$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c930b5f-0c58-3a1b-832a-fc8ae7084b0f.roa File: 3c930b5f-0c58-3a1b-832a-fc8ae7084b0f.roa (raw, json) Hash identifier: RyQpDXjphmE2RcMO7hVGSXSp+XAOr9FNAfqv4KkyMUk= Subject key identifier: 66:A8:3F:B2:5B:6E:26:CF:2A:7B:5B:A0:AC:2E:66:6E:20:72:C0:50 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285845AC8977AA5D41E420FC499800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c930b5f-0c58-3a1b-832a-fc8ae7084b0f.roa Signing time: Fri 26 Apr 2024 13:00:35 +0000 ROA not before: Fri 26 Apr 2024 13:00:35 +0000 ROA not after: Thu 25 Jul 2024 13:00:35 +0000 asID: 33660 IP address blocks: 71.199.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ac:89:77:aa:5d:41:e4:20:fc:49:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 26 13:00:35 2024 GMT Not After : Jul 25 13:00:35 2024 GMT Subject: CN=a3f90499-fb93-45c9-84ee-6307d44b0729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:dd:b4:d4:83:8b:30:04:7e:20:8f:b9:27:bb: 6c:15:64:7c:ab:24:b8:2f:b0:80:f3:3b:b8:34:d5: 0f:90:b5:4a:06:82:5e:ff:5d:3b:33:9d:ed:c7:98: ff:79:c6:e7:eb:c1:56:d7:80:fb:0d:2a:ea:71:f1: e1:70:fd:70:78:49:7f:61:1a:98:40:df:6e:21:cd: 03:7d:7a:a5:92:61:e1:91:0e:bd:fb:62:72:1c:d2: 5f:4c:67:f1:c7:62:7a:57:4c:4f:6f:01:9e:cf:c7: 2e:dc:e4:ea:77:9e:2d:a2:1f:ed:87:a1:e8:c5:23: 2a:a0:8d:8e:96:d4:17:ed:43:80:2b:8c:6a:80:3d: fb:50:cd:a0:54:d4:15:05:32:37:72:f5:c5:7e:80: 6f:4b:67:99:21:ab:89:02:76:dc:63:ed:8b:09:98: 09:d3:86:bf:4b:04:c4:c6:60:37:df:66:92:bf:9a: f4:59:e8:dd:c1:95:51:fa:f4:d3:06:5c:f2:f5:a8: af:d1:e3:90:a9:ce:e5:95:5f:8b:dc:cf:99:8e:97: 41:56:fe:40:d3:6c:3b:76:59:1c:20:a6:5b:45:06: 50:b6:8a:d8:53:97:6a:af:b5:97:b9:69:a4:30:16: f9:4e:08:62:9b:f9:72:b0:9c:ed:05:91:c6:9f:2d: 45:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A8:3F:B2:5B:6E:26:CF:2A:7B:5B:A0:AC:2E:66:6E:20:72:C0:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c930b5f-0c58-3a1b-832a-fc8ae7084b0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.199.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:8c:35:50:3e:27:1a:3a:79:c1:91:07:5d:bf:0f:09:87:b3: f4:c1:a2:9d:4d:24:6d:99:9d:80:2d:e5:78:91:cd:a4:92:2a: ce:08:ee:60:ef:e9:78:e0:92:b5:ea:d3:09:7d:66:84:5d:05: 68:e0:1d:32:fc:e5:33:4f:52:af:bb:25:6b:e9:50:b2:32:83: ef:83:d8:d6:07:c9:10:39:2c:dd:f3:26:1a:25:b7:6f:e3:c3: 94:7c:8b:47:d8:a1:15:03:3e:b4:7d:5c:2f:f6:e1:4e:7f:44: a0:a2:21:42:b1:1d:03:a2:78:34:58:56:a7:da:23:d1:9d:8d: 2e:98:4d:b1:3e:6a:f7:6d:93:48:53:09:5c:bc:b7:41:ab:17: 47:43:76:ee:43:86:93:d9:50:34:5e:09:7d:e9:4f:ec:49:74: fd:36:d4:3e:13:48:64:12:57:ec:9e:44:40:c9:21:0d:f5:15: 84:f1:21:18:6f:3c:86:27:f5:c4:19:9d:a3:e1:02:52:bc:1e: d2:92:8c:3a:75:0b:95:c2:6f:0a:c6:74:b9:99:19:80:6e:94: ec:11:a8:43:6f:42:a3:b1:35:53:51:82:00:02:4f:e5:9b:5f: a2:94:8e:0a:ea:96:da:f2:63:d3:fc:91:50:81:d6:dd:42:ca: 59:d1:18:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsiXeqXUHkIPxJmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk YTNmOTA0OTktZmI5My00NWM5LTg0ZWUtNjMwN2Q0NGIwNzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9201IOLMAR+II+5J7tsFWR8qyS4L7CA8zu4 NNUPkLVKBoJe/107M53tx5j/ecbn68FW14D7DSrqcfHhcP1weEl/YRqYQN9uIc0D fXqlkmHhkQ69+2JyHNJfTGfxx2J6V0xPbwGez8cu3OTqd54toh/th6HoxSMqoI2O ltQX7UOAK4xqgD37UM2gVNQVBTI3cvXFfoBvS2eZIauJAnbcY+2LCZgJ04a/SwTE xmA332aSv5r0WejdwZVR+vTTBlzy9aiv0eOQqc7llV+L3M+ZjpdBVv5A02w7dlkc IKZbRQZQtorYU5dqr7WXuWmkMBb5Tghim/lysJztBZHGny1FTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaoP7JbbibPKntboKwuZm4gcsBQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2M5MzBiNWYtMGM1OC0z YTFiLTgzMmEtZmM4YWU3MDg0YjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8cUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuMNVA+Jxo6ecGRB12/DwmHs/TBop1NJG2ZnYAt5XiRzaSSKs4I7mDv 6XjgkrXq0wl9ZoRdBWjgHTL85TNPUq+7JWvpULIyg++D2NYHyRA5LN3zJholt2/j w5R8i0fYoRUDPrR9XC/24U5/RKCiIUKxHQOieDRYVqfaI9GdjS6YTbE+avdtk0hT CVy8t0GrF0dDdu5DhpPZUDReCX3pT+xJdP021D4TSGQSV+yeREDJIQ31FYTxIRhv PIYn9cQZnaPhAlK8HtKSjDp1C5XCbwrGdLmZGYBulOwRqENvQqOxNVNRggACT+Wb X6KUjgrqltryY9P8kVCB1t1CylnRGAA= -----END CERTIFICATE-----Generated at Sun May 5 02:15:50 2024 by rpki-client on console-ams.rpki-client.org