$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d32f3f1b-47a5-3201-b5c4-5f710806e110.roa File: d32f3f1b-47a5-3201-b5c4-5f710806e110.roa (raw, json) Hash identifier: 2k6+/bOCiSTTnCfmnhy2rmXNUpxU3OBklXBNt15bseA= Subject key identifier: 9E:2F:11:78:52:01:EA:C1:40:26:25:EA:82:DA:DE:BB:93:7E:F9:EE Certificate issuer: /CN=4edd6357-2935-4b92-8130-68071d4eaf01 Certificate serial: 010D0C9F432858456C530A7320B99EA13D79F880 Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d32f3f1b-47a5-3201-b5c4-5f710806e110.roa Signing time: Wed 03 Apr 2024 13:00:37 +0000 ROA not before: Wed 03 Apr 2024 13:00:37 +0000 ROA not after: Tue 02 Jul 2024 13:00:37 +0000 asID: 20127 IP address blocks: 69.128.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6c:53:0a:73:20:b9:9e:a1:3d:79:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01 Validity Not Before: Apr 3 13:00:37 2024 GMT Not After : Jul 2 13:00:37 2024 GMT Subject: CN=437d5ff8-01b6-4935-b46d-a5c987edcbac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b2:32:ce:52:44:e1:a4:27:23:b2:bc:5e:40: 07:70:64:28:8c:52:21:98:e3:41:82:13:50:8a:e5: 4f:b2:98:76:54:cc:5e:f4:f2:9e:3f:47:4b:a2:67: a2:ed:d7:34:bd:f4:e5:fd:ca:0f:b0:ed:fd:9e:38: 7c:2e:ac:ce:13:ad:9b:8c:5b:89:a5:66:9f:d4:62: 38:53:55:cd:32:e5:5d:33:80:c6:87:65:bf:8d:0b: 46:6f:52:18:c3:8b:68:16:8a:3a:0f:35:a2:83:77: 44:d0:4a:cd:42:38:20:63:53:ff:8b:12:87:f8:df: 1b:51:9e:65:e8:1b:fc:23:7d:52:1b:24:d3:ba:26: be:69:37:0f:a4:be:ec:0e:40:8f:49:ab:28:8b:57: 1a:64:cf:09:09:00:c9:06:df:7e:ba:d0:dc:df:32: a5:04:6f:7e:da:65:a6:e3:d6:76:1a:1c:75:c6:77: 2a:94:82:6f:59:0b:e7:6a:51:f3:5e:bf:93:1f:91: 3f:f2:a4:18:ae:0e:02:50:21:b8:85:1c:4f:2c:65: 3d:22:04:8f:f7:39:66:59:98:21:ea:c1:7b:3d:f5: 8b:90:88:cb:70:0b:cb:f7:3d:68:e0:35:79:ab:02: f0:6d:49:c4:38:9b:b8:f4:9a:bd:60:91:39:d4:a3: 0e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:2F:11:78:52:01:EA:C1:40:26:25:EA:82:DA:DE:BB:93:7E:F9:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d32f3f1b-47a5-3201-b5c4-5f710806e110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl X509v3 Authority Key Identifier: keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer sbgp-ipAddrBlock: critical IPv4: 69.128.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:22:78:4b:57:11:ae:2c:b8:d2:3f:9f:7f:0d:e9:fa:e0:7c: 61:7a:7e:f9:47:8e:27:63:b0:3a:a7:b6:ae:99:87:1e:55:8a: 58:bd:a2:dd:47:69:20:b6:20:d8:e2:b2:35:25:fc:6d:82:62: b7:b5:39:78:90:72:e0:0b:00:c9:fc:4a:9d:ad:12:a6:f4:e2: a3:31:6b:8f:39:8a:38:f5:b0:59:9c:a1:7b:44:74:fa:fe:39: b5:52:98:81:9c:5b:60:0a:ff:77:0f:b9:82:fc:00:11:a8:b0: 6f:48:4c:33:69:c3:4c:75:1e:fc:c4:d0:1a:eb:cb:59:89:ae: 3a:8e:0e:2c:62:26:94:2e:21:91:82:01:11:5a:e1:86:60:5b: bd:49:50:ac:4f:ff:04:e1:39:e1:dc:96:ef:f8:d5:93:d9:5a: 7e:a4:bb:7c:36:ae:f4:d4:de:16:eb:db:ee:10:a2:e5:64:cb: 69:ce:d4:f0:b0:21:25:e2:e5:33:c2:1e:af:ea:83:6b:02:0a: 30:00:a0:b6:4c:57:20:89:26:57:fb:2e:91:7a:fb:77:a7:63: 5a:ee:e3:34:8f:da:09:d1:75:23:24:52:62:18:12:f0:4c:f3: 72:e6:c3:38:e0:25:7b:79:20:29:63:bc:14:8b:03:a1:04:3c: b8:3a:87:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVsUwpzILmeoT15+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVkZDYzNTctMjkzNS00YjkyLTgxMzAtNjgwNzFkNGVh ZjAxMB4XDTI0MDQwMzEzMDAzN1oXDTI0MDcwMjEzMDAzN1owLzEtMCsGA1UEAxMk NDM3ZDVmZjgtMDFiNi00OTM1LWI0NmQtYTVjOTg3ZWRjYmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LIyzlJE4aQnI7K8XkAHcGQojFIhmONBghNQ iuVPsph2VMxe9PKeP0dLomei7dc0vfTl/coPsO39njh8LqzOE62bjFuJpWaf1GI4 U1XNMuVdM4DGh2W/jQtGb1IYw4toFoo6DzWig3dE0ErNQjggY1P/ixKH+N8bUZ5l 6Bv8I31SGyTTuia+aTcPpL7sDkCPSasoi1caZM8JCQDJBt9+utDc3zKlBG9+2mWm 49Z2Ghx1xncqlIJvWQvnalHzXr+TH5E/8qQYrg4CUCG4hRxPLGU9IgSP9zlmWZgh 6sF7PfWLkIjLcAvL9z1o4DV5qwLwbUnEOJu49Jq9YJE51KMOUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4vEXhSAerBQCYl6oLa3ruTfvnuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRk NjM1Ny0yOTM1LTRiOTItODEzMC02ODA3MWQ0ZWFmMDEvZDMyZjNmMWItNDdhNS0z MjAxLWI1YzQtNWY3MTA4MDZlMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVkZDYzNTctMjkzNS00YjkyLTgx MzAtNjgwNzFkNGVhZjAxLzRlZGQ2MzU3LTI5MzUtNGI5Mi04MTMwLTY4MDcxZDRl YWYwMS5jcmwwHwYDVR0jBBgwFoAUDFBNSElnaFxxGqFqTzIP9RhkBw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRkNjM1Ny0yOTM1LTRiOTItODEzMC02ODA3 MWQ0ZWFmMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARYCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgieEtXEa4suNI/n38N6frgfGF6fvlHjidjsDqntq6Zhx5Vili9ot1H aSC2INjisjUl/G2CYre1OXiQcuALAMn8Sp2tEqb04qMxa485ijj1sFmcoXtEdPr+ ObVSmIGcW2AK/3cPuYL8ABGosG9ITDNpw0x1HvzE0Brry1mJrjqODixiJpQuIZGC ARFa4YZgW71JUKxP/wThOeHclu/41ZPZWn6ku3w2rvTU3hbr2+4QouVky2nO1PCw ISXi5TPCHq/qg2sCCjAAoLZMVyCJJlf7LpF6+3enY1ru4zSP2gnRdSMkUmIYEvBM 83LmwzjgJXt5ICljvBSLA6EEPLg6h0A= -----END CERTIFICATE-----Generated at Sun May 12 02:10:14 2024 by rpki-client on console-ams.rpki-client.org