$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/1a236b0b-aa99-3064-8567-6ef6236cec3e.roa File: 1a236b0b-aa99-3064-8567-6ef6236cec3e.roa (raw, json) Hash identifier: Bigbs+Rwk9qYB3AHgElKrPsRT+LpQCWbIp/DNm4scGA= Subject key identifier: 80:1C:7A:68:AB:97:A0:A6:A1:9A:C6:52:3F:3C:25:29:8B:36:EA:7A Certificate issuer: /CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Certificate serial: 010D0C9F43285844FB60061AF46D2B67731FF480 Authority key identifier: D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/1a236b0b-aa99-3064-8567-6ef6236cec3e.roa Signing time: Fri 23 Feb 2024 02:00:26 +0000 ROA not before: Fri 23 Feb 2024 02:00:26 +0000 ROA not after: Thu 23 May 2024 01:00:26 +0000 asID: 11110 IP address blocks: 204.13.52.0/22 maxlen: 24 2604:3500::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:fb:60:06:1a:f4:6d:2b:67:73:1f:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Validity Not Before: Feb 23 02:00:26 2024 GMT Not After : May 23 01:00:26 2024 GMT Subject: CN=eaa04267-28ee-4146-9816-2d977dfc4078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e5:1a:81:e5:a0:46:6d:1c:75:0e:13:af:a2: 99:ed:fe:5c:52:30:4d:5e:11:04:1a:52:4b:4a:90: 75:1a:26:51:88:9a:87:ee:b6:c4:15:22:98:2b:3a: 06:bd:16:77:d0:20:b5:b0:ad:a5:ed:55:3a:ef:45: 88:37:a9:c6:c1:8d:9b:a2:b2:8f:07:2c:2d:dd:a7: f7:5b:4f:27:e9:c5:0b:aa:d9:79:87:a8:fd:cb:36: ff:67:ca:c6:67:34:5f:54:b9:2d:a0:e7:d5:70:5e: b1:cd:b9:1c:93:28:13:d0:5c:82:c9:7d:07:84:39: 58:87:ad:98:b4:3f:99:4d:b3:70:33:92:d3:4e:48: 4e:af:a2:1d:14:9d:53:18:d2:98:5c:d3:e6:e8:c5: ef:c2:d0:f6:74:f2:c8:25:67:5f:4d:51:74:3f:be: 07:4e:31:01:af:e6:f6:0a:58:66:0e:b0:af:38:3e: 31:d1:cd:d6:90:99:b6:cc:b7:0f:b5:92:d8:f0:13: 53:cc:c3:a7:e6:0f:35:84:ac:3d:71:08:2f:46:11: aa:d9:24:e1:83:03:c4:47:88:3e:58:ec:a3:06:f3: 19:6b:f8:fe:7b:95:ca:dc:c0:87:d1:06:2d:fe:f4: 50:54:76:ad:1b:87:5c:e5:ee:ef:79:a1:c1:ae:68: d7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1C:7A:68:AB:97:A0:A6:A1:9A:C6:52:3F:3C:25:29:8B:36:EA:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/1a236b0b-aa99-3064-8567-6ef6236cec3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl X509v3 Authority Key Identifier: keyid:D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer sbgp-ipAddrBlock: critical IPv4: 204.13.52.0/22 IPv6: 2604:3500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:f6:cd:ba:ee:b1:8f:4b:ae:39:82:51:75:6a:d0:ea:94:04: 8b:7f:32:ea:ef:8e:80:67:e6:04:5c:52:91:64:e1:10:53:20: e1:89:ed:6f:ac:b6:d5:ee:df:f3:36:2e:42:95:a1:35:9f:e6: c1:43:e8:2b:07:85:e6:81:a1:8b:e3:be:2a:78:c8:1c:35:42: 0a:29:07:1a:c9:dd:42:c8:e8:ef:30:ab:9c:dc:fa:60:01:3c: 27:c2:02:68:aa:a5:01:67:bb:2c:a4:32:e5:39:0d:f8:af:53: c3:2b:59:63:26:60:a6:8e:d0:1c:33:a5:87:4e:8a:83:7c:02: da:3d:a7:0e:58:52:17:27:1e:39:63:0d:bb:45:5f:f3:e6:21: 97:de:50:6f:a9:58:87:a9:d5:5a:d8:f9:cc:c1:57:94:3c:99: e8:bd:13:21:a1:cd:df:ac:c6:e1:b0:86:36:b9:e5:41:39:2f: 12:57:8a:57:2a:25:75:88:44:49:46:b6:e4:4e:9d:19:12:67: 95:1b:01:16:44:77:35:69:e7:3a:15:cc:2b:e4:55:f2:12:d1: 4a:02:f7:62:51:76:65:6c:3d:97:c2:08:d9:c0:79:66:1e:45: 8a:2f:92:8e:65:7e:73:85:03:fd:10:c0:8e:ea:51:db:11:31: f6:73:2b:25 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWET7YAYa9G0rZ3Mf9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I3MmM5NjgtZDY3My00YTdhLWJmZWMtNDA3MWE3YmU1 MzE3MB4XDTI0MDIyMzAyMDAyNloXDTI0MDUyMzAxMDAyNlowLzEtMCsGA1UEAxMk ZWFhMDQyNjctMjhlZS00MTQ2LTk4MTYtMmQ5NzdkZmM0MDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eUageWgRm0cdQ4Tr6KZ7f5cUjBNXhEEGlJL SpB1GiZRiJqH7rbEFSKYKzoGvRZ30CC1sK2l7VU670WIN6nGwY2borKPBywt3af3 W08n6cULqtl5h6j9yzb/Z8rGZzRfVLktoOfVcF6xzbkckygT0FyCyX0HhDlYh62Y tD+ZTbNwM5LTTkhOr6IdFJ1TGNKYXNPm6MXvwtD2dPLIJWdfTVF0P74HTjEBr+b2 ClhmDrCvOD4x0c3WkJm2zLcPtZLY8BNTzMOn5g81hKw9cQgvRhGq2SThgwPER4g+ WOyjBvMZa/j+e5XK3MCH0QYt/vRQVHatG4dc5e7veaHBrmjXlwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFIAcemirl6CmoZrGUj88JSmLNup6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcy Yzk2OC1kNjczLTRhN2EtYmZlYy00MDcxYTdiZTUzMTcvMWEyMzZiMGItYWE5OS0z MDY0LTg1NjctNmVmNjIzNmNlYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2I3MmM5NjgtZDY3My00YTdhLWJm ZWMtNDA3MWE3YmU1MzE3LzNiNzJjOTY4LWQ2NzMtNGE3YS1iZmVjLTQwNzFhN2Jl NTMxNy5jcmwwHwYDVR0jBBgwFoAU1NBs4Y/5cx1TIiNtNj849oEDtW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcyYzk2OC1kNjczLTRhN2EtYmZlYy00MDcx YTdiZTUzMTcuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCzA00MA0E AgACMAcDBQAmBDUAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAEj2zbrusY9LrjmCUXVq0OqUBIt/MurvjoBn 5gRcUpFk4RBTIOGJ7W+sttXu3/M2LkKVoTWf5sFD6CsHheaBoYvjvip4yBw1Qgop BxrJ3ULI6O8wq5zc+mABPCfCAmiqpQFnuyykMuU5DfivU8MrWWMmYKaO0BwzpYdO ioN8Ato9pw5YUhcnHjljDbtFX/PmIZfeUG+pWIep1VrY+czBV5Q8mei9EyGhzd+s xuGwhja55UE5LxJXilcqJXWIRElGtuROnRkSZ5UbARZEdzVp5zoVzCvkVfIS0UoC 92JRdmVsPZfCCNnAeWYeRYovko5lfnOFA/0QwI7qUdsRMfZzKyU= -----END CERTIFICATE-----Generated at Mon May 13 01:31:03 2024 by rpki-client on console-ams.rpki-client.org