$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa File: dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa (raw, json) Hash identifier: m3Jm04S5ZWhCaUAEthhNDGlPk19AqMHh6s8b9wcI09U= Subject key identifier: 30:CB:A8:23:2A:55:EF:0A:91:91:13:91:FA:6B:29:B0:9E:DF:A7:44 Certificate issuer: /CN=c22717c6-604d-4453-a20f-3430af557f6e Certificate serial: 010D0C9F43285845D476DC7531EB90EBFDEEB280 Authority key identifier: EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa Signing time: Fri 10 May 2024 20:16:56 +0000 ROA not before: Fri 10 May 2024 20:16:56 +0000 ROA not after: Thu 08 Aug 2024 20:16:56 +0000 asID: 11550 IP address blocks: 72.42.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Jun 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d4:76:dc:75:31:eb:90:eb:fd:ee:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c22717c6-604d-4453-a20f-3430af557f6e Validity Not Before: May 10 20:16:56 2024 GMT Not After : Aug 8 20:16:56 2024 GMT Subject: CN=c486c171-81bb-45fa-8106-957b6478659e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:bc:26:eb:b5:59:75:d7:c7:49:17:85:56:89: 07:1d:b6:b5:b7:a3:a0:93:41:a3:3d:66:ed:c0:fd: 6f:7b:c6:79:8b:ce:e5:6a:b7:1f:1e:36:41:e3:47: 63:fd:2b:1d:d2:b3:23:a0:5f:4f:c4:19:e5:76:32: 96:69:d7:c9:b4:24:ce:7e:06:b7:16:9b:a7:82:bd: 00:b2:51:d2:38:b0:cc:70:81:13:81:60:9a:a4:f5: 1d:e4:df:4d:6c:b0:f0:d6:51:c2:06:40:e6:03:29: 2a:09:c9:a7:eb:0e:11:9f:f3:19:9a:0b:29:85:26: 8e:2f:ad:53:c1:3a:6f:af:6b:08:fe:39:ea:9c:a2: 59:78:9c:bd:e0:cd:9c:7b:ac:c6:b0:64:40:af:20: 33:49:d5:3e:43:90:08:2d:d6:ca:ac:94:2c:a7:dc: e0:d5:bc:79:15:0a:02:36:68:b6:9e:3e:70:5c:ca: db:b0:65:ff:19:bb:09:57:54:e2:12:58:50:d2:a2: 57:a4:07:35:38:fe:51:80:4b:9e:09:a8:32:16:ca: 52:25:fa:3d:1a:6d:e6:df:1d:34:a6:81:87:d0:ab: 2b:e3:05:67:a7:e8:05:f6:8b:24:ac:13:97:52:5d: 99:d6:85:90:2e:0e:5d:34:f1:5d:ea:cf:66:05:7c: 56:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CB:A8:23:2A:55:EF:0A:91:91:13:91:FA:6B:29:B0:9E:DF:A7:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl X509v3 Authority Key Identifier: keyid:EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer sbgp-ipAddrBlock: critical IPv4: 72.42.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:23:c6:57:57:90:15:23:18:2f:db:ff:60:05:8f:d6:5a:87: 8b:c0:70:d8:73:15:17:39:64:2d:0b:2b:70:03:a6:a0:20:87: b6:cb:d8:0b:e3:13:0e:e4:bc:0a:ec:12:fc:4c:8a:1e:75:4f: b4:a8:38:6a:65:94:9e:5b:67:38:fb:5c:1e:d1:92:7a:7a:de: 9b:07:20:0f:2a:9d:9c:53:34:35:dd:f6:74:be:fe:2e:8d:bc: 9c:52:ad:5d:b9:2d:08:ce:b6:86:94:d7:cd:8e:ae:41:70:a2: 9e:6d:4a:94:e0:5a:2b:d1:ed:ea:3d:67:35:10:ee:8f:ca:b3: d3:1d:5f:36:93:64:cd:34:46:5f:75:f7:0d:fe:d5:46:16:a2: a1:57:38:0a:a6:f9:7f:cc:0a:86:48:41:8c:f5:8b:51:77:17: 54:e6:7b:52:8b:5f:06:19:44:66:8f:ed:2e:d8:9c:c9:61:94: 51:05:37:ac:dd:fb:3a:38:40:db:f7:27:9d:3e:51:a1:e0:1a: fe:78:3a:78:73:7f:b3:1b:4c:1a:76:19:76:2c:b1:07:4f:29: 7f:56:94:8f:e1:50:01:a4:bf:9c:b7:56:cc:99:bb:9f:a8:46: 23:84:c1:73:64:6f:01:d5:2e:19:cd:b3:9a:6f:cd:de:2c:e4: e9:ec:f9:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXUdtx1MeuQ6/3usoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIyNzE3YzYtNjA0ZC00NDUzLWEyMGYtMzQzMGFmNTU3 ZjZlMB4XDTI0MDUxMDIwMTY1NloXDTI0MDgwODIwMTY1NlowLzEtMCsGA1UEAxMk YzQ4NmMxNzEtODFiYi00NWZhLTgxMDYtOTU3YjY0Nzg2NTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7wm67VZddfHSReFVokHHba1t6Ogk0GjPWbt wP1ve8Z5i87larcfHjZB40dj/Ssd0rMjoF9PxBnldjKWadfJtCTOfga3Fpungr0A slHSOLDMcIETgWCapPUd5N9NbLDw1lHCBkDmAykqCcmn6w4Rn/MZmgsphSaOL61T wTpvr2sI/jnqnKJZeJy94M2ce6zGsGRAryAzSdU+Q5AILdbKrJQsp9zg1bx5FQoC Nmi2nj5wXMrbsGX/GbsJV1TiElhQ0qJXpAc1OP5RgEueCagyFspSJfo9Gm3m3x00 poGH0Ksr4wVnp+gF9oskrBOXUl2Z1oWQLg5dNPFd6s9mBXxWKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDLqCMqVe8KkZETkfprKbCe36dEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3 MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMwYWY1NTdmNmUvZGZiODEwMWUtZWMyYS0z NmU1LThjYmUtNTc2YmI4YzEyZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzIyNzE3YzYtNjA0ZC00NDUzLWEy MGYtMzQzMGFmNTU3ZjZlL2MyMjcxN2M2LTYwNGQtNDQ1My1hMjBmLTM0MzBhZjU1 N2Y2ZS5jcmwwHwYDVR0jBBgwFoAU7qMrzzRTqz7xoBFGZHeL3kSWVmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMw YWY1NTdmNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCr7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANsjxldXkBUjGC/b/2AFj9Zah4vAcNhzFRc5ZC0LK3ADpqAgh7bL2Avj Ew7kvArsEvxMih51T7SoOGpllJ5bZzj7XB7Rknp63psHIA8qnZxTNDXd9nS+/i6N vJxSrV25LQjOtoaU182OrkFwop5tSpTgWivR7eo9ZzUQ7o/Ks9MdXzaTZM00Rl91 9w3+1UYWoqFXOAqm+X/MCoZIQYz1i1F3F1Tme1KLXwYZRGaP7S7YnMlhlFEFN6zd +zo4QNv3J50+UaHgGv54Onhzf7MbTBp2GXYssQdPKX9WlI/hUAGkv5y3VsyZu5+o RiOEwXNkbwHVLhnNs5pvzd4s5Ons+co= -----END CERTIFICATE-----Generated at Mon Jun 17 01:54:07 2024 by rpki-client on console-fra.rpki-client.org