$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c901aab-b131-3136-8d42-8703ae3ff118.roa File: 1c901aab-b131-3136-8d42-8703ae3ff118.roa (raw, json) Hash identifier: xXggM2u57rW+gWvCjVcvFa+VP2cpAGFA/yem+KHgbT4= Subject key identifier: F8:72:08:AA:39:38:BE:F0:2E:14:81:17:24:71:BA:8B:2C:60:76:8F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FABFA245277BE97050D6100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c901aab-b131-3136-8d42-8703ae3ff118.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 13367 IP address blocks: 73.228.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:fa:24:52:77:be:97:05:0d:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=08bf879e-99bc-4752-8139-dfbb934af5b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:6f:aa:e0:53:c5:53:c2:2c:f1:cd:2b:85: 5f:18:c2:bc:ac:d3:db:f8:25:70:48:63:a5:4f:d2: a9:83:18:dd:55:cf:78:61:c4:94:3e:19:b0:60:23: 29:54:da:34:73:54:2a:d7:57:2b:c8:ca:22:94:7b: e8:ba:f2:71:1e:4c:a1:52:eb:b7:db:24:b1:1e:11: 55:13:87:2a:10:5b:b5:68:ab:f8:70:ea:ac:e0:a0: 38:9c:9c:2b:45:55:71:5a:aa:82:32:66:7b:30:35: f5:d0:60:12:6a:1f:56:73:e7:3a:07:3c:e7:8d:30: 91:73:ec:43:2f:66:d1:1f:15:a9:94:bc:ef:b9:f8: 79:13:0b:91:0d:c9:6d:78:d2:fd:83:7a:13:9a:73: bf:f5:72:af:42:83:4c:96:27:89:ec:70:f5:24:44: ab:09:e0:e9:4b:7d:94:d7:75:a9:0c:24:a8:54:d6: c6:10:26:19:70:f0:37:1a:93:27:2a:b6:d0:c9:3b: dd:61:98:e6:68:a1:91:b9:7a:1c:93:ee:40:2a:af: 67:75:02:8b:25:2a:45:78:07:33:21:b7:50:28:e1: f7:fd:49:15:f3:fb:80:9c:94:da:97:e1:8a:14:71: 83:4d:7d:db:5e:3c:f3:f2:a6:76:82:bb:dd:61:f6: b5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:72:08:AA:39:38:BE:F0:2E:14:81:17:24:71:BA:8B:2C:60:76:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c901aab-b131-3136-8d42-8703ae3ff118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.228.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:72:1b:bd:2b:51:63:ce:ba:bc:37:bc:fb:1b:d7:81:4a:a4: 95:a6:23:f8:b9:da:0c:9d:9f:19:a0:99:21:68:98:ba:ad:af: b4:00:cb:9f:df:80:9d:39:9b:1a:a4:a1:17:06:ce:02:5b:90: 26:6d:da:63:cd:0d:fc:c4:f3:66:77:64:af:40:89:9e:8a:cc: 02:de:84:ea:81:e6:06:96:23:21:34:75:12:6d:39:72:04:68: f7:90:ea:fd:bc:e2:08:ac:19:29:a2:fe:3a:18:ec:30:aa:d9: 3c:e9:72:8b:58:e9:eb:f1:4c:ca:b4:99:c0:00:80:5a:bc:7c: 98:02:b9:9a:b1:27:2a:ae:b4:ae:64:82:cc:65:6a:30:29:d5: e7:04:9b:85:eb:72:fc:01:67:88:75:0d:03:9b:06:b1:4b:cb: 0b:d6:8a:2e:df:a6:11:67:da:37:37:63:1c:fc:dd:15:8b:a2: 6a:6f:a4:57:6e:50:fd:94:fb:2d:38:b5:ff:74:0d:3a:9a:8c: f8:9f:3e:00:16:09:5e:3e:98:4d:33:c3:b5:dc:27:f5:6e:24: e6:e3:17:59:6a:00:3b:58:bb:c9:39:10:42:30:54:b1:8b:ce: 75:09:a4:b3:34:16:98:5b:aa:ab:63:fd:78:fb:3a:5c:da:3f: c7:21:27:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfq/okUne+lwUNYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MDhiZjg3OWUtOTliYy00NzUyLTgxMzktZGZiYjkzNGFmNWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjNvquBTxVPCLPHNK4VfGMK8rNPb+CVwSGOl T9KpgxjdVc94YcSUPhmwYCMpVNo0c1Qq11cryMoilHvouvJxHkyhUuu32ySxHhFV E4cqEFu1aKv4cOqs4KA4nJwrRVVxWqqCMmZ7MDX10GASah9Wc+c6BzznjTCRc+xD L2bRHxWplLzvufh5EwuRDclteNL9g3oTmnO/9XKvQoNMlieJ7HD1JESrCeDpS32U 13WpDCSoVNbGECYZcPA3GpMnKrbQyTvdYZjmaKGRuXock+5AKq9ndQKLJSpFeAcz IbdQKOH3/UkV8/uAnJTal+GKFHGDTX3bXjzz8qZ2grvdYfa1vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhyCKo5OL7wLhSBFyRxuossYHaPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWM5MDFhYWItYjEzMS0z MTM2LThkNDItODcwM2FlM2ZmMTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSeSKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANJyG70rUWPOurw3vPsb14FKpJWmI/i52gydnxmgmSFomLqtr7QAy5/f gJ05mxqkoRcGzgJbkCZt2mPNDfzE82Z3ZK9AiZ6KzALehOqB5gaWIyE0dRJtOXIE aPeQ6v284gisGSmi/joY7DCq2TzpcotY6evxTMq0mcAAgFq8fJgCuZqxJyqutK5k gsxlajAp1ecEm4XrcvwBZ4h1DQObBrFLywvWii7fphFn2jc3Yxz83RWLompvpFdu UP2U+y04tf90DTqajPifPgAWCV4+mE0zw7XcJ/VuJObjF1lqADtYu8k5EEIwVLGL znUJpLM0Fphbqqtj/Xj7OlzaP8chJ/o= -----END CERTIFICATE-----Generated at Sat May 4 14:48:00 2024 by rpki-client on console-ams.rpki-client.org