$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d394ea4-8920-3298-b46c-22a9fa92b897.roa File: 2d394ea4-8920-3298-b46c-22a9fa92b897.roa (raw, json) Hash identifier: z2cb93q+UG3jGdYekvR2i/REd4a0qCqQNvh5XBJs/xI= Subject key identifier: 8B:47:EB:4E:90:58:6D:F0:AE:E9:09:F4:22:79:A4:58:87:39:64:55 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858458DD348BC86D36F89BEA37B40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d394ea4-8920-3298-b46c-22a9fa92b897.roa Signing time: Mon 15 Apr 2024 13:00:35 +0000 ROA not before: Mon 15 Apr 2024 13:00:35 +0000 ROA not after: Sun 14 Jul 2024 13:00:35 +0000 asID: 22773 IP address blocks: 72.219.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:8d:d3:48:bc:86:d3:6f:89:be:a3:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 15 13:00:35 2024 GMT Not After : Jul 14 13:00:35 2024 GMT Subject: CN=ad25822c-26c4-4068-9f76-d9538e19bb70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8e:99:4b:d3:e4:b2:0e:d5:eb:37:d9:b8:69: 94:6a:f9:52:51:66:6a:6a:7f:36:b6:d6:63:2a:22: 4a:67:83:08:1c:b1:91:ba:cb:ad:c1:82:4a:60:eb: 7f:6f:60:21:de:4e:f8:da:de:c0:42:d2:7f:e7:30: cb:11:de:b7:21:aa:63:98:60:a0:0a:82:3d:e3:b9: c1:66:8f:a6:67:96:88:2d:1f:ec:93:bd:ab:14:6e: 35:ee:9a:6e:31:d3:18:3f:e1:f2:08:2e:28:34:68: a9:7b:89:19:a9:fc:e1:33:6a:42:1e:fc:5f:37:1f: 9c:ea:dd:5e:e5:34:3e:f2:bf:fb:71:fb:9d:6b:af: 1a:cb:1e:e1:2a:2f:b8:15:37:d8:3d:31:b0:0d:04: f9:9c:04:3d:12:80:7a:2b:e2:c8:f0:1a:0a:5f:62: e6:39:5a:f3:75:c5:df:7c:55:04:ef:f7:e0:24:1f: 3d:41:3c:d7:ba:9e:03:17:d5:02:b8:9d:00:54:b4: 59:bb:93:c5:ba:38:a6:0d:b9:b0:e1:11:82:5d:a0: e3:b9:02:fa:13:73:31:31:68:60:75:11:95:30:25: 2c:92:94:fd:0e:df:25:88:56:0b:6a:71:d0:11:1d: 77:67:a4:5e:5a:08:18:e0:7f:7e:0c:5f:fa:76:e4: d6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:47:EB:4E:90:58:6D:F0:AE:E9:09:F4:22:79:A4:58:87:39:64:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d394ea4-8920-3298-b46c-22a9fa92b897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.219.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:84:4c:64:24:ae:b6:b9:f9:45:b6:81:6f:0a:47:cf:f7:3c: 38:de:ee:a2:b1:19:b1:87:62:56:a5:b1:a1:f3:68:fb:b3:b4: cf:ac:d2:6a:6b:db:6c:27:79:67:f3:a0:a1:30:87:33:cc:4a: 3d:0d:c0:2a:33:6d:ec:10:8e:3b:61:12:3c:01:f5:44:a3:e4: 8f:06:16:68:20:8e:10:58:91:4b:9b:5c:f2:15:5f:38:1b:3e: 0a:80:3a:6c:72:df:d0:5e:b5:88:bc:37:74:57:b2:45:ec:a6: 66:13:f5:33:dc:bf:08:70:66:c8:6c:c4:b4:41:81:6e:47:05: 64:c2:35:25:e0:6f:cd:83:9e:b3:3a:b9:f4:6e:c3:1b:03:54: 7d:8f:b5:26:45:73:b0:82:fa:96:4c:97:15:b4:1d:71:a1:ca: a8:08:8c:c7:85:29:cf:74:d8:b1:9e:9e:28:d4:e8:e9:8f:c7: 11:cb:2d:86:07:da:05:6d:9d:59:89:01:5b:20:c1:7b:02:6a: b9:2d:2c:11:14:97:cd:d6:1f:33:37:84:27:5d:78:45:01:dc: 93:e7:95:10:4f:28:b3:a1:eb:20:50:c8:62:e9:9e:26:e3:90: 84:e1:a9:06:3b:98:0f:a7:fe:69:1c:ed:e7:49:9e:68:48:12: 9b:e8:f4:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWN00i8htNvib6je0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI0MDQxNTEzMDAzNVoXDTI0MDcxNDEzMDAzNVowLzEtMCsGA1UEAxMk YWQyNTgyMmMtMjZjNC00MDY4LTlmNzYtZDk1MzhlMTliYjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA146ZS9Pksg7V6zfZuGmUavlSUWZqan82ttZj KiJKZ4MIHLGRusutwYJKYOt/b2Ah3k742t7AQtJ/5zDLEd63IapjmGCgCoI947nB Zo+mZ5aILR/sk72rFG417ppuMdMYP+HyCC4oNGipe4kZqfzhM2pCHvxfNx+c6t1e 5TQ+8r/7cfuda68ayx7hKi+4FTfYPTGwDQT5nAQ9EoB6K+LI8BoKX2LmOVrzdcXf fFUE7/fgJB89QTzXup4DF9UCuJ0AVLRZu5PFujimDbmw4RGCXaDjuQL6E3MxMWhg dRGVMCUskpT9Dt8liFYLanHQER13Z6ReWggY4H9+DF/6duTWmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItH606QWG3wrukJ9CJ5pFiHOWRVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmQzOTRlYTQtODkyMC0z Mjk4LWI0NmMtMjJhOWZhOTJiODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACETGQkrra5+UW2gW8KR8/3PDje7qKxGbGHYlalsaHzaPuztM+s0mpr 22wneWfzoKEwhzPMSj0NwCozbewQjjthEjwB9USj5I8GFmggjhBYkUubXPIVXzgb PgqAOmxy39BetYi8N3RXskXspmYT9TPcvwhwZshsxLRBgW5HBWTCNSXgb82DnrM6 ufRuwxsDVH2PtSZFc7CC+pZMlxW0HXGhyqgIjMeFKc902LGenijU6OmPxxHLLYYH 2gVtnVmJAVsgwXsCarktLBEUl83WHzM3hCddeEUB3JPnlRBPKLOh6yBQyGLpnibj kIThqQY7mA+n/mkc7edJnmhIEpvo9O8= -----END CERTIFICATE-----Generated at Sat Apr 27 15:30:41 2024 by rpki-client on console-ams.rpki-client.org