$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/bc0ea950-6f53-332a-949e-f810b0a21c5e.roa File: bc0ea950-6f53-332a-949e-f810b0a21c5e.roa (raw, json) Hash identifier: mXAt9eOSmOBUaYojG/gJhOI4Nqzs2bUJ7efixbIv6Qg= Subject key identifier: 63:E9:44:B0:48:9F:3B:42:18:8B:2F:5A:B6:02:B1:DA:93:FB:C9:4B Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74 Certificate serial: 010D0C9F43285841E4476DFD077DC2084EECD840 Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/bc0ea950-6f53-332a-949e-f810b0a21c5e.roa Signing time: Mon 15 May 2023 17:04:52 +0000 ROA not before: Mon 15 May 2023 17:04:52 +0000 ROA not after: Sat 01 Jul 2023 08:53:34 +0000 asID: 1239 IP address blocks: 172.96.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 May 2023 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:47:6d:fd:07:7d:c2:08:4e:ec:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74 Validity Not Before: May 15 17:04:52 2023 GMT Not After : Jul 1 08:53:34 2023 GMT Subject: CN=5be470f3-3f1c-4c84-a776-ee3cd00c1c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:af:b2:7e:9a:5a:9f:c2:30:ce:21:5c:aa:81: 2e:a6:36:26:28:27:f4:f3:df:49:12:b2:95:50:03: 3e:aa:36:53:db:c3:1e:d7:36:e2:cc:cd:dc:df:58: 8c:b6:e9:68:40:bd:6d:5f:57:47:8d:e7:f3:98:c0: 13:3a:09:87:82:17:94:59:ec:9b:34:b9:6e:93:22: b1:46:47:a9:9f:96:9e:bc:03:82:e6:22:38:9f:a0: 20:32:03:76:db:2d:03:4b:7e:78:66:a5:4b:86:e7: f1:10:87:5e:c2:e7:07:72:da:a5:5f:e4:32:ac:e1: cf:e0:47:0d:b0:24:75:cb:97:73:ef:23:a0:1f:4e: 14:1a:1a:84:38:c7:66:c4:af:db:1f:16:b9:ce:b9: db:8f:e9:84:4e:84:8c:f6:ee:98:47:2d:5f:66:a7: 5e:3d:21:f3:de:96:53:09:3d:a4:95:69:51:10:52: 97:cc:b5:e6:a0:7d:4f:60:43:74:55:0b:b9:c0:68: d6:68:37:a6:bb:aa:f3:ab:aa:4f:c1:ad:12:5b:be: df:ea:3e:ab:c7:7d:c3:0d:30:bf:19:11:2b:d0:a2: 27:78:ed:24:aa:4a:84:b3:3f:ae:d7:51:ea:33:fa: 00:fc:9b:14:c6:a7:58:80:a9:a0:2e:4a:79:6b:44: de:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E9:44:B0:48:9F:3B:42:18:8B:2F:5A:B6:02:B1:DA:93:FB:C9:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/bc0ea950-6f53-332a-949e-f810b0a21c5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl X509v3 Authority Key Identifier: keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer sbgp-ipAddrBlock: critical IPv4: 172.96.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:84:5d:1d:17:09:16:01:0e:ae:30:22:01:e1:ef:3a:77:bb: b6:20:05:eb:b4:a5:a5:3c:ab:52:ca:c7:d0:d2:f7:15:19:33: 87:14:9e:94:bb:3d:1c:75:90:bf:3b:99:f9:24:c1:3d:e8:98: d3:4b:3e:54:54:44:62:8d:c1:f6:eb:93:6a:25:a3:b4:0f:ac: 1c:6c:08:1d:f3:98:02:17:ca:67:cc:40:a5:ab:3f:ee:da:99: f0:54:1e:11:b4:06:0a:37:c1:23:d7:7f:ed:08:16:6f:51:f3: 43:dd:37:15:1a:30:98:be:90:60:ed:9a:df:6e:30:df:31:ef: 0b:f0:3e:ab:d4:33:42:89:ec:e0:f0:46:42:bb:f9:1a:d4:e0: 5c:ab:0b:e7:2d:54:92:75:74:0d:76:f3:28:29:67:21:22:8b: 95:6b:8b:d1:d7:f8:4a:8d:a7:4b:d7:05:d6:3a:4d:81:c3:e1: e3:bc:7c:11:36:4f:a9:fc:21:dc:a0:8b:9c:a9:c8:10:db:16: f0:9a:5d:d6:36:8b:d9:95:66:83:dc:69:94:f6:7d:6b:ea:a0: 6c:63:ab:d7:6d:41:63:c3:7e:79:ad:c4:47:f1:db:76:9c:d0: 11:fc:ad:b4:6e:fd:b2:75:37:e1:8f:5a:36:7b:65:45:b9:25: 19:a9:28:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkR239B33CCE7s2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE0OGM3NGUtZWQ5ZS00NGU3LWJiZjUtNzZmNDczYTIx ZDc0MB4XDTIzMDUxNTE3MDQ1MloXDTIzMDcwMTA4NTMzNFowLzEtMCsGA1UEAxMk NWJlNDcwZjMtM2YxYy00Yzg0LWE3NzYtZWUzY2QwMGMxYzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq+yfppan8IwziFcqoEupjYmKCf0899JErKV UAM+qjZT28Me1zbizM3c31iMtuloQL1tX1dHjefzmMATOgmHgheUWeybNLlukyKx Rkepn5aevAOC5iI4n6AgMgN22y0DS354ZqVLhufxEIdewucHctqlX+QyrOHP4EcN sCR1y5dz7yOgH04UGhqEOMdmxK/bHxa5zrnbj+mEToSM9u6YRy1fZqdePSHz3pZT CT2klWlREFKXzLXmoH1PYEN0VQu5wGjWaDemu6rzq6pPwa0SW77f6j6rx33DDTC/ GREr0KIneO0kqkqEsz+u11HqM/oA/JsUxqdYgKmgLkp5a0TegQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPpRLBInztCGIsvWrYCsdqT+8lLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4 Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0NzNhMjFkNzQvYmMwZWE5NTAtNmY1My0z MzJhLTk0OWUtZjgxMGIwYTIxYzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmE0OGM3NGUtZWQ5ZS00NGU3LWJi ZjUtNzZmNDczYTIxZDc0LzJhNDhjNzRlLWVkOWUtNDRlNy1iYmY1LTc2ZjQ3M2Ey MWQ3NC5jcmwwHwYDVR0jBBgwFoAUXFrsKTJFCAeytpiC7+CI1WXlPLcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0 NzNhMjFkNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMGEXR0XCRYBDq4wIgHh7zp3u7YgBeu0paU8q1LKx9DS9xUZM4cUnpS7 PRx1kL87mfkkwT3omNNLPlRURGKNwfbrk2olo7QPrBxsCB3zmAIXymfMQKWrP+7a mfBUHhG0Bgo3wSPXf+0IFm9R80PdNxUaMJi+kGDtmt9uMN8x7wvwPqvUM0KJ7ODw RkK7+RrU4FyrC+ctVJJ1dA128ygpZyEii5Vri9HX+EqNp0vXBdY6TYHD4eO8fBE2 T6n8Idygi5ypyBDbFvCaXdY2i9mVZoPcaZT2fWvqoGxjq9dtQWPDfnmtxEfx23ac 0BH8rbRu/bJ1N+GPWjZ7ZUW5JRmpKOg= -----END CERTIFICATE-----Generated at Mon May 15 18:01:02 2023 by rpki-client on console-ams.rpki-client.org