$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/4df6fcae-809c-334c-948c-a1db49d80779.roa File: 4df6fcae-809c-334c-948c-a1db49d80779.roa (raw, json) Hash identifier: Ey745zk34U9be6FtKxFboFtz1V6iT6RYcB5Q0bfrU5Q= Subject key identifier: 2E:DF:8A:76:47:8C:87:15:E9:A5:A7:FE:2C:83:3A:A0:F9:A9:81:8C Certificate issuer: /CN=60af319e-0c74-40e2-b93c-daa51c45791e Certificate serial: 010D0C9F43285845DA98F4290FE69E5C59A8A6A0 Authority key identifier: 11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/4df6fcae-809c-334c-948c-a1db49d80779.roa Signing time: Mon 13 May 2024 01:00:25 +0000 ROA not before: Mon 13 May 2024 01:00:25 +0000 ROA not after: Sun 11 Aug 2024 01:00:25 +0000 asID: 62952 IP address blocks: 172.82.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:da:98:f4:29:0f:e6:9e:5c:59:a8:a6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60af319e-0c74-40e2-b93c-daa51c45791e Validity Not Before: May 13 01:00:25 2024 GMT Not After : Aug 11 01:00:25 2024 GMT Subject: CN=b30af233-6386-4588-9a65-8ff9df1febea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:28:b5:dc:b4:46:52:a4:6b:8c:18:d8:4d:95: 32:5b:a3:9e:0b:e5:c4:25:48:4a:de:d0:ed:a3:f6: 7c:bd:59:3b:41:95:c8:4e:76:cc:34:a9:9c:e9:88: 84:18:fb:ce:fd:11:90:00:44:20:46:1f:17:c7:65: 38:c1:45:0a:a9:3d:9d:5d:2a:2e:6f:91:8b:c0:45: ee:ac:29:be:7f:ee:22:ff:05:37:2e:07:55:b4:39: 8b:7d:6c:b2:71:6e:6f:96:7b:cb:ec:4b:b4:0b:53: f1:ad:b7:10:ba:73:a7:5c:01:d3:4b:f8:e1:9c:98: 69:1b:a9:ca:92:b3:f9:ee:14:81:d5:d4:1b:d6:15: 3a:6b:5a:bf:33:83:8c:ac:33:e9:0d:c3:78:4c:fd: 22:7f:06:42:5d:33:00:c2:57:10:be:da:f8:b3:56: 93:d4:02:f3:a7:53:eb:c4:fe:92:35:4b:e5:3e:ad: 11:4c:e8:9d:5c:97:3a:cb:3d:47:e8:76:fe:90:df: dd:b5:59:1d:2f:07:d7:ba:6a:60:74:6c:fe:62:3f: 3c:70:f8:72:bc:67:4a:fe:05:ad:9c:83:61:c7:b8: bb:92:88:af:c2:b7:0d:d8:b2:05:c3:86:ec:8e:f7: 3e:69:8e:1a:a0:d4:39:a8:85:61:fd:09:18:b1:fd: b9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DF:8A:76:47:8C:87:15:E9:A5:A7:FE:2C:83:3A:A0:F9:A9:81:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/4df6fcae-809c-334c-948c-a1db49d80779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl X509v3 Authority Key Identifier: keyid:11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer sbgp-ipAddrBlock: critical IPv4: 172.82.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:38:b6:ee:a0:c3:47:c6:ac:1a:e9:9f:a4:bd:39:f1:7d:17: 5a:1f:1b:a9:4d:3e:87:27:38:23:7a:8f:89:9b:2e:46:d1:92: a6:90:e5:dc:58:e5:85:8f:7b:8d:6c:92:f3:f4:60:f5:a1:ab: 39:c8:dd:22:e8:bb:15:18:c0:67:00:a7:00:76:f6:5a:b3:dd: d1:d1:cd:0a:9f:2c:a3:41:93:0a:58:33:0b:76:40:b2:1a:1a: d2:2e:c8:92:79:66:4f:f2:7e:05:ec:7f:24:ad:25:81:63:01: f8:56:ef:7f:a2:4a:0e:d2:dd:57:5c:47:c5:d3:c0:d1:d8:a0: fe:63:60:54:75:3d:ea:40:66:3a:da:8d:17:89:33:63:e2:93: a7:61:e7:2a:63:e7:28:44:95:02:a1:b0:8b:66:80:1d:00:71: b5:aa:30:02:ef:cd:24:d2:8c:33:78:51:af:0b:f6:1b:95:2d: b9:98:27:10:a4:46:f2:2e:db:b9:63:55:1c:70:78:12:5c:85: 0d:bc:cc:ac:67:9e:86:a1:aa:cf:a6:ba:84:7a:13:e9:3c:94: 86:b4:80:53:95:68:c0:da:74:b6:6d:57:a3:80:5e:16:4f:ea: aa:19:5b:29:f8:a9:65:fb:0e:f6:37:da:ad:f1:1c:dd:9e:53: 83:59:0e:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXamPQpD+aeXFmopqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBhZjMxOWUtMGM3NC00MGUyLWI5M2MtZGFhNTFjNDU3 OTFlMB4XDTI0MDUxMzAxMDAyNVoXDTI0MDgxMTAxMDAyNVowLzEtMCsGA1UEAxMk YjMwYWYyMzMtNjM4Ni00NTg4LTlhNjUtOGZmOWRmMWZlYmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSi13LRGUqRrjBjYTZUyW6OeC+XEJUhK3tDt o/Z8vVk7QZXITnbMNKmc6YiEGPvO/RGQAEQgRh8Xx2U4wUUKqT2dXSoub5GLwEXu rCm+f+4i/wU3LgdVtDmLfWyycW5vlnvL7Eu0C1PxrbcQunOnXAHTS/jhnJhpG6nK krP57hSB1dQb1hU6a1q/M4OMrDPpDcN4TP0ifwZCXTMAwlcQvtr4s1aT1ALzp1Pr xP6SNUvlPq0RTOidXJc6yz1H6Hb+kN/dtVkdLwfXumpgdGz+Yj88cPhyvGdK/gWt nINhx7i7koivwrcN2LIFw4bsjvc+aY4aoNQ5qIVh/QkYsf25/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7finZHjIcV6aWn/iyDOqD5qYGMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MGFm MzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1MWM0NTc5MWUvNGRmNmZjYWUtODA5Yy0z MzRjLTk0OGMtYTFkYjQ5ZDgwNzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjBhZjMxOWUtMGM3NC00MGUyLWI5 M2MtZGFhNTFjNDU3OTFlLzYwYWYzMTllLTBjNzQtNDBlMi1iOTNjLWRhYTUxYzQ1 NzkxZS5jcmwwHwYDVR0jBBgwFoAUEXr3dymdZJzOnFZKgWxC2clfs0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82MGFmMzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1 MWM0NTc5MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFIkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE44tu6gw0fGrBrpn6S9OfF9F1ofG6lNPocnOCN6j4mbLkbRkqaQ5dxY 5YWPe41skvP0YPWhqznI3SLouxUYwGcApwB29lqz3dHRzQqfLKNBkwpYMwt2QLIa GtIuyJJ5Zk/yfgXsfyStJYFjAfhW73+iSg7S3VdcR8XTwNHYoP5jYFR1PepAZjra jReJM2Pik6dh5ypj5yhElQKhsItmgB0AcbWqMALvzSTSjDN4Ua8L9huVLbmYJxCk RvIu27ljVRxweBJchQ28zKxnnoahqs+muoR6E+k8lIa0gFOVaMDadLZtV6OAXhZP 6qoZWyn4qWX7DvY32q3xHN2eU4NZDhI= -----END CERTIFICATE-----Generated at Sun Jun 2 21:41:00 2024 by rpki-client on console-fra.rpki-client.org