$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/3918d96d-ec82-3d51-91a7-3a2529db41f1.roa File: 3918d96d-ec82-3d51-91a7-3a2529db41f1.roa (raw, json) Hash identifier: gRCX4c6BxiC+zZVGQkfXDAVVL8rl7Xp4umfRCi2uQHM= Subject key identifier: CF:50:17:42:73:7A:D3:14:45:5A:FE:1F:79:7D:F6:D9:31:61:2E:AD Certificate issuer: /CN=bd65975e-d229-45b7-bdbe-46ab8f5d4d04 Certificate serial: 010D0C9F43285844C7BA669D952FED9AE6A90000 Authority key identifier: 09:4E:6C:2D:07:E8:0C:96:4C:E7:1F:D5:AD:F3:A2:E7:9E:3C:F2:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/3918d96d-ec82-3d51-91a7-3a2529db41f1.roa Signing time: Sun 04 Feb 2024 14:00:31 +0000 ROA not before: Sun 04 Feb 2024 14:00:31 +0000 ROA not after: Sat 04 May 2024 13:00:31 +0000 asID: 9009 IP address blocks: 72.18.95.0/24 maxlen: 24 72.18.93.0/24 maxlen: 24 72.18.94.0/24 maxlen: 24 72.18.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:c7:ba:66:9d:95:2f:ed:9a:e6:a9:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd65975e-d229-45b7-bdbe-46ab8f5d4d04 Validity Not Before: Feb 4 14:00:31 2024 GMT Not After : May 4 13:00:31 2024 GMT Subject: CN=d4ca6814-6770-473b-931c-3a260ed9e80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1b:5c:7d:c3:97:19:df:2d:1b:a0:ec:9a:a8: 1d:91:ab:0a:31:43:33:e9:93:fe:4d:f6:d0:fa:04: c1:48:fe:a2:9c:59:69:c1:33:0a:6c:56:48:33:df: 91:65:72:dd:2d:de:31:9f:a6:fa:7a:f5:2c:3a:67: ea:1a:a7:f8:69:65:9e:11:9a:e4:ba:c0:de:e0:fa: fe:22:5f:30:57:f4:b2:96:9f:bd:18:f4:fd:a4:e9: d1:f3:07:df:9f:fc:71:48:19:0d:40:f3:1f:0b:d5: af:a7:b4:6e:2f:09:01:8e:bd:63:6b:e2:59:10:99: 79:06:8a:76:29:76:87:b8:0f:56:fe:13:20:ae:29: 7f:70:0c:b5:f0:40:06:40:8d:4b:e1:43:51:75:70: 8e:ec:f4:6a:ed:6a:a4:08:6f:b8:d8:09:29:f5:ac: bf:93:6c:3e:79:76:b0:78:d5:7f:5f:d1:50:e7:9c: 3a:ca:be:92:37:80:de:97:82:09:f3:73:13:e3:a6: 43:bf:4c:56:e7:6a:66:ec:1a:b3:18:94:42:5a:03: 84:c8:04:7e:83:57:54:89:43:1c:8a:4a:d1:2e:9b: da:d6:e6:6b:68:d0:db:23:02:b2:f5:c3:74:da:d0: 43:54:d2:d3:1e:64:90:15:c0:d6:51:4e:6c:b0:0e: ca:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:50:17:42:73:7A:D3:14:45:5A:FE:1F:79:7D:F6:D9:31:61:2E:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/3918d96d-ec82-3d51-91a7-3a2529db41f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.crl X509v3 Authority Key Identifier: keyid:09:4E:6C:2D:07:E8:0C:96:4C:E7:1F:D5:AD:F3:A2:E7:9E:3C:F2:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer sbgp-ipAddrBlock: critical IPv4: 72.18.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:e8:7e:4f:de:09:08:83:68:1a:a5:58:56:be:a6:16:08:73: 61:0b:90:9c:6f:67:6c:99:19:4b:68:d8:b9:e9:7a:2e:40:33: c0:b4:0d:90:84:90:8b:62:71:b2:9f:8a:1e:98:2f:68:13:0a: 52:11:ce:74:e6:13:ca:f7:f1:27:23:0c:49:08:9b:a5:d0:c8: 38:4a:e7:ed:d9:7c:7c:7a:5c:31:07:d5:8c:5d:28:69:5e:5e: 70:6d:9c:1c:53:e7:74:05:d0:6e:53:72:3e:51:48:87:e9:ab: 87:12:27:0e:c9:8c:62:d8:49:40:30:9a:c7:9d:e4:6a:ae:c0: 7c:43:f3:91:d2:62:1d:93:b8:ff:6c:7b:f0:24:56:c3:af:b8: ba:a8:c0:23:da:6b:19:fe:bc:9d:51:9d:69:eb:59:87:a5:ba: 3d:3b:05:ff:d3:3a:c7:27:e8:47:9c:50:68:75:43:e3:02:44: 51:7e:00:2e:f8:94:69:9b:fe:d1:37:5a:33:1d:2e:5a:a7:a7: 51:61:83:e8:0a:a3:76:a6:b0:b6:06:c8:2c:28:0e:7e:04:f9: 11:42:47:18:1f:41:76:27:77:aa:f6:5c:30:b8:d5:50:0b:2b: eb:83:cd:d8:a4:b4:74:78:1b:a7:3e:cf:df:c8:11:c2:db:55: f5:78:86:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETHumadlS/tmuapAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmQ2NTk3NWUtZDIyOS00NWI3LWJkYmUtNDZhYjhmNWQ0 ZDA0MB4XDTI0MDIwNDE0MDAzMVoXDTI0MDUwNDEzMDAzMVowLzEtMCsGA1UEAxMk ZDRjYTY4MTQtNjc3MC00NzNiLTkzMWMtM2EyNjBlZDllODBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRtcfcOXGd8tG6DsmqgdkasKMUMz6ZP+TfbQ +gTBSP6inFlpwTMKbFZIM9+RZXLdLd4xn6b6evUsOmfqGqf4aWWeEZrkusDe4Pr+ Il8wV/Sylp+9GPT9pOnR8wffn/xxSBkNQPMfC9Wvp7RuLwkBjr1ja+JZEJl5Bop2 KXaHuA9W/hMgril/cAy18EAGQI1L4UNRdXCO7PRq7WqkCG+42Akp9ay/k2w+eXaw eNV/X9FQ55w6yr6SN4Del4IJ83MT46ZDv0xW52pm7BqzGJRCWgOEyAR+g1dUiUMc ikrRLpva1uZraNDbIwKy9cN02tBDVNLTHmSQFcDWUU5ssA7KYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9QF0JzetMURVr+H3l99tkxYS6tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZDY1 OTc1ZS1kMjI5LTQ1YjctYmRiZS00NmFiOGY1ZDRkMDQvMzkxOGQ5NmQtZWM4Mi0z ZDUxLTkxYTctM2EyNTI5ZGI0MWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmQ2NTk3NWUtZDIyOS00NWI3LWJk YmUtNDZhYjhmNWQ0ZDA0L2JkNjU5NzVlLWQyMjktNDViNy1iZGJlLTQ2YWI4ZjVk NGQwNC5jcmwwHwYDVR0jBBgwFoAUCU5sLQfoDJZM5x/VrfOi55488pMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZDY1OTc1ZS1kMjI5LTQ1YjctYmRiZS00NmFi OGY1ZDRkMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBJcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILofk/eCQiDaBqlWFa+phYIc2ELkJxvZ2yZGUto2Lnpei5AM8C0DZCE kIticbKfih6YL2gTClIRznTmE8r38ScjDEkIm6XQyDhK5+3ZfHx6XDEH1YxdKGle XnBtnBxT53QF0G5Tcj5RSIfpq4cSJw7JjGLYSUAwmsed5GquwHxD85HSYh2TuP9s e/AkVsOvuLqowCPaaxn+vJ1RnWnrWYeluj07Bf/TOscn6EecUGh1Q+MCRFF+AC74 lGmb/tE3WjMdLlqnp1Fhg+gKo3amsLYGyCwoDn4E+RFCRxgfQXYnd6r2XDC41VAL K+uDzdiktHR4G6c+z9/IEcLbVfV4hkQ= -----END CERTIFICATE-----Generated at Thu Apr 18 14:16:44 2024 by rpki-client on console-ams.rpki-client.org