$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a1a3ab19-5cb5-350e-85bc-242757f97592.roa File: a1a3ab19-5cb5-350e-85bc-242757f97592.roa (raw, json) Hash identifier: syHcPLxYapftSDGeP+JU6y+N0EQaPx4x943OD4xO/tg= Subject key identifier: A9:C8:70:D6:34:CC:0D:F7:11:50:99:78:8F:B1:E8:57:5C:CB:9C:77 Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F432858459A63361106D1187A17B613B0 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a1a3ab19-5cb5-350e-85bc-242757f97592.roa Signing time: Sat 20 Apr 2024 01:00:26 +0000 ROA not before: Sat 20 Apr 2024 01:00:26 +0000 ROA not after: Fri 19 Jul 2024 01:00:26 +0000 asID: 22765 IP address blocks: 72.20.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:9a:63:36:11:06:d1:18:7a:17:b6:13:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Apr 20 01:00:26 2024 GMT Not After : Jul 19 01:00:26 2024 GMT Subject: CN=2a410dbf-16c1-4932-afd5-188c879426cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e6:76:7a:78:26:ec:74:75:c6:e9:a9:20:df: d6:67:86:50:ae:d3:64:78:a0:1f:e4:93:3d:45:0e: 80:ed:93:c4:e1:a2:31:f0:3c:30:85:fc:4d:f2:92: a2:63:93:24:cb:7c:76:b0:80:3c:c7:18:87:29:19: cd:31:d2:f3:97:42:c5:d2:8c:99:ff:11:7a:6e:aa: 5a:af:ed:68:ae:91:9d:da:b9:0a:e2:16:60:ef:03: c2:e2:52:de:c4:47:50:8b:b1:e7:2e:1d:41:32:c4: 4f:37:e6:e8:76:93:92:6e:0f:1a:bd:68:a3:4a:17: a8:bb:cd:85:bb:b9:cb:74:4b:a4:b9:6f:93:dc:4e: f6:71:ae:91:37:5e:3f:29:0e:2e:1a:13:86:92:a6: e5:67:95:5a:5b:1c:b5:ce:00:91:a5:ab:69:2a:bc: 9b:e5:d9:5a:d5:b8:cb:6b:f1:7a:a0:09:b7:ee:6c: 8d:3b:10:37:94:df:91:de:48:a7:81:21:29:7d:18: f1:f2:28:46:e5:86:65:84:37:b9:93:c1:4c:4e:7d: db:1c:4b:30:4e:a0:e1:09:07:e7:1f:e8:1a:e6:f4: 66:e2:8b:df:a2:94:81:5d:d8:7c:96:38:4b:72:14: f4:34:a8:94:88:c7:5d:f8:8e:42:a6:45:98:16:72: a7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C8:70:D6:34:CC:0D:F7:11:50:99:78:8F:B1:E8:57:5C:CB:9C:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a1a3ab19-5cb5-350e-85bc-242757f97592.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 72.20.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:e9:c1:b1:c4:b8:bf:64:08:fc:39:6b:fe:de:16:ca:56:17: a8:3f:78:5a:63:49:a5:8c:90:81:fa:14:36:45:b9:5d:3b:97: 8d:2c:e5:97:bd:f3:83:04:8f:94:a8:0c:bf:53:b6:32:67:b1: 8d:ea:6e:42:86:07:00:12:db:3e:0a:4a:c9:d3:33:2a:91:ea: 64:8f:9a:16:4b:9e:29:ab:05:02:e2:1c:0e:97:1a:7a:b3:c0: 90:b8:57:2d:01:4c:ce:07:a2:9f:9c:0e:12:44:a1:a0:82:70: 72:43:9b:bc:39:4d:57:8a:2a:be:c5:a1:15:f7:0c:3d:c1:c5: fd:fd:e1:a2:2f:cd:63:fc:40:9c:4e:6a:9a:8f:47:56:2b:3e: 12:42:f0:18:51:e1:ef:ae:10:9f:3d:21:0b:19:d7:8b:57:45: 9b:13:b8:97:04:1f:a4:37:59:4f:67:c7:c3:71:b8:d2:df:04: c3:72:5e:60:07:33:8c:89:6b:53:42:49:8b:44:6e:bc:33:7e: 2f:62:23:1f:e3:8d:50:80:fa:97:8c:44:2a:db:1a:46:4a:27: 66:88:cb:61:06:26:d6:e2:4a:c0:a9:8e:3e:29:2b:3a:b7:39: 5a:63:3c:1f:72:d2:f6:b5:a0:19:8a:38:4a:90:ce:ea:ca:29: 27:db:07:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWaYzYRBtEYehe2E7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI0MDQyMDAxMDAyNloXDTI0MDcxOTAxMDAyNlowLzEtMCsGA1UEAxMk MmE0MTBkYmYtMTZjMS00OTMyLWFmZDUtMTg4Yzg3OTQyNmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuZ2engm7HR1xumpIN/WZ4ZQrtNkeKAf5JM9 RQ6A7ZPE4aIx8DwwhfxN8pKiY5Mky3x2sIA8xxiHKRnNMdLzl0LF0oyZ/xF6bqpa r+1orpGd2rkK4hZg7wPC4lLexEdQi7HnLh1BMsRPN+bodpOSbg8avWijSheou82F u7nLdEukuW+T3E72ca6RN14/KQ4uGhOGkqblZ5VaWxy1zgCRpatpKryb5dla1bjL a/F6oAm37myNOxA3lN+R3kingSEpfRjx8ihG5YZlhDe5k8FMTn3bHEswTqDhCQfn H+ga5vRm4ovfopSBXdh8ljhLchT0NKiUiMdd+I5CpkWYFnKnGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnIcNY0zA33EVCZeI+x6Fdcy5x3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvYTFhM2FiMTktNWNiNS0z NTBlLTg1YmMtMjQyNzU3Zjk3NTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBTCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALXpwbHEuL9kCPw5a/7eFspWF6g/eFpjSaWMkIH6FDZFuV07l40s5Ze9 84MEj5SoDL9TtjJnsY3qbkKGBwAS2z4KSsnTMyqR6mSPmhZLnimrBQLiHA6XGnqz wJC4Vy0BTM4Hop+cDhJEoaCCcHJDm7w5TVeKKr7FoRX3DD3Bxf394aIvzWP8QJxO apqPR1YrPhJC8BhR4e+uEJ89IQsZ14tXRZsTuJcEH6Q3WU9nx8NxuNLfBMNyXmAH M4yJa1NCSYtEbrwzfi9iIx/jjVCA+peMRCrbGkZKJ2aIy2EGJtbiSsCpjj4pKzq3 OVpjPB9y0va1oBmKOEqQzurKKSfbBzQ= -----END CERTIFICATE-----Generated at Mon May 20 15:19:40 2024 by rpki-client on console-fra.rpki-client.org