$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca9070af-a352-30aa-96ec-0c605f7dd366.roa File: ca9070af-a352-30aa-96ec-0c605f7dd366.roa (raw, json) Hash identifier: p/SJ9lgSiVNxLPLfBcH1iuvnkA1L2WxQ7tz8pVBVruE= Subject key identifier: 44:B8:18:31:63:D3:C5:28:42:E1:0F:92:D3:A3:E0:39:B1:7C:2E:83 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAE6128E44DEEC2451B60C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca9070af-a352-30aa-96ec-0c605f7dd366.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33650 IP address blocks: 162.148.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ae:61:28:e4:4d:ee:c2:45:1b:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=33b2a6a8-4cf8-4068-8354-2bc4dabfd709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cf:a0:cd:3e:dd:da:60:e9:e3:10:d0:36:9c: 48:4e:76:31:98:a6:69:2f:69:31:58:df:41:b6:7c: fe:0a:68:79:05:94:8d:d6:a5:0e:7b:53:a5:9a:78: 36:73:05:60:d9:c9:08:57:59:bd:42:1f:4f:c5:4e: de:d5:99:db:6d:3d:aa:31:67:41:27:4b:bb:4f:28: a4:c9:aa:9e:60:63:f7:1c:d5:ce:12:b4:28:24:92: 4d:e1:02:03:f3:ec:f5:08:06:23:67:76:4e:66:4a: 9b:83:6b:ff:b6:56:a3:fa:55:fe:fc:ca:5f:f1:4a: bb:22:ef:0d:cb:37:3f:05:64:d0:d6:ce:8e:9d:ea: 7b:91:d3:d6:83:f7:1b:34:ee:0c:08:43:7a:a4:7a: 2d:c6:a0:b3:23:ee:28:e2:b2:07:94:d7:e1:15:64: e0:23:7a:45:12:30:7c:4f:6b:e5:4b:c1:f2:39:4e: 02:d2:54:52:16:be:92:d2:9b:6c:6a:cd:f6:4c:0d: 2f:74:d8:0c:a4:6e:f7:a4:4a:52:61:46:01:42:7c: c5:54:77:6a:2a:c2:90:23:c3:13:59:26:01:05:66: f7:a4:69:1d:be:8b:97:cd:af:13:8e:c3:c8:ab:63: 71:40:81:4d:35:63:77:22:8a:b9:84:f9:80:fe:ad: 6e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B8:18:31:63:D3:C5:28:42:E1:0F:92:D3:A3:E0:39:B1:7C:2E:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca9070af-a352-30aa-96ec-0c605f7dd366.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 162.148.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:83:00:9f:ec:96:6c:60:9d:93:4d:fc:de:12:b8:73:4e:52: e3:f2:67:e3:e2:fb:55:6a:42:50:48:cb:3c:59:32:cd:91:6b: ef:3a:bb:04:8a:0d:3e:ef:76:67:a6:1b:c1:c0:07:43:a3:10: c4:cf:f1:d5:8c:7f:0e:7b:f8:b9:6a:96:98:78:d6:55:dd:29: ab:7d:15:14:17:cc:6c:07:00:b0:8a:86:58:94:94:4b:87:b2: 4c:60:fd:5c:66:07:6b:b6:f9:b5:a6:d4:eb:61:35:0d:da:73: 5e:0f:d1:7e:14:0e:b4:bb:b5:6c:5c:1c:f6:c6:a6:9b:c3:45: 3f:ba:92:5a:13:15:0b:c6:a0:0e:c9:32:11:73:1e:fe:67:89: 21:fc:77:b0:d5:17:f3:ea:8b:33:c9:65:f4:c6:59:e8:aa:fb: 56:b0:63:50:ac:5f:35:5b:9b:38:45:3a:85:1d:b3:10:8b:5d: a9:13:64:84:7e:31:26:0a:6b:2a:30:ef:20:5d:e4:e1:7a:3e: db:09:ee:df:2c:3f:e6:9a:bc:d2:75:52:e1:06:9f:37:35:9d: a2:d7:e6:26:f1:32:be:fb:b4:93:25:8f:6f:2f:f9:8d:27:41: c0:b4:8e:d6:02:7f:3f:1d:3d:32:e7:9a:91:1b:20:78:6f:2c: 16:ab:7c:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfrmEo5E3uwkUbYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MzNiMmE2YTgtNGNmOC00MDY4LTgzNTQtMmJjNGRhYmZkNzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc+gzT7d2mDp4xDQNpxITnYxmKZpL2kxWN9B tnz+Cmh5BZSN1qUOe1Olmng2cwVg2ckIV1m9Qh9PxU7e1ZnbbT2qMWdBJ0u7Tyik yaqeYGP3HNXOErQoJJJN4QID8+z1CAYjZ3ZOZkqbg2v/tlaj+lX+/Mpf8Uq7Iu8N yzc/BWTQ1s6Onep7kdPWg/cbNO4MCEN6pHotxqCzI+4o4rIHlNfhFWTgI3pFEjB8 T2vlS8HyOU4C0lRSFr6S0ptsas32TA0vdNgMpG73pEpSYUYBQnzFVHdqKsKQI8MT WSYBBWb3pGkdvouXza8TjsPIq2NxQIFNNWN3Ioq5hPmA/q1uoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFES4GDFj08UoQuEPktOj4DmxfC6DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2E5MDcwYWYtYTM1Mi0z MGFhLTk2ZWMtMGM2MDVmN2RkMzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDopSIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGODAJ/slmxgnZNN/N4SuHNOUuPyZ+Pi+1VqQlBIyzxZMs2Ra+86uwSK DT7vdmemG8HAB0OjEMTP8dWMfw57+Llqlph41lXdKat9FRQXzGwHALCKhliUlEuH skxg/VxmB2u2+bWm1OthNQ3ac14P0X4UDrS7tWxcHPbGppvDRT+6kloTFQvGoA7J MhFzHv5niSH8d7DVF/PqizPJZfTGWeiq+1awY1CsXzVbmzhFOoUdsxCLXakTZIR+ MSYKayow7yBd5OF6PtsJ7t8sP+aavNJ1UuEGnzc1naLX5ibxMr77tJMlj28v+Y0n QcC0jtYCfz8dPTLnmpEbIHhvLBarfMw= -----END CERTIFICATE-----Generated at Sat May 4 14:57:36 2024 by rpki-client on console-ams.rpki-client.org