$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/b9adabc2-fc08-39d4-aaca-584aaef77c91.roa File: b9adabc2-fc08-39d4-aaca-584aaef77c91.roa (raw, json) Hash identifier: 4zJbwfLJtFcnwFsPxK41WNq6wdQ9MD8C1vT8r5I/qaM= Subject key identifier: 13:68:D8:56:5E:3C:16:75:1D:D0:1C:50:3C:DB:79:D3:44:A1:FF:04 Certificate issuer: /CN=60af319e-0c74-40e2-b93c-daa51c45791e Certificate serial: 010D0C9F43285845DD63A3B616E0286AEB742380 Authority key identifier: 11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/b9adabc2-fc08-39d4-aaca-584aaef77c91.roa Signing time: Tue 14 May 2024 01:00:24 +0000 ROA not before: Tue 14 May 2024 01:00:24 +0000 ROA not after: Mon 12 Aug 2024 01:00:24 +0000 asID: 8018 IP address blocks: 172.82.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:dd:63:a3:b6:16:e0:28:6a:eb:74:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60af319e-0c74-40e2-b93c-daa51c45791e Validity Not Before: May 14 01:00:24 2024 GMT Not After : Aug 12 01:00:24 2024 GMT Subject: CN=d7cf7deb-93cd-4704-af8f-1e797e6ae086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1b:48:b9:90:30:84:51:a2:51:c9:82:5c:cd: 13:3b:bb:1d:4d:91:c7:7a:95:c8:23:a1:45:b4:9c: c1:2c:49:29:86:4c:b3:3c:6b:3d:6a:a0:c0:79:93: 37:62:26:36:31:d4:ba:75:5c:c6:40:14:96:0a:13: 49:5f:0c:3b:3d:75:d8:64:30:13:bb:9a:62:c9:49: be:37:f5:53:46:b8:cf:32:a9:04:10:3b:e4:ab:8b: c8:84:0b:f6:c1:6f:aa:c3:8d:b5:53:1a:b7:6f:1b: bd:a7:aa:ce:ba:78:c7:10:4f:8e:04:58:18:e2:89: 6b:35:08:44:41:37:bb:f3:9d:21:b7:8f:60:7b:d2: 74:ea:b6:fb:d8:b2:ed:2d:60:0b:77:1b:22:89:2e: 31:50:c8:f9:ee:3f:96:72:76:f0:67:b7:ed:d6:eb: 34:c5:bf:20:3b:22:a6:2d:d7:ce:b6:c6:70:f5:50: ff:eb:ff:a0:dc:e9:d6:14:94:ce:ff:5a:f1:5c:df: c8:ae:0b:e8:60:94:7b:5d:37:5c:cd:93:24:c7:48: c1:74:c0:66:bb:bd:0f:e0:f7:2a:b4:1e:05:81:d4: 0a:a5:08:85:7c:6f:78:b6:a6:a9:a6:e5:e7:75:4e: 00:63:db:08:1e:05:2c:5a:ab:9c:e8:cf:2d:68:0a: c6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:68:D8:56:5E:3C:16:75:1D:D0:1C:50:3C:DB:79:D3:44:A1:FF:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/b9adabc2-fc08-39d4-aaca-584aaef77c91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl X509v3 Authority Key Identifier: keyid:11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer sbgp-ipAddrBlock: critical IPv4: 172.82.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:cd:bc:02:c2:cd:27:53:d5:2b:f9:a8:2a:3a:6f:d3:f0:03: 8e:c0:0e:d8:ed:7d:24:38:a8:ef:80:94:bd:e0:16:c8:09:60: 48:fe:1a:8a:7e:a0:ef:6d:7c:71:29:9e:de:a2:bf:25:31:00: 02:aa:29:fd:40:bc:ed:90:5b:83:48:2a:ad:3b:fd:e2:25:19: 24:bb:c5:cf:74:a0:30:b3:19:e3:5a:26:37:b6:66:7d:c5:e2: 14:21:0a:fd:d5:26:e0:42:9f:47:e5:ac:ea:86:17:72:85:c8: 5f:21:f6:fc:71:b8:4f:e2:4d:48:38:e5:cc:43:32:d6:0a:13: 10:f8:dc:0b:46:fd:85:29:48:3c:8a:8f:17:81:2e:5d:b1:38: 22:bf:a5:39:08:16:8c:bb:7f:23:72:93:de:a0:36:10:57:da: 3e:55:e3:0c:b5:d7:5d:30:c9:71:92:4e:40:1c:53:82:63:31: ba:07:2a:2d:f5:a2:bb:0c:95:02:22:bc:f8:27:3e:a0:a0:a5: 2c:ee:29:5a:e4:02:38:c7:62:f5:b3:32:78:f9:12:33:35:ae: ff:6a:92:5b:24:b6:95:a0:7d:ff:1c:d1:14:fe:43:35:e5:3e: c2:a0:79:e3:54:84:80:c1:55:c9:24:8e:15:4a:e8:27:5e:65: 42:3f:67:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXdY6O2FuAoaut0I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBhZjMxOWUtMGM3NC00MGUyLWI5M2MtZGFhNTFjNDU3 OTFlMB4XDTI0MDUxNDAxMDAyNFoXDTI0MDgxMjAxMDAyNFowLzEtMCsGA1UEAxMk ZDdjZjdkZWItOTNjZC00NzA0LWFmOGYtMWU3OTdlNmFlMDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRtIuZAwhFGiUcmCXM0TO7sdTZHHepXII6FF tJzBLEkphkyzPGs9aqDAeZM3YiY2MdS6dVzGQBSWChNJXww7PXXYZDATu5piyUm+ N/VTRrjPMqkEEDvkq4vIhAv2wW+qw421Uxq3bxu9p6rOunjHEE+OBFgY4olrNQhE QTe7850ht49ge9J06rb72LLtLWALdxsiiS4xUMj57j+WcnbwZ7ft1us0xb8gOyKm LdfOtsZw9VD/6/+g3OnWFJTO/1rxXN/IrgvoYJR7XTdczZMkx0jBdMBmu70P4Pcq tB4FgdQKpQiFfG94tqappuXndU4AY9sIHgUsWquc6M8taArG+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNo2FZePBZ1HdAcUDzbedNEof8EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MGFm MzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1MWM0NTc5MWUvYjlhZGFiYzItZmMwOC0z OWQ0LWFhY2EtNTg0YWFlZjc3YzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjBhZjMxOWUtMGM3NC00MGUyLWI5 M2MtZGFhNTFjNDU3OTFlLzYwYWYzMTllLTBjNzQtNDBlMi1iOTNjLWRhYTUxYzQ1 NzkxZS5jcmwwHwYDVR0jBBgwFoAUEXr3dymdZJzOnFZKgWxC2clfs0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82MGFmMzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1 MWM0NTc5MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFIkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3NvALCzSdT1Sv5qCo6b9PwA47ADtjtfSQ4qO+AlL3gFsgJYEj+Gop+ oO9tfHEpnt6ivyUxAAKqKf1AvO2QW4NIKq07/eIlGSS7xc90oDCzGeNaJje2Zn3F 4hQhCv3VJuBCn0flrOqGF3KFyF8h9vxxuE/iTUg45cxDMtYKExD43AtG/YUpSDyK jxeBLl2xOCK/pTkIFoy7fyNyk96gNhBX2j5V4wy1110wyXGSTkAcU4JjMboHKi31 orsMlQIivPgnPqCgpSzuKVrkAjjHYvWzMnj5EjM1rv9qklsktpWgff8c0RT+QzXl PsKgeeNUhIDBVckkjhVK6CdeZUI/Z50= -----END CERTIFICATE-----Generated at Wed May 22 22:42:55 2024 by rpki-client on console-fra.rpki-client.org