$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/ca7c52eb-4524-32f1-a243-35673890d6b4.roa File: ca7c52eb-4524-32f1-a243-35673890d6b4.roa (raw, json) Hash identifier: Gu9GNZ02CBXQxdlLgNP2L50vFqY5LB6ADo1T+E/Wmwk= Subject key identifier: 95:40:D4:CE:ED:99:35:47:99:F9:2D:66:8A:69:4E:A9:BA:DC:6B:39 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F43285845BD48DB0B3DA4A655538C4FC0 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/ca7c52eb-4524-32f1-a243-35673890d6b4.roa Signing time: Thu 02 May 2024 13:00:34 +0000 ROA not before: Thu 02 May 2024 13:00:34 +0000 ROA not after: Wed 31 Jul 2024 13:00:34 +0000 asID: 26967 IP address blocks: 69.72.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:bd:48:db:0b:3d:a4:a6:55:53:8c:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: May 2 13:00:34 2024 GMT Not After : Jul 31 13:00:34 2024 GMT Subject: CN=24d59097-552d-4d21-b535-694f937b7ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:86:9b:d7:3a:ae:85:d2:df:83:ea:bc:9c:d4: f5:4c:38:ef:22:b6:9d:04:8a:12:d3:68:b3:70:ae: 4e:02:69:d2:0a:12:4a:74:48:df:27:d6:0f:d4:4d: bc:71:8c:88:4e:fc:1b:bf:0a:b2:20:bc:2e:32:c5: 2f:07:e1:8a:b9:e8:e5:49:c6:38:88:28:ac:20:4d: 2e:e7:1f:0a:b8:0b:00:c4:51:27:fa:5f:88:6b:a7: 86:b0:f7:38:a8:3b:f6:5c:aa:22:e5:0c:bd:03:68: 62:0a:c3:82:b3:db:4a:81:6e:1f:70:5d:ab:33:d9: 37:25:ef:fb:b2:a2:f5:9e:6e:7c:30:3c:c0:7a:9a: 7e:88:f9:77:c9:75:02:b1:83:3d:c8:b4:43:0e:cf: ff:48:81:94:78:51:a7:c9:52:f0:31:8a:f8:b5:23: 17:35:82:39:dc:47:19:74:56:e3:2e:4d:e5:11:dd: f7:5d:d6:fe:0f:4e:ab:87:a0:a2:b5:30:8a:5f:c6: ac:a5:93:9a:19:ae:03:36:1e:62:ea:11:d9:7f:ce: 95:80:80:22:df:58:80:37:55:b9:eb:d2:68:79:d6: 6c:8f:68:f3:96:a7:e2:af:cc:6a:75:5f:84:6c:46: c0:97:7e:c9:f4:06:5a:33:ca:fa:54:97:d3:8d:2c: 57:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:40:D4:CE:ED:99:35:47:99:F9:2D:66:8A:69:4E:A9:BA:DC:6B:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/ca7c52eb-4524-32f1-a243-35673890d6b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 69.72.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:0c:09:5c:0e:1f:db:68:8b:42:45:ed:9d:e1:2e:10:05:6c: ee:ff:42:b9:fa:ac:0e:6a:3a:a1:8f:29:64:48:e0:3f:84:dd: a9:72:d3:e4:88:57:25:20:90:bf:08:af:7c:46:76:e4:4d:2f: 3e:16:36:9c:ab:78:33:66:b7:98:be:f5:70:49:b2:76:a5:03: 68:b1:48:a3:ff:b3:e7:af:f2:12:74:f5:60:b3:b1:ab:84:32: b3:a3:3e:b7:38:b3:aa:65:16:34:60:71:cf:cc:c5:c2:5a:8d: 77:f1:88:72:43:f3:c1:4b:7b:d4:dc:21:57:67:6a:23:05:49: 6e:d6:fe:0b:19:42:a2:b4:1a:e7:01:80:e5:0d:16:ed:7b:8b: c0:a5:59:d6:c0:3d:54:bc:0c:a5:86:aa:3f:55:ee:34:93:1b: 3e:01:c0:ad:b8:a1:61:1c:6e:a8:53:66:6e:fa:1e:c2:9e:e1: ca:68:a2:a8:f7:1f:4c:04:a0:ba:07:60:5b:10:1e:a2:63:7f: fe:95:f2:77:a4:1a:71:bf:b8:4d:59:ed:da:0c:24:63:1b:93: db:4c:a0:bb:7c:4c:04:6b:36:e4:c3:72:18:5b:f2:10:1a:9b: f5:b9:dc:de:2a:55:e3:38:a7:57:4a:fc:fe:1a:aa:d6:0c:e8: 26:68:76:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW9SNsLPaSmVVOMT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI0MDUwMjEzMDAzNFoXDTI0MDczMTEzMDAzNFowLzEtMCsGA1UEAxMk MjRkNTkwOTctNTUyZC00ZDIxLWI1MzUtNjk0ZjkzN2I3ZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYab1zquhdLfg+q8nNT1TDjvIradBIoS02iz cK5OAmnSChJKdEjfJ9YP1E28cYyITvwbvwqyILwuMsUvB+GKuejlScY4iCisIE0u 5x8KuAsAxFEn+l+Ia6eGsPc4qDv2XKoi5Qy9A2hiCsOCs9tKgW4fcF2rM9k3Je/7 sqL1nm58MDzAepp+iPl3yXUCsYM9yLRDDs//SIGUeFGnyVLwMYr4tSMXNYI53EcZ dFbjLk3lEd33Xdb+D06rh6CitTCKX8aspZOaGa4DNh5i6hHZf86VgIAi31iAN1W5 69JoedZsj2jzlqfir8xqdV+EbEbAl37J9AZaM8r6VJfTjSxXkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVA1M7tmTVHmfktZoppTqm63Gs5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvY2E3YzUyZWItNDUyNC0z MmYxLWEyNDMtMzU2NzM4OTBkNmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRUhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUMCVwOH9toi0JF7Z3hLhAFbO7/Qrn6rA5qOqGPKWRI4D+E3aly0+SI VyUgkL8Ir3xGduRNLz4WNpyreDNmt5i+9XBJsnalA2ixSKP/s+ev8hJ09WCzsauE MrOjPrc4s6plFjRgcc/MxcJajXfxiHJD88FLe9TcIVdnaiMFSW7W/gsZQqK0GucB gOUNFu17i8ClWdbAPVS8DKWGqj9V7jSTGz4BwK24oWEcbqhTZm76HsKe4cpooqj3 H0wEoLoHYFsQHqJjf/6V8nekGnG/uE1Z7doMJGMbk9tMoLt8TARrNuTDchhb8hAa m/W53N4qVeM4p1dK/P4aqtYM6CZodoA= -----END CERTIFICATE-----Generated at Sat May 18 13:40:17 2024 by rpki-client on console-ams.rpki-client.org