$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/798a9579-559a-33ad-90c1-8322188f119e.roa File: 798a9579-559a-33ad-90c1-8322188f119e.roa (raw, json) Hash identifier: 7/ij6AE8VTFNob8U3jm7vJ5+AMxbMQS7vGEJzHJs1yY= Subject key identifier: 87:DF:30:E8:2A:55:76:98:61:46:33:BA:2F:08:4B:FE:99:DF:FB:6C Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c Certificate serial: 010D0C9F4328584563F3123053C2EA61D2D467C0 Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/798a9579-559a-33ad-90c1-8322188f119e.roa Signing time: Sun 31 Mar 2024 13:00:36 +0000 ROA not before: Sun 31 Mar 2024 13:00:36 +0000 ROA not after: Sat 29 Jun 2024 13:00:36 +0000 asID: 8100 IP address blocks: 72.11.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:63:f3:12:30:53:c2:ea:61:d2:d4:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c Validity Not Before: Mar 31 13:00:36 2024 GMT Not After : Jun 29 13:00:36 2024 GMT Subject: CN=d8a25343-0d5d-4c96-8cb8-f0f559d4548c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:43:5b:fe:ae:24:08:fe:84:00:63:60:fc:e5: fa:52:e9:45:c8:f7:c2:c9:dd:ca:3f:7b:d2:18:b9: b8:48:c6:55:cd:17:86:be:7f:dd:e3:df:b3:99:27: b1:89:8c:54:91:e2:8c:f3:00:8a:38:1d:73:b7:1b: d9:ae:29:c4:86:d4:e5:6b:2c:cc:8b:a7:8b:a6:07: 85:f3:01:e2:39:2f:33:87:25:b5:c3:2a:7e:89:7f: 71:44:c2:5e:0f:06:96:bc:f2:84:0d:27:81:24:f9: 44:fb:1a:81:fb:b0:07:c9:9a:97:37:0c:06:13:a5: d0:6a:bd:b1:bc:93:62:b2:97:a9:06:14:e0:c3:37: b4:6b:14:69:a5:a8:0f:14:9a:57:e0:c9:64:5e:e9: 73:e4:09:70:81:df:22:49:db:37:bd:8a:fb:f5:57: 07:e9:3a:5d:7c:f7:74:b5:dd:fc:58:09:c4:8a:74: 2a:fc:8f:94:c8:06:b2:2c:58:86:65:c7:a6:58:93: 8e:db:fe:71:08:ee:d9:9d:59:27:79:ca:9c:80:f6: a0:ac:cf:86:b1:22:7a:cb:57:13:3b:81:5d:72:69: 69:1e:3d:47:58:81:31:dc:19:34:91:19:07:6b:91: 65:20:61:d3:5d:c9:fc:22:b4:8e:0b:35:b6:d0:ba: 9a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DF:30:E8:2A:55:76:98:61:46:33:BA:2F:08:4B:FE:99:DF:FB:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/798a9579-559a-33ad-90c1-8322188f119e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl X509v3 Authority Key Identifier: keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer sbgp-ipAddrBlock: critical IPv4: 72.11.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:3c:2d:1e:23:d7:e1:ad:48:52:b0:53:f3:d7:4b:95:37:6d: b5:af:da:15:aa:45:f9:88:01:c7:f6:11:db:5f:c0:c6:58:53: 53:36:bf:dc:23:64:37:e2:38:b1:a2:fb:8e:8c:00:ea:08:24: 12:66:b9:38:c1:e5:99:86:23:c6:4c:d3:89:4b:13:27:92:0e: 85:61:b4:bc:8f:66:ff:1a:48:80:3a:04:86:49:ab:3a:14:af: 24:c1:8b:39:4a:a1:7f:c0:b4:b4:5f:22:a7:f0:b7:51:e3:35: 2e:8f:32:17:b0:34:5f:52:e5:2c:87:87:a3:76:ab:90:77:eb: 79:ec:30:ae:e1:bb:4d:3d:ba:a0:43:e6:f0:9a:62:e3:72:46: 07:6f:4f:e7:15:25:52:05:4c:d1:c1:48:a2:ca:07:10:84:54: 28:d2:c9:14:47:b9:d1:81:33:c0:44:48:2f:aa:f8:37:53:2e: 4f:6b:bf:ae:dd:55:f3:ca:2d:e4:e0:af:36:e6:77:67:2c:24: 08:63:c3:19:f0:91:66:e6:06:71:79:78:1f:c1:72:02:59:83: 4a:dc:4c:09:01:e3:9b:af:b8:35:9b:ec:4d:61:d0:c5:74:1a: 5b:b9:47:b2:ec:e1:1e:df:f6:ac:9d:6c:46:95:f3:88:de:e7: 26:9f:32:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVj8xIwU8LqYdLUZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg3NmQ1YTgtNWRkNi00NDBhLTk3ZTItNWUyMGI5ZTAw ZjVjMB4XDTI0MDMzMTEzMDAzNloXDTI0MDYyOTEzMDAzNlowLzEtMCsGA1UEAxMk ZDhhMjUzNDMtMGQ1ZC00Yzk2LThjYjgtZjBmNTU5ZDQ1NDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0Nb/q4kCP6EAGNg/OX6UulFyPfCyd3KP3vS GLm4SMZVzReGvn/d49+zmSexiYxUkeKM8wCKOB1ztxvZrinEhtTlayzMi6eLpgeF 8wHiOS8zhyW1wyp+iX9xRMJeDwaWvPKEDSeBJPlE+xqB+7AHyZqXNwwGE6XQar2x vJNispepBhTgwze0axRppagPFJpX4MlkXulz5Alwgd8iSds3vYr79VcH6TpdfPd0 td38WAnEinQq/I+UyAayLFiGZcemWJOO2/5xCO7ZnVknecqcgPagrM+GsSJ6y1cT O4FdcmlpHj1HWIEx3Bk0kRkHa5FlIGHTXcn8IrSOCzW20Lqa5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIffMOgqVXaYYUYzui8IS/6Z3/tsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2 ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIwYjllMDBmNWMvNzk4YTk1NzktNTU5YS0z M2FkLTkwYzEtODMyMjE4OGYxMTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg3NmQ1YTgtNWRkNi00NDBhLTk3 ZTItNWUyMGI5ZTAwZjVjLzY4NzZkNWE4LTVkZDYtNDQwYS05N2UyLTVlMjBiOWUw MGY1Yy5jcmwwHwYDVR0jBBgwFoAUoSduxM+Q6aeKON2MubjRHPAXmrMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIw YjllMDBmNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAuYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQ8LR4j1+GtSFKwU/PXS5U3bbWv2hWqRfmIAcf2EdtfwMZYU1M2v9wj ZDfiOLGi+46MAOoIJBJmuTjB5ZmGI8ZM04lLEyeSDoVhtLyPZv8aSIA6BIZJqzoU ryTBizlKoX/AtLRfIqfwt1HjNS6PMhewNF9S5SyHh6N2q5B363nsMK7hu009uqBD 5vCaYuNyRgdvT+cVJVIFTNHBSKLKBxCEVCjSyRRHudGBM8BESC+q+DdTLk9rv67d VfPKLeTgrzbmd2csJAhjwxnwkWbmBnF5eB/BcgJZg0rcTAkB45uvuDWb7E1h0MV0 Glu5R7Ls4R7f9qydbEaV84je5yafMgE= -----END CERTIFICATE-----Generated at Fri Apr 19 19:30:55 2024 by rpki-client on console-ams.rpki-client.org