$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/3e5453eb-9c31-3840-8aaf-140329db4864.roa File: 3e5453eb-9c31-3840-8aaf-140329db4864.roa (raw, json) Hash identifier: ffnmCyPZwKscLitVEdeyscKcv0l6vzPztTUDxqG2XMg= Subject key identifier: CC:1D:2C:83:5C:4B:BD:7F:20:82:21:46:DC:9D:7E:24:30:CE:B3:2F Certificate issuer: /CN=43290c87-c43c-46a1-8633-9c4624dc1aaf Certificate serial: 010D0C9F43285845B7B37959364C153B6B25B200 Authority key identifier: 6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/3e5453eb-9c31-3840-8aaf-140329db4864.roa Signing time: Tue 30 Apr 2024 13:00:34 +0000 ROA not before: Tue 30 Apr 2024 13:00:34 +0000 ROA not after: Mon 29 Jul 2024 13:00:34 +0000 asID: 16509 IP address blocks: 52.129.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b7:b3:79:59:36:4c:15:3b:6b:25:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43290c87-c43c-46a1-8633-9c4624dc1aaf Validity Not Before: Apr 30 13:00:34 2024 GMT Not After : Jul 29 13:00:34 2024 GMT Subject: CN=9682c308-1fcd-47d3-8e9e-a0203a20b225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fe:22:45:e8:b5:05:dd:10:4e:1c:b1:09:ca: 7c:ce:b4:71:35:9d:a3:b9:5f:c7:f7:ac:18:68:b4: 9e:cd:d2:e5:76:25:32:b1:f1:50:4a:6a:f4:6a:ea: 8e:04:5b:3a:3b:6a:20:e9:1b:ff:72:d0:fe:85:63: 13:f5:ab:53:35:ab:c9:a1:7c:d2:b0:eb:05:f9:59: 07:92:0a:3d:0f:1a:39:1a:cd:51:81:cb:0a:f0:ed: 24:62:9c:54:87:6d:5d:1e:1b:a7:9f:be:57:e8:92: 10:6e:4d:01:f7:64:3f:7a:db:e7:87:fe:c3:d8:b2: cc:bb:13:e0:5b:2d:2f:1e:58:da:68:72:86:48:31: e5:28:0d:61:da:05:e3:2e:c0:8a:f6:48:78:a8:44: 3e:be:28:fb:0e:c8:11:66:88:a9:80:fb:e4:b6:ed: 08:65:c8:28:ba:84:36:c5:23:28:aa:16:da:91:4b: 66:1c:de:f1:91:6f:76:7b:4e:1d:86:7c:de:6a:0f: 4b:2f:68:4b:19:53:da:45:67:a6:ff:33:96:6c:b3: 7a:00:6f:9c:b8:ee:2a:c7:16:98:6a:f9:10:ea:f6: 79:f4:5c:5d:3e:f2:5d:5a:b1:a0:70:52:c2:bb:0b: cd:41:b7:cf:ad:66:3d:fa:d6:f2:ee:5b:85:a1:0e: ba:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1D:2C:83:5C:4B:BD:7F:20:82:21:46:DC:9D:7E:24:30:CE:B3:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/3e5453eb-9c31-3840-8aaf-140329db4864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.crl X509v3 Authority Key Identifier: keyid:6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer sbgp-ipAddrBlock: critical IPv4: 52.129.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:5e:84:1f:78:9a:8d:33:c6:69:1a:7d:14:78:bc:7e:cc:75: c8:ff:a2:23:e2:5d:76:9e:08:31:bc:eb:9d:c2:09:9b:ab:1f: 3f:40:8f:a6:51:f1:02:9e:87:15:a2:24:7b:ef:13:29:df:97: 46:43:aa:4c:0c:a8:02:78:a2:58:c5:45:4a:ff:72:20:db:ff: 6c:bf:af:02:c5:95:9b:69:6e:b4:61:31:d2:af:65:ae:2d:65: 5c:0b:ad:c5:12:25:45:86:65:e6:65:e5:21:89:7f:56:37:fc: f5:70:bc:b6:eb:32:06:8f:a1:0f:c1:12:d8:43:f5:fa:50:3e: b1:e6:19:6e:f3:38:b1:6c:94:3e:d2:1b:c1:9b:b5:49:00:05: a0:66:3d:7c:e9:11:ff:1e:52:d6:9b:50:eb:a4:cc:f7:e2:8d: 9b:22:12:81:60:2e:08:7b:be:23:49:b2:e7:26:b1:e9:45:29: 8a:8d:53:d2:15:4c:89:5c:ff:92:db:40:43:8b:e0:f1:b7:0f: 4e:5e:b3:90:e2:ec:cb:26:d8:1d:cd:52:5e:34:ba:69:dd:27: ad:32:e9:15:da:a3:86:3f:8b:cb:82:40:d8:fd:23:12:f1:0d: 6b:43:bf:0f:14:56:fe:1f:1c:fe:e9:08:06:9e:12:02:d0:36: 86:5c:70:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW3s3lZNkwVO2slsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMyOTBjODctYzQzYy00NmExLTg2MzMtOWM0NjI0ZGMx YWFmMB4XDTI0MDQzMDEzMDAzNFoXDTI0MDcyOTEzMDAzNFowLzEtMCsGA1UEAxMk OTY4MmMzMDgtMWZjZC00N2QzLThlOWUtYTAyMDNhMjBiMjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP4iRei1Bd0QThyxCcp8zrRxNZ2juV/H96wY aLSezdLldiUysfFQSmr0auqOBFs6O2og6Rv/ctD+hWMT9atTNavJoXzSsOsF+VkH kgo9Dxo5Gs1RgcsK8O0kYpxUh21dHhunn75X6JIQbk0B92Q/etvnh/7D2LLMuxPg Wy0vHljaaHKGSDHlKA1h2gXjLsCK9kh4qEQ+vij7DsgRZoipgPvktu0IZcgouoQ2 xSMoqhbakUtmHN7xkW92e04dhnzeag9LL2hLGVPaRWem/zOWbLN6AG+cuO4qxxaY avkQ6vZ59FxdPvJdWrGgcFLCuwvNQbfPrWY9+tby7luFoQ66GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwdLINcS71/IIIhRtydfiQwzrMvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MzI5 MGM4Ny1jNDNjLTQ2YTEtODYzMy05YzQ2MjRkYzFhYWYvM2U1NDUzZWItOWMzMS0z ODQwLThhYWYtMTQwMzI5ZGI0ODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDMyOTBjODctYzQzYy00NmExLTg2 MzMtOWM0NjI0ZGMxYWFmLzQzMjkwYzg3LWM0M2MtNDZhMS04NjMzLTljNDYyNGRj MWFhZi5jcmwwHwYDVR0jBBgwFoAUbvy9Bm+Xe+iCEcYgjsPnOkES13gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80MzI5MGM4Ny1jNDNjLTQ2YTEtODYzMy05YzQ2 MjRkYzFhYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDNIFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlehB94mo0zxmkafRR4vH7Mdcj/oiPiXXaeCDG8653CCZurHz9Aj6ZR 8QKehxWiJHvvEynfl0ZDqkwMqAJ4oljFRUr/ciDb/2y/rwLFlZtpbrRhMdKvZa4t ZVwLrcUSJUWGZeZl5SGJf1Y3/PVwvLbrMgaPoQ/BEthD9fpQPrHmGW7zOLFslD7S G8GbtUkABaBmPXzpEf8eUtabUOukzPfijZsiEoFgLgh7viNJsucmselFKYqNU9IV TIlc/5LbQEOL4PG3D05es5Di7Msm2B3NUl40umndJ60y6RXao4Y/i8uCQNj9IxLx DWtDvw8UVv4fHP7pCAaeEgLQNoZccHs= -----END CERTIFICATE-----Generated at Wed May 22 16:23:21 2024 by rpki-client on console-ams.rpki-client.org