$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/f47e22f4-6e3a-3537-a1be-97f2fa802042.roa File: f47e22f4-6e3a-3537-a1be-97f2fa802042.roa (raw, json) Hash identifier: I+mXcDYer96Llf19jl5aW9AdGmBb8tjVgd1fAguvEKw= Subject key identifier: F9:7B:E2:C9:2C:CE:D9:E7:35:95:5F:43:CC:ED:12:03:15:47:FC:F8 Certificate issuer: /CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074 Certificate serial: 010D0C9F4328584507F0229218E64B017F41DEC0 Authority key identifier: 92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/f47e22f4-6e3a-3537-a1be-97f2fa802042.roa Signing time: Tue 27 Feb 2024 14:00:31 +0000 ROA not before: Tue 27 Feb 2024 14:00:31 +0000 ROA not after: Mon 27 May 2024 13:00:31 +0000 asID: 14618 IP address blocks: 172.86.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:07:f0:22:92:18:e6:4b:01:7f:41:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074 Validity Not Before: Feb 27 14:00:31 2024 GMT Not After : May 27 13:00:31 2024 GMT Subject: CN=e00d7f7a-d2ea-4b93-81ca-1d52601995bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:de:62:d1:d8:43:52:1a:36:0c:74:2c:51:e6: ab:06:17:f2:15:54:9a:fb:0c:1e:d6:c3:2a:36:9f: ad:2c:0a:bb:e2:35:33:49:07:05:5b:99:e0:ce:80: 64:d1:7b:f0:2a:2d:44:24:31:a9:73:88:ac:88:3b: e5:4d:e2:5c:07:64:13:96:2c:2e:b1:28:3d:cb:a8: 6b:05:e8:a5:f7:f2:0c:b5:52:0d:4e:ee:f1:f1:a0: c9:91:0c:2e:41:4c:66:a6:56:e8:ee:5e:c6:e2:2e: 52:af:e7:ff:80:0a:75:e4:45:65:b5:82:85:f0:3d: 83:f3:bc:51:a7:3f:e2:e3:c9:17:3e:33:c9:b1:db: de:64:64:4b:f3:12:c4:29:f4:0c:f1:3d:56:c6:2a: fc:7d:38:f1:d1:5b:73:f4:7d:67:fa:5a:d9:6c:6b: f6:87:59:9c:2a:3d:54:56:30:85:61:9c:39:e5:cb: 84:d1:2c:7c:92:80:67:6d:ee:14:fa:23:14:70:47: 9d:0e:2d:9c:a1:a4:d5:09:9b:85:a7:c6:a8:58:33: 15:f4:9a:7b:d1:9a:55:2c:a7:e8:d6:b7:dd:ec:03: 2d:60:35:64:c8:5a:1b:2e:58:4f:3d:f9:1e:ac:49: 3c:b3:9f:df:7a:6e:2f:92:94:e1:ec:f3:86:b1:43: f4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7B:E2:C9:2C:CE:D9:E7:35:95:5F:43:CC:ED:12:03:15:47:FC:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/f47e22f4-6e3a-3537-a1be-97f2fa802042.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl X509v3 Authority Key Identifier: keyid:92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer sbgp-ipAddrBlock: critical IPv4: 172.86.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:c0:81:62:7a:eb:a6:3e:d7:d2:18:bf:00:bd:e6:b2:9a:05: 7a:81:97:4f:08:c1:b3:25:9f:c8:84:78:1b:c6:4c:ac:2f:27: e9:14:28:f5:1b:46:68:9e:55:e6:d0:09:f4:6f:86:06:69:95: 6d:3b:ec:d8:ce:a3:af:37:cf:5f:a5:79:4d:bf:8b:38:b8:c3: a5:f7:54:93:7d:ff:56:10:e5:eb:3d:f1:00:4e:e5:36:a6:68: b4:d3:89:59:12:64:97:17:fc:b0:be:6c:fe:9f:91:b0:21:29: ee:a6:b3:49:6b:e6:e1:ad:a8:d9:f7:15:42:39:21:79:9b:6a: f1:3e:85:f8:f6:ab:e1:c1:3b:cf:ce:44:53:af:55:cb:a1:6a: b5:45:57:3f:85:30:2a:6b:78:6c:17:84:6e:7a:c4:7e:45:bb: 9f:ba:c8:ca:0e:a1:5c:8a:88:c0:25:66:9c:3f:ff:10:f2:cc: fd:b8:99:1e:7b:41:34:0b:42:2b:96:9e:6e:e0:fe:e3:09:b6: 5a:e4:6c:ec:2c:82:12:fd:09:89:a7:01:3d:e1:13:22:dc:35: 77:f7:70:af:da:ee:3c:05:19:b8:4c:a6:5d:79:7f:15:10:53: ab:ed:b5:48:78:2f:6d:53:1f:d0:4f:5d:ec:aa:d8:f8:31:e7: 76:4c:e3:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUH8CKSGOZLAX9B3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRjMzJjZGUtNzY5My00ZDEwLWFlMWUtOGI4ZTlkMzYz MDc0MB4XDTI0MDIyNzE0MDAzMVoXDTI0MDUyNzEzMDAzMVowLzEtMCsGA1UEAxMk ZTAwZDdmN2EtZDJlYS00YjkzLTgxY2EtMWQ1MjYwMTk5NWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu95i0dhDUho2DHQsUearBhfyFVSa+wwe1sMq Np+tLAq74jUzSQcFW5ngzoBk0XvwKi1EJDGpc4isiDvlTeJcB2QTliwusSg9y6hr Beil9/IMtVINTu7x8aDJkQwuQUxmplbo7l7G4i5Sr+f/gAp15EVltYKF8D2D87xR pz/i48kXPjPJsdveZGRL8xLEKfQM8T1Wxir8fTjx0Vtz9H1n+lrZbGv2h1mcKj1U VjCFYZw55cuE0Sx8koBnbe4U+iMUcEedDi2coaTVCZuFp8aoWDMV9Jp70ZpVLKfo 1rfd7AMtYDVkyFobLlhPPfkerEk8s5/fem4vkpTh7POGsUP0bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPl74sksztnnNZVfQ8ztEgMVR/z4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNGMz MmNkZS03NjkzLTRkMTAtYWUxZS04YjhlOWQzNjMwNzQvZjQ3ZTIyZjQtNmUzYS0z NTM3LWExYmUtOTdmMmZhODAyMDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTRjMzJjZGUtNzY5My00ZDEwLWFl MWUtOGI4ZTlkMzYzMDc0L2U0YzMyY2RlLTc2OTMtNGQxMC1hZTFlLThiOGU5ZDM2 MzA3NC5jcmwwHwYDVR0jBBgwFoAUkjFMWL/PeT5XBCYBM6ApayuFfnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNGMzMmNkZS03NjkzLTRkMTAtYWUxZS04Yjhl OWQzNjMwNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbAgWJ666Y+19IYvwC95rKaBXqBl08IwbMln8iEeBvGTKwvJ+kUKPUb RmieVebQCfRvhgZplW077NjOo683z1+leU2/izi4w6X3VJN9/1YQ5es98QBO5Tam aLTTiVkSZJcX/LC+bP6fkbAhKe6ms0lr5uGtqNn3FUI5IXmbavE+hfj2q+HBO8/O RFOvVcuharVFVz+FMCpreGwXhG56xH5Fu5+6yMoOoVyKiMAlZpw//xDyzP24mR57 QTQLQiuWnm7g/uMJtlrkbOwsghL9CYmnAT3hEyLcNXf3cK/a7jwFGbhMpl15fxUQ U6vttUh4L21TH9BPXeyq2Pgx53ZM4yQ= -----END CERTIFICATE-----Generated at Wed May 1 22:29:01 2024 by rpki-client on console-fra.rpki-client.org