$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd2916aa-e4c9-3ef1-942e-d7e04d874267.roa File: cd2916aa-e4c9-3ef1-942e-d7e04d874267.roa (raw, json) Hash identifier: RJkwRW9Js4RnELBwLF9JTrc/E+1rYwr2pPbQazvRUs0= Subject key identifier: 02:D1:90:06:06:03:60:EC:26:48:2E:B6:09:81:E8:3E:2E:9A:8D:69 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285845AC899DC012D5023A8BF00D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd2916aa-e4c9-3ef1-942e-d7e04d874267.roa Signing time: Fri 26 Apr 2024 13:00:35 +0000 ROA not before: Fri 26 Apr 2024 13:00:35 +0000 ROA not after: Thu 25 Jul 2024 13:00:35 +0000 asID: 33659 IP address blocks: 73.29.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ac:89:9d:c0:12:d5:02:3a:8b:f0:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 26 13:00:35 2024 GMT Not After : Jul 25 13:00:35 2024 GMT Subject: CN=ff58c11a-0f86-479d-b3d5-b33b10c670cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:25:ee:ce:44:b9:b1:f2:0a:f5:b5:18:1b:3a: 5f:3c:c9:18:98:60:87:1c:fb:84:0f:31:c0:d4:b8: a2:1f:15:4a:0c:92:60:dc:99:5a:2d:06:85:28:e2: 19:83:fa:ee:43:1f:c9:ff:f7:cf:30:cc:cf:3f:49: 82:b7:1c:5b:f6:6d:c3:6d:48:a9:fb:54:58:7d:4b: 55:f4:19:b9:d2:dc:19:63:35:88:65:3b:b5:78:0c: 7d:ff:9b:1b:a7:9f:92:31:ee:86:d7:cb:68:9d:14: 27:cd:00:2b:fb:dd:df:f9:e3:b0:5b:25:ce:0b:70: fb:b5:69:8e:67:2d:f7:09:56:75:7f:63:9d:d3:d7: 1e:43:dc:d2:4f:43:0a:85:fa:e6:c9:57:24:db:47: 06:2d:be:02:a0:df:e5:ad:c1:1e:ae:95:10:d7:a1: 5a:5c:c6:f9:12:d8:60:76:20:78:4f:7b:d1:d1:0a: 26:78:b8:5b:bd:a7:18:c8:d8:ea:c0:f7:bf:de:d7: 93:c5:65:ff:b0:0a:93:97:e0:cf:f4:89:4c:84:cf: d7:15:ea:94:b2:d9:50:df:ff:6a:15:7e:81:a5:bc: 5e:6e:28:38:d5:be:be:a2:dd:85:7a:80:83:d5:1a: f9:07:03:17:f2:e9:28:fb:f3:ba:e1:03:52:3c:3d: 4e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D1:90:06:06:03:60:EC:26:48:2E:B6:09:81:E8:3E:2E:9A:8D:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd2916aa-e4c9-3ef1-942e-d7e04d874267.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.29.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:6a:1b:b3:a1:07:8e:39:1e:08:91:a5:a8:e7:b3:8d:10:bb: 71:65:7b:8b:11:39:cc:a6:80:36:fc:16:64:cc:4d:e7:2e:9f: 64:0d:11:35:51:12:e5:bb:16:f9:39:c5:95:d5:71:00:1d:bd: 00:7a:b7:ea:6e:28:42:3d:12:31:0a:da:2a:59:69:12:96:fe: c3:38:b8:2d:93:aa:ac:8f:56:57:8f:62:57:06:ba:54:07:5f: 26:e9:8d:92:43:2d:95:79:15:ae:e3:62:2a:e3:8c:30:eb:ca: 9e:70:b5:80:d6:29:b9:23:7b:03:54:3e:f2:d1:ef:0e:ae:1a: 2d:31:55:2c:54:42:55:8b:a9:dc:84:3a:e7:ef:48:a9:31:2b: 62:27:e1:1f:af:36:2b:01:2c:62:1f:c5:47:d9:e1:b1:4e:42: cf:84:e9:e0:c7:a7:7f:ac:9c:af:25:91:11:6a:34:61:c5:4a: f4:04:d9:b3:4e:96:9b:de:d6:62:10:7e:b3:30:57:a4:77:49: b8:a7:eb:5f:06:37:10:73:6b:ea:9d:42:f5:a3:d3:7c:bb:4c: 65:6f:22:bd:03:13:0a:7b:b0:db:e2:91:0f:51:cb:1b:cf:71: 0b:a8:0e:bb:81:51:f0:26:09:ba:72:2d:7a:e8:97:55:80:09: ff:17:aa:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsiZ3AEtUCOovwDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk ZmY1OGMxMWEtMGY4Ni00NzlkLWIzZDUtYjMzYjEwYzY3MGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiXuzkS5sfIK9bUYGzpfPMkYmGCHHPuEDzHA 1LiiHxVKDJJg3JlaLQaFKOIZg/ruQx/J//fPMMzPP0mCtxxb9m3DbUip+1RYfUtV 9Bm50twZYzWIZTu1eAx9/5sbp5+SMe6G18tonRQnzQAr+93f+eOwWyXOC3D7tWmO Zy33CVZ1f2Od09ceQ9zST0MKhfrmyVck20cGLb4CoN/lrcEerpUQ16FaXMb5Ethg diB4T3vR0QomeLhbvacYyNjqwPe/3teTxWX/sAqTl+DP9IlMhM/XFeqUstlQ3/9q FX6Bpbxebig41b6+ot2FeoCD1Rr5BwMX8uko+/O64QNSPD1ObQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALRkAYGA2DsJkgutgmB6D4umo1pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2QyOTE2YWEtZTRjOS0z ZWYxLTk0MmUtZDdlMDRkODc0MjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSR3eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlqG7OhB445HgiRpajns40Qu3Fle4sROcymgDb8FmTMTecun2QNETVR EuW7Fvk5xZXVcQAdvQB6t+puKEI9EjEK2ipZaRKW/sM4uC2TqqyPVlePYlcGulQH XybpjZJDLZV5Fa7jYirjjDDryp5wtYDWKbkjewNUPvLR7w6uGi0xVSxUQlWLqdyE OufvSKkxK2In4R+vNisBLGIfxUfZ4bFOQs+E6eDHp3+snK8lkRFqNGHFSvQE2bNO lpve1mIQfrMwV6R3Sbin618GNxBza+qdQvWj03y7TGVvIr0DEwp7sNvikQ9RyxvP cQuoDruBUfAmCbpyLXrol1WACf8XqmQ= -----END CERTIFICATE-----Generated at Sun May 5 02:22:16 2024 by rpki-client on console-ams.rpki-client.org