$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa File: ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa (raw, json) Hash identifier: CYpv4KhezJ3p/u7/txBe+wuhQPRFPa7pBH6H5hKMCA8= Subject key identifier: 8E:1E:8D:5A:0B:33:25:98:54:A7:2F:43:13:84:F8:78:6D:4E:BD:94 Certificate issuer: /CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46 Certificate serial: 010D0C9F43285845A6F36D5C1245E86ED4146E80 Authority key identifier: C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa Signing time: Wed 24 Apr 2024 13:00:33 +0000 ROA not before: Wed 24 Apr 2024 13:00:33 +0000 ROA not after: Tue 23 Jul 2024 13:00:33 +0000 asID: 397287 IP address blocks: 72.21.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a6:f3:6d:5c:12:45:e8:6e:d4:14:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46 Validity Not Before: Apr 24 13:00:33 2024 GMT Not After : Jul 23 13:00:33 2024 GMT Subject: CN=90378ffa-e0ec-4422-b91c-316e1e62b68a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:43:20:e1:ca:e8:1b:54:82:b1:07:d4:1e:c6: c9:cd:cb:28:42:08:2b:6f:56:86:d4:1d:3e:66:c6: 3a:ef:dd:10:48:5d:31:03:f1:50:ae:a9:b4:98:8f: 0f:d7:1e:2b:db:6b:2e:94:6c:91:69:d8:4e:5f:db: 11:4b:28:6c:b0:2a:bc:96:49:a7:61:bd:3a:8d:73: 8a:c2:86:c8:dc:f1:a5:6b:d2:1a:1a:e9:2d:7b:2a: 5b:07:a2:52:6a:08:67:c2:f1:2f:04:fb:16:e9:8a: d0:f2:6f:40:d7:3d:34:b6:4b:f6:8c:22:31:fb:cd: aa:e6:e8:77:46:4d:e7:ec:32:50:49:75:a8:b5:0f: b1:25:40:2f:56:ad:22:81:13:ed:cb:48:34:19:1b: 28:ab:89:b8:f7:3a:0d:aa:3b:7c:8e:de:c6:f1:52: 98:a7:67:6b:54:ec:30:01:71:89:d6:4d:4d:0b:b2: 4a:ee:7a:c3:32:39:ef:04:45:43:6d:17:23:69:6c: 62:ff:6b:df:81:2e:1e:b5:4a:fc:be:58:58:c3:6f: 7c:4b:46:23:a0:71:19:8d:0b:25:dc:71:19:02:29: 0f:e3:5c:12:27:d5:f2:1b:74:90:c1:86:23:9b:c1: c3:0c:b7:85:4b:ec:79:a0:55:87:82:05:76:66:9b: 89:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1E:8D:5A:0B:33:25:98:54:A7:2F:43:13:84:F8:78:6D:4E:BD:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl X509v3 Authority Key Identifier: keyid:C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer sbgp-ipAddrBlock: critical IPv4: 72.21.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:00:67:dc:2f:3c:12:a6:08:b2:ac:a7:f9:8a:6d:41:d6:52: da:e9:ee:0a:32:00:40:dc:27:58:75:5c:8a:df:04:0d:ce:45: cd:8b:15:dd:41:46:db:5d:4b:be:d5:21:46:43:6d:01:79:ef: 87:6c:ae:93:6b:52:78:90:be:57:4e:5d:25:76:b1:67:51:18: cd:9d:c2:e9:a9:14:05:f2:87:e5:bb:43:79:27:6a:31:d0:fa: 0d:4a:67:ad:31:c5:6c:5b:92:af:59:ae:d2:06:0d:f1:fd:5f: 6a:ab:d8:40:58:ba:1e:65:96:d8:c3:7a:8c:18:8c:91:81:c4: 43:fc:b6:09:ce:d3:9e:f8:8c:55:43:fc:2d:26:a3:13:12:8b: cf:a6:1d:91:b6:fb:45:0a:fa:2f:92:8d:57:3d:5a:10:96:56: f0:ae:3d:c3:7a:d9:70:a9:b0:29:1d:e8:46:14:ab:db:15:48: 57:be:06:87:5f:62:fc:e4:f5:74:44:02:36:da:c2:0c:fd:6b: 7d:40:98:83:90:d9:14:d6:08:79:e9:52:ab:ea:78:e6:c0:f4: 64:91:e6:da:31:c9:8b:14:c7:2d:50:0c:98:5e:9f:e1:7f:13: 12:6f:73:9e:b3:50:71:2e:59:1a:38:87:e5:67:4d:21:1c:52: 4f:96:1a:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWm821cEkXobtQUboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJlM2FlYjUtYjk5Yy00N2MxLTk4NGYtN2Y2YjI2MjFk YTQ2MB4XDTI0MDQyNDEzMDAzM1oXDTI0MDcyMzEzMDAzM1owLzEtMCsGA1UEAxMk OTAzNzhmZmEtZTBlYy00NDIyLWI5MWMtMzE2ZTFlNjJiNjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0Mg4croG1SCsQfUHsbJzcsoQggrb1aG1B0+ ZsY6790QSF0xA/FQrqm0mI8P1x4r22sulGyRadhOX9sRSyhssCq8lkmnYb06jXOK wobI3PGla9IaGukteypbB6JSaghnwvEvBPsW6YrQ8m9A1z00tkv2jCIx+82q5uh3 Rk3n7DJQSXWotQ+xJUAvVq0igRPty0g0GRsoq4m49zoNqjt8jt7G8VKYp2drVOww AXGJ1k1NC7JK7nrDMjnvBEVDbRcjaWxi/2vfgS4etUr8vlhYw298S0YjoHEZjQsl 3HEZAikP41wSJ9XyG3SQwYYjm8HDDLeFS+x5oFWHggV2ZpuJ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4ejVoLMyWYVKcvQxOE+HhtTr2UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YmUz YWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZiMjYyMWRhNDYvY2E3YTVmZTktNjA4ZC0z OTcwLThhZTktYzExNmFlOTU1ZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGJlM2FlYjUtYjk5Yy00N2MxLTk4 NGYtN2Y2YjI2MjFkYTQ2LzRiZTNhZWI1LWI5OWMtNDdjMS05ODRmLTdmNmIyNjIx ZGE0Ni5jcmwwHwYDVR0jBBgwFoAUxYLDwNOfpTrvYzId3yex+dhaOgQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YmUzYWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZi MjYyMWRhNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4AZ9wvPBKmCLKsp/mKbUHWUtrp7goyAEDcJ1h1XIrfBA3ORc2LFd1B RttdS77VIUZDbQF574dsrpNrUniQvldOXSV2sWdRGM2dwumpFAXyh+W7Q3knajHQ +g1KZ60xxWxbkq9ZrtIGDfH9X2qr2EBYuh5lltjDeowYjJGBxEP8tgnO0574jFVD /C0moxMSi8+mHZG2+0UK+i+SjVc9WhCWVvCuPcN62XCpsCkd6EYUq9sVSFe+Bodf Yvzk9XREAjbawgz9a31AmIOQ2RTWCHnpUqvqeObA9GSR5toxyYsUxy1QDJhen+F/ ExJvc56zUHEuWRo4h+VnTSEcUk+WGmM= -----END CERTIFICATE-----Generated at Sat May 18 15:35:24 2024 by rpki-client on console-fra.rpki-client.org