$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd4d8ca6-9d80-3037-8500-6b7722de6d97.roa File: bd4d8ca6-9d80-3037-8500-6b7722de6d97.roa (raw, json) Hash identifier: vc0PsP7DaBI6+vZzYNkZBiZibkOF3U95xpmhohbv3gc= Subject key identifier: C1:10:BF:C4:07:54:77:89:56:D4:8E:C1:D3:E6:8A:52:79:EB:A2:2F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285845304D5E617F06E62AD53BDDE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd4d8ca6-9d80-3037-8500-6b7722de6d97.roa Signing time: Wed 13 Mar 2024 01:00:26 +0000 ROA not before: Wed 13 Mar 2024 01:00:26 +0000 ROA not after: Tue 11 Jun 2024 01:00:26 +0000 asID: 33653 IP address blocks: 71.228.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:30:4d:5e:61:7f:06:e6:2a:d5:3b:dd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 01:00:26 2024 GMT Not After : Jun 11 01:00:26 2024 GMT Subject: CN=c7ba2e03-4873-41d6-a6a7-1bb4efd79dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b5:42:c5:42:75:ed:e6:6d:48:ce:11:c0:92: ed:ca:2a:53:81:19:a8:b5:7a:1e:32:48:28:8e:c6: a9:a3:84:b8:03:e3:22:20:c7:a3:6a:5b:ee:86:cc: bd:48:01:46:77:53:19:b6:69:ae:bb:88:30:78:23: 0d:18:75:db:83:f5:08:54:c0:ff:fb:16:44:54:c7: 53:34:dd:a6:1a:87:fc:dc:3f:c1:33:fa:48:a5:2a: 1d:79:54:f1:7b:36:68:f7:34:3c:a4:b5:df:65:6a: 56:8a:89:74:04:9b:8e:15:63:27:64:c5:1f:c8:62: 2f:84:6f:3c:da:77:78:46:b2:ed:b6:7c:1c:1e:db: e1:53:28:09:c7:f6:56:53:97:8f:cd:22:bc:4c:f0: 75:5d:ef:d7:89:2f:ca:e2:41:9e:11:c4:48:8c:d6: 0f:32:f4:de:59:d4:cc:b4:32:eb:a9:b3:9d:41:69: c1:52:69:c6:54:7d:58:64:cf:ce:82:1f:6d:75:be: c6:bd:93:11:00:a3:f6:9f:6f:eb:71:1c:c0:88:3f: f4:2e:ea:da:d2:5c:51:a5:be:9a:f0:a3:58:76:3b: 2f:41:0e:1e:22:a2:96:62:94:44:4a:6e:bf:a9:4f: e1:e1:53:2a:01:cc:4f:d4:31:43:18:d5:61:29:5f: 4a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:10:BF:C4:07:54:77:89:56:D4:8E:C1:D3:E6:8A:52:79:EB:A2:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd4d8ca6-9d80-3037-8500-6b7722de6d97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.228.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ee:a5:2e:d6:98:27:41:99:6d:30:ac:e1:8d:f7:b6:8e:a4: 87:5a:bc:0b:97:38:6f:0a:25:17:d2:5e:4a:25:db:53:cc:96: 63:d2:b8:9b:0c:76:00:06:a5:ea:7a:1e:e9:3f:0f:a8:3b:7f: 04:94:99:e5:d4:1d:68:00:42:fa:aa:bb:53:37:91:c1:e5:1b: 66:a8:d5:6b:e1:62:f7:0a:27:e2:8e:6b:09:22:51:95:cc:2e: dd:f7:3a:87:2c:fb:69:cf:ca:59:32:9a:56:19:f8:bb:a1:a9: f9:37:db:39:29:83:f4:63:48:a4:27:72:8d:e3:d1:52:00:13: 64:06:45:b1:a9:7b:fe:e9:e7:9d:ac:9e:de:3b:81:b8:4e:ff: 5b:a2:d5:9f:50:bc:86:60:45:de:62:0f:c1:4e:48:02:60:26: 8d:04:e4:9f:f8:df:4a:f0:66:2c:2a:64:7a:7c:38:21:cd:d8: d0:2d:9d:43:11:a6:9a:31:c2:11:f9:60:9f:63:83:d7:55:9d: d7:9b:5c:94:df:da:3f:f9:bc:41:cf:41:eb:4e:f1:20:ce:de: b6:32:bc:48:d8:79:f1:cf:20:52:04:16:69:04:e3:b7:f3:09: be:ab:e2:10:f4:64:21:69:9f:b9:a9:79:6c:37:e1:98:fc:39: b9:1f:4f:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUwTV5hfwbmKtU73eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMxMzAxMDAyNloXDTI0MDYxMTAxMDAyNlowLzEtMCsGA1UEAxMk YzdiYTJlMDMtNDg3My00MWQ2LWE2YTctMWJiNGVmZDc5ZGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbVCxUJ17eZtSM4RwJLtyipTgRmotXoeMkgo jsapo4S4A+MiIMejalvuhsy9SAFGd1MZtmmuu4gweCMNGHXbg/UIVMD/+xZEVMdT NN2mGof83D/BM/pIpSodeVTxezZo9zQ8pLXfZWpWiol0BJuOFWMnZMUfyGIvhG88 2nd4RrLttnwcHtvhUygJx/ZWU5ePzSK8TPB1Xe/XiS/K4kGeEcRIjNYPMvTeWdTM tDLrqbOdQWnBUmnGVH1YZM/Ogh9tdb7GvZMRAKP2n2/rcRzAiD/0Lura0lxRpb6a 8KNYdjsvQQ4eIqKWYpRESm6/qU/h4VMqAcxP1DFDGNVhKV9K8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEQv8QHVHeJVtSOwdPmilJ566IvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmQ0ZDhjYTYtOWQ4MC0z MDM3LTg1MDAtNmI3NzIyZGU2ZDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER+SQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjupS7WmCdBmW0wrOGN97aOpIdavAuXOG8KJRfSXkol21PMlmPSuJsM dgAGpep6Huk/D6g7fwSUmeXUHWgAQvqqu1M3kcHlG2ao1WvhYvcKJ+KOawkiUZXM Lt33Oocs+2nPylkymlYZ+Luhqfk32zkpg/RjSKQnco3j0VIAE2QGRbGpe/7p552s nt47gbhO/1ui1Z9QvIZgRd5iD8FOSAJgJo0E5J/430rwZiwqZHp8OCHN2NAtnUMR ppoxwhH5YJ9jg9dVndebXJTf2j/5vEHPQetO8SDO3rYyvEjYefHPIFIEFmkE47fz Cb6r4hD0ZCFpn7mpeWw34Zj8ObkfT/s= -----END CERTIFICATE-----Generated at Sat May 4 14:55:25 2024 by rpki-client on console-fra.rpki-client.org