$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3df5f7f2-1897-3f28-a5b1-cbca9f2c7421.roa File: 3df5f7f2-1897-3f28-a5b1-cbca9f2c7421.roa (raw, json) Hash identifier: MpZ35jVMs2xENfwgNaRwFfnTGMdoahqvW4qoiKKaNcw= Subject key identifier: E5:E6:AD:9A:4B:98:4F:9C:50:BF:C4:2C:DE:C4:31:27:65:E6:30:54 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328583E6B47DBB09FDF0118E172A460 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3df5f7f2-1897-3f28-a5b1-cbca9f2c7421.roa Signing time: Thu 30 Jun 2022 12:00:00 +0000 ROA not before: Thu 30 Jun 2022 12:00:00 +0000 ROA not after: Sun 19 Sep 2027 04:00:00 +0000 asID: 13335 IP address blocks: 172.71.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3e:6b:47:db:b0:9f:df:01:18:e1:72:a4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 30 12:00:00 2022 GMT Not After : Sep 19 04:00:00 2027 GMT Subject: CN=6ba1d968-6318-4e7b-8aa7-39af94669e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:1e:d0:7a:ef:b8:c0:16:8a:42:5f:0d:eb:64: 0d:7a:00:80:6a:25:8f:03:98:0e:6e:06:38:29:4f: de:32:40:d5:6c:ab:3d:f7:64:10:30:c9:76:67:6e: 41:f0:2a:1d:f4:00:f0:cf:0a:87:b4:3f:30:a2:2d: 08:3d:8a:40:ac:d0:f6:0a:d2:a0:39:61:be:f4:dc: db:97:04:b5:ad:e7:94:70:6a:d0:ff:0e:be:d8:6b: 31:aa:fa:98:b0:6f:f2:0a:06:f6:18:80:34:ee:6c: 71:32:87:81:d4:bb:2f:50:0a:86:96:94:5d:57:a7: c0:c6:37:35:11:91:63:0b:a1:8d:0e:1e:59:1f:d2: b4:e3:46:37:0d:2d:64:2b:c2:ca:11:f9:39:c3:b8: fb:24:e4:71:ad:c7:c9:27:4d:4f:fc:1b:72:2e:5e: 1a:a1:e3:5f:6f:60:05:7a:8b:47:d1:6a:31:96:a0: b3:87:b8:0f:95:42:b3:5c:b4:63:b5:9c:2b:f0:4e: 12:b0:2a:4d:d6:a9:3f:6e:36:43:52:e3:e8:fb:e3: 27:3c:13:73:76:15:80:e8:f3:68:6c:ce:ec:8b:57: f2:8a:4d:be:bb:9f:5b:e8:14:43:f5:8c:26:e3:10: 5e:17:a4:05:b8:b9:94:9d:2a:19:e2:9f:d4:f3:55: 1a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E6:AD:9A:4B:98:4F:9C:50:BF:C4:2C:DE:C4:31:27:65:E6:30:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3df5f7f2-1897-3f28-a5b1-cbca9f2c7421.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:c4:d0:b3:bc:96:08:4c:1d:b4:d3:6e:0f:7d:13:16:26:ed: bf:5f:5d:4c:35:df:99:31:e2:65:74:1a:cd:f9:24:fc:cb:cd: b9:3a:b0:09:dd:33:1c:3f:bc:51:0c:63:51:94:ee:94:20:ab: 5d:ac:45:81:5e:56:a8:e1:e4:2d:11:8a:8a:42:01:18:46:31: c0:0f:0f:f8:b8:c5:0d:38:fe:0a:84:90:ec:3a:7a:97:92:aa: 22:1f:58:7f:fa:e7:bd:ca:e7:07:34:c3:10:26:14:0c:43:01: 1e:3b:aa:d4:b4:c9:23:f6:5b:18:4d:c3:fa:1f:10:ca:c3:6d: cd:1b:70:6f:94:17:8c:d7:3f:1f:10:22:14:89:d3:14:55:66: 99:54:e0:59:c0:09:79:40:e2:87:76:df:f4:af:f9:25:aa:b8: 64:6e:8a:65:25:4c:2c:e2:4e:d1:40:19:32:8b:f5:4d:e3:19: e2:28:8a:94:55:b4:a2:59:f9:92:0c:ce:c3:1b:b4:56:6d:05: f9:dc:4e:b3:a6:94:75:bd:ff:aa:e7:5a:08:61:6f:ad:06:47: a3:9e:ab:04:df:9d:ed:8d:ff:f5:bf:1c:f7:2f:0c:87:a9:96: e2:25:3b:9d:20:62:23:a5:8e:1d:64:75:35:0a:14:a4:7f:ab: 86:2b:4b:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD5rR9uwn98BGOFypGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTIyMDYzMDEyMDAwMFoXDTI3MDkxOTA0MDAwMFowLzEtMCsGA1UEAxMk NmJhMWQ5NjgtNjMxOC00ZTdiLThhYTctMzlhZjk0NjY5ZTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8R7Qeu+4wBaKQl8N62QNegCAaiWPA5gObgY4 KU/eMkDVbKs992QQMMl2Z25B8Cod9ADwzwqHtD8woi0IPYpArND2CtKgOWG+9Nzb lwS1reeUcGrQ/w6+2GsxqvqYsG/yCgb2GIA07mxxMoeB1LsvUAqGlpRdV6fAxjc1 EZFjC6GNDh5ZH9K040Y3DS1kK8LKEfk5w7j7JORxrcfJJ01P/BtyLl4aoeNfb2AF eotH0WoxlqCzh7gPlUKzXLRjtZwr8E4SsCpN1qk/bjZDUuPo++MnPBNzdhWA6PNo bM7si1fyik2+u59b6BRD9Ywm4xBeF6QFuLmUnSoZ4p/U81Ua7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXmrZpLmE+cUL/ELN7EMSdl5jBUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2RmNWY3ZjItMTg5Ny0z ZjI4LWE1YjEtY2JjYTlmMmM3NDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL7E0LO8lghMHbTTbg99ExYm7b9fXUw135kx4mV0Gs35JPzLzbk6sAnd Mxw/vFEMY1GU7pQgq12sRYFeVqjh5C0RiopCARhGMcAPD/i4xQ04/gqEkOw6epeS qiIfWH/6573K5wc0wxAmFAxDAR47qtS0ySP2WxhNw/ofEMrDbc0bcG+UF4zXPx8Q IhSJ0xRVZplU4FnACXlA4od23/Sv+SWquGRuimUlTCziTtFAGTKL9U3jGeIoipRV tKJZ+ZIMzsMbtFZtBfncTrOmlHW9/6rnWghhb60GR6OeqwTfne2N//W/HPcvDIep luIlO50gYiOljh1kdTUKFKR/q4YrS0I= -----END CERTIFICATE-----Generated at Sat May 11 15:25:06 2024 by rpki-client on console-ams.rpki-client.org