$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/60a2e865-c471-3ee9-baed-a9d2115f86f0.roa File: 60a2e865-c471-3ee9-baed-a9d2115f86f0.roa (raw, json) Hash identifier: sfinZIwig9vdkKCNRYGNfcrmRhmJaLusSz4PNL7549k= Subject key identifier: 89:63:E9:93:E3:38:7A:9A:C9:0C:85:A5:D6:8A:56:80:ED:B9:1A:66 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F432858455FC2E50BBF98E86316FFF040 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/60a2e865-c471-3ee9-baed-a9d2115f86f0.roa Signing time: Sat 30 Mar 2024 01:00:26 +0000 ROA not before: Sat 30 Mar 2024 01:00:26 +0000 ROA not after: Fri 28 Jun 2024 01:00:26 +0000 asID: 33363 IP address blocks: 72.31.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5f:c2:e5:0b:bf:98:e8:63:16:ff:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Mar 30 01:00:26 2024 GMT Not After : Jun 28 01:00:26 2024 GMT Subject: CN=fe430d0f-4334-4497-b2da-508e35ddd1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2e:1b:53:38:76:f6:4f:e3:ca:47:e9:f5:4d: 31:99:69:fb:d1:14:37:a4:f0:6b:46:88:34:fd:83: 25:78:f8:38:57:eb:a4:f5:01:ce:59:c9:76:92:bc: 9c:9e:b9:60:b6:0c:be:44:03:cb:c7:c1:0e:1f:f8: cb:f6:9a:06:7a:ed:74:e1:0a:f1:0d:2d:b6:0c:59: 2d:2e:1b:10:08:34:6d:f6:64:0a:45:78:d8:da:08: 47:bb:1a:0c:ee:c1:a2:7f:11:74:61:0c:6a:d9:72: 9a:cc:20:03:94:3b:d7:74:e2:ed:ca:02:6c:f4:c4: 29:0d:7b:d4:b4:56:ba:6d:13:7c:ae:54:05:53:49: ff:d7:ae:1b:be:b4:e8:c3:5e:86:40:54:3a:d9:0b: 3c:e0:b5:d9:57:04:7d:14:76:09:d8:02:84:ed:c4: 1b:cc:3d:d0:bd:89:70:38:9c:53:43:b2:4f:32:9f: 7a:64:2d:f3:2f:f0:ef:6b:79:c4:ce:44:5e:cd:43: 94:da:72:72:dc:33:87:e8:c7:57:cb:ae:36:00:c5: 8d:2e:91:2f:d3:b9:c0:be:b4:01:04:22:48:49:84: 23:b3:7a:c5:ad:93:ec:47:e4:0a:83:bf:71:25:fc: 9b:c2:15:b3:44:53:16:11:bf:83:cf:3f:2b:0e:f3: 07:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:63:E9:93:E3:38:7A:9A:C9:0C:85:A5:D6:8A:56:80:ED:B9:1A:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/60a2e865-c471-3ee9-baed-a9d2115f86f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:d1:83:de:76:04:c5:ac:07:f6:c2:65:cd:19:9c:e3:66:d4: 09:99:71:06:f6:ab:8f:c5:eb:2c:1f:73:62:7d:9d:bd:aa:bd: b1:41:07:73:2c:78:f0:5b:70:61:15:fe:cd:cf:d8:34:a7:4c: 12:c3:98:0c:0d:0c:83:0b:3d:d5:fd:a5:73:4a:82:54:40:48: e1:9b:f7:fc:33:f1:a0:f9:cb:cf:72:6a:a5:d8:3e:ea:cb:eb: 9d:94:52:a8:db:49:02:5d:ec:32:91:e7:c0:b3:20:2d:0c:02: 6e:9e:b9:a5:19:a6:8b:81:7a:f4:30:7e:68:cf:82:8e:37:96: dd:cf:88:3e:d7:62:24:19:03:6b:14:64:22:b4:e6:2f:8d:69: 82:4e:3d:ee:54:ea:53:12:5b:b5:7f:ca:d1:0c:05:be:db:52: 6f:83:0c:41:15:02:b9:06:61:ca:a9:cc:18:53:2f:b5:b0:19: 4e:9d:e3:49:aa:23:e1:23:8b:8a:e6:06:70:85:5a:9b:ba:b4: a4:61:c3:0b:65:a2:78:c8:45:1a:59:57:3b:8a:be:52:d9:85: 67:ad:40:ca:ee:3d:37:79:f8:03:0f:34:fa:21:fe:e3:e9:11: c9:53:32:c0:11:4b:58:95:b0:23:c9:42:31:96:66:cb:ba:0e: 75:35:3a:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVfwuULv5joYxb/8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI0MDMzMDAxMDAyNloXDTI0MDYyODAxMDAyNlowLzEtMCsGA1UEAxMk ZmU0MzBkMGYtNDMzNC00NDk3LWIyZGEtNTA4ZTM1ZGRkMWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy4bUzh29k/jykfp9U0xmWn70RQ3pPBrRog0 /YMlePg4V+uk9QHOWcl2krycnrlgtgy+RAPLx8EOH/jL9poGeu104QrxDS22DFkt LhsQCDRt9mQKRXjY2ghHuxoM7sGifxF0YQxq2XKazCADlDvXdOLtygJs9MQpDXvU tFa6bRN8rlQFU0n/164bvrTow16GQFQ62Qs84LXZVwR9FHYJ2AKE7cQbzD3QvYlw OJxTQ7JPMp96ZC3zL/Dva3nEzkRezUOU2nJy3DOH6MdXy642AMWNLpEv07nAvrQB BCJISYQjs3rFrZPsR+QKg79xJfybwhWzRFMWEb+Dzz8rDvMHfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlj6ZPjOHqayQyFpdaKVoDtuRpmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNjBhMmU4NjUtYzQ3MS0z ZWU5LWJhZWQtYTlkMjExNWY4NmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESB+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXRg952BMWsB/bCZc0ZnONm1AmZcQb2q4/F6ywfc2J9nb2qvbFBB3Ms ePBbcGEV/s3P2DSnTBLDmAwNDIMLPdX9pXNKglRASOGb9/wz8aD5y89yaqXYPurL 652UUqjbSQJd7DKR58CzIC0MAm6euaUZpouBevQwfmjPgo43lt3PiD7XYiQZA2sU ZCK05i+NaYJOPe5U6lMSW7V/ytEMBb7bUm+DDEEVArkGYcqpzBhTL7WwGU6d40mq I+Eji4rmBnCFWpu6tKRhwwtlonjIRRpZVzuKvlLZhWetQMruPTd5+AMPNPoh/uPp EclTMsARS1iVsCPJQjGWZsu6DnU1Ouk= -----END CERTIFICATE-----Generated at Fri May 10 17:25:07 2024 by rpki-client on console-fra.rpki-client.org