$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28b1d604-51ae-35b3-920c-34a395c9a36a.roa File: 28b1d604-51ae-35b3-920c-34a395c9a36a.roa (raw, json) Hash identifier: UR4dXYu/kpr/tuTGgCN9kj0IWzg1VcemJa60r9YmFcI= Subject key identifier: 22:EF:E8:FC:4F:50:8A:72:F1:E2:84:D5:64:2C:AD:79:88:7E:56:79 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451A15943CDDAFF06A703BE980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28b1d604-51ae-35b3-920c-34a395c9a36a.roa Signing time: Tue 05 Mar 2024 02:00:26 +0000 ROA not before: Tue 05 Mar 2024 02:00:26 +0000 ROA not after: Mon 03 Jun 2024 01:00:26 +0000 asID: 7922 IP address blocks: 74.16.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1a:15:94:3c:dd:af:f0:6a:70:3b:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 5 02:00:26 2024 GMT Not After : Jun 3 01:00:26 2024 GMT Subject: CN=f758e222-0706-4c3b-9ebf-85fe9bcead65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b4:31:b2:2f:e6:e8:6c:68:83:eb:59:0a:f1: 73:98:04:62:d8:81:a0:5b:82:27:be:4a:0e:70:58: b8:01:6b:fe:75:ec:ad:fb:9b:f2:21:74:4f:be:34: 57:75:10:ea:d3:01:28:12:4d:6e:64:4d:a4:13:20: 0d:12:22:b3:a0:31:e6:83:41:64:eb:fa:ee:92:e7: 21:87:6b:12:1c:8d:13:65:2d:c6:98:c5:42:79:8d: 8f:99:e5:67:17:c9:47:86:7b:c2:09:74:44:cc:47: 2d:26:26:2f:8d:74:8f:4a:23:bf:f5:c5:00:c5:7c: 95:40:33:27:7b:06:e3:a9:77:70:ea:62:e9:60:c5: cb:33:57:13:2f:1b:74:97:7b:13:49:05:c9:64:7f: 3f:f1:99:8a:71:d5:c8:ea:e6:0c:dc:0e:52:70:68: 5c:c4:06:57:75:68:21:16:d2:b0:3b:2e:60:88:2d: 6b:15:21:07:7f:b3:4d:d7:c7:31:81:af:c7:08:64: d7:3a:83:ef:1a:ec:72:f1:f0:5e:eb:bb:ea:2a:4d: ea:dd:0a:b4:a6:12:8e:34:84:f9:ea:ad:f1:69:6d: 48:0a:ed:ee:34:7d:73:44:27:f5:d3:13:fc:47:76: 23:a9:21:76:ed:6a:fc:ee:39:e4:7e:b7:80:de:d5: e6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EF:E8:FC:4F:50:8A:72:F1:E2:84:D5:64:2C:AD:79:88:7E:56:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28b1d604-51ae-35b3-920c-34a395c9a36a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 74.16.0.0/12 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:42:92:4b:70:44:95:15:e9:d4:ef:aa:30:4c:8e:7b:b9:be: 58:92:d6:a3:5b:5f:44:6d:b8:67:0a:df:58:69:79:d6:26:0d: 3f:55:38:e6:b4:2b:3b:9c:6c:6a:2b:55:11:59:e8:e1:e0:15: 65:87:d0:a5:2f:7a:de:25:34:d7:73:c6:3e:aa:95:76:a5:58: 31:7a:0e:6f:80:04:98:79:af:39:17:74:49:c8:98:37:12:08: 13:65:4a:df:d5:fa:f7:88:b9:c7:f0:bf:9c:40:fe:1b:2c:4e: b1:9d:42:c1:6e:09:18:4a:50:96:ae:38:7f:98:04:3f:9b:3e: c1:b7:7d:50:86:9c:44:5b:24:2f:a9:de:66:27:93:e1:ec:e1: f5:05:07:2e:d7:6b:c2:2f:d1:63:1b:c2:6c:12:dc:a1:09:e2: 95:b4:94:59:dd:45:14:67:6c:a7:31:90:cb:da:22:d0:ef:78: 31:7a:14:13:ab:35:06:e0:d2:5b:e6:9e:de:af:76:5f:5f:ec: b6:b8:67:07:59:ce:4b:d5:93:54:ac:23:95:5f:bf:bd:d2:68: 17:93:2e:e1:1b:1d:fc:d2:49:23:8b:a9:3c:f5:53:e2:01:10: 70:40:77:f0:17:a2:42:c9:83:4b:4a:8c:bb:8c:8d:24:21:cb: 0d:86:40:f9 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEUaFZQ83a/wanA76YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNTAyMDAyNloXDTI0MDYwMzAxMDAyNlowLzEtMCsGA1UEAxMk Zjc1OGUyMjItMDcwNi00YzNiLTllYmYtODVmZTliY2VhZDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbQxsi/m6Gxog+tZCvFzmARi2IGgW4InvkoO cFi4AWv+deyt+5vyIXRPvjRXdRDq0wEoEk1uZE2kEyANEiKzoDHmg0Fk6/rukuch h2sSHI0TZS3GmMVCeY2PmeVnF8lHhnvCCXREzEctJiYvjXSPSiO/9cUAxXyVQDMn ewbjqXdw6mLpYMXLM1cTLxt0l3sTSQXJZH8/8ZmKcdXI6uYM3A5ScGhcxAZXdWgh FtKwOy5giC1rFSEHf7NN18cxga/HCGTXOoPvGuxy8fBe67vqKk3q3Qq0phKONIT5 6q3xaW1ICu3uNH1zRCf10xP8R3YjqSF27Wr87jnkfreA3tXmKwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCLv6PxPUIpy8eKE1WQsrXmIflZ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjhiMWQ2MDQtNTFhZS0z NWIzLTkyMGMtMzRhMzk1YzlhMzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEShAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAl0KSS3BElRXp1O+qMEyOe7m+WJLWo1tfRG24ZwrfWGl51iYNP1U45rQr O5xsaitVEVno4eAVZYfQpS963iU013PGPqqVdqVYMXoOb4AEmHmvORd0SciYNxII E2VK39X694i5x/C/nED+GyxOsZ1CwW4JGEpQlq44f5gEP5s+wbd9UIacRFskL6ne ZieT4ezh9QUHLtdrwi/RYxvCbBLcoQnilbSUWd1FFGdspzGQy9oi0O94MXoUE6s1 BuDSW+ae3q92X1/strhnB1nOS9WTVKwjlV+/vdJoF5Mu4Rsd/NJJI4upPPVT4gEQ cEB38BeiQsmDS0qMu4yNJCHLDYZA+Q== -----END CERTIFICATE-----Generated at Fri May 3 15:20:46 2024 by rpki-client on console-ams.rpki-client.org