$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa File: 9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa (raw, json) Hash identifier: Au4cOFNKHKcnIhedUflyfI6vRn/XOGlFs8zlsRFlH6E= Subject key identifier: AC:87:B8:73:9A:74:1C:BA:C6:51:D8:5A:55:A2:2D:2F:C7:C6:FB:46 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F43285845E7292A5B4E7FB5FC7A2E0880 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa Signing time: Fri 17 May 2024 13:00:34 +0000 ROA not before: Fri 17 May 2024 13:00:34 +0000 ROA not after: Thu 15 Aug 2024 13:00:34 +0000 asID: 26967 IP address blocks: 52.144.124.0/24 maxlen: 24 52.144.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:e7:29:2a:5b:4e:7f:b5:fc:7a:2e:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: May 17 13:00:34 2024 GMT Not After : Aug 15 13:00:34 2024 GMT Subject: CN=90c30367-fc49-402f-8a8a-c9bd9d995050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:63:85:f4:ee:6e:24:ce:d0:c4:25:9e:a3:c4: aa:3e:d2:c7:20:da:7b:46:04:14:b5:83:e4:5c:cd: 51:90:49:82:76:77:ae:4e:10:07:9c:61:01:82:90: 81:01:ed:bc:c4:db:66:67:66:a2:ee:97:d2:37:86: 7b:53:2b:88:f8:4b:56:78:c8:f7:dd:47:ad:cb:8d: 44:c8:5f:c7:82:92:0e:a3:96:d8:7f:02:4c:6c:ec: 5b:a8:92:92:63:a4:f7:75:c6:ca:f1:93:b3:43:a2: e3:e0:5a:54:a6:f1:81:e8:f1:d7:f5:97:fb:3e:a2: d5:b0:e4:4e:bf:e4:29:56:2e:f3:ba:6b:e9:5b:22: bb:12:bd:b3:d7:cb:74:71:11:da:73:25:8b:b3:97: e9:d7:7e:6b:28:88:03:0d:1f:b1:2b:1b:09:a5:ff: 3c:aa:a8:2d:bc:24:17:ef:d7:0f:cf:5d:51:44:e2: ed:34:3d:30:21:7d:70:40:ca:94:51:9e:c8:97:e4: dd:fd:27:ea:02:de:e2:40:2f:c7:59:6b:f3:b1:4b: 5c:32:60:8c:a1:6d:e1:0a:47:cc:c7:85:eb:10:e4: 05:cd:20:3b:1c:29:0b:75:b9:aa:f6:d6:36:af:cb: 2f:83:b5:59:ac:45:34:a5:81:fa:07:54:1a:df:4a: 0d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:87:B8:73:9A:74:1C:BA:C6:51:D8:5A:55:A2:2D:2F:C7:C6:FB:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 52.144.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:ab:fa:58:fc:bd:a7:8f:5d:dd:65:95:0e:16:bd:4b:2a:ef: c3:1a:b0:6c:e4:4e:03:45:3e:0f:eb:35:e7:cb:77:e6:c5:12: 4e:22:2f:ee:c1:53:91:bc:41:3b:d1:20:8a:ea:85:ac:91:d9: 58:43:73:c3:76:63:89:27:88:12:fa:a6:0d:91:39:3b:1c:4b: 8e:b1:af:71:4d:97:c3:e2:82:58:79:a6:4b:83:95:64:08:39: bd:33:bf:cb:2c:25:86:a2:7b:df:ee:a3:63:ff:fe:4d:38:48: 54:d7:86:9b:c5:01:97:b2:09:61:0a:79:55:6c:88:c1:14:43: fb:bd:3b:7c:43:7f:0c:bd:ba:83:d6:6e:1b:e0:6c:3c:bb:f9: 0b:23:e2:fa:11:6b:71:e1:13:9c:97:38:09:c1:b8:fa:a7:9b: e8:3a:1d:49:78:25:fa:f7:e2:30:5f:9d:a7:e5:e4:b5:39:6a: 5f:09:8e:38:07:d4:70:1b:da:2d:d0:9c:b6:2b:09:25:5a:58: ea:d1:c3:f5:63:48:41:14:dc:62:85:82:5a:38:83:1f:9f:16: 5d:07:54:2f:40:40:11:51:bd:e8:d0:dc:7d:f8:8e:ac:a7:5f: e9:e2:b6:f5:4d:14:3b:0a:f0:0d:3c:16:7c:00:0d:2a:49:5d: 1d:54:b1:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXnKSpbTn+1/HouCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI0MDUxNzEzMDAzNFoXDTI0MDgxNTEzMDAzNFowLzEtMCsGA1UEAxMk OTBjMzAzNjctZmM0OS00MDJmLThhOGEtYzliZDlkOTk1MDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mOF9O5uJM7QxCWeo8SqPtLHINp7RgQUtYPk XM1RkEmCdneuThAHnGEBgpCBAe28xNtmZ2ai7pfSN4Z7UyuI+EtWeMj33Uety41E yF/HgpIOo5bYfwJMbOxbqJKSY6T3dcbK8ZOzQ6Lj4FpUpvGB6PHX9Zf7PqLVsORO v+QpVi7zumvpWyK7Er2z18t0cRHacyWLs5fp135rKIgDDR+xKxsJpf88qqgtvCQX 79cPz11RROLtND0wIX1wQMqUUZ7Il+Td/SfqAt7iQC/HWWvzsUtcMmCMoW3hCkfM x4XrEOQFzSA7HCkLdbmq9tY2r8svg7VZrEU0pYH6B1Qa30oNDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyHuHOadBy6xlHYWlWiLS/HxvtGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvOWQ4ZTExZmMtN2NmZS0z MmJkLTk3MDEtOGRkMjUyOGZhOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNJB8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6r+lj8vaePXd1llQ4WvUsq78MasGzkTgNFPg/rNefLd+bFEk4iL+7B U5G8QTvRIIrqhayR2VhDc8N2Y4kniBL6pg2ROTscS46xr3FNl8Piglh5pkuDlWQI Ob0zv8ssJYaie9/uo2P//k04SFTXhpvFAZeyCWEKeVVsiMEUQ/u9O3xDfwy9uoPW bhvgbDy7+Qsj4voRa3HhE5yXOAnBuPqnm+g6HUl4Jfr34jBfnafl5LU5al8JjjgH 1HAb2i3QnLYrCSVaWOrRw/VjSEEU3GKFglo4gx+fFl0HVC9AQBFRvejQ3H34jqyn X+nitvVNFDsK8A08FnwADSpJXR1UsTc= -----END CERTIFICATE-----Generated at Fri May 17 15:32:03 2024 by rpki-client on console-ams.rpki-client.org