$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa File: 72be6899-0a9c-3151-8e0d-f784d1f56c09.roa (raw, json) Hash identifier: CDl3F3Rit7kiG1uot4XjApxWwI5g2Rme3KcTqZum9l0= Subject key identifier: F8:0E:5A:15:FF:C9:9E:02:DB:BB:B0:E4:A2:CB:73:C9:28:78:C4:9C Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285840B70FE79A921817ADF074EE00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa Signing time: Fri 27 Jan 2023 15:03:07 +0000 ROA not before: Fri 27 Jan 2023 15:03:07 +0000 ROA not after: Thu 01 May 2025 04:00:00 +0000 asID: 1239 IP address blocks: 149.143.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Mar 2023 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:40:b7:0f:e7:9a:92:18:17:ad:f0:74:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jan 27 15:03:07 2023 GMT Not After : May 1 04:00:00 2025 GMT Subject: CN=d3c386b8-f001-4a1c-8125-2ebc2a4ae3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:81:51:50:4b:16:bf:73:05:d0:ee:85:d7:8c: b6:a4:ee:ae:7e:70:5a:96:53:d9:fd:6a:9b:0c:53: 82:bf:55:b7:05:91:04:2b:6a:01:64:77:ac:db:be: c8:9c:3b:3c:d0:30:9e:b1:03:bb:ea:e9:61:f1:d8: f2:12:aa:b6:a0:1f:52:d0:ee:3b:96:46:3a:37:2f: 9c:e0:5f:e9:20:3b:06:31:36:2b:be:5c:9b:7c:9c: a5:fb:f0:6b:34:e5:da:3d:02:77:41:d0:4b:6e:d1: ef:9b:0c:25:60:d0:1b:ef:ca:2f:c2:9f:e3:70:54: cb:39:57:ea:c4:20:a6:5e:18:57:89:08:2c:fb:ee: 22:72:a9:26:44:f6:7c:8a:01:29:f9:11:93:4e:98: d3:b6:f1:9f:f7:15:d8:41:98:27:e1:41:db:9e:a2: 07:66:be:d1:92:db:7b:47:bc:c6:d9:b1:8f:53:51: 07:9b:30:bc:51:5e:02:3b:2f:5e:87:56:c0:66:a2: e7:7d:86:40:e3:e6:99:04:bd:22:d9:c1:92:01:91: aa:b3:d3:1c:ac:df:82:96:ff:d5:a8:06:98:68:b9: 05:82:6e:42:36:6d:1d:cb:f1:f0:4f:90:28:fe:f6: 6a:96:49:82:18:53:48:d6:d7:7f:58:49:27:c3:c3: 94:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0E:5A:15:FF:C9:9E:02:DB:BB:B0:E4:A2:CB:73:C9:28:78:C4:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:bd:55:cc:93:6a:bb:51:11:5d:f8:24:8a:92:d8:21:0b:a6: 81:69:00:b4:7d:c8:55:15:3b:45:c1:b2:09:3f:f7:0e:3f:b6: 59:4d:ec:44:2e:af:d8:45:cc:7e:e5:9b:50:96:d2:b7:eb:dd: 2c:14:db:35:fe:7d:b4:12:03:65:6f:8f:73:15:bb:27:1f:bc: d0:55:b8:d0:bc:5b:4e:29:fe:48:e9:ca:ac:7f:cb:ac:2a:6b: 67:ba:17:11:6f:73:fb:8d:62:e9:ef:db:0d:c0:d8:3b:27:f4: 23:24:8f:ef:be:15:ab:03:67:88:21:c0:35:d7:ff:d9:93:e2: b5:5c:38:2e:57:35:32:9d:16:77:43:37:d6:64:68:56:2e:3c: a6:b7:c6:fe:e5:0c:cd:53:ba:c7:80:db:76:68:3c:ac:02:65: ba:b3:5b:7a:be:5e:3d:b8:74:c4:71:19:1e:d4:5b:17:cc:d8: 49:1e:77:a2:57:33:02:04:96:87:a9:a3:ae:7d:93:80:10:ca: d0:64:ca:c7:7b:67:3f:7f:38:81:c7:d8:d3:a0:97:98:68:dd: 3c:33:ac:4f:ca:0b:62:31:e8:35:38:96:91:85:d4:69:28:0d: 64:fd:a1:49:5e:84:d6:ee:7f:b2:ce:58:95:dc:46:91:8f:97: 70:1b:f9:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEC3D+eakhgXrfB07gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTIzMDEyNzE1MDMwN1oXDTI1MDUwMTA0MDAwMFowLzEtMCsGA1UEAxMk ZDNjMzg2YjgtZjAwMS00YTFjLTgxMjUtMmViYzJhNGFlM2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIFRUEsWv3MF0O6F14y2pO6ufnBallPZ/Wqb DFOCv1W3BZEEK2oBZHes277InDs80DCesQO76ulh8djyEqq2oB9S0O47lkY6Ny+c 4F/pIDsGMTYrvlybfJyl+/BrNOXaPQJ3QdBLbtHvmwwlYNAb78ovwp/jcFTLOVfq xCCmXhhXiQgs++4icqkmRPZ8igEp+RGTTpjTtvGf9xXYQZgn4UHbnqIHZr7Rktt7 R7zG2bGPU1EHmzC8UV4COy9eh1bAZqLnfYZA4+aZBL0i2cGSAZGqs9McrN+Clv/V qAaYaLkFgm5CNm0dy/HwT5Ao/vZqlkmCGFNI1td/WEknw8OUAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgOWhX/yZ4C27uw5KLLc8koeMScMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNzJiZTY4OTktMGE5Yy0z MTUxLThlMGQtZjc4NGQxZjU2YzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADu9VcyTartREV34JIqS2CELpoFpALR9yFUVO0XBsgk/9w4/tllN7EQu r9hFzH7lm1CW0rfr3SwU2zX+fbQSA2Vvj3MVuycfvNBVuNC8W04p/kjpyqx/y6wq a2e6FxFvc/uNYunv2w3A2Dsn9CMkj+++FasDZ4ghwDXX/9mT4rVcOC5XNTKdFndD N9ZkaFYuPKa3xv7lDM1TuseA23ZoPKwCZbqzW3q+Xj24dMRxGR7UWxfM2Eked6JX MwIEloepo659k4AQytBkysd7Zz9/OIHH2NOgl5ho3TwzrE/KC2Ix6DU4lpGF1Gko DWT9oUlehNbuf7LOWJXcRpGPl3Ab+Qs= -----END CERTIFICATE-----Generated at Wed Mar 15 11:48:41 2023 by rpki-client on console-ams.rpki-client.org