$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/479c01b5-a8e2-3f90-b8dc-12d0d4ccda76.roa File: 479c01b5-a8e2-3f90-b8dc-12d0d4ccda76.roa (raw, json) Hash identifier: ZISQzi7+PqaFRE8cNd5S5SNI+4qYgeKmSLlbl723Hq0= Subject key identifier: A1:D6:36:37:13:C7:8A:7A:1B:2D:61:BB:1A:E9:BA:CB:1B:8C:8A:3C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328583CAB25E8AB0D31D3A105284940 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/479c01b5-a8e2-3f90-b8dc-12d0d4ccda76.roa Signing time: Fri 21 Jan 2022 05:00:00 +0000 ROA not before: Fri 21 Jan 2022 05:00:00 +0000 ROA not after: Tue 09 May 2028 04:00:00 +0000 asID: 13335 IP address blocks: 172.70.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3c:ab:25:e8:ab:0d:31:d3:a1:05:28:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 21 05:00:00 2022 GMT Not After : May 9 04:00:00 2028 GMT Subject: CN=9c94be0f-c9d9-4cf5-9c0d-edb8ba9de867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ea:68:4e:b4:6a:1f:fd:33:d7:e3:52:72:b1: 89:71:ce:a4:8d:d3:0d:d8:5b:39:c2:77:70:0e:f7: 94:20:b6:9b:78:d7:2d:1f:37:78:fb:4d:1f:50:c1: 9a:c7:9e:94:35:d6:1a:15:21:b9:fa:8b:19:e0:a2: 5f:c7:83:28:1a:9c:4b:e0:bd:0b:53:20:f9:95:df: d0:5b:0f:52:ea:9b:fc:54:f7:9e:0f:e1:ce:d0:5a: e3:f9:4b:1d:11:43:11:da:cd:72:80:ea:82:1e:1a: ca:15:45:e7:03:84:06:a6:96:e5:24:6a:d5:d2:cb: 44:cc:ae:79:c1:ae:24:db:69:28:b9:b0:97:8d:a1: 8c:e7:71:39:31:65:47:fb:a0:06:e6:09:cc:19:85: f3:28:b0:26:0d:fc:2f:26:88:7d:78:a1:b4:fb:75: ac:96:f5:d6:56:70:ef:d0:4e:6e:ad:ea:90:78:ee: a8:6a:53:a6:72:cc:45:56:64:83:95:03:70:88:bb: 78:35:5c:67:56:eb:f1:93:67:c9:45:98:d2:1c:1d: 86:ba:28:4d:69:b3:95:96:03:06:43:40:f0:78:8d: db:c7:1a:33:f8:f6:18:7b:8b:54:e0:f9:89:70:d7: 8f:89:f6:4a:a0:a5:c5:47:d5:f1:79:cd:2b:87:d0: 18:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D6:36:37:13:C7:8A:7A:1B:2D:61:BB:1A:E9:BA:CB:1B:8C:8A:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/479c01b5-a8e2-3f90-b8dc-12d0d4ccda76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:fc:1e:1d:75:a1:81:66:8e:45:ff:e5:69:60:7d:11:4f:8d: 7b:b2:0b:09:21:ed:64:b8:e2:c4:5c:72:d1:92:68:f9:bb:f0: 00:b3:87:98:3e:5f:36:e6:ae:56:cc:d1:91:bf:b4:ef:13:af: d9:d8:88:86:59:b2:0b:3f:c5:82:49:3c:60:ec:87:46:cf:c4: 2d:49:81:eb:c2:96:ed:2c:93:68:8e:25:36:00:3b:37:e6:45: c0:26:1d:a6:72:d3:7e:a2:8c:72:b8:31:94:69:72:56:e3:57: 5c:23:43:67:00:34:ad:8d:5b:aa:ea:74:7a:f1:51:02:3f:4d: b6:4a:f8:e8:a2:48:fd:b8:22:ab:18:a4:5a:d0:a6:e4:8d:4c: 70:26:70:d1:e6:f6:33:9c:43:98:07:f8:17:f8:53:d9:d6:8c: 11:3e:af:5c:0f:8a:83:bc:84:a0:a6:15:1a:f1:f0:72:4f:b6: b6:09:00:6e:c7:57:11:96:c6:fd:1e:83:e5:2b:a1:6b:2b:36: 6b:d6:65:fa:d5:44:d8:59:92:0c:21:c6:7d:af:43:bd:43:a8: 7e:31:a9:b1:e1:ef:c0:18:1e:5f:c7:2d:e7:b5:df:33:d4:f7: 27:41:42:62:16:4f:fe:fb:e9:93:8b:4f:0c:5a:30:d2:f4:c0: 1e:ed:7d:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDyrJeirDTHToQUoSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTIyMDEyMTA1MDAwMFoXDTI4MDUwOTA0MDAwMFowLzEtMCsGA1UEAxMk OWM5NGJlMGYtYzlkOS00Y2Y1LTljMGQtZWRiOGJhOWRlODY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+poTrRqH/0z1+NScrGJcc6kjdMN2Fs5wndw DveUILabeNctHzd4+00fUMGax56UNdYaFSG5+osZ4KJfx4MoGpxL4L0LUyD5ld/Q Ww9S6pv8VPeeD+HO0Frj+UsdEUMR2s1ygOqCHhrKFUXnA4QGppblJGrV0stEzK55 wa4k22koubCXjaGM53E5MWVH+6AG5gnMGYXzKLAmDfwvJoh9eKG0+3WslvXWVnDv 0E5ureqQeO6oalOmcsxFVmSDlQNwiLt4NVxnVuvxk2fJRZjSHB2GuihNabOVlgMG Q0DweI3bxxoz+PYYe4tU4PmJcNePifZKoKXFR9Xxec0rh9AYOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHWNjcTx4p6Gy1huxrpussbjIo8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDc5YzAxYjUtYThlMi0z ZjkwLWI4ZGMtMTJkMGQ0Y2NkYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHr8Hh11oYFmjkX/5WlgfRFPjXuyCwkh7WS44sRcctGSaPm78ACzh5g+ XzbmrlbM0ZG/tO8Tr9nYiIZZsgs/xYJJPGDsh0bPxC1JgevClu0sk2iOJTYAOzfm RcAmHaZy036ijHK4MZRpclbjV1wjQ2cANK2NW6rqdHrxUQI/TbZK+OiiSP24IqsY pFrQpuSNTHAmcNHm9jOcQ5gH+Bf4U9nWjBE+r1wPioO8hKCmFRrx8HJPtrYJAG7H VxGWxv0eg+UroWsrNmvWZfrVRNhZkgwhxn2vQ71DqH4xqbHh78AYHl/HLee13zPU 9ydBQmIWT/776ZOLTwxaMNL0wB7tfcs= -----END CERTIFICATE-----Generated at Sat May 11 02:51:08 2024 by rpki-client on console-ams.rpki-client.org