$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015/65241b29-76b1-3e66-abd9-723a5dd2f0c2.roa File: 65241b29-76b1-3e66-abd9-723a5dd2f0c2.roa (raw, json) Hash identifier: HPjx5rMA/X1hvSpt7M/1ewvBW3+nZ053kN+HJ7SazA8= Subject key identifier: 71:D2:F5:1E:DE:26:A0:7B:28:FA:19:FE:62:8C:CE:76:31:50:16:F5 Certificate issuer: /CN=f243c5da-1962-405d-9607-4c295bcb5015 Certificate serial: 010D0C9F432858456C530BBBA57694730E44AB00 Authority key identifier: DE:5B:EC:37:4F:D9:9F:51:D9:BD:97:72:05:65:08:5A:8B:10:B3:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015/65241b29-76b1-3e66-abd9-723a5dd2f0c2.roa Signing time: Wed 03 Apr 2024 13:00:37 +0000 ROA not before: Wed 03 Apr 2024 13:00:37 +0000 ROA not after: Tue 02 Jul 2024 13:00:37 +0000 asID: 396535 IP address blocks: 173.208.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015/f243c5da-1962-405d-9607-4c295bcb5015.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015/f243c5da-1962-405d-9607-4c295bcb5015.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6c:53:0b:bb:a5:76:94:73:0e:44:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f243c5da-1962-405d-9607-4c295bcb5015 Validity Not Before: Apr 3 13:00:37 2024 GMT Not After : Jul 2 13:00:37 2024 GMT Subject: CN=939a15dc-772f-4d09-b53b-9b93bdb16b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8e:34:65:e3:14:31:3c:e6:50:3b:4c:bf:56: 09:e9:f8:ce:bd:89:f9:f3:30:de:e0:8c:b9:76:fe: c6:e6:e7:a9:c7:ab:2e:d2:78:00:21:f6:1b:d0:b6: 0d:f8:00:92:d1:0a:9b:5e:34:e6:34:d6:da:65:58: 86:0a:f0:87:a2:c5:4a:7e:0c:78:64:c2:f4:98:c5: ae:f5:2b:cb:cf:9c:2a:f5:ba:81:23:65:57:a2:4b: ce:c3:35:fb:4a:63:c9:70:19:4d:9c:f1:f0:44:f5: 1e:21:8a:35:36:ed:f4:e1:c8:08:08:9d:5c:c9:28: aa:46:de:5a:aa:3e:f5:e5:4e:74:ef:43:e7:a8:23: 0b:45:b9:a7:e4:c4:bc:fa:88:1c:1c:31:4a:06:84: 6f:62:27:64:15:f1:6e:d6:de:4a:51:0d:70:15:3c: cd:4c:23:71:7b:50:82:3d:f6:e6:0c:9f:5f:93:a9: 01:61:fd:13:1b:2e:c1:7d:46:7e:93:e5:ab:68:1f: 9d:25:7f:9c:e8:b4:eb:de:01:4a:09:39:d8:23:23: 2e:95:e8:e1:7a:75:6f:04:ac:32:81:66:85:f2:72: 18:67:e4:03:5a:98:19:2c:8b:67:24:40:db:03:5d: 0d:c4:54:fc:f3:f6:5c:a6:83:e6:80:c6:f8:d6:b5: dd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D2:F5:1E:DE:26:A0:7B:28:FA:19:FE:62:8C:CE:76:31:50:16:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015/65241b29-76b1-3e66-abd9-723a5dd2f0c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015/f243c5da-1962-405d-9607-4c295bcb5015.crl X509v3 Authority Key Identifier: keyid:DE:5B:EC:37:4F:D9:9F:51:D9:BD:97:72:05:65:08:5A:8B:10:B3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015.cer sbgp-ipAddrBlock: critical IPv4: 173.208.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:70:23:e4:fa:da:1a:d6:fc:4b:2c:45:af:b9:99:93:74:a8: 5f:9d:4b:27:e4:7d:c5:6e:df:72:5e:9d:c9:3e:27:36:00:2d: fb:de:5f:31:eb:49:59:d3:78:46:41:8b:ea:58:52:65:55:b2: e5:85:77:8e:9e:a3:c8:4b:4d:5a:58:90:86:64:95:87:20:f6: 5f:5b:51:88:0e:3f:7f:e6:56:27:85:3c:40:82:0b:da:48:d7: 82:ac:c6:71:1b:4e:e7:fb:13:5c:77:4e:34:08:9f:a3:e5:a7: 94:72:06:3d:84:10:bd:c7:74:1b:0b:21:45:50:67:18:c9:c8: 46:6e:c3:43:01:50:68:c7:92:3a:e8:90:7d:9e:0b:a9:89:8d: e6:b6:2b:45:11:ac:a1:10:d0:32:7b:07:20:17:a0:da:cc:24: 5f:64:53:ff:56:85:51:c2:52:dc:f5:50:db:a0:87:d7:b7:02: ce:8a:0b:b9:3a:53:54:74:1f:ea:31:92:e2:a9:26:b0:a1:b1: f8:5b:65:a8:da:78:30:70:e7:9a:9d:28:57:34:41:74:72:68: 2d:c3:11:20:8e:9f:57:b9:25:b5:d4:7e:90:60:59:00:17:8a: d9:5d:d6:ec:42:0f:76:72:9e:25:ed:d2:7b:50:11:71:23:42: f6:15:71:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVsUwu7pXaUcw5EqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0M2M1ZGEtMTk2Mi00MDVkLTk2MDctNGMyOTViY2I1 MDE1MB4XDTI0MDQwMzEzMDAzN1oXDTI0MDcwMjEzMDAzN1owLzEtMCsGA1UEAxMk OTM5YTE1ZGMtNzcyZi00ZDA5LWI1M2ItOWI5M2JkYjE2YjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI40ZeMUMTzmUDtMv1YJ6fjOvYn58zDe4Iy5 dv7G5uepx6su0ngAIfYb0LYN+ACS0QqbXjTmNNbaZViGCvCHosVKfgx4ZML0mMWu 9SvLz5wq9bqBI2VXokvOwzX7SmPJcBlNnPHwRPUeIYo1Nu304cgICJ1cySiqRt5a qj715U5070PnqCMLRbmn5MS8+ogcHDFKBoRvYidkFfFu1t5KUQ1wFTzNTCNxe1CC PfbmDJ9fk6kBYf0TGy7BfUZ+k+WraB+dJX+c6LTr3gFKCTnYIyMulejhenVvBKwy gWaF8nIYZ+QDWpgZLItnJEDbA10NxFT88/ZcpoPmgMb41rXdIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHS9R7eJqB7KPoZ/mKMznYxUBb1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMjQz YzVkYS0xOTYyLTQwNWQtOTYwNy00YzI5NWJjYjUwMTUvNjUyNDFiMjktNzZiMS0z ZTY2LWFiZDktNzIzYTVkZDJmMGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjI0M2M1ZGEtMTk2Mi00MDVkLTk2 MDctNGMyOTViY2I1MDE1L2YyNDNjNWRhLTE5NjItNDA1ZC05NjA3LTRjMjk1YmNi NTAxNS5jcmwwHwYDVR0jBBgwFoAU3lvsN0/Zn1HZvZdyBWUIWosQsxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMjQzYzVkYS0xOTYyLTQwNWQtOTYwNy00YzI5 NWJjYjUwMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrdA8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpwI+T62hrW/EssRa+5mZN0qF+dSyfkfcVu33Jenck+JzYALfveXzHr SVnTeEZBi+pYUmVVsuWFd46eo8hLTVpYkIZklYcg9l9bUYgOP3/mVieFPECCC9pI 14KsxnEbTuf7E1x3TjQIn6Plp5RyBj2EEL3HdBsLIUVQZxjJyEZuw0MBUGjHkjro kH2eC6mJjea2K0URrKEQ0DJ7ByAXoNrMJF9kU/9WhVHCUtz1UNugh9e3As6KC7k6 U1R0H+oxkuKpJrChsfhbZajaeDBw55qdKFc0QXRyaC3DESCOn1e5JbXUfpBgWQAX itld1uxCD3ZyniXt0ntQEXEjQvYVcSQ= -----END CERTIFICATE-----Generated at Mon May 6 12:02:27 2024 by rpki-client on console-fra.rpki-client.org