$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/917d967f-48eb-3031-9947-9d4672612fd4.roa File: 917d967f-48eb-3031-9947-9d4672612fd4.roa (raw, json) Hash identifier: gohM6vvvLeepMvfGpsEAmg4/IO1CK2e1F0oA9dChzM8= Subject key identifier: 2C:23:6A:7D:74:4B:94:D2:66:2E:1C:58:6E:CD:61:5C:EC:31:C6:A5 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F43285844FB60030EDBF15F81ADC5B280 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/917d967f-48eb-3031-9947-9d4672612fd4.roa Signing time: Fri 23 Feb 2024 02:00:26 +0000 ROA not before: Fri 23 Feb 2024 02:00:26 +0000 ROA not after: Thu 23 May 2024 01:00:26 +0000 asID: 14618 IP address blocks: 208.95.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:fb:60:03:0e:db:f1:5f:81:ad:c5:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Feb 23 02:00:26 2024 GMT Not After : May 23 01:00:26 2024 GMT Subject: CN=602522c5-db0f-4952-b935-4718335a85e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0b:29:27:c5:58:ce:20:fe:e4:10:bf:0d:ba: 88:e8:1a:c7:5d:89:e5:9b:8b:13:52:12:70:b4:2f: 7c:1a:95:5d:9b:cf:4f:51:5b:3e:32:50:a2:72:0b: f4:25:0d:81:70:7a:87:8f:39:b8:b1:44:a4:cd:08: cc:8f:99:33:17:34:b9:f0:98:5c:e2:ef:18:e7:76: 01:19:4d:1e:a7:05:5d:b2:2b:22:62:af:fc:18:2f: db:75:ef:49:1d:fc:2b:6c:4a:47:94:e8:6e:04:81: d9:d5:a5:1f:b7:2b:ee:6f:39:68:e3:9a:e2:a6:d2: 62:62:49:62:a9:74:ea:8a:30:a8:db:1e:16:d9:6a: 78:bd:86:5d:9d:ed:ca:14:1f:78:bd:a1:5b:ee:6c: 75:3f:f3:58:48:61:98:38:c6:4f:75:16:5e:30:3c: eb:95:89:1d:f3:de:e0:cd:22:8f:d4:24:b2:dc:3a: b2:df:59:97:ef:71:53:74:e8:7c:ba:3f:87:32:56: a6:b8:71:47:9c:81:ba:c7:86:48:84:bf:94:45:14: 8e:95:2d:75:1c:1c:fe:83:9e:b3:5a:f9:68:d9:9c: f4:99:34:39:34:40:f5:9f:b9:27:25:af:9c:4e:2c: cc:19:da:97:ef:d5:fc:11:e8:80:72:0f:d8:a9:df: 5d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:23:6A:7D:74:4B:94:D2:66:2E:1C:58:6E:CD:61:5C:EC:31:C6:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/917d967f-48eb-3031-9947-9d4672612fd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.95.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:95:c2:49:38:04:ab:da:cb:9f:01:bb:71:df:90:4b:a2:27: 01:13:aa:58:34:e2:7b:23:58:7a:44:3e:0a:77:51:3c:61:ea: cc:bc:eb:e1:67:17:bd:ce:b6:d3:d6:14:dd:d1:74:70:4c:37: 73:df:a9:61:8c:68:6c:0f:00:d7:95:07:f9:3c:3a:1b:4a:a8: bd:3d:9d:d4:d3:a5:42:62:f1:fa:0f:d2:85:79:06:55:10:97: 93:44:2e:39:83:d4:8e:c3:a9:36:e2:fe:7d:95:9a:63:53:04: fb:b5:90:6b:d1:bc:7b:65:03:b0:8a:2a:76:22:e8:73:87:94: d9:ef:e3:9a:e8:29:5b:be:77:ac:3a:47:05:4f:51:c3:b2:f1: f7:af:88:f5:1c:07:6d:15:47:73:e4:5f:1c:ec:36:32:b5:7c: e3:89:0d:56:2b:0f:d1:ee:a5:22:ec:b2:f6:f2:e2:e6:e6:3f: 4e:c7:ff:bf:45:ed:3a:d5:5e:4b:8c:88:b2:ab:84:70:cf:1b: b2:6c:50:ee:bb:f4:6d:0d:11:30:46:89:34:d1:d0:e2:2d:d8: ca:ad:e4:bc:99:4c:87:a7:6c:77:f5:30:94:e7:cf:ce:b8:de: 38:9f:87:26:42:17:38:7f:3c:44:62:ce:7c:08:7d:f4:ab:cf: 4a:83:eb:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET7YAMO2/Ffga3FsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI0MDIyMzAyMDAyNloXDTI0MDUyMzAxMDAyNlowLzEtMCsGA1UEAxMk NjAyNTIyYzUtZGIwZi00OTUyLWI5MzUtNDcxODMzNWE4NWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wspJ8VYziD+5BC/DbqI6BrHXYnlm4sTUhJw tC98GpVdm89PUVs+MlCicgv0JQ2BcHqHjzm4sUSkzQjMj5kzFzS58Jhc4u8Y53YB GU0epwVdsisiYq/8GC/bde9JHfwrbEpHlOhuBIHZ1aUftyvubzlo45riptJiYkli qXTqijCo2x4W2Wp4vYZdne3KFB94vaFb7mx1P/NYSGGYOMZPdRZeMDzrlYkd897g zSKP1CSy3Dqy31mX73FTdOh8uj+HMlamuHFHnIG6x4ZIhL+URRSOlS11HBz+g56z Wvlo2Zz0mTQ5NED1n7knJa+cTizMGdqX79X8EeiAcg/Yqd9duQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwjan10S5TSZi4cWG7NYVzsMcalMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvOTE3ZDk2N2YtNDhlYi0z MDMxLTk5NDctOWQ0NjcyNjEyZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSVwkk4BKvay58Bu3HfkEuiJwETqlg04nsjWHpEPgp3UTxh6sy86+Fn F73OttPWFN3RdHBMN3PfqWGMaGwPANeVB/k8OhtKqL09ndTTpUJi8foP0oV5BlUQ l5NELjmD1I7DqTbi/n2VmmNTBPu1kGvRvHtlA7CKKnYi6HOHlNnv45roKVu+d6w6 RwVPUcOy8feviPUcB20VR3PkXxzsNjK1fOOJDVYrD9HupSLssvby4ubmP07H/79F 7TrVXkuMiLKrhHDPG7JsUO679G0NETBGiTTR0OIt2Mqt5LyZTIenbHf1MJTnz864 3jifhyZCFzh/PERiznwIffSrz0qD63c= -----END CERTIFICATE-----Generated at Thu May 2 03:30:11 2024 by rpki-client on console-ams.rpki-client.org