$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c43d2fe-b3c6-3e47-b84b-85b662992e41.roa File: 1c43d2fe-b3c6-3e47-b84b-85b662992e41.roa (raw, json) Hash identifier: cvAAKUatxYf/ckzdVszmz84s9X+UQIZB2fyEbC3XV08= Subject key identifier: 92:95:DB:AB:94:02:8E:68:A5:96:FF:AB:F2:4C:2E:61:B7:15:98:23 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285846004C03A3937B3EF2678BCB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c43d2fe-b3c6-3e47-b84b-85b662992e41.roa Signing time: Sun 26 May 2024 13:00:34 +0000 ROA not before: Sun 26 May 2024 13:00:34 +0000 ROA not after: Sat 24 Aug 2024 13:00:34 +0000 asID: 13367 IP address blocks: 71.195.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:00:4c:03:a3:93:7b:3e:f2:67:8b:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 26 13:00:34 2024 GMT Not After : Aug 24 13:00:34 2024 GMT Subject: CN=3fa83d86-af63-4bd8-95c8-4d81834ece3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5d:c9:1a:e0:a4:06:79:cb:cf:ee:ec:45:14: d2:33:26:ee:67:99:2b:fa:67:d9:f1:52:a7:46:57: ae:1c:0b:cd:85:52:d3:43:49:42:90:ab:91:75:07: e4:13:51:8b:05:0f:0a:b8:19:67:48:06:6b:b8:b0: bf:eb:a8:a2:71:25:4f:ff:7d:73:9f:4d:6e:af:37: 1d:41:75:41:b1:23:27:7e:e5:71:09:6b:05:f9:6e: 67:34:dc:4f:d4:2e:ca:87:59:bc:9c:8c:95:27:f0: 24:bc:59:2c:a1:09:ae:b2:b7:5e:0b:00:56:bc:d6: c6:3b:83:c0:e9:99:d0:33:e5:ae:9f:68:a3:d3:56: 34:78:d7:9e:5f:cd:21:61:e5:fa:c1:4b:13:85:fe: c7:ab:bc:10:e9:1d:d8:01:3b:92:06:57:7d:77:0e: 47:75:44:a1:d7:bb:9a:72:b6:58:a0:b5:7c:f1:dc: af:bf:9b:fe:6b:ab:f8:fc:e1:ab:99:17:1f:49:5c: c1:cf:48:f8:37:d7:7d:c3:83:3d:a6:41:ca:a8:15: e2:5d:9a:40:dd:a6:87:e4:ae:f9:16:54:4a:f6:a3: 73:9a:1c:db:92:75:0b:3a:1c:38:4b:12:1b:96:8a: 29:f4:e9:0f:97:84:53:75:d7:0c:8c:f8:36:09:01: 1b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:95:DB:AB:94:02:8E:68:A5:96:FF:AB:F2:4C:2E:61:B7:15:98:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c43d2fe-b3c6-3e47-b84b-85b662992e41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.195.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:58:36:90:f8:30:7a:a5:1e:2f:11:fe:a4:91:b2:c3:3d:33: f6:01:f6:36:53:6c:d4:72:31:97:0f:e6:23:b9:7f:56:d4:ea: ee:b1:06:9c:10:09:a7:75:d6:97:4d:cf:38:32:96:a8:7d:89: a2:3d:76:d5:56:87:dc:06:74:75:b8:f6:64:ba:81:8c:ce:3f: bd:64:2b:33:38:85:02:76:d2:96:23:40:00:43:47:d5:92:ee: d1:ae:24:16:71:c8:50:53:57:de:05:64:88:8c:3c:ad:44:ca: 62:8c:8d:c6:2a:47:f0:fc:76:c7:9f:5c:76:fc:9f:c8:e4:36: a7:d8:b9:e7:09:4e:e5:16:48:ca:6b:2b:41:9b:7c:48:19:e2: 85:8d:80:f8:d6:6b:3e:78:be:a9:8e:66:81:41:b2:d0:f2:64: 47:71:23:52:04:34:15:e7:23:22:e1:46:bc:d1:f2:1b:9c:7d: 34:a2:4f:e4:a3:d9:e6:f8:6f:e6:a8:87:bc:e1:fb:f8:16:ca: 71:38:4f:16:83:13:56:05:52:f4:02:7d:27:bd:80:95:f8:2a: f4:bf:81:22:ae:9d:e7:65:89:06:80:51:a7:54:5a:cf:87:cf: ba:09:4a:9a:5c:cd:17:80:55:4c:8f:06:90:34:7d:a4:f7:5a: fc:19:6b:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYATAOjk3s+8meLy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk M2ZhODNkODYtYWY2My00YmQ4LTk1YzgtNGQ4MTgzNGVjZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF3JGuCkBnnLz+7sRRTSMybuZ5kr+mfZ8VKn RleuHAvNhVLTQ0lCkKuRdQfkE1GLBQ8KuBlnSAZruLC/66iicSVP/31zn01urzcd QXVBsSMnfuVxCWsF+W5nNNxP1C7Kh1m8nIyVJ/AkvFksoQmusrdeCwBWvNbGO4PA 6ZnQM+Wun2ij01Y0eNeeX80hYeX6wUsThf7Hq7wQ6R3YATuSBld9dw5HdUSh17ua crZYoLV88dyvv5v+a6v4/OGrmRcfSVzBz0j4N9d9w4M9pkHKqBXiXZpA3aaH5K75 FlRK9qNzmhzbknULOhw4SxIbloop9OkPl4RTddcMjPg2CQEbRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKV26uUAo5opZb/q/JMLmG3FZgjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWM0M2QyZmUtYjNjNi0z ZTQ3LWI4NGItODViNjYyOTkyZTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8MEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJYNpD4MHqlHi8R/qSRssM9M/YB9jZTbNRyMZcP5iO5f1bU6u6xBpwQ Cad11pdNzzgylqh9iaI9dtVWh9wGdHW49mS6gYzOP71kKzM4hQJ20pYjQABDR9WS 7tGuJBZxyFBTV94FZIiMPK1EymKMjcYqR/D8dsefXHb8n8jkNqfYuecJTuUWSMpr K0GbfEgZ4oWNgPjWaz54vqmOZoFBstDyZEdxI1IENBXnIyLhRrzR8hucfTSiT+Sj 2eb4b+aoh7zh+/gWynE4TxaDE1YFUvQCfSe9gJX4KvS/gSKunedliQaAUadUWs+H z7oJSppczReAVUyPBpA0faT3WvwZa7g= -----END CERTIFICATE-----Generated at Sat Jun 1 11:52:47 2024 by rpki-client on console-ams.rpki-client.org