$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4323d0ac-76d1-39e3-b8b0-4130280b02a0.roa File: 4323d0ac-76d1-39e3-b8b0-4130280b02a0.roa (raw, json) Hash identifier: WKlwepNQVuLkPnlJUQ1cbgVsZfH0zREFMiqvTc7WIek= Subject key identifier: 5C:F4:67:E6:C7:1E:A6:7D:F5:C2:D0:41:91:98:81:E2:01:90:FC:E1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285845AC88D67F1172764D43F48100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4323d0ac-76d1-39e3-b8b0-4130280b02a0.roa Signing time: Fri 26 Apr 2024 13:00:35 +0000 ROA not before: Fri 26 Apr 2024 13:00:35 +0000 ROA not after: Thu 25 Jul 2024 13:00:35 +0000 asID: 33660 IP address blocks: 67.163.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ac:88:d6:7f:11:72:76:4d:43:f4:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 26 13:00:35 2024 GMT Not After : Jul 25 13:00:35 2024 GMT Subject: CN=84bc4595-92fb-4ca7-8b01-12f473838f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:67:87:ea:fd:04:18:36:12:5b:c0:d0:84:c6: 92:ad:61:68:66:a3:df:f8:a4:c8:c1:a9:9d:16:f4: ad:67:2f:b0:d6:cf:b1:b6:bd:7b:f5:2c:49:77:d3: 65:8b:47:9d:c8:4c:99:94:dc:2a:52:d3:87:50:c3: 72:1e:87:33:64:3f:11:c3:8d:25:b2:79:d5:30:d6: 86:6e:6c:f8:4f:cc:29:93:f8:bd:e0:2d:f7:1a:7c: 42:f2:ff:01:8e:9d:56:f8:da:67:82:42:0c:ef:36: fe:78:46:23:a1:a6:0d:eb:0b:5e:a2:50:c3:80:86: cc:75:db:0f:6c:af:18:11:b3:17:82:93:2e:6f:2e: 54:d8:fa:ba:e5:9f:e7:15:1c:6d:98:5c:41:57:f7: 16:04:c0:6f:69:fa:71:6b:41:fe:93:5c:1f:70:e9: 79:cb:eb:cd:30:d3:17:f3:27:e8:f0:71:06:e5:4c: 1f:f6:ae:c5:dd:09:51:59:e0:30:84:57:9c:21:00: 80:ca:dc:b1:86:15:e1:25:e3:0c:61:79:d8:af:76: 52:94:32:18:be:35:e0:ee:3b:1c:92:d5:fe:6c:c7: 68:55:70:fb:23:42:03:42:bf:48:96:33:0d:1e:e6: 31:08:14:42:3f:b6:bb:4e:f7:7c:ff:c5:15:5b:8e: 9d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F4:67:E6:C7:1E:A6:7D:F5:C2:D0:41:91:98:81:E2:01:90:FC:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4323d0ac-76d1-39e3-b8b0-4130280b02a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.163.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:1f:64:17:e0:56:59:dd:17:7c:c2:c1:6a:f3:2f:6b:ac:00: 15:24:81:22:d6:df:5f:65:72:51:47:92:45:e7:bb:56:32:de: 1f:79:84:32:60:dc:e5:d5:02:fd:dc:c6:63:13:66:48:07:c2: d6:3f:07:29:9c:5f:f3:9b:03:77:65:fc:d9:2d:05:8b:05:b4: ce:47:7f:56:7c:8d:bf:dc:a3:a6:ac:52:f5:d9:79:c7:2a:d8: a8:40:58:18:75:9c:9f:32:aa:ac:58:61:4d:db:61:ca:48:6d: 94:fe:24:2c:a7:73:4a:76:88:22:d0:95:78:81:17:fa:41:ff: 79:aa:02:8c:15:88:52:37:42:ed:fc:7c:4e:de:43:13:75:d9: f9:ba:11:5b:7b:0b:44:33:b4:ee:12:68:80:22:2c:2c:a8:7b: 8c:54:a5:cf:9c:fe:e0:f3:5b:20:78:fa:e7:12:54:bd:36:95: 7a:da:01:22:69:c5:5e:ed:c2:0e:68:ae:94:ca:5e:03:a7:74: da:78:e1:a4:5c:6c:c3:50:b4:ef:9b:7c:3c:c6:fc:95:88:09: 23:d0:7c:fb:71:5a:3b:48:56:68:cb:b8:a1:6d:2f:02:e1:42: 50:5d:10:f3:f9:9a:a2:fd:c1:e2:d2:da:c4:df:0d:b0:b9:07: e9:1c:be:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsiNZ/EXJ2TUP0gQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk ODRiYzQ1OTUtOTJmYi00Y2E3LThiMDEtMTJmNDczODM4Zjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGeH6v0EGDYSW8DQhMaSrWFoZqPf+KTIwamd FvStZy+w1s+xtr179SxJd9Nli0edyEyZlNwqUtOHUMNyHoczZD8Rw40lsnnVMNaG bmz4T8wpk/i94C33GnxC8v8Bjp1W+NpngkIM7zb+eEYjoaYN6wteolDDgIbMddsP bK8YEbMXgpMuby5U2Pq65Z/nFRxtmFxBV/cWBMBvafpxa0H+k1wfcOl5y+vNMNMX 8yfo8HEG5Uwf9q7F3QlRWeAwhFecIQCAytyxhhXhJeMMYXnYr3ZSlDIYvjXg7jsc ktX+bMdoVXD7I0IDQr9IljMNHuYxCBRCP7a7Tvd8/8UVW46dvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFz0Z+bHHqZ99cLQQZGYgeIBkPzhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDMyM2QwYWMtNzZkMS0z OWUzLWI4YjAtNDEzMDI4MGIwMmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6NYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAfZBfgVlndF3zCwWrzL2usABUkgSLW319lclFHkkXnu1Yy3h95hDJg 3OXVAv3cxmMTZkgHwtY/BymcX/ObA3dl/NktBYsFtM5Hf1Z8jb/co6asUvXZeccq 2KhAWBh1nJ8yqqxYYU3bYcpIbZT+JCync0p2iCLQlXiBF/pB/3mqAowViFI3Qu38 fE7eQxN12fm6EVt7C0QztO4SaIAiLCyoe4xUpc+c/uDzWyB4+ucSVL02lXraASJp xV7twg5orpTKXgOndNp44aRcbMNQtO+bfDzG/JWICSPQfPtxWjtIVmjLuKFtLwLh QlBdEPP5mqL9weLS2sTfDbC5B+kcvvo= -----END CERTIFICATE-----Generated at Sat May 4 14:50:11 2024 by rpki-client on console-ams.rpki-client.org