$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/814b1e1a-ad20-3de3-a735-e358f988599a.roa File: 814b1e1a-ad20-3de3-a735-e358f988599a.roa (raw, json) Hash identifier: 8UAjNSBUvUgwmpzD3eQmr6YHGY2IjvJ4us6Wr1tKQAE= Subject key identifier: 24:C0:39:55:AC:49:C3:C5:7E:6F:F1:6C:ED:D3:79:2F:F4:44:B7:67 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAB0F8744B1AF1901FB30F3 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/814b1e1a-ad20-3de3-a735-e358f988599a.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 22909 IP address blocks: 71.228.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:0f:87:44:b1:af:19:01:fb:30:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=ec281037-78ef-4a02-b4c4-18107bb44136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ba:2e:53:38:73:51:2f:8f:e6:68:cd:f3:8f: 06:29:ec:e2:61:dd:3f:17:df:cb:ea:0a:38:a8:6a: df:65:98:0d:54:5a:70:4e:03:1b:a4:f5:21:c3:8c: 6c:b9:92:a4:3d:60:c8:01:db:64:e9:ed:67:5b:dc: 80:0c:4c:87:97:4e:c2:41:bf:78:92:43:13:3d:8f: 64:66:97:9b:21:a0:a5:4f:a6:2a:69:2b:be:69:d6: 64:77:98:90:99:ce:ec:33:9d:f3:05:55:33:81:b3: d7:f5:5d:2c:1a:5e:02:61:b4:df:ed:f1:4e:d4:12: 30:3f:d7:cf:8f:45:6a:85:95:26:ce:88:b6:ed:1e: 7f:ea:22:ea:48:14:fd:ba:af:28:b3:1e:c8:04:fd: 5f:58:b1:b3:60:20:96:e8:2b:36:4d:a6:e4:90:31: 39:1a:db:37:dd:36:87:c3:5a:41:5b:b7:ab:5b:26: bd:9b:81:d2:dd:cd:f3:e7:1b:c0:dd:51:00:5f:70: 7d:73:52:e9:cd:87:fc:52:c7:73:cd:e5:ac:39:03: 6d:f7:da:35:b1:6f:62:82:f0:95:69:8f:54:a7:8f: 47:50:de:56:a7:cb:82:33:32:84:63:23:b5:98:4a: 84:41:aa:3c:5f:ff:d3:40:00:f1:c8:be:a3:43:ea: 23:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C0:39:55:AC:49:C3:C5:7E:6F:F1:6C:ED:D3:79:2F:F4:44:B7:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/814b1e1a-ad20-3de3-a735-e358f988599a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.228.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:58:2e:06:d5:54:b2:e3:67:92:ee:7b:24:a6:e6:43:af:d1: 67:9f:24:94:96:ed:71:85:c8:e5:f1:9b:92:9f:62:fc:96:19: 37:97:26:5c:fb:e4:50:32:25:83:e0:5c:39:02:aa:92:19:da: c1:e9:82:06:cd:d9:4d:2a:5f:0e:66:da:02:5f:e8:e2:ee:5c: 1d:dd:f0:6c:60:6a:87:50:c9:ac:b1:ba:9f:f3:91:be:47:2b: 3d:68:f2:d9:12:0f:88:5a:be:b9:8e:37:6a:39:69:13:48:05: 8d:e3:06:9b:55:8a:cd:ec:5c:87:f4:61:36:93:13:76:b3:f6: a9:f1:0b:81:99:d0:d1:7d:bc:6a:5c:1c:0c:5f:8b:d7:cf:7b: 64:5d:a9:af:fe:42:48:df:c3:50:49:ff:cf:ce:c6:0f:e7:ee: 6e:79:1a:56:b3:21:cc:33:4c:33:ab:4d:6d:73:3e:4c:db:78: f5:31:7d:34:97:89:e3:1a:8a:0b:42:c9:66:e2:92:44:7f:91: a5:e1:ea:0c:b4:6e:60:d1:30:34:1c:1c:41:33:38:31:83:ec: 0f:9b:20:57:29:36:18:fe:78:cb:fe:29:44:37:d3:33:5c:58: 88:18:9c:54:8c:09:06:bd:48:21:29:54:9c:da:e4:2e:38:27: b4:59:fd:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfqw+HRLGvGQH7MPMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk ZWMyODEwMzctNzhlZi00YTAyLWI0YzQtMTgxMDdiYjQ0MTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbouUzhzUS+P5mjN848GKeziYd0/F9/L6go4 qGrfZZgNVFpwTgMbpPUhw4xsuZKkPWDIAdtk6e1nW9yADEyHl07CQb94kkMTPY9k ZpebIaClT6YqaSu+adZkd5iQmc7sM53zBVUzgbPX9V0sGl4CYbTf7fFO1BIwP9fP j0VqhZUmzoi27R5/6iLqSBT9uq8osx7IBP1fWLGzYCCW6Cs2TabkkDE5Gts33TaH w1pBW7erWya9m4HS3c3z5xvA3VEAX3B9c1LpzYf8UsdzzeWsOQNt99o1sW9igvCV aY9Up49HUN5Wp8uCMzKEYyO1mEqEQao8X//TQADxyL6jQ+ojAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTAOVWsScPFfm/xbO3TeS/0RLdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODE0YjFlMWEtYWQyMC0z ZGUzLWE3MzUtZTM1OGY5ODg1OTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+T8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFYLgbVVLLjZ5LueySm5kOv0WefJJSW7XGFyOXxm5KfYvyWGTeXJlz7 5FAyJYPgXDkCqpIZ2sHpggbN2U0qXw5m2gJf6OLuXB3d8GxgaodQyayxup/zkb5H Kz1o8tkSD4havrmON2o5aRNIBY3jBptVis3sXIf0YTaTE3az9qnxC4GZ0NF9vGpc HAxfi9fPe2Rdqa/+Qkjfw1BJ/8/Oxg/n7m55GlazIcwzTDOrTW1zPkzbePUxfTSX ieMaigtCyWbikkR/kaXh6gy0bmDRMDQcHEEzODGD7A+bIFcpNhj+eMv+KUQ30zNc WIgYnFSMCQa9SCEpVJza5C44J7RZ/ek= -----END CERTIFICATE-----Generated at Sat May 4 14:53:40 2024 by rpki-client on console-ams.rpki-client.org