$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca1f9248-172d-3de1-9ca1-9118ba234c72.roa File: ca1f9248-172d-3de1-9ca1-9118ba234c72.roa (raw, json) Hash identifier: /3uePBC5+Ey8IvYbgSwLhMY+wfUiKsxwipFatUGhB64= Subject key identifier: 9A:2C:6C:1B:32:25:00:AD:C2:74:C2:E5:17:54:1F:45:B1:EE:EC:D2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285845AC89E6B0B9873BFD2D010B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca1f9248-172d-3de1-9ca1-9118ba234c72.roa Signing time: Fri 26 Apr 2024 13:00:35 +0000 ROA not before: Fri 26 Apr 2024 13:00:35 +0000 ROA not after: Thu 25 Jul 2024 13:00:35 +0000 asID: 33287 IP address blocks: 71.225.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ac:89:e6:b0:b9:87:3b:fd:2d:01:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 26 13:00:35 2024 GMT Not After : Jul 25 13:00:35 2024 GMT Subject: CN=46ffe5ad-edc9-4b72-96d7-a5e210be0321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6d:ef:98:01:3f:72:1a:d6:4e:6e:b5:f1:99: aa:a1:7b:8a:4b:7c:c1:90:e8:db:4a:d0:72:ca:ed: c0:9f:ac:f3:e3:0d:a6:ff:86:8f:9c:ef:cf:9f:81: 82:02:f2:c4:c6:be:ca:3c:93:e2:44:ce:26:68:9a: e6:b7:ea:c2:47:96:39:3d:31:67:5c:5e:51:d8:9d: cd:64:78:56:db:c9:99:78:d8:69:50:58:0c:21:14: 7f:3e:9b:aa:ed:c5:1b:77:9a:08:5a:04:ca:97:ea: 8f:bf:0a:4f:f7:df:d8:1e:ed:f8:6f:f0:2e:58:d5: 9a:5d:e4:ce:37:f9:2c:79:00:7d:47:63:3f:eb:f8: a4:83:8d:e1:a6:1e:e2:90:5d:34:a9:9e:1c:f5:1a: 56:4d:b5:d3:ef:41:19:64:05:94:59:02:3d:95:07: 7e:5f:d8:0c:f5:28:0e:03:04:f6:c6:19:16:8e:69: 01:bc:aa:ae:d8:24:ad:07:6c:2d:a1:0d:91:27:41: d7:6f:87:8c:63:a1:84:89:53:9b:bc:f4:7a:ca:54: 13:04:f2:13:3c:ff:cf:8c:35:27:74:2b:4f:79:5d: 03:8a:e0:2f:c5:bf:83:b4:24:65:7d:ba:95:59:a2: 23:0d:0c:6e:2e:7a:26:7e:53:c1:01:68:72:d0:0e: 9d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2C:6C:1B:32:25:00:AD:C2:74:C2:E5:17:54:1F:45:B1:EE:EC:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca1f9248-172d-3de1-9ca1-9118ba234c72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.225.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:8b:29:a3:0f:3d:42:f7:31:50:0d:5e:f2:b1:c7:9f:9a:38: cf:e7:3a:a9:21:a6:b1:7f:f0:63:4c:c2:cb:e7:ff:73:15:57: ba:f7:88:c3:0f:85:90:dd:79:d9:5c:9d:61:61:33:f0:f3:bc: fe:70:6e:1f:54:7f:cc:89:64:4f:76:e4:59:7e:50:53:66:26: dc:23:31:04:6e:6d:1f:50:a4:44:32:a4:82:c9:e1:b1:c6:8e: ae:88:25:1a:d6:91:16:e4:93:af:be:60:70:95:0e:1b:86:5d: 71:6b:37:dd:3c:33:9f:73:df:cd:b4:7a:34:52:e4:36:64:2a: 4c:74:dc:e9:55:ee:3b:1f:13:e3:46:2d:44:2c:b4:3f:db:28: 8a:45:28:25:68:4b:63:74:81:72:dc:24:a3:d6:ea:9b:35:b2: 7d:f1:b6:32:a4:7a:f2:ae:55:6e:a5:a8:f8:b1:c9:ef:bb:7b: 5e:e4:96:38:98:af:4e:1a:e2:fb:bc:bc:7d:b8:f6:dd:ff:5f: dd:b8:e5:bd:d4:83:c2:e6:18:45:b1:25:90:1a:0f:19:40:7d: 93:51:d4:b2:db:51:f4:7d:05:bb:51:77:cf:9f:35:8d:9b:9a: 98:f2:85:a1:f0:ae:29:79:0c:bf:5d:bb:22:22:08:9a:50:bd: 4d:6f:73:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsieawuYc7/S0BCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk NDZmZmU1YWQtZWRjOS00YjcyLTk2ZDctYTVlMjEwYmUwMzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi23vmAE/chrWTm618ZmqoXuKS3zBkOjbStBy yu3An6zz4w2m/4aPnO/Pn4GCAvLExr7KPJPiRM4maJrmt+rCR5Y5PTFnXF5R2J3N ZHhW28mZeNhpUFgMIRR/Ppuq7cUbd5oIWgTKl+qPvwpP99/YHu34b/AuWNWaXeTO N/kseQB9R2M/6/ikg43hph7ikF00qZ4c9RpWTbXT70EZZAWUWQI9lQd+X9gM9SgO AwT2xhkWjmkBvKqu2CStB2wtoQ2RJ0HXb4eMY6GEiVObvPR6ylQTBPITPP/PjDUn dCtPeV0DiuAvxb+DtCRlfbqVWaIjDQxuLnomflPBAWhy0A6dEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJosbBsyJQCtwnTC5RdUH0Wx7uzSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ExZjkyNDgtMTcyZC0z ZGUxLTljYTEtOTExOGJhMjM0YzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+GAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSLKaMPPUL3MVANXvKxx5+aOM/nOqkhprF/8GNMwsvn/3MVV7r3iMMP hZDdedlcnWFhM/DzvP5wbh9Uf8yJZE925Fl+UFNmJtwjMQRubR9QpEQypILJ4bHG jq6IJRrWkRbkk6++YHCVDhuGXXFrN908M59z3820ejRS5DZkKkx03OlV7jsfE+NG LUQstD/bKIpFKCVoS2N0gXLcJKPW6ps1sn3xtjKkevKuVW6lqPixye+7e17kljiY r04a4vu8vH249t3/X9245b3Ug8LmGEWxJZAaDxlAfZNR1LLbUfR9BbtRd8+fNY2b mpjyhaHwril5DL9duyIiCJpQvU1vc0o= -----END CERTIFICATE-----Generated at Sat May 4 14:57:35 2024 by rpki-client on console-ams.rpki-client.org