$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/29bb41c5-7ef8-3b98-9f43-b61277fbf751.roa File: 29bb41c5-7ef8-3b98-9f43-b61277fbf751.roa (raw, json) Hash identifier: VYBFdsrf3blfw6ihiKexEcQ8eShi/iZtNHGSDezFjYQ= Subject key identifier: 72:57:BF:E6:B9:8F:EC:A6:C3:DE:A8:A0:2F:42:4C:AB:58:DC:40:4E Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F432858451E459C61DAD9035E4F8047F0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/29bb41c5-7ef8-3b98-9f43-b61277fbf751.roa Signing time: Wed 06 Mar 2024 14:00:31 +0000 ROA not before: Wed 06 Mar 2024 14:00:31 +0000 ROA not after: Tue 04 Jun 2024 13:00:31 +0000 asID: 7018 IP address blocks: 64.52.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1e:45:9c:61:da:d9:03:5e:4f:80:47:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 6 14:00:31 2024 GMT Not After : Jun 4 13:00:31 2024 GMT Subject: CN=ad6c89ab-d946-4ef6-8eca-ea96fb7914a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fc:0e:18:c9:09:cb:c9:e7:fa:82:9d:ba:7f: 77:35:31:b9:65:82:ad:ff:ad:4a:b9:cf:ee:23:af: e7:0b:0b:5c:fa:13:12:31:d5:ea:1b:e2:51:9e:6e: cf:54:9f:56:99:4f:f4:d4:62:e3:b6:09:bd:e9:8d: f1:a6:ff:0c:4a:6a:16:87:0f:a8:95:51:4d:65:0d: a7:cb:ab:36:2a:ab:9b:91:55:4c:32:07:82:dc:cb: 72:8b:41:9b:11:d6:02:53:ac:0d:05:75:d6:16:93: 8d:42:59:c3:37:2a:ca:c1:ba:29:ec:cb:56:17:43: ec:2c:3d:34:b1:72:6f:d6:3e:9e:85:a8:1a:da:13: 10:63:c3:49:0f:29:aa:6a:d0:64:dd:dc:b8:50:0f: 8b:f8:be:7e:ce:c5:9d:10:07:bd:4b:6a:0d:61:ec: 5d:bb:7a:4c:d5:a4:c2:00:3b:35:a2:c6:bf:72:49: 0b:68:1d:ba:a6:a2:fc:c3:7f:ce:df:41:93:bf:ca: 46:66:bc:c3:fa:14:79:35:3f:ff:c2:ae:62:9e:5f: 8b:90:75:de:dd:c1:e0:32:72:73:dd:a9:2b:8a:24: 95:3d:50:ca:3f:10:16:cd:57:ca:f2:d1:1e:6d:b7: 5d:0f:45:86:42:65:d4:e4:ef:d1:15:53:08:8e:83: 27:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:57:BF:E6:B9:8F:EC:A6:C3:DE:A8:A0:2F:42:4C:AB:58:DC:40:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/29bb41c5-7ef8-3b98-9f43-b61277fbf751.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 64.52.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:74:63:05:af:6b:99:6f:38:15:59:6e:36:89:3b:d3:af:6d: 48:75:55:d4:d6:3d:89:96:f9:5a:68:5a:0b:1a:08:1d:ed:05: 79:f2:08:c1:ff:e4:b1:45:af:13:e5:e1:69:2a:60:b9:dd:df: 7c:99:fd:40:7f:af:1f:ea:a8:b3:45:3f:86:65:c0:dc:bb:24: a3:55:9c:cf:cc:0a:e6:89:88:c0:54:42:2d:db:b0:e2:45:42: ec:b4:d8:bd:f7:ab:2b:e0:59:9e:77:be:a7:51:47:1d:a4:5e: 13:1b:61:11:18:0a:2a:a3:eb:ba:81:0d:53:7a:6d:35:e1:53: a1:5c:2b:56:87:18:79:b7:7b:52:3e:58:1a:f8:28:8e:45:11: f5:1e:df:e3:af:5c:7d:c9:72:f1:f9:56:e6:66:63:b7:ef:8b: 32:bf:47:ec:80:9b:ed:b5:75:ff:1b:ab:9e:88:72:32:bb:eb: b1:1a:ee:e7:9d:5b:57:09:f3:46:73:c1:0d:c2:cd:2e:ca:7f: cc:0c:b7:52:94:9c:4f:bc:30:f5:6c:36:c9:e6:20:d6:d4:24: 36:03:3e:b7:8b:71:6b:02:a2:d6:73:e4:4a:3d:36:12:80:52: 68:2f:3a:e1:2f:e8:33:82:44:9e:2c:44:4c:3a:29:e4:9c:8a: 37:ee:28:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUeRZxh2tkDXk+AR/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MDMwNjE0MDAzMVoXDTI0MDYwNDEzMDAzMVowLzEtMCsGA1UEAxMk YWQ2Yzg5YWItZDk0Ni00ZWY2LThlY2EtZWE5NmZiNzkxNGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvwOGMkJy8nn+oKdun93NTG5ZYKt/61Kuc/u I6/nCwtc+hMSMdXqG+JRnm7PVJ9WmU/01GLjtgm96Y3xpv8MSmoWhw+olVFNZQ2n y6s2KqubkVVMMgeC3Mtyi0GbEdYCU6wNBXXWFpONQlnDNyrKwbop7MtWF0PsLD00 sXJv1j6ehaga2hMQY8NJDymqatBk3dy4UA+L+L5+zsWdEAe9S2oNYexdu3pM1aTC ADs1osa/ckkLaB26pqL8w3/O30GTv8pGZrzD+hR5NT//wq5inl+LkHXe3cHgMnJz 3akriiSVPVDKPxAWzVfK8tEebbddD0WGQmXU5O/RFVMIjoMn1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJXv+a5j+ymw96ooC9CTKtY3EBOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMjliYjQxYzUtN2VmOC0z Yjk4LTlmNDMtYjYxMjc3ZmJmNzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQDQYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFN0YwWva5lvOBVZbjaJO9OvbUh1VdTWPYmW+VpoWgsaCB3tBXnyCMH/ 5LFFrxPl4WkqYLnd33yZ/UB/rx/qqLNFP4ZlwNy7JKNVnM/MCuaJiMBUQi3bsOJF Quy02L33qyvgWZ53vqdRRx2kXhMbYREYCiqj67qBDVN6bTXhU6FcK1aHGHm3e1I+ WBr4KI5FEfUe3+OvXH3JcvH5VuZmY7fvizK/R+yAm+21df8bq56IcjK767Ea7ued W1cJ80ZzwQ3CzS7Kf8wMt1KUnE+8MPVsNsnmINbUJDYDPreLcWsCotZz5Eo9NhKA UmgvOuEv6DOCRJ4sREw6KeScijfuKDc= -----END CERTIFICATE-----Generated at Wed Apr 24 16:03:02 2024 by rpki-client on console-ams.rpki-client.org