$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/4e61d2a2-1b38-3f54-b4f1-8da351e02331.roa File: 4e61d2a2-1b38-3f54-b4f1-8da351e02331.roa (raw, json) Hash identifier: 7a9+4OyaDR+nKTPBM5ssYGCk1XiM8ym/IqJJKyVrSLo= Subject key identifier: 43:48:4C:0E:F5:B1:3D:82:CC:1D:BF:21:00:82:6B:0F:07:25:5F:71 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F43285844F9FAB245913127F97C9FE9C0 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/4e61d2a2-1b38-3f54-b4f1-8da351e02331.roa Signing time: Thu 22 Feb 2024 14:00:30 +0000 ROA not before: Thu 22 Feb 2024 14:00:30 +0000 ROA not after: Wed 22 May 2024 13:00:30 +0000 asID: 62610 IP address blocks: 128.14.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f9:fa:b2:45:91:31:27:f9:7c:9f:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Feb 22 14:00:30 2024 GMT Not After : May 22 13:00:30 2024 GMT Subject: CN=f4c997e1-0dc1-442d-98c7-b01965cc98b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3d:88:2e:c8:8d:29:21:a5:d2:2d:ed:af:d9: ad:c4:83:d9:a4:43:ff:c7:01:81:01:d8:29:5f:b5: a3:0f:40:25:c7:fe:a1:eb:30:73:e7:6f:b2:44:89: 8f:43:2c:09:bf:4f:a9:7c:2e:02:fa:08:ec:25:05: be:cf:50:91:be:1b:90:e0:bb:78:60:ea:81:4c:1b: 93:75:4c:34:d7:9b:1e:0a:a3:ba:9d:f8:81:aa:e5: 10:8d:91:94:9c:4d:00:db:78:22:42:f5:91:b1:8d: 57:02:f1:10:33:a5:a9:c2:b2:09:4f:78:d2:5f:cc: e7:a6:31:fb:92:f7:24:53:a6:df:b4:8c:62:a2:b1: 3d:d7:4e:91:fe:85:71:f5:ef:38:5c:94:7e:73:72: ad:01:59:dd:3e:83:1d:19:55:77:51:58:32:cd:92: 42:00:7f:5b:5d:04:34:7e:50:96:aa:c2:29:1c:4f: 6e:10:a7:14:60:09:db:0c:98:5c:12:6a:5d:84:d9: 08:ee:7e:a9:63:75:70:9f:00:c5:e8:37:0d:57:93: 20:b0:d2:b5:ff:69:71:70:73:e0:74:a8:15:0c:9d: 82:b4:87:6c:ed:97:91:26:80:43:3d:26:aa:a2:16: 48:c3:39:6c:10:7d:74:ef:1a:5d:af:1e:c7:26:27: 28:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:48:4C:0E:F5:B1:3D:82:CC:1D:BF:21:00:82:6B:0F:07:25:5F:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/4e61d2a2-1b38-3f54-b4f1-8da351e02331.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.14.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ab:9f:83:c3:5b:a5:69:fe:2c:e9:92:ab:42:68:d6:55:5f: 5f:b9:c9:61:60:ec:21:c9:04:85:43:60:14:7c:14:e9:a7:bc: e2:ab:db:4a:eb:c4:2f:ec:a7:e0:7a:b6:42:27:7e:f5:8c:0d: ba:4d:33:66:96:d4:a3:c2:89:79:9d:72:e6:48:25:02:74:c2: 3e:f5:a7:e3:4f:d3:73:cb:c6:a3:c7:9f:f1:08:cf:97:ea:ba: 7e:74:90:ab:7d:66:3d:e2:51:8f:7c:90:fd:af:8b:b8:38:80: d2:12:ea:32:59:88:63:6b:87:da:be:d2:b7:e1:a1:22:1b:fa: fb:61:1f:5c:ac:ed:8b:64:61:fc:ee:ab:e1:03:81:06:ad:15: 70:53:69:a1:d4:77:82:e7:5c:9a:2a:2e:df:3e:ee:dd:e7:14: 33:8e:3b:d3:b9:99:98:ad:25:e9:90:95:d8:9b:84:43:3e:cd: 12:07:63:f5:ec:15:c3:87:7c:9f:8d:94:7c:0b:3a:fb:79:79: 98:2b:b0:4d:7b:b7:f4:0c:0a:28:71:8a:bf:33:ef:58:6c:cf: 3d:ee:af:2c:8a:be:ae:75:bb:c0:1c:9b:1b:53:55:4e:4e:58: 8e:b4:26:85:b4:c2:17:f6:31:7c:2c:91:09:35:8b:d9:c9:48: 40:00:ad:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET5+rJFkTEn+Xyf6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI0MDIyMjE0MDAzMFoXDTI0MDUyMjEzMDAzMFowLzEtMCsGA1UEAxMk ZjRjOTk3ZTEtMGRjMS00NDJkLTk4YzctYjAxOTY1Y2M5OGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT2ILsiNKSGl0i3tr9mtxIPZpEP/xwGBAdgp X7WjD0Alx/6h6zBz52+yRImPQywJv0+pfC4C+gjsJQW+z1CRvhuQ4Lt4YOqBTBuT dUw015seCqO6nfiBquUQjZGUnE0A23giQvWRsY1XAvEQM6WpwrIJT3jSX8znpjH7 kvckU6bftIxiorE9106R/oVx9e84XJR+c3KtAVndPoMdGVV3UVgyzZJCAH9bXQQ0 flCWqsIpHE9uEKcUYAnbDJhcEmpdhNkI7n6pY3VwnwDF6DcNV5MgsNK1/2lxcHPg dKgVDJ2CtIds7ZeRJoBDPSaqohZIwzlsEH107xpdrx7HJico4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENITA71sT2CzB2/IQCCaw8HJV9xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNGU2MWQyYTItMWIzOC0z ZjU0LWI0ZjEtOGRhMzUxZTAyMzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgA4MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEurn4PDW6Vp/izpkqtCaNZVX1+5yWFg7CHJBIVDYBR8FOmnvOKr20rr xC/sp+B6tkInfvWMDbpNM2aW1KPCiXmdcuZIJQJ0wj71p+NP03PLxqPHn/EIz5fq un50kKt9Zj3iUY98kP2vi7g4gNIS6jJZiGNrh9q+0rfhoSIb+vthH1ys7YtkYfzu q+EDgQatFXBTaaHUd4LnXJoqLt8+7t3nFDOOO9O5mZitJemQldibhEM+zRIHY/Xs FcOHfJ+NlHwLOvt5eZgrsE17t/QMCihxir8z71hszz3uryyKvq51u8AcmxtTVU5O WI60JoW0whf2MXwskQk1i9nJSEAArQA= -----END CERTIFICATE-----Generated at Sun May 12 06:38:43 2024 by rpki-client on console-ams.rpki-client.org