L Cz/bRrMk9YXRSXijwPkIcc5g20JGzqgVGJSDllV/V7xtvAfz5aQYaao5kj9HJToC igFcTiPx5u1QsaZyyap+ttUAYkRDs/em0P6vLUdMFz/RL0/mFgn7u9GJuSIHHsz6 FPjae74oU6cGQj3MUMWV0kBnsQSkiWAj7fBoBksUIEWXRTi6x3dDph5v5zYrYjiE urKK6yLaIi3pPH6Yl9aQMDF/Cfjlx+PxR2mIVQHFVLHSBCgE7ZyVcfvlAtEYuO7n Ak1QTE7ytPmysVKvaETMr699HyLIJCc= -----END CERTIFICATE-----Generated at Thu May 2 04:29:56 2024 by rpki-client on console-fra.rpki-client.org