$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/9b36560a-9f38-3318-a869-aa0d360ca5c4.roa File: 9b36560a-9f38-3318-a869-aa0d360ca5c4.roa (raw, json) Hash identifier: mOyFZwUM9U5VPqXOF/cpRnR3bhEeogwQ9H2Dj3i9iXs= Subject key identifier: 93:4E:55:D2:1E:6E:10:63:53:DF:6D:FD:84:B5:57:1D:F3:AC:3B:42 Certificate issuer: /CN=42b6e093-f636-4e25-936b-6fc6232f50c5 Certificate serial: 010D0C9F43285845C5A8F2322BB95F8ECEEF2D40 Authority key identifier: DF:25:1D:13:0F:4C:E6:2B:9C:69:A3:4E:C0:E6:AA:14:9E:58:1E:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/9b36560a-9f38-3318-a869-aa0d360ca5c4.roa Signing time: Sun 05 May 2024 13:00:34 +0000 ROA not before: Sun 05 May 2024 13:00:34 +0000 ROA not after: Sat 03 Aug 2024 13:00:34 +0000 asID: 955 IP address blocks: 66.118.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c5:a8:f2:32:2b:b9:5f:8e:ce:ef:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42b6e093-f636-4e25-936b-6fc6232f50c5 Validity Not Before: May 5 13:00:34 2024 GMT Not After : Aug 3 13:00:34 2024 GMT Subject: CN=2cef0dc7-e530-4010-b9b2-76a3cca0a9b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3e:be:6f:f0:7a:19:77:fe:0c:67:45:08:e6: 14:a8:3b:b3:77:15:fa:3e:70:0e:14:1c:88:0a:33: 42:f0:35:2d:0e:17:fd:f9:c3:ff:65:97:dd:6c:64: 40:f9:af:60:6b:7c:53:58:0a:a4:94:69:4e:df:50: bf:3f:8f:70:1d:d6:b9:dc:d5:64:98:bd:64:a4:34: 4a:7c:d8:4a:7b:e4:34:8b:6c:11:49:f8:1c:5a:ad: 08:28:c4:d2:3a:b5:d1:ad:cd:f8:73:9d:d2:5b:f3: 22:64:73:8c:04:bc:85:f7:75:5b:34:0b:16:f2:68: c9:d2:a5:ab:33:24:8c:e6:52:b1:25:d6:1f:44:3e: 55:97:87:4c:45:2f:34:bb:dd:d4:de:5e:ff:d7:25: 7c:a3:e3:4c:04:58:93:5a:f8:fd:1a:69:6e:84:cc: b9:24:00:23:09:88:b7:bb:75:8c:c0:e5:67:21:93: 8d:48:b8:82:09:f5:fd:ab:4a:3f:a6:b1:9c:8b:28: ba:8b:aa:36:58:a4:69:7f:b1:dd:94:23:63:dd:2c: d0:28:a6:64:97:31:84:52:41:5a:7a:60:5b:96:c8: c5:e1:e8:9a:dc:47:3f:0d:ba:e9:89:4e:1a:c0:03: cc:41:17:13:6e:6e:7e:d9:1e:be:a5:2b:36:f6:86: 76:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:4E:55:D2:1E:6E:10:63:53:DF:6D:FD:84:B5:57:1D:F3:AC:3B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/9b36560a-9f38-3318-a869-aa0d360ca5c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.crl X509v3 Authority Key Identifier: keyid:DF:25:1D:13:0F:4C:E6:2B:9C:69:A3:4E:C0:E6:AA:14:9E:58:1E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer sbgp-ipAddrBlock: critical IPv4: 66.118.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:4c:8e:d3:bf:08:08:32:e1:38:3a:17:96:48:ab:ef:10:e6: af:e8:c2:b4:19:e0:51:ad:4b:2c:27:be:39:22:70:7c:ad:7a: f2:89:20:41:7a:eb:fb:30:86:62:f5:57:17:1f:22:5a:86:6d: f8:14:d9:2e:7f:84:d7:fd:c7:d1:23:f6:3e:75:f4:15:e4:5a: e8:94:c1:53:b4:29:60:a4:2b:04:a8:ed:29:66:bb:31:ab:31: 47:da:ec:c0:1f:af:6b:77:1e:7f:5f:53:3f:73:ba:00:66:40: ff:fe:30:39:f7:1a:9a:72:68:d9:19:4f:77:68:23:13:2c:6a: 0e:97:d1:a8:b8:08:27:9a:c0:0f:39:af:a8:22:76:57:09:92: 65:e6:d5:ac:c8:2c:2a:30:74:3f:8d:25:2d:52:79:75:16:09: a5:3b:32:b0:61:36:5c:05:12:e8:b5:35:d1:1c:f6:c6:f4:b2: 06:6a:a7:f8:75:03:45:02:0f:d2:3b:93:b3:fc:bf:56:ed:2a: fe:d9:fc:d0:6c:6f:b8:64:03:9e:1b:8c:2d:21:8f:ba:f0:14: eb:bf:b1:d3:9f:61:5e:c4:71:a3:56:08:ab:44:8f:35:03:78: 74:63:bd:14:94:3e:99:d5:29:07:0a:93:17:80:31:23:d8:31: 97:fd:81:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXFqPIyK7lfjs7vLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJiNmUwOTMtZjYzNi00ZTI1LTkzNmItNmZjNjIzMmY1 MGM1MB4XDTI0MDUwNTEzMDAzNFoXDTI0MDgwMzEzMDAzNFowLzEtMCsGA1UEAxMk MmNlZjBkYzctZTUzMC00MDEwLWI5YjItNzZhM2NjYTBhOWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD6+b/B6GXf+DGdFCOYUqDuzdxX6PnAOFByI CjNC8DUtDhf9+cP/ZZfdbGRA+a9ga3xTWAqklGlO31C/P49wHda53NVkmL1kpDRK fNhKe+Q0i2wRSfgcWq0IKMTSOrXRrc34c53SW/MiZHOMBLyF93VbNAsW8mjJ0qWr MySM5lKxJdYfRD5Vl4dMRS80u93U3l7/1yV8o+NMBFiTWvj9GmluhMy5JAAjCYi3 u3WMwOVnIZONSLiCCfX9q0o/prGciyi6i6o2WKRpf7HdlCNj3SzQKKZklzGEUkFa emBblsjF4eia3Ec/DbrpiU4awAPMQRcTbm5+2R6+pSs29oZ2MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNOVdIebhBjU99t/YS1Vx3zrDtCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MmI2 ZTA5My1mNjM2LTRlMjUtOTM2Yi02ZmM2MjMyZjUwYzUvOWIzNjU2MGEtOWYzOC0z MzE4LWE4NjktYWEwZDM2MGNhNWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDJiNmUwOTMtZjYzNi00ZTI1LTkz NmItNmZjNjIzMmY1MGM1LzQyYjZlMDkzLWY2MzYtNGUyNS05MzZiLTZmYzYyMzJm NTBjNS5jcmwwHwYDVR0jBBgwFoAU3yUdEw9M5iucaaNOwOaqFJ5YHjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MmI2ZTA5My1mNjM2LTRlMjUtOTM2Yi02ZmM2 MjMyZjUwYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQnbkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABMjtO/CAgy4Tg6F5ZIq+8Q5q/owrQZ4FGtSywnvjkicHytevKJIEF6 6/swhmL1VxcfIlqGbfgU2S5/hNf9x9Ej9j519BXkWuiUwVO0KWCkKwSo7SlmuzGr MUfa7MAfr2t3Hn9fUz9zugBmQP/+MDn3GppyaNkZT3doIxMsag6X0ai4CCeawA85 r6gidlcJkmXm1azILCowdD+NJS1SeXUWCaU7MrBhNlwFEui1NdEc9sb0sgZqp/h1 A0UCD9I7k7P8v1btKv7Z/NBsb7hkA54bjC0hj7rwFOu/sdOfYV7EcaNWCKtEjzUD eHRjvRSUPpnVKQcKkxeAMSPYMZf9gTE= -----END CERTIFICATE-----Generated at Sat May 18 13:39:51 2024 by rpki-client on console-ams.rpki-client.org