$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/a14bef6f-3d0e-311d-9920-4d558906aa24.roa File: a14bef6f-3d0e-311d-9920-4d558906aa24.roa (raw, json) Hash identifier: cwSFDI8Ow7AqFsJvxHxnX8/dMvY6SFJF1C5oIjAhwUw= Subject key identifier: ED:FF:33:54:47:98:42:87:F2:69:B5:4A:DD:18:37:97:8D:9C:F4:66 Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F43285845174AE020C18ABAA4489E50C0 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/a14bef6f-3d0e-311d-9920-4d558906aa24.roa Signing time: Mon 04 Mar 2024 02:00:26 +0000 ROA not before: Mon 04 Mar 2024 02:00:26 +0000 ROA not after: Sun 02 Jun 2024 01:00:26 +0000 asID: 23465 IP address blocks: 70.96.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:17:4a:e0:20:c1:8a:ba:a4:48:9e:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Mar 4 02:00:26 2024 GMT Not After : Jun 2 01:00:26 2024 GMT Subject: CN=dc62e6a7-543b-4d61-bf53-939e094e23fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:04:f4:07:0e:22:73:4d:41:00:31:85:13:db: b1:2f:84:c2:53:67:f8:1c:71:66:46:4c:56:28:70: 5a:b4:c1:0d:f2:91:b0:94:26:2d:0f:0a:1f:ca:bb: 5f:56:0d:f2:5c:51:14:1f:a0:5d:5a:63:64:b3:8f: a2:95:9e:a8:27:e8:1a:7b:c7:2e:9a:08:4d:af:97: 74:cf:5d:87:5b:0e:c9:36:6d:cc:4c:28:cc:6e:81: 39:ff:3f:35:bf:dd:b0:89:93:d1:f4:23:10:b0:1f: 8e:55:9b:39:b3:de:01:12:ec:5e:0f:be:3e:6f:3c: dc:f6:3b:40:7d:7f:22:c5:30:fb:71:76:79:1e:da: e7:52:6e:e5:6e:b9:d5:59:b1:29:06:32:de:3e:d2: ac:1c:31:9a:8f:cc:ad:83:fa:05:6b:e3:c9:ea:64: 52:92:2b:e3:95:11:29:f4:65:56:6e:82:ab:0b:ea: 06:e8:61:f4:23:b8:17:4f:1c:4f:80:d0:a1:95:40: 56:21:1c:aa:ca:c0:d8:f6:0c:6c:de:a3:50:65:19: 09:81:f1:22:76:df:33:4b:b8:20:b5:a8:e2:96:bb: 71:9d:88:84:32:7c:f9:bb:d9:4d:7f:45:c6:9f:8a: b0:38:f5:94:54:74:fa:1d:6c:cb:06:27:a2:cb:0c: ba:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:FF:33:54:47:98:42:87:F2:69:B5:4A:DD:18:37:97:8D:9C:F4:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/a14bef6f-3d0e-311d-9920-4d558906aa24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 70.96.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:ec:00:81:48:ec:38:80:35:7f:5e:19:b8:60:26:1d:69:0e: 6c:71:0e:a8:55:89:0c:9a:b9:20:37:16:43:79:f0:59:c8:2b: 2c:97:5d:68:3a:ad:1b:f6:8a:26:f3:a0:dd:2d:14:27:42:28: 9e:fb:7f:fd:61:d9:c8:00:8a:76:88:ae:ad:3a:99:6e:e4:26: 3a:e8:dd:2c:60:64:7b:3e:2a:01:56:58:24:80:6e:52:89:09: d2:fd:ad:69:01:4a:1a:af:02:56:e4:0e:20:92:0c:84:59:e9: b5:02:0d:1f:a7:82:5a:14:c2:3f:e0:39:5d:42:f8:69:f4:84: 73:e0:b8:6a:f4:a6:1e:cb:29:87:01:25:8b:9b:a7:ef:8d:95: 31:fd:45:15:41:bc:00:dc:94:97:f3:5b:26:2f:0e:3f:1e:05: 7e:5b:4c:70:cd:4d:b5:9f:c3:a7:fe:df:28:7c:af:d9:fd:fe: 03:a5:db:0b:1d:a3:5e:1b:79:aa:04:79:40:72:da:dd:47:24: 73:54:e4:e4:06:d1:7c:7c:83:e6:52:69:9f:5c:0c:d6:64:96: 5a:96:f0:ee:e8:6f:3b:66:f6:79:5f:7c:e2:64:14:1d:d0:7c: ab:90:d0:2a:2c:14:4d:07:09:24:36:a5:d9:b2:71:ba:38:ab: 8c:1e:57:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUXSuAgwYq6pEieUMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI0MDMwNDAyMDAyNloXDTI0MDYwMjAxMDAyNlowLzEtMCsGA1UEAxMk ZGM2MmU2YTctNTQzYi00ZDYxLWJmNTMtOTM5ZTA5NGUyM2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgT0Bw4ic01BADGFE9uxL4TCU2f4HHFmRkxW KHBatMEN8pGwlCYtDwofyrtfVg3yXFEUH6BdWmNks4+ilZ6oJ+gae8cumghNr5d0 z12HWw7JNm3MTCjMboE5/z81v92wiZPR9CMQsB+OVZs5s94BEuxeD74+bzzc9jtA fX8ixTD7cXZ5HtrnUm7lbrnVWbEpBjLePtKsHDGaj8ytg/oFa+PJ6mRSkivjlREp 9GVWboKrC+oG6GH0I7gXTxxPgNChlUBWIRyqysDY9gxs3qNQZRkJgfEidt8zS7gg tajilrtxnYiEMnz5u9lNf0XGn4qwOPWUVHT6HWzLBieiywy6kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3/M1RHmEKH8mm1St0YN5eNnPRmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvYTE0YmVmNmYtM2QwZS0z MTFkLTk5MjAtNGQ1NTg5MDZhYTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRmDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjsAIFI7DiANX9eGbhgJh1pDmxxDqhViQyauSA3FkN58FnIKyyXXWg6 rRv2iibzoN0tFCdCKJ77f/1h2cgAinaIrq06mW7kJjro3SxgZHs+KgFWWCSAblKJ CdL9rWkBShqvAlbkDiCSDIRZ6bUCDR+ngloUwj/gOV1C+Gn0hHPguGr0ph7LKYcB JYubp++NlTH9RRVBvADclJfzWyYvDj8eBX5bTHDNTbWfw6f+3yh8r9n9/gOl2wsd o14beaoEeUBy2t1HJHNU5OQG0Xx8g+ZSaZ9cDNZkllqW8O7obztm9nlffOJkFB3Q fKuQ0CosFE0HCSQ2pdmycbo4q4weV40= -----END CERTIFICATE-----Generated at Fri May 17 15:24:06 2024 by rpki-client on console-ams.rpki-client.org