$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/e3338de1-c785-34b3-8676-6220676a4943.roa File: e3338de1-c785-34b3-8676-6220676a4943.roa (raw, json) Hash identifier: 23gOMi/CNmtHu32udwzrBZ/19R2Yz050Z/qqrkTaxWA= Subject key identifier: 66:DD:2B:17:0F:03:0E:9D:ED:90:C1:45:72:9E:52:EF:A6:69:04:3D Certificate issuer: /CN=472a2488-5465-4b11-8a3d-5dc990d29dd5 Certificate serial: 010D0C9F43285841E46CFEDC9BA68DC940F7F300 Authority key identifier: 4B:95:72:F2:D4:4F:1A:3F:46:68:06:7E:41:82:73:59:2C:86:C0:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/e3338de1-c785-34b3-8676-6220676a4943.roa Signing time: Mon 15 May 2023 18:21:01 +0000 ROA not before: Mon 15 May 2023 18:21:01 +0000 ROA not after: Mon 12 Jun 2023 08:36:20 +0000 asID: 400061 IP address blocks: 66.118.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/472a2488-5465-4b11-8a3d-5dc990d29dd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/472a2488-5465-4b11-8a3d-5dc990d29dd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 May 2023 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:6c:fe:dc:9b:a6:8d:c9:40:f7:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=472a2488-5465-4b11-8a3d-5dc990d29dd5 Validity Not Before: May 15 18:21:01 2023 GMT Not After : Jun 12 08:36:20 2023 GMT Subject: CN=faca0d74-d8cf-453b-ad8a-5cf20366333e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:31:d7:02:f6:e9:e1:4e:0d:61:8e:c8:42:4e: 8c:85:fc:c7:c6:71:f7:1d:cf:7c:80:00:6b:79:88: c4:3a:98:f7:58:83:20:67:d2:d1:15:bb:86:6a:33: 89:30:6d:ff:f9:91:68:91:bd:ee:ca:3d:73:43:b0: 05:12:cd:f5:a8:03:7e:db:ec:f3:b0:d5:8c:6a:05: 1b:6b:7c:b3:4f:cb:94:14:a6:9b:85:54:d1:5b:15: 86:af:6c:5f:63:11:77:26:b6:d6:bc:43:ac:7f:43: e7:f8:db:96:43:87:b0:a3:9e:aa:7f:b0:66:bf:04: b0:41:e6:95:0b:bc:f7:7c:24:af:a8:46:97:cd:0a: 49:f1:40:3b:92:1d:c3:5e:71:83:20:82:df:a2:9f: bd:34:cf:e7:cd:ac:10:e2:a9:02:00:c3:e6:32:35: 8a:fb:93:0a:97:26:d9:60:e4:64:d7:43:20:f7:fa: 64:c3:2c:b3:2a:c1:2b:d8:08:49:80:db:68:17:c1: 52:2f:a9:5b:51:25:bb:d8:84:7c:d3:2e:bf:21:c0: 41:05:7c:0c:74:22:c1:c7:9a:a8:0b:32:a7:49:84: 3c:cc:3d:b1:20:c6:08:36:66:98:7d:a2:73:65:9c: 2b:35:de:82:2c:ce:a3:f1:27:b4:8d:d3:56:02:e9: ec:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DD:2B:17:0F:03:0E:9D:ED:90:C1:45:72:9E:52:EF:A6:69:04:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/e3338de1-c785-34b3-8676-6220676a4943.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/472a2488-5465-4b11-8a3d-5dc990d29dd5.crl X509v3 Authority Key Identifier: keyid:4B:95:72:F2:D4:4F:1A:3F:46:68:06:7E:41:82:73:59:2C:86:C0:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5.cer sbgp-ipAddrBlock: critical IPv4: 66.118.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:26:5a:1a:d5:d7:ae:88:56:0e:fe:f9:7c:a4:46:74:2a:37: c1:60:f3:c9:51:f2:8c:05:04:69:02:72:09:9b:7b:eb:4e:e5: 6f:fa:c9:89:6a:e3:ac:00:1f:19:16:49:fb:33:9c:75:e2:2c: 8c:bc:6b:6a:e6:83:f4:d8:56:15:b3:c1:b9:4f:a3:32:ca:b9: b3:13:ec:ab:94:69:7d:60:13:4c:e3:68:b4:47:5a:16:9a:71: 82:fb:13:ca:f0:49:a3:20:7a:ec:2c:81:e6:aa:bd:75:0f:3d: f0:e3:f8:77:50:17:48:ad:12:02:4f:ba:6f:0f:94:17:a3:83: 26:81:03:ac:6b:de:01:3e:91:dc:a2:ec:0e:93:ed:de:e9:ba: e8:be:8e:e2:4d:83:1b:e2:ed:f1:76:4b:c0:b9:32:1e:93:87: 75:59:6f:b2:ae:8b:8e:33:f8:a6:21:00:ff:fd:2c:01:59:34: 5d:6b:f9:46:3f:91:ab:b0:2a:e7:54:92:b9:1b:7f:a8:54:f4: 8e:37:70:4b:09:60:dd:59:e8:ff:37:61:18:a6:0e:1e:6c:d9: 54:ad:dd:ad:e5:3b:e9:a2:fa:d5:6f:d0:a1:ae:13:d9:77:2f: 59:92:e7:64:53:00:f6:b6:5f:5b:99:e3:5f:23:01:04:08:f7: 1a:64:1b:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkbP7cm6aNyUD38wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDcyYTI0ODgtNTQ2NS00YjExLThhM2QtNWRjOTkwZDI5 ZGQ1MB4XDTIzMDUxNTE4MjEwMVoXDTIzMDYxMjA4MzYyMFowLzEtMCsGA1UEAxMk ZmFjYTBkNzQtZDhjZi00NTNiLWFkOGEtNWNmMjAzNjYzMzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjHXAvbp4U4NYY7IQk6MhfzHxnH3Hc98gABr eYjEOpj3WIMgZ9LRFbuGajOJMG3/+ZFokb3uyj1zQ7AFEs31qAN+2+zzsNWMagUb a3yzT8uUFKabhVTRWxWGr2xfYxF3JrbWvEOsf0Pn+NuWQ4ewo56qf7BmvwSwQeaV C7z3fCSvqEaXzQpJ8UA7kh3DXnGDIILfop+9NM/nzawQ4qkCAMPmMjWK+5MKlybZ YORk10Mg9/pkwyyzKsEr2AhJgNtoF8FSL6lbUSW72IR80y6/IcBBBXwMdCLBx5qo CzKnSYQ8zD2xIMYINmaYfaJzZZwrNd6CLM6j8Se0jdNWAunsXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbdKxcPAw6d7ZDBRXKeUu+maQQ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NzJh MjQ4OC01NDY1LTRiMTEtOGEzZC01ZGM5OTBkMjlkZDUvZTMzMzhkZTEtYzc4NS0z NGIzLTg2NzYtNjIyMDY3NmE0OTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDcyYTI0ODgtNTQ2NS00YjExLThh M2QtNWRjOTkwZDI5ZGQ1LzQ3MmEyNDg4LTU0NjUtNGIxMS04YTNkLTVkYzk5MGQy OWRkNS5jcmwwHwYDVR0jBBgwFoAUS5Vy8tRPGj9GaAZ+QYJzWSyGwAYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NzJhMjQ4OC01NDY1LTRiMTEtOGEzZC01ZGM5 OTBkMjlkZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnb/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQmWhrV166IVg7++XykRnQqN8Fg88lR8owFBGkCcgmbe+tO5W/6yYlq 46wAHxkWSfsznHXiLIy8a2rmg/TYVhWzwblPozLKubMT7KuUaX1gE0zjaLRHWhaa cYL7E8rwSaMgeuwsgeaqvXUPPfDj+HdQF0itEgJPum8PlBejgyaBA6xr3gE+kdyi 7A6T7d7puui+juJNgxvi7fF2S8C5Mh6Th3VZb7Kui44z+KYhAP/9LAFZNF1r+UY/ kauwKudUkrkbf6hU9I43cEsJYN1Z6P83YRimDh5s2VSt3a3lO+mi+tVv0KGuE9l3 L1mS52RTAPa2X1uZ418jAQQI9xpkGzg= -----END CERTIFICATE-----Generated at Mon May 15 18:56:55 2023 by rpki-client on console-ams.rpki-client.org