$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4073fa8-2034-3197-bd92-48c040f85315.roa File: a4073fa8-2034-3197-bd92-48c040f85315.roa (raw, json) Hash identifier: KY+YUkQDPSmROz4mb2+/xOOLQWjhAZfCiwzSDbigXLQ= Subject key identifier: 4B:BF:73:DC:13:73:33:80:2B:7B:F4:FA:08:FA:5E:0E:6E:B1:F3:67 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285845B7B38F9F96A45A2450D97E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4073fa8-2034-3197-bd92-48c040f85315.roa Signing time: Tue 30 Apr 2024 13:00:34 +0000 ROA not before: Tue 30 Apr 2024 13:00:34 +0000 ROA not after: Mon 29 Jul 2024 13:00:34 +0000 asID: 0 IP address blocks: 72.13.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b7:b3:8f:9f:96:a4:5a:24:50:d9:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 13:00:34 2024 GMT Not After : Jul 29 13:00:34 2024 GMT Subject: CN=b8e9071e-0794-4912-a22f-8863b37f86c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:57:a9:90:86:90:07:a5:8b:07:c7:ab:34:82: 47:31:b1:21:86:bf:15:ca:90:67:2c:8b:53:88:82: 45:53:7c:f6:bf:ad:4c:38:47:ed:36:ef:6f:02:1e: f6:82:2a:70:59:a0:88:eb:fb:8f:f2:14:35:78:7a: 29:3c:60:52:92:f1:0f:65:14:54:ca:a4:8a:92:02: e9:68:0d:92:dc:e6:7e:c6:b1:77:94:5c:e2:68:53: 80:a8:57:71:52:1a:3c:d9:61:b9:a1:61:6d:7d:0a: 09:a1:93:b4:6e:9c:25:bb:34:e3:aa:d8:44:fe:e4: b2:02:65:4e:15:63:7a:6c:8e:c0:9a:b0:d1:83:89: 53:10:94:35:b1:58:e0:23:d5:aa:af:9a:91:68:9b: d1:f5:37:11:b7:12:3e:f6:2b:a7:21:23:44:45:fc: b2:0d:a2:b7:7b:6e:59:43:7a:7e:6b:6c:03:ec:4d: d8:7c:f1:33:32:a4:f3:d6:4e:83:33:5f:56:50:47: 09:9b:36:18:81:d0:a4:5e:73:12:cb:22:6b:7f:dc: 1e:58:92:85:90:65:f6:81:df:4d:50:f2:e9:dd:93: eb:83:a3:4f:97:f5:d6:6a:98:07:b6:54:81:f9:3b: e7:65:99:30:7e:9f:6c:9b:13:f4:4f:1f:16:d0:4c: 7f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BF:73:DC:13:73:33:80:2B:7B:F4:FA:08:FA:5E:0E:6E:B1:F3:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4073fa8-2034-3197-bd92-48c040f85315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 72.13.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:5e:59:d0:4d:46:fb:87:36:3d:1b:9d:c9:53:23:98:75:0a: 55:9f:c3:50:7d:48:cc:f7:3a:cf:8a:fe:e6:4b:db:16:7f:1b: 87:6d:d2:0e:55:79:92:dd:f1:e1:a3:65:af:51:e4:6e:f7:03: 30:aa:fd:49:32:a0:5e:d0:9d:b7:80:1a:c4:55:a8:2e:f1:79: 39:36:6b:8e:af:93:23:0b:96:78:ed:8c:94:91:7f:77:1c:a6: 77:ed:20:54:c0:18:b0:97:32:43:25:2f:ca:bd:ca:82:4a:3b: 28:b6:10:d8:eb:e1:67:65:ae:ba:8f:62:59:ab:fb:b7:d6:95: 8c:43:8b:3e:da:c8:2f:a1:ff:2d:58:1f:5b:18:e7:fc:bd:22: ec:d4:48:69:55:c0:65:59:7b:42:35:a8:e8:e2:62:cb:18:03: a3:98:59:f7:83:f4:ec:c7:34:41:17:7a:44:b5:a1:29:d0:1b: 52:c4:13:bf:3f:43:97:09:76:c4:09:78:7e:52:94:ea:a2:7b: 51:f7:88:a7:19:49:6f:a8:c1:f0:18:42:24:9e:72:85:f7:ee: a7:bc:d5:15:c8:e5:be:2c:81:ea:9e:29:ea:3f:d4:e8:49:27: dc:f6:34:f6:14:d2:f3:78:40:95:66:77:ae:63:0d:51:d8:9b: 3b:c5:3a:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW3s4+flqRaJFDZfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDQzMDEzMDAzNFoXDTI0MDcyOTEzMDAzNFowLzEtMCsGA1UEAxMk YjhlOTA3MWUtMDc5NC00OTEyLWEyMmYtODg2M2IzN2Y4NmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVepkIaQB6WLB8erNIJHMbEhhr8VypBnLItT iIJFU3z2v61MOEftNu9vAh72gipwWaCI6/uP8hQ1eHopPGBSkvEPZRRUyqSKkgLp aA2S3OZ+xrF3lFziaFOAqFdxUho82WG5oWFtfQoJoZO0bpwluzTjqthE/uSyAmVO FWN6bI7AmrDRg4lTEJQ1sVjgI9Wqr5qRaJvR9TcRtxI+9iunISNERfyyDaK3e25Z Q3p+a2wD7E3YfPEzMqTz1k6DM19WUEcJmzYYgdCkXnMSyyJrf9weWJKFkGX2gd9N UPLp3ZPrg6NPl/XWapgHtlSB+TvnZZkwfp9smxP0Tx8W0Ex/QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEu/c9wTczOAK3v0+gj6Xg5usfNnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTQwNzNmYTgtMjAzNC0z MTk3LWJkOTItNDhjMDQwZjg1MzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA09MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpeWdBNRvuHNj0bnclTI5h1ClWfw1B9SMz3Os+K/uZL2xZ/G4dt0g5V eZLd8eGjZa9R5G73AzCq/UkyoF7QnbeAGsRVqC7xeTk2a46vkyMLlnjtjJSRf3cc pnftIFTAGLCXMkMlL8q9yoJKOyi2ENjr4WdlrrqPYlmr+7fWlYxDiz7ayC+h/y1Y H1sY5/y9IuzUSGlVwGVZe0I1qOjiYssYA6OYWfeD9OzHNEEXekS1oSnQG1LEE78/ Q5cJdsQJeH5SlOqie1H3iKcZSW+owfAYQiSecoX37qe81RXI5b4sgeqeKeo/1OhJ J9z2NPYU0vN4QJVmd65jDVHYmzvFOqA= -----END CERTIFICATE-----Generated at Sat May 4 02:57:14 2024 by rpki-client on console-fra.rpki-client.org