$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/940a8b35-3ef1-38f4-8a0f-7f51e74d5df1.roa File: 940a8b35-3ef1-38f4-8a0f-7f51e74d5df1.roa (raw, json) Hash identifier: 4UvJDe6qNQXoy4tUf+15i7bQ6Ydu5it4ZyAlkyf0eL4= Subject key identifier: 3F:61:12:61:C8:6B:CA:45:72:38:21:30:EE:BE:A3:2F:AD:00:10:89 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F43285845628E4EECBDE8F06E9BDF3100 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/940a8b35-3ef1-38f4-8a0f-7f51e74d5df1.roa Signing time: Sun 31 Mar 2024 01:00:26 +0000 ROA not before: Sun 31 Mar 2024 01:00:26 +0000 ROA not after: Sat 29 Jun 2024 01:00:26 +0000 asID: 10796 IP address blocks: 67.52.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:62:8e:4e:ec:bd:e8:f0:6e:9b:df:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Mar 31 01:00:26 2024 GMT Not After : Jun 29 01:00:26 2024 GMT Subject: CN=548379a7-1b27-487e-acb9-6036ede9951e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6d:6c:69:6b:67:e2:3d:d3:60:ee:0e:d0:b6: 37:c1:e3:4a:5c:f5:bb:a2:d1:b1:0e:ba:23:b4:5f: c5:f7:66:57:d1:9d:a8:f0:e6:c9:ce:b0:94:d4:ae: 62:ba:4b:2b:8f:e8:73:51:f5:0d:60:b2:03:e7:48: 8d:95:01:50:13:56:6b:63:c3:c7:c2:db:ad:c6:92: f0:a9:07:8a:b4:54:74:db:4e:06:9a:e8:83:2f:98: 78:fb:2c:8d:e4:fc:29:70:f2:af:b0:8b:94:be:d4: a3:d6:ee:db:12:d6:4b:9f:e9:34:92:1e:e2:03:8e: b2:47:2d:d8:9c:80:ad:d4:88:be:8a:45:55:6e:5f: e1:97:06:57:fa:03:d5:ea:0a:8a:06:4a:5f:b2:f8: 6b:a7:54:fb:37:c5:6a:91:e9:2f:28:82:d0:97:f0: 9b:ef:1e:3c:71:ee:cf:71:af:4a:61:6c:c1:4f:a4: cf:4e:d2:c9:5b:6a:73:4e:1a:68:26:6b:b5:b1:ea: 5e:f0:0f:bb:e4:d8:e7:fd:90:bf:94:f1:e1:b7:cb: d5:ae:2f:51:db:9c:5b:4c:0b:e4:81:f0:52:5c:e8: 52:67:bf:18:38:58:f8:57:63:72:9f:11:8f:15:7b: 8b:61:38:c6:68:5b:ca:8b:9b:d6:4f:76:cb:8b:40: 57:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:61:12:61:C8:6B:CA:45:72:38:21:30:EE:BE:A3:2F:AD:00:10:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/940a8b35-3ef1-38f4-8a0f-7f51e74d5df1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 67.52.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:d8:c2:93:53:f8:ad:0c:ed:40:2a:6d:80:76:bd:d3:10:d1: c9:71:a0:e1:a8:6e:13:30:ce:fb:4f:78:f0:f6:71:6a:34:93: b1:b0:cb:a2:b9:4c:b9:cf:c7:80:9b:e8:27:cb:d3:b0:ac:20: d6:59:6e:93:04:c7:20:8b:f3:93:3b:69:0f:20:49:41:b7:48: 12:a4:e7:bf:c7:33:cd:22:64:63:29:88:a2:96:00:c4:ac:31: d5:b5:7a:96:af:0c:9e:72:d9:78:34:5e:63:71:b4:d3:78:84: fc:46:4d:a4:2e:16:40:e9:6f:ba:60:b0:34:fe:45:f9:aa:76: 03:67:71:22:3e:49:98:5c:c6:93:5e:30:18:b9:a1:e2:6c:d0: 93:c4:cc:a7:09:e6:d7:03:b9:b6:72:53:32:30:74:e9:67:7f: b1:64:3f:89:35:26:fd:60:66:66:e2:95:7c:4b:03:f1:8e:33: c9:b7:ab:4c:0d:e4:b5:a2:f4:27:d2:e4:e0:71:86:10:4f:63: 63:db:40:d7:a3:a1:1d:76:97:75:8a:cc:00:47:fa:b7:bc:f0: f6:9b:94:3a:d3:4e:7d:03:37:ad:a4:67:cb:6c:b8:ef:47:2d: c8:44:12:73:1a:b7:17:e4:6f:67:67:a1:ae:40:5b:38:6d:ca: c8:70:ff:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijk7svejwbpvfMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk NTQ4Mzc5YTctMWIyNy00ODdlLWFjYjktNjAzNmVkZTk5NTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkm1saWtn4j3TYO4O0LY3weNKXPW7otGxDroj tF/F92ZX0Z2o8ObJzrCU1K5iuksrj+hzUfUNYLID50iNlQFQE1ZrY8PHwtutxpLw qQeKtFR0204GmuiDL5h4+yyN5PwpcPKvsIuUvtSj1u7bEtZLn+k0kh7iA46yRy3Y nICt1Ii+ikVVbl/hlwZX+gPV6gqKBkpfsvhrp1T7N8VqkekvKILQl/Cb7x48ce7P ca9KYWzBT6TPTtLJW2pzThpoJmu1sepe8A+75Njn/ZC/lPHht8vVri9R25xbTAvk gfBSXOhSZ78YOFj4V2NynxGPFXuLYTjGaFvKi5vWT3bLi0BXDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9hEmHIa8pFcjghMO6+oy+tABCJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOTQwYThiMzUtM2VmMS0z OGY0LThhMGYtN2Y1MWU3NGQ1ZGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQzQcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7YwpNT+K0M7UAqbYB2vdMQ0clxoOGobhMwzvtPePD2cWo0k7Gwy6K5 TLnPx4Cb6CfL07CsINZZbpMExyCL85M7aQ8gSUG3SBKk57/HM80iZGMpiKKWAMSs MdW1epavDJ5y2Xg0XmNxtNN4hPxGTaQuFkDpb7pgsDT+RfmqdgNncSI+SZhcxpNe MBi5oeJs0JPEzKcJ5tcDubZyUzIwdOlnf7FkP4k1Jv1gZmbilXxLA/GOM8m3q0wN 5LWi9CfS5OBxhhBPY2PbQNejoR12l3WKzABH+re88PablDrTTn0DN62kZ8tsuO9H LchEEnMatxfkb2dnoa5AWzhtyshw//4= -----END CERTIFICATE-----Generated at Wed May 1 15:56:04 2024 by rpki-client on console-ams.rpki-client.org