$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a10b291-b16d-3725-931a-b5c526e9bdb6.roa File: 1a10b291-b16d-3725-931a-b5c526e9bdb6.roa (raw, json) Hash identifier: Pz+M25yVJ1R27ryhf9S0WYEoi1K1tD5yLpP4Bi1Kvh4= Subject key identifier: 23:33:12:ED:7E:82:1F:4F:3F:4B:1C:6B:50:97:B9:67:1C:75:75:D3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285845A9BE20CF0F73E3E318BC8980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a10b291-b16d-3725-931a-b5c526e9bdb6.roa Signing time: Thu 25 Apr 2024 13:00:33 +0000 ROA not before: Thu 25 Apr 2024 13:00:33 +0000 ROA not after: Wed 24 Jul 2024 13:00:33 +0000 asID: 22773 IP address blocks: 68.227.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a9:be:20:cf:0f:73:e3:e3:18:bc:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 25 13:00:33 2024 GMT Not After : Jul 24 13:00:33 2024 GMT Subject: CN=e274192a-cea6-4a02-bac2-c7d4dfc20fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f5:04:9e:a6:77:8b:52:37:26:ec:ab:e6:6f: ae:7a:c4:7f:da:7e:d2:78:68:4e:e7:b4:95:4c:2d: c5:72:af:28:ee:f7:b4:f7:08:2c:54:17:9b:16:48: 68:be:7e:e2:df:95:37:87:19:eb:25:a9:d5:2d:13: eb:b1:cf:5e:39:99:23:d5:91:6f:ea:a4:f8:06:a3: ec:62:7e:a9:ea:07:dc:c1:fb:ae:7d:af:a2:25:1c: 16:a2:22:89:95:6d:cc:87:9e:f1:92:a9:44:dd:a3: 91:37:d7:a2:6e:a7:5b:b9:27:be:ca:dd:a0:cf:fe: a2:1c:9c:5a:64:82:6d:0e:52:2b:9b:39:94:59:19: b5:88:c6:96:86:e9:69:ae:91:9d:0e:8d:d4:44:b2: cf:6f:fb:83:75:e2:ed:9f:0b:fe:55:e2:db:4f:fb: 2b:f9:f7:84:e9:bd:c6:4e:18:80:d8:9e:12:ee:5a: 8b:7c:41:57:ae:ce:97:80:e7:14:de:6c:68:0a:63: 8f:eb:3e:e5:c3:38:a1:50:35:7a:5f:7b:6c:ff:a5: 36:77:f1:9b:1e:4c:2e:98:f8:83:3c:7a:30:da:4f: be:8c:01:82:2f:23:43:69:71:8a:4e:51:29:c4:d3: b6:97:c2:f1:e9:df:97:dc:b0:80:11:10:0f:f7:e4: 90:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:33:12:ED:7E:82:1F:4F:3F:4B:1C:6B:50:97:B9:67:1C:75:75:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a10b291-b16d-3725-931a-b5c526e9bdb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:c0:fa:a2:0e:32:8f:4d:77:35:ac:a4:36:c6:d0:99:cc:0f: 03:96:78:d9:d5:67:d3:de:4d:f7:49:3c:4e:cc:4c:4b:22:eb: d5:2c:20:e9:74:15:da:dd:d5:e9:66:00:3f:88:80:92:66:18: 9e:e6:0e:2d:47:0e:f7:c6:35:a4:2b:eb:f5:7f:7e:55:e1:55: 0f:4e:26:81:29:9f:c4:97:79:51:5c:46:d3:1d:10:06:d5:4b: ab:2a:d3:14:df:d6:42:76:67:26:54:37:71:9a:11:61:23:b7: 12:7f:aa:77:83:66:f7:37:3e:65:cf:12:d7:bc:ac:0c:fd:ba: 07:17:ef:0e:f5:34:6b:ad:6d:b0:92:07:10:0f:64:b5:b5:30: 57:fd:9c:ab:0f:23:5c:8a:7d:54:0d:4c:b5:06:8c:7a:42:88: 1f:87:8a:f4:f4:03:da:86:05:c8:8f:55:97:c6:45:d5:62:5e: 46:22:38:16:29:53:1d:fa:1c:06:7d:61:37:8c:dd:38:aa:96: 1d:f6:2a:1a:a8:74:81:00:07:c7:37:cf:c6:3d:32:96:e0:04: 1b:c6:96:1f:f5:9f:77:83:77:94:5c:e8:5c:11:83:aa:5b:11: 23:96:af:fc:db:bc:6e:e2:4c:9f:ef:87:fd:68:71:3f:cc:2e: ce:fa:a9:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWpviDPD3Pj4xi8iYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI0MDQyNTEzMDAzM1oXDTI0MDcyNDEzMDAzM1owLzEtMCsGA1UEAxMk ZTI3NDE5MmEtY2VhNi00YTAyLWJhYzItYzdkNGRmYzIwZmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvUEnqZ3i1I3Juyr5m+uesR/2n7SeGhO57SV TC3Fcq8o7ve09wgsVBebFkhovn7i35U3hxnrJanVLRPrsc9eOZkj1ZFv6qT4BqPs Yn6p6gfcwfuufa+iJRwWoiKJlW3Mh57xkqlE3aORN9eibqdbuSe+yt2gz/6iHJxa ZIJtDlIrmzmUWRm1iMaWhulprpGdDo3URLLPb/uDdeLtnwv+VeLbT/sr+feE6b3G ThiA2J4S7lqLfEFXrs6XgOcU3mxoCmOP6z7lwzihUDV6X3ts/6U2d/GbHkwumPiD PHow2k++jAGCLyNDaXGKTlEpxNO2l8Lx6d+X3LCAERAP9+SQnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMzEu1+gh9PP0sca1CXuWccdXXTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWExMGIyOTEtYjE2ZC0z NzI1LTkzMWEtYjVjNTI2ZTliZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrA+qIOMo9NdzWspDbG0JnMDwOWeNnVZ9PeTfdJPE7MTEsi69UsIOl0 Fdrd1elmAD+IgJJmGJ7mDi1HDvfGNaQr6/V/flXhVQ9OJoEpn8SXeVFcRtMdEAbV S6sq0xTf1kJ2ZyZUN3GaEWEjtxJ/qneDZvc3PmXPEte8rAz9ugcX7w71NGutbbCS BxAPZLW1MFf9nKsPI1yKfVQNTLUGjHpCiB+HivT0A9qGBciPVZfGRdViXkYiOBYp Ux36HAZ9YTeM3Tiqlh32KhqodIEAB8c3z8Y9MpbgBBvGlh/1n3eDd5Rc6FwRg6pb ESOWr/zbvG7iTJ/vh/1ocT/MLs76qTo= -----END CERTIFICATE-----Generated at Sat Apr 27 15:30:40 2024 by rpki-client on console-ams.rpki-client.org