$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/7d914a29-07b2-3546-9c70-6be805db3231.roa File: 7d914a29-07b2-3546-9c70-6be805db3231.roa (raw, json) Hash identifier: 6YGrK7KTNeTVg5HRNn4O2ukpFx0bi5x1Icn6sfqAKwY= Subject key identifier: 8D:3E:B4:28:59:28:0F:CF:8F:BC:14:34:49:F8:9D:24:5D:50:09:0A Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F4328584567351B242B746DB44B99AD80 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/7d914a29-07b2-3546-9c70-6be805db3231.roa Signing time: Mon 01 Apr 2024 17:01:20 +0000 ROA not before: Mon 01 Apr 2024 17:01:20 +0000 ROA not after: Sun 30 Jun 2024 17:01:20 +0000 asID: 23428 IP address blocks: 198.160.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:67:35:1b:24:2b:74:6d:b4:4b:99:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Apr 1 17:01:20 2024 GMT Not After : Jun 30 17:01:20 2024 GMT Subject: CN=bec935b8-8313-4e07-9af2-114bae551762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5a:ae:83:73:d4:ad:f3:c8:14:a4:a6:c7:b4: 2a:fa:c3:49:52:45:34:38:b3:3a:b9:46:d1:c5:26: e3:08:7d:ab:50:e1:ef:39:f8:a6:97:fe:09:1c:91: 4a:2f:67:83:8a:cf:21:96:12:73:e5:b6:ba:0a:3c: a8:32:a7:cc:df:69:06:c4:0e:e0:36:5b:31:5d:27: 24:e6:67:a5:98:f7:f0:08:15:ee:b8:9f:ec:3b:93: d4:af:bb:0d:85:f5:3d:44:c9:8d:8a:40:f2:88:28: 2f:06:f0:83:91:e3:5d:aa:72:a1:d2:2b:9f:fe:34: a6:93:13:42:a2:05:3c:b8:9c:e2:84:ed:33:3b:20: 30:04:b8:fe:18:37:79:4b:94:9f:29:9c:4b:8d:cb: 2f:64:69:28:9e:5d:b8:ab:82:ad:85:c8:09:b6:22: b2:16:2e:b4:dc:1e:33:2c:68:c1:6a:dd:53:6c:50: 17:b6:9d:bf:3b:92:0c:ff:8e:eb:6a:3e:a8:5b:12: 4d:a5:17:8d:d2:5f:43:7e:15:4d:4f:e1:0d:43:ad: 03:81:a9:5a:63:dd:22:f7:72:28:ab:97:f4:a4:f0: 94:71:b1:f6:bd:e7:f8:20:a8:75:a6:28:e5:ef:c2: 66:4d:44:d9:ae:81:97:56:a1:dd:c1:eb:d1:2f:90: 3e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3E:B4:28:59:28:0F:CF:8F:BC:14:34:49:F8:9D:24:5D:50:09:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/7d914a29-07b2-3546-9c70-6be805db3231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv4: 198.160.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:64:01:f0:e6:2c:62:a8:e6:3a:47:99:9a:42:93:71:e2:16: 1e:57:a6:7e:1f:c6:a8:aa:6e:46:f4:55:08:c9:de:33:be:29: 2d:95:1e:99:f2:3f:81:9c:bb:23:e4:29:0b:09:95:9d:29:7e: 92:40:bc:e8:99:0c:bf:e2:44:b2:ff:9f:22:15:39:e7:eb:f4: cc:bb:92:fc:0f:33:50:9b:d5:53:b5:eb:88:af:14:12:88:1b: 5e:89:30:ee:8e:b2:82:df:6c:d2:4f:46:b6:b0:a1:b8:9e:cf: 87:e7:57:9e:bf:96:72:ee:38:20:81:33:70:53:52:53:fa:1c: 02:67:f0:3d:78:5f:6a:20:b5:fd:57:8a:7c:8c:30:e1:a0:98: cb:21:5b:5a:02:3d:e5:7c:98:79:e1:3f:50:9a:1a:c4:b7:8f: b1:c5:15:40:26:de:ce:c8:09:ad:c4:3f:b1:94:a0:55:29:94: c4:8e:e3:09:c1:32:e3:3d:0b:2b:1f:ca:b6:2c:1e:de:5e:06: 48:81:4b:b8:32:7d:a8:e7:c7:d5:52:ae:00:81:8e:82:69:0d: 5d:7a:98:7e:ea:32:33:97:73:b2:e5:a6:d9:8c:75:c8:da:bd: 05:15:21:f4:c3:04:ee:5e:2d:33:20:23:d2:65:19:80:af:6c: a9:37:1f:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVnNRskK3RttEuZrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI0MDQwMTE3MDEyMFoXDTI0MDYzMDE3MDEyMFowLzEtMCsGA1UEAxMk YmVjOTM1YjgtODMxMy00ZTA3LTlhZjItMTE0YmFlNTUxNzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVqug3PUrfPIFKSmx7Qq+sNJUkU0OLM6uUbR xSbjCH2rUOHvOfiml/4JHJFKL2eDis8hlhJz5ba6CjyoMqfM32kGxA7gNlsxXSck 5melmPfwCBXuuJ/sO5PUr7sNhfU9RMmNikDyiCgvBvCDkeNdqnKh0iuf/jSmkxNC ogU8uJzihO0zOyAwBLj+GDd5S5SfKZxLjcsvZGkonl24q4KthcgJtiKyFi603B4z LGjBat1TbFAXtp2/O5IM/47raj6oWxJNpReN0l9DfhVNT+ENQ60DgalaY90i93Io q5f0pPCUcbH2vef4IKh1pijl78JmTUTZroGXVqHdwevRL5A+RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0+tChZKA/Pj7wUNEn4nSRdUAkKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvN2Q5MTRhMjktMDdiMi0z NTQ2LTljNzAtNmJlODA1ZGIzMjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqDZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZkAfDmLGKo5jpHmZpCk3HiFh5Xpn4fxqiqbkb0VQjJ3jO+KS2VHpny P4GcuyPkKQsJlZ0pfpJAvOiZDL/iRLL/nyIVOefr9My7kvwPM1Cb1VO164ivFBKI G16JMO6OsoLfbNJPRrawobiez4fnV56/lnLuOCCBM3BTUlP6HAJn8D14X2ogtf1X inyMMOGgmMshW1oCPeV8mHnhP1CaGsS3j7HFFUAm3s7ICa3EP7GUoFUplMSO4wnB MuM9CysfyrYsHt5eBkiBS7gyfajnx9VSrgCBjoJpDV16mH7qMjOXc7LlptmMdcja vQUVIfTDBO5eLTMgI9JlGYCvbKk3Hyg= -----END CERTIFICATE-----Generated at Sat Jun 1 23:06:30 2024 by rpki-client on console-ams.rpki-client.org