$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/d507668b-e70a-32a7-9458-c5a581f7b715.roa File: d507668b-e70a-32a7-9458-c5a581f7b715.roa (raw, json) Hash identifier: UTFCYaChLkDu8coKYqC7nKZ2qwj0PwCOI3Yg97HX04s= Subject key identifier: 2F:DF:21:55:AC:AF:75:B1:2D:AD:FB:B7:D2:09:9D:D8:0E:2F:FC:D6 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F43285844FB60033F1DD47CC682685580 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/d507668b-e70a-32a7-9458-c5a581f7b715.roa Signing time: Fri 23 Feb 2024 02:00:26 +0000 ROA not before: Fri 23 Feb 2024 02:00:26 +0000 ROA not after: Thu 23 May 2024 01:00:26 +0000 asID: 16509 IP address blocks: 208.95.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:fb:60:03:3f:1d:d4:7c:c6:82:68:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Feb 23 02:00:26 2024 GMT Not After : May 23 01:00:26 2024 GMT Subject: CN=ebb07abf-f696-4ed7-adad-db2a4bd25313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c3:7f:88:50:d0:53:ad:a1:3a:ba:00:f8:e0: f6:de:0c:cd:94:78:a2:e0:c7:11:ab:8c:91:11:a0: 4d:1a:ad:45:d2:57:79:07:19:43:4a:25:4d:92:b9: 64:03:dc:3f:fd:93:b9:f5:d5:dc:9d:99:aa:53:0b: f0:17:82:5b:3b:0a:af:91:84:a5:e6:6d:bb:b7:42: 5b:cd:1d:13:59:58:1a:fe:32:f1:55:df:2e:f1:60: a8:26:57:33:2c:93:28:c8:06:71:66:76:4e:9d:48: 15:cf:c8:97:10:73:fb:18:90:69:27:41:8a:1a:cf: ba:8b:85:52:f8:7b:4b:c2:df:51:b0:1b:44:41:1e: fc:29:42:f8:d0:22:ab:a9:04:9a:f8:e0:79:42:2c: 6e:c7:e3:bf:b9:85:ec:ff:1c:79:bb:ee:f9:80:7f: df:c5:b5:62:17:8c:82:ab:67:69:05:90:6a:48:bf: 12:e2:38:b7:3a:ca:ce:48:f4:66:e4:22:62:0c:4c: 7a:97:84:97:68:e5:dd:a6:b9:58:87:9d:62:77:c8: a1:08:5d:da:ec:97:be:b7:ff:fd:6b:32:ba:ee:92: 93:12:7f:b0:b5:6d:36:de:fc:ed:b8:f2:ad:b6:bd: bb:46:0b:b2:9a:12:b5:5d:1f:c1:b2:4b:cd:77:38: 9a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DF:21:55:AC:AF:75:B1:2D:AD:FB:B7:D2:09:9D:D8:0E:2F:FC:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/d507668b-e70a-32a7-9458-c5a581f7b715.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.95.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:09:5f:08:5e:ba:bd:41:a0:2e:16:b0:ba:9f:50:1d:82:75: 3e:9f:17:9b:d3:1a:7c:fa:3b:78:47:49:86:38:2b:85:df:cf: 55:8e:63:4a:89:2a:71:de:3a:22:89:f7:0e:cf:d6:f4:67:25: 62:6d:77:75:63:e9:89:e9:4d:5c:a3:d4:05:ee:ac:1e:75:9d: f9:bd:4d:ab:e6:d5:32:2b:71:ce:45:42:7c:1c:8b:39:ea:80: 03:e2:fd:74:fa:d2:50:d4:6c:b2:f8:a5:b5:06:d9:60:1e:48: 77:b1:7c:26:d9:41:7c:f3:34:45:3b:f4:c8:ea:bf:ce:59:2f: fb:9f:91:cd:63:5b:0f:4a:e3:26:63:fa:82:00:71:ba:d2:8a: 21:0a:0d:76:30:4b:3b:07:a6:4e:8c:49:1d:93:60:91:5b:7c: 10:91:16:80:51:02:83:92:2c:0c:52:90:97:66:2d:41:d1:9d: 60:2c:5c:7b:65:a5:ae:27:dd:8d:a6:9e:7f:51:d1:2c:b2:6c: ae:72:f2:a1:4a:86:d9:a7:e2:17:b0:e0:79:8d:67:d7:89:96: 72:42:0a:d0:5b:49:4b:98:07:1f:6b:af:01:23:7a:2a:d9:90: c3:02:b7:d8:9b:c5:4f:7e:27:ec:83:cd:8d:4e:99:06:54:8a: b7:3f:26:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET7YAM/HdR8xoJoVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI0MDIyMzAyMDAyNloXDTI0MDUyMzAxMDAyNlowLzEtMCsGA1UEAxMk ZWJiMDdhYmYtZjY5Ni00ZWQ3LWFkYWQtZGIyYTRiZDI1MzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcN/iFDQU62hOroA+OD23gzNlHii4McRq4yR EaBNGq1F0ld5BxlDSiVNkrlkA9w//ZO59dXcnZmqUwvwF4JbOwqvkYSl5m27t0Jb zR0TWVga/jLxVd8u8WCoJlczLJMoyAZxZnZOnUgVz8iXEHP7GJBpJ0GKGs+6i4VS +HtLwt9RsBtEQR78KUL40CKrqQSa+OB5Qixux+O/uYXs/xx5u+75gH/fxbViF4yC q2dpBZBqSL8S4ji3OsrOSPRm5CJiDEx6l4SXaOXdprlYh51id8ihCF3a7Je+t//9 azK67pKTEn+wtW023vztuPKttr27RguymhK1XR/BskvNdziaAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/fIVWsr3WxLa37t9IJndgOL/zWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZDUwNzY2OGItZTcwYS0z MmE3LTk0NTgtYzVhNTgxZjdiNzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUJXwheur1BoC4WsLqfUB2CdT6fF5vTGnz6O3hHSYY4K4Xfz1WOY0qJ KnHeOiKJ9w7P1vRnJWJtd3Vj6YnpTVyj1AXurB51nfm9Tavm1TIrcc5FQnwciznq gAPi/XT60lDUbLL4pbUG2WAeSHexfCbZQXzzNEU79Mjqv85ZL/ufkc1jWw9K4yZj +oIAcbrSiiEKDXYwSzsHpk6MSR2TYJFbfBCRFoBRAoOSLAxSkJdmLUHRnWAsXHtl pa4n3Y2mnn9R0SyybK5y8qFKhtmn4hew4HmNZ9eJlnJCCtBbSUuYBx9rrwEjeirZ kMMCt9ibxU9+J+yDzY1OmQZUirc/Jp8= -----END CERTIFICATE-----Generated at Fri May 3 03:27:54 2024 by rpki-client on console-ams.rpki-client.org