$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a11e2bc2-1e0e-354d-bd14-108c085092c8.roa File: a11e2bc2-1e0e-354d-bd14-108c085092c8.roa (raw, json) Hash identifier: pGQQELQt4ezRIbTnnXzPMGtGaNwuDwz9VY2s5CGTTaE= Subject key identifier: 62:96:99:DF:CE:B2:55:59:4C:A7:A6:9B:F0:8F:C4:0C:F9:34:B4:65 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC8D1D5FB8CB9635F29880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a11e2bc2-1e0e-354d-bd14-108c085092c8.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 22909 IP address blocks: 71.228.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:8d:1d:5f:b8:cb:96:35:f2:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=503a8301-ec94-44f5-8d32-7eef5ef8c9dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:83:87:19:d4:1f:c2:e0:b6:6c:09:ad:e1:a7: 1e:e2:6a:68:69:94:02:18:9a:e4:78:7a:12:65:46: e0:9a:90:21:e6:89:53:7b:77:e1:e7:cf:0b:44:41: 30:71:b0:9e:52:66:e8:be:93:05:ab:f2:7a:78:06: 60:4a:90:7b:8d:4b:d0:be:1d:a4:63:6f:92:e7:26: e0:2c:8f:3b:e2:9e:05:8e:34:aa:68:5d:52:2f:95: 12:58:f7:74:fa:57:4c:57:51:56:d4:29:fa:9f:20: 22:80:96:9f:08:b1:02:45:a7:2f:06:a4:ed:3a:5d: 87:47:2c:f0:ff:ba:a3:7a:f2:24:c6:05:69:8b:a4: d0:41:b1:1a:93:2d:1e:75:97:f3:4f:53:bd:94:c8: 23:aa:5a:98:45:6f:85:8e:1b:30:5a:3d:ed:1b:b4: e4:31:8f:ed:c6:77:31:04:ab:10:b4:b8:da:fb:7c: 00:30:58:72:e3:7c:63:a7:72:d8:c7:95:bd:4a:c1: 22:c6:e7:26:0f:35:c4:26:8d:b5:5e:bb:1a:94:ba: 63:ef:db:db:f5:11:e9:1e:b7:c6:55:94:73:2d:ab: 4a:63:3a:80:ca:1a:94:f0:42:11:a3:52:89:2c:50: 7f:64:c4:93:a0:aa:9c:8b:31:b5:7e:63:05:58:77: ec:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:96:99:DF:CE:B2:55:59:4C:A7:A6:9B:F0:8F:C4:0C:F9:34:B4:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a11e2bc2-1e0e-354d-bd14-108c085092c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.228.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ef:0b:66:4c:c5:6d:95:64:b3:0e:8f:12:e3:54:99:b3:15: 2a:b7:89:6d:02:a2:41:29:6e:15:bf:88:b6:51:af:95:38:4b: dd:4e:a1:a2:c7:c5:9b:7f:f5:39:95:7e:cc:41:df:85:c4:a9: 64:48:ee:66:7f:00:e0:38:6d:be:fd:5c:49:71:ed:1f:66:4d: 09:ef:7f:5c:e7:40:83:40:05:92:43:77:7f:05:c3:2f:ab:cd: 4c:fa:8a:eb:cb:3f:a2:1a:47:88:79:6e:e1:ca:ca:ae:bd:6d: 5e:24:27:d3:e3:b9:5d:81:ef:f4:89:b8:b1:8b:08:37:36:68: ec:a5:fd:03:af:e3:1d:29:db:f5:e9:ae:04:fc:e0:81:4d:da: f3:2e:2c:f2:3a:d9:cd:a7:0f:c5:e4:4f:cb:15:5b:44:2c:d1: 66:22:59:1a:cc:f9:45:b9:4f:5b:70:48:f5:b3:38:77:c7:02: e7:6f:0d:7a:05:89:49:95:05:31:b2:b2:4c:f4:32:75:6a:67: d4:7b:15:38:3d:23:d5:56:c0:a8:4a:a8:35:b3:80:55:21:23: cf:d7:2e:23:71:57:b4:41:c2:37:f2:b9:42:37:c5:eb:ec:bb: 85:68:38:ca:a9:eb:e6:d8:fc:d2:71:73:4e:c4:cf:17:19:dc: bd:4d:82:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfrI0dX7jLljXymIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk NTAzYTgzMDEtZWM5NC00NGY1LThkMzItN2VlZjVlZjhjOWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooOHGdQfwuC2bAmt4ace4mpoaZQCGJrkeHoS ZUbgmpAh5olTe3fh588LREEwcbCeUmbovpMFq/J6eAZgSpB7jUvQvh2kY2+S5ybg LI874p4FjjSqaF1SL5USWPd0+ldMV1FW1Cn6nyAigJafCLECRacvBqTtOl2HRyzw /7qjevIkxgVpi6TQQbEaky0edZfzT1O9lMgjqlqYRW+FjhswWj3tG7TkMY/txncx BKsQtLja+3wAMFhy43xjp3LYx5W9SsEixucmDzXEJo21XrsalLpj79vb9RHpHrfG VZRzLatKYzqAyhqU8EIRo1KJLFB/ZMSToKqcizG1fmMFWHfssQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKWmd/OslVZTKemm/CPxAz5NLRlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTExZTJiYzItMWUwZS0z NTRkLWJkMTQtMTA4YzA4NTA5MmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+T4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDvC2ZMxW2VZLMOjxLjVJmzFSq3iW0CokEpbhW/iLZRr5U4S91OoaLH xZt/9TmVfsxB34XEqWRI7mZ/AOA4bb79XElx7R9mTQnvf1znQINABZJDd38Fwy+r zUz6iuvLP6IaR4h5buHKyq69bV4kJ9PjuV2B7/SJuLGLCDc2aOyl/QOv4x0p2/Xp rgT84IFN2vMuLPI62c2nD8XkT8sVW0Qs0WYiWRrM+UW5T1twSPWzOHfHAudvDXoF iUmVBTGyskz0MnVqZ9R7FTg9I9VWwKhKqDWzgFUhI8/XLiNxV7RBwjfyuUI3xevs u4VoOMqp6+bY/NJxc07EzxcZ3L1Ngkw= -----END CERTIFICATE-----Generated at Sat May 4 14:55:21 2024 by rpki-client on console-ams.rpki-client.org