$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3926421-59fa-32cb-9556-130522681915.roa File: e3926421-59fa-32cb-9556-130522681915.roa (raw, json) Hash identifier: bJU9yd0ypfZpcvgM+FAE1IMjqCJC1V5frHbdkxBG/p8= Subject key identifier: CC:08:0F:1C:FC:28:03:71:52:64:0D:00:FA:1A:2E:62:AD:63:D2:DA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858456128499E746CA5EE88F61E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3926421-59fa-32cb-9556-130522681915.roa Signing time: Sat 30 Mar 2024 13:00:38 +0000 ROA not before: Sat 30 Mar 2024 13:00:38 +0000 ROA not after: Fri 28 Jun 2024 13:00:38 +0000 asID: 36183 IP address blocks: 172.225.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:61:28:49:9e:74:6c:a5:ee:88:f6:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 13:00:38 2024 GMT Not After : Jun 28 13:00:38 2024 GMT Subject: CN=a1982683-980f-46ce-b8bf-074ec9da0639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d1:0d:aa:a6:b6:ec:5d:37:41:64:a8:ca:58: 31:d7:ed:4a:82:e0:db:71:12:01:04:41:26:b6:27: 77:cf:f6:f1:02:ac:e8:ef:d4:b2:20:be:09:16:10: 41:20:6d:c9:e3:eb:6d:95:32:79:d2:ad:6d:b8:d2: 01:0b:85:7f:3d:7c:3f:10:72:fe:1b:85:a5:25:19: a8:16:9d:38:76:ce:7a:cc:a2:68:c3:bb:aa:df:5b: 2b:54:e8:82:19:fb:5c:14:fc:f2:c4:af:a2:e6:67: 26:48:68:df:2f:33:29:20:5d:55:50:bf:cb:69:bc: 71:d7:45:8f:c4:df:9e:43:2b:1d:a8:ed:1b:bb:65: 46:bb:40:47:33:f6:78:47:4b:1c:e0:eb:9f:19:72: 90:2a:4c:38:d4:c2:f5:75:81:23:1b:dd:45:c0:1f: 10:02:f7:8f:d6:d1:2e:8e:6d:94:d2:a1:f4:47:4c: 6f:e9:94:8a:31:a2:76:ca:12:d2:ef:70:32:70:bb: df:fd:be:a8:60:0c:05:c0:cc:e3:7f:f6:ce:b2:32: 93:9e:ca:63:94:3c:18:20:ad:de:e6:48:fb:8b:74: 5f:19:9c:28:b9:74:3d:d8:23:bb:81:d3:70:b7:d4: fd:b5:6d:b7:c5:73:c0:74:87:51:64:e5:ca:85:20: 80:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:08:0F:1C:FC:28:03:71:52:64:0D:00:FA:1A:2E:62:AD:63:D2:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3926421-59fa-32cb-9556-130522681915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d8:07:de:c2:73:db:2d:58:0a:46:20:e7:ca:fb:99:94:18: 98:ce:e6:bf:ca:04:32:2c:cc:3b:7a:7e:af:4e:7d:0e:02:6f: 11:34:6f:08:a0:29:55:66:fe:8c:70:a2:47:77:f4:65:41:f4: 75:df:ff:22:83:c8:6d:9d:bb:ef:ef:85:bf:7e:25:71:88:9f: 1d:93:af:4b:c3:d3:e7:e8:83:a6:c6:30:a5:43:4b:80:e0:14: a4:eb:15:33:81:6e:ee:6a:4e:65:69:79:78:15:86:e3:42:fa: 17:df:28:12:f7:f5:eb:1b:b5:a6:2b:61:7c:20:21:70:19:cd: 7c:6b:10:e6:95:62:69:f7:99:63:98:94:d1:e1:01:c6:7a:41: b7:bd:25:98:fc:0b:6b:f7:0e:f7:ae:48:0c:a1:19:73:19:19: 2f:ce:44:c8:6d:8e:07:d1:bd:85:49:02:7c:a6:ec:23:40:c1: fa:eb:8b:12:03:39:48:60:75:73:d3:0b:61:fd:b9:7a:6d:51: fe:52:a7:79:50:99:3f:4a:d1:ca:18:4b:f6:13:bd:56:39:2d: 38:8c:ba:56:4f:a9:8d:4c:9b:1e:de:43:0d:7d:b7:20:77:c4: 60:75:6c:ff:c9:8a:06:8a:49:0a:0f:24:57:11:93:b3:56:55: 88:3d:d1:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVhKEmedGyl7oj2HoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDMzMDEzMDAzOFoXDTI0MDYyODEzMDAzOFowLzEtMCsGA1UEAxMk YTE5ODI2ODMtOTgwZi00NmNlLWI4YmYtMDc0ZWM5ZGEwNjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NENqqa27F03QWSoylgx1+1KguDbcRIBBEEm tid3z/bxAqzo79SyIL4JFhBBIG3J4+ttlTJ50q1tuNIBC4V/PXw/EHL+G4WlJRmo Fp04ds56zKJow7uq31srVOiCGftcFPzyxK+i5mcmSGjfLzMpIF1VUL/Labxx10WP xN+eQysdqO0bu2VGu0BHM/Z4R0sc4OufGXKQKkw41ML1dYEjG91FwB8QAveP1tEu jm2U0qH0R0xv6ZSKMaJ2yhLS73AycLvf/b6oYAwFwMzjf/bOsjKTnspjlDwYIK3e 5kj7i3RfGZwouXQ92CO7gdNwt9T9tW23xXPAdIdRZOXKhSCAFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwIDxz8KANxUmQNAPoaLmKtY9LaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTM5MjY0MjEtNTlmYS0z MmNiLTk1NTYtMTMwNTIyNjgxOTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOEWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3YB97Cc9stWApGIOfK+5mUGJjO5r/KBDIszDt6fq9OfQ4CbxE0bwig KVVm/oxwokd39GVB9HXf/yKDyG2du+/vhb9+JXGInx2Tr0vD0+fog6bGMKVDS4Dg FKTrFTOBbu5qTmVpeXgVhuNC+hffKBL39esbtaYrYXwgIXAZzXxrEOaVYmn3mWOY lNHhAcZ6Qbe9JZj8C2v3DveuSAyhGXMZGS/ORMhtjgfRvYVJAnym7CNAwfrrixID OUhgdXPTC2H9uXptUf5Sp3lQmT9K0coYS/YTvVY5LTiMulZPqY1Mmx7eQw19tyB3 xGB1bP/JigaKSQoPJFcRk7NWVYg90ZE= -----END CERTIFICATE-----Generated at Fri May 17 21:41:24 2024 by rpki-client on console-fra.rpki-client.org