$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/682a3f5a-f894-3ed6-9812-0733ea3f0551.roa File: 682a3f5a-f894-3ed6-9812-0733ea3f0551.roa (raw, json) Hash identifier: UahdxI7BI5TT8mqAEIOCUCGeRvq7xOAJpjxB3ofXaNA= Subject key identifier: 09:37:E8:77:22:C0:6F:E9:73:BA:C6:8A:B4:8E:4C:6C:F8:C9:BC:BB Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584596335461B4E6E461F9D77300 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/682a3f5a-f894-3ed6-9812-0733ea3f0551.roa Signing time: Thu 18 Apr 2024 13:00:33 +0000 ROA not before: Thu 18 Apr 2024 13:00:33 +0000 ROA not after: Wed 17 Jul 2024 13:00:33 +0000 asID: 27446 IP address blocks: 72.250.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:96:33:54:61:b4:e6:e4:61:f9:d7:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Apr 18 13:00:33 2024 GMT Not After : Jul 17 13:00:33 2024 GMT Subject: CN=c0d676fa-d12c-4932-8e1c-05024c8115ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:a6:0d:aa:26:bb:eb:8f:5d:c7:ac:fe:6e: 48:b1:c6:77:06:5a:6e:fb:f6:d2:10:89:2b:60:a5: 4c:39:62:9e:ad:78:d0:d5:2f:ed:29:37:7c:d6:d9: a9:bb:47:cf:ed:12:93:80:28:0c:6f:72:15:d8:d9: 27:73:9b:5b:b3:88:38:04:df:01:1d:84:83:d3:d2: 03:aa:68:13:e7:3a:0c:0c:be:a2:9e:c9:97:dc:b1: e0:30:46:1a:66:bc:2e:a0:80:e7:3f:9f:4c:58:bc: fa:75:c8:51:63:55:74:d4:71:96:12:3d:e6:9d:aa: 43:24:f9:e2:a8:42:b5:68:b3:a3:47:61:36:37:e7: 85:ae:9d:32:bb:99:ea:71:13:da:37:c7:cc:46:aa: f9:58:48:71:bc:09:48:cc:65:5e:16:92:cc:42:a9: ec:00:2f:ac:06:ba:e7:73:4c:e9:82:35:1e:51:ec: af:3e:7b:e1:8a:38:60:42:93:97:11:2b:d5:66:00: cd:62:f9:c1:96:28:19:eb:75:36:9a:6c:ba:c0:c2: 61:90:bd:52:6a:da:4e:d0:2a:df:92:c1:73:9d:eb: 0b:cd:95:5b:6a:92:79:81:a2:51:f4:a5:4c:6b:dd: 58:82:ee:fa:31:89:5b:b7:bf:28:89:76:3b:47:e9: 27:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:37:E8:77:22:C0:6F:E9:73:BA:C6:8A:B4:8E:4C:6C:F8:C9:BC:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/682a3f5a-f894-3ed6-9812-0733ea3f0551.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 72.250.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:7b:d5:8c:94:88:21:df:dd:2d:38:41:a3:6e:aa:e0:82:3c: 7d:0c:4f:48:68:8c:22:da:3b:7c:bc:56:67:9f:a2:71:2c:ac: 31:b2:a4:da:98:a3:b3:28:c0:e2:21:1d:f2:01:90:e0:5d:70: e5:77:a1:d1:c4:5e:f4:2a:4f:f4:aa:59:e5:a0:2a:b3:2c:b4: a8:04:fa:e6:23:0f:fe:24:46:4f:71:63:54:2f:0b:78:8c:cf: 18:15:29:a3:2c:f1:a1:56:fb:59:f6:73:de:4d:f1:17:d7:91: a1:ca:4b:5b:0b:7e:81:98:51:d7:c0:d2:88:13:12:93:2d:f0: 9b:d3:9b:14:5d:82:cd:1a:41:20:51:cd:70:b6:e9:af:0a:08: c8:23:66:6c:b6:1b:ef:ca:f4:3a:53:cd:46:5c:65:2c:62:05: c1:63:82:a6:c7:d3:d7:37:c2:40:62:07:e4:50:c1:33:17:fa: ec:a3:5d:6e:9f:b2:cc:d4:22:11:62:bd:b6:da:ba:29:af:6e: 4a:31:76:9d:e9:9b:ee:ad:a9:d7:23:e6:3c:61:4d:1e:ed:07: bd:bf:93:fa:44:50:a9:9a:6d:60:1c:fa:78:46:f8:ff:32:03: e6:02:08:ac:5c:8f:4a:70:b5:1a:ba:36:92:d8:1b:2f:c0:02: 5e:ad:62:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWWM1RhtObkYfnXcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI0MDQxODEzMDAzM1oXDTI0MDcxNzEzMDAzM1owLzEtMCsGA1UEAxMk YzBkNjc2ZmEtZDEyYy00OTMyLThlMWMtMDUwMjRjODExNWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPmmDaomu+uPXces/m5IscZ3Blpu+/bSEIkr YKVMOWKerXjQ1S/tKTd81tmpu0fP7RKTgCgMb3IV2Nknc5tbs4g4BN8BHYSD09ID qmgT5zoMDL6insmX3LHgMEYaZrwuoIDnP59MWLz6dchRY1V01HGWEj3mnapDJPni qEK1aLOjR2E2N+eFrp0yu5nqcRPaN8fMRqr5WEhxvAlIzGVeFpLMQqnsAC+sBrrn c0zpgjUeUeyvPnvhijhgQpOXESvVZgDNYvnBligZ63U2mmy6wMJhkL1SatpO0Crf ksFznesLzZVbapJ5gaJR9KVMa91Ygu76MYlbt78oiXY7R+knIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAk36HciwG/pc7rGirSOTGz4yby7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvNjgyYTNmNWEtZjg5NC0z ZWQ2LTk4MTItMDczM2VhM2YwNTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALF71YyUiCHf3S04QaNuquCCPH0MT0hojCLaO3y8VmefonEsrDGypNqY o7MowOIhHfIBkOBdcOV3odHEXvQqT/SqWeWgKrMstKgE+uYjD/4kRk9xY1QvC3iM zxgVKaMs8aFW+1n2c95N8RfXkaHKS1sLfoGYUdfA0ogTEpMt8JvTmxRdgs0aQSBR zXC26a8KCMgjZmy2G+/K9DpTzUZcZSxiBcFjgqbH09c3wkBiB+RQwTMX+uyjXW6f sszUIhFivbbauimvbkoxdp3pm+6tqdcj5jxhTR7tB72/k/pEUKmabWAc+nhG+P8y A+YCCKxcj0pwtRq6NpLYGy/AAl6tYig= -----END CERTIFICATE-----Generated at Wed May 22 01:43:45 2024 by rpki-client on console-ams.rpki-client.org