$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba61d37b-50d9-3d5d-84dc-df232100dcdc.roa File: ba61d37b-50d9-3d5d-84dc-df232100dcdc.roa (raw, json) Hash identifier: bwGqvr5CwXnL6ICqnl7j+Gn+L3nAQrIUcafQ15xiw1s= Subject key identifier: 1E:AC:F5:CA:96:3B:2E:28:26:93:55:AA:7C:94:25:F8:A4:7A:56:BB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858458DD348D1AE6ADA018FD1BB80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba61d37b-50d9-3d5d-84dc-df232100dcdc.roa Signing time: Mon 15 Apr 2024 13:00:35 +0000 ROA not before: Mon 15 Apr 2024 13:00:35 +0000 ROA not after: Sun 14 Jul 2024 13:00:35 +0000 asID: 22773 IP address blocks: 72.219.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:8d:d3:48:d1:ae:6a:da:01:8f:d1:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 15 13:00:35 2024 GMT Not After : Jul 14 13:00:35 2024 GMT Subject: CN=11b6fd1d-751d-4fbd-9637-6641a319fcbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:33:f0:19:21:e1:69:26:9f:09:40:04:07:23: a4:d8:0a:5b:00:58:55:3b:ec:d1:2e:04:e1:2c:fc: 97:88:21:94:f9:5e:1b:81:fd:b2:45:03:01:8a:7d: 9d:05:fd:4c:4c:bb:c5:fc:fb:26:c5:12:90:bc:8d: 47:a5:09:d9:db:52:88:64:3a:ea:75:8f:2e:b1:6c: 58:c7:47:77:59:cd:f3:6d:76:b2:11:cb:86:29:32: e2:af:76:33:5d:0f:a7:23:64:cc:a5:49:92:11:c9: ce:f6:2b:8f:03:64:4a:2d:5f:e5:c8:47:eb:e3:c9: fb:bb:97:aa:b2:ba:c3:e6:c9:6a:a8:87:38:ae:bc: 2a:34:89:ab:de:cd:cd:7d:73:a0:83:97:d7:df:ae: ae:36:21:02:30:60:9b:71:3b:7c:ea:1e:b7:49:5f: 9f:9d:27:b3:ce:3c:1d:33:7b:af:ca:ca:3c:ed:2a: 77:08:14:3c:93:f2:96:de:37:2d:c0:fb:0d:16:dc: 20:1a:47:d0:74:ac:ec:91:20:07:19:46:a1:08:57: d1:ca:bc:af:e2:a0:8d:04:f4:b3:92:5b:07:2f:d7: b7:09:1b:8d:ea:1b:7d:73:7c:8f:d6:7c:11:1c:ec: cb:14:2a:8c:de:11:a9:d4:92:77:fd:5c:3f:08:28: 27:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AC:F5:CA:96:3B:2E:28:26:93:55:AA:7C:94:25:F8:A4:7A:56:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba61d37b-50d9-3d5d-84dc-df232100dcdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.219.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:fd:02:62:fb:f9:2e:74:bb:c2:b3:71:c7:a1:b1:23:22:b7: 1b:03:ac:15:36:83:d1:36:22:cc:f9:9c:ba:ec:53:31:a2:d4: 31:1c:32:6c:0e:ea:8a:5f:7b:f3:9c:01:d4:a4:97:c5:e1:81: db:da:70:9e:08:c2:24:05:c0:62:f2:cc:ad:46:ec:af:1c:3e: 51:c5:cc:24:ff:ef:74:b6:bc:14:2c:84:3e:88:10:fd:c0:5b: cb:31:41:da:39:ae:93:bc:93:a5:b1:4a:fe:8d:2a:c1:a1:a6: dc:3d:31:b9:15:74:8e:50:04:4e:1c:85:33:a1:97:d2:2a:ef: c8:79:cd:e5:a0:99:7d:5d:fa:12:a0:9f:21:b5:6c:16:47:c6: 38:aa:56:33:6e:a5:3d:99:1d:bb:43:24:f6:9c:db:0c:16:34: aa:d9:a6:3d:bb:14:44:d4:42:78:94:cf:df:0a:28:b2:a7:22: 9d:4f:b7:d0:a0:b4:11:41:9a:0e:14:86:fc:84:d2:2b:1d:b7: 33:e9:10:5b:02:bc:f3:8f:f0:42:05:79:26:53:89:bd:af:5c: 4d:24:bb:40:50:a1:0a:83:2d:c3:ed:33:73:85:f6:28:8d:43: aa:b6:df:80:7f:6c:69:04:ce:94:c7:0e:70:55:85:a5:ef:61: e2:00:93:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWN00jRrmraAY/Ru4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI0MDQxNTEzMDAzNVoXDTI0MDcxNDEzMDAzNVowLzEtMCsGA1UEAxMk MTFiNmZkMWQtNzUxZC00ZmJkLTk2MzctNjY0MWEzMTlmY2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jPwGSHhaSafCUAEByOk2ApbAFhVO+zRLgTh LPyXiCGU+V4bgf2yRQMBin2dBf1MTLvF/PsmxRKQvI1HpQnZ21KIZDrqdY8usWxY x0d3Wc3zbXayEcuGKTLir3YzXQ+nI2TMpUmSEcnO9iuPA2RKLV/lyEfr48n7u5eq srrD5slqqIc4rrwqNImr3s3NfXOgg5fX366uNiECMGCbcTt86h63SV+fnSezzjwd M3uvyso87Sp3CBQ8k/KW3jctwPsNFtwgGkfQdKzskSAHGUahCFfRyryv4qCNBPSz klsHL9e3CRuN6ht9c3yP1nwRHOzLFCqM3hGp1JJ3/Vw/CCgnDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6s9cqWOy4oJpNVqnyUJfikela7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmE2MWQzN2ItNTBkOS0z ZDVkLTg0ZGMtZGYyMzIxMDBkY2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF39AmL7+S50u8KzccehsSMitxsDrBU2g9E2Isz5nLrsUzGi1DEcMmwO 6opfe/OcAdSkl8XhgdvacJ4IwiQFwGLyzK1G7K8cPlHFzCT/73S2vBQshD6IEP3A W8sxQdo5rpO8k6WxSv6NKsGhptw9MbkVdI5QBE4chTOhl9Iq78h5zeWgmX1d+hKg nyG1bBZHxjiqVjNupT2ZHbtDJPac2wwWNKrZpj27FETUQniUz98KKLKnIp1Pt9Cg tBFBmg4UhvyE0isdtzPpEFsCvPOP8EIFeSZTib2vXE0ku0BQoQqDLcPtM3OF9iiN Q6q234B/bGkEzpTHDnBVhaXvYeIAkzM= -----END CERTIFICATE-----Generated at Sun Apr 28 14:32:20 2024 by rpki-client on console-ams.rpki-client.org