$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f6b1476-0e93-3f5e-aeaa-a93e5df06616.roa File: 3f6b1476-0e93-3f5e-aeaa-a93e5df06616.roa (raw, json) Hash identifier: oa+lOm0npdhUusnDdrfSOm3gdkOIGmMB/JmJEu2FhaI= Subject key identifier: E9:23:1D:65:20:D6:3D:1D:A9:96:E5:E0:E4:0A:B2:55:FC:D2:F6:60 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F43285845628DD04980559D311047CD00 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f6b1476-0e93-3f5e-aeaa-a93e5df06616.roa Signing time: Sun 31 Mar 2024 01:00:26 +0000 ROA not before: Sun 31 Mar 2024 01:00:26 +0000 ROA not after: Sat 29 Jun 2024 01:00:26 +0000 asID: 20001 IP address blocks: 76.172.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:62:8d:d0:49:80:55:9d:31:10:47:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Mar 31 01:00:26 2024 GMT Not After : Jun 29 01:00:26 2024 GMT Subject: CN=4ab16899-f2b4-42bb-bb34-cc3014ea5356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:90:4a:8d:bc:ad:08:d0:6c:d2:ba:d0:a6:0c: 94:8e:dd:64:33:74:2c:e2:fc:8a:6e:4d:78:3f:6b: 81:c4:0f:b7:db:98:d5:14:10:7e:60:9c:42:53:ab: 76:19:89:11:60:eb:27:31:c5:6c:8f:33:a9:ea:9b: 57:0c:5e:a9:a2:97:ef:62:a4:d9:1d:48:26:25:c0: 25:3b:69:c1:c1:ed:56:fd:bb:c5:67:d5:94:25:4d: e5:fe:1c:25:3a:7c:14:39:6e:9b:33:c0:2d:96:50: 80:df:b3:13:6a:08:3f:aa:f9:97:cc:2f:00:97:e8: c8:5d:11:0f:c8:75:33:ae:3e:35:77:12:82:44:9d: 27:15:e5:cc:bc:10:e7:c2:72:34:58:ea:ab:55:09: bc:21:8f:c6:9a:bc:5f:a9:d3:ce:e8:4f:f7:4f:81: 5c:1e:14:a1:3b:c3:ee:67:ad:bb:b0:48:f3:d8:62: 1f:64:4a:c4:f6:de:57:7c:32:38:ec:80:01:cf:65: a6:32:ab:7e:e2:34:c0:08:79:92:ba:49:66:3a:88: 4c:a0:bd:93:8e:a4:74:c0:9d:72:6f:56:e4:f4:d8: c6:b5:be:89:8d:45:4b:6b:78:a0:fc:41:99:6d:af: 36:61:a0:70:53:e8:18:31:07:6e:76:c2:5c:bc:52: 23:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:23:1D:65:20:D6:3D:1D:A9:96:E5:E0:E4:0A:B2:55:FC:D2:F6:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f6b1476-0e93-3f5e-aeaa-a93e5df06616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 76.172.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:6e:2e:44:6b:3b:7b:04:13:c9:fd:35:b0:22:03:4a:d9:d0: 6c:28:e1:32:dc:fa:5a:03:08:71:c7:18:db:bf:04:d2:7d:ab: aa:19:5b:53:41:7e:ca:ec:f1:bf:d7:fa:02:39:18:64:16:2b: 84:e8:f9:b8:97:f9:85:d2:89:40:da:ed:70:d7:6e:8b:e9:97: 25:d7:76:0a:8b:be:e0:10:d0:02:ba:ab:97:f4:be:67:20:d8: 52:11:05:24:2e:18:c8:d0:7e:ca:57:11:89:00:29:9c:47:a7: 84:ee:07:80:05:d4:a4:50:6b:47:5d:67:fb:6b:95:88:c4:79: 4c:86:0c:f4:d2:3b:e2:d9:42:0e:12:0b:75:84:7e:7f:87:92: 2b:6c:26:68:9e:2e:ff:b4:31:db:b3:d6:ef:bc:5f:27:32:44: 4a:c4:37:6d:f7:cc:fe:d8:ed:e3:25:0f:cb:43:6b:eb:86:48: 44:41:f7:6c:a7:57:5d:b7:a5:7d:81:4b:36:1d:f2:37:23:97: 42:ac:ec:70:e3:3f:e7:a7:d8:f8:bc:51:0b:63:57:51:c7:bf: 7c:14:87:7f:2e:78:10:0a:b0:d5:00:8a:68:76:56:10:c6:86: bd:c0:bc:e3:b2:2b:03:ae:29:9f:0e:22:99:4c:cc:04:e9:91: e4:06:48:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijdBJgFWdMRBHzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk NGFiMTY4OTktZjJiNC00MmJiLWJiMzQtY2MzMDE0ZWE1MzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5BKjbytCNBs0rrQpgyUjt1kM3Qs4vyKbk14 P2uBxA+325jVFBB+YJxCU6t2GYkRYOsnMcVsjzOp6ptXDF6popfvYqTZHUgmJcAl O2nBwe1W/bvFZ9WUJU3l/hwlOnwUOW6bM8AtllCA37MTagg/qvmXzC8Al+jIXREP yHUzrj41dxKCRJ0nFeXMvBDnwnI0WOqrVQm8IY/GmrxfqdPO6E/3T4FcHhShO8Pu Z627sEjz2GIfZErE9t5XfDI47IABz2WmMqt+4jTACHmSuklmOohMoL2TjqR0wJ1y b1bk9NjGtb6JjUVLa3ig/EGZba82YaBwU+gYMQdudsJcvFIj4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkjHWUg1j0dqZbl4OQKslX80vZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvM2Y2YjE0NzYtMGU5My0z ZjVlLWFlYWEtYTkzZTVkZjA2NjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTKxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpuLkRrO3sEE8n9NbAiA0rZ0Gwo4TLc+loDCHHHGNu/BNJ9q6oZW1NB fsrs8b/X+gI5GGQWK4To+biX+YXSiUDa7XDXbovplyXXdgqLvuAQ0AK6q5f0vmcg 2FIRBSQuGMjQfspXEYkAKZxHp4TuB4AF1KRQa0ddZ/trlYjEeUyGDPTSO+LZQg4S C3WEfn+HkitsJmieLv+0Mduz1u+8XycyRErEN233zP7Y7eMlD8tDa+uGSERB92yn V123pX2BSzYd8jcjl0Ks7HDjP+en2Pi8UQtjV1HHv3wUh38ueBAKsNUAimh2VhDG hr3AvOOyKwOuKZ8OIplMzATpkeQGSHU= -----END CERTIFICATE-----Generated at Wed May 1 15:55:56 2024 by rpki-client on console-ams.rpki-client.org