$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa File: 3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa (raw, json) Hash identifier: PzaoPo2vo+jwOqX9RhhuOXU2Qk4b2CoRQbDIE4+dzi8= Subject key identifier: 48:BE:C9:F7:A2:EE:40:99:01:4B:DA:0F:FF:EA:CA:4F:0B:A3:70:F1 Certificate issuer: /CN=94543699-4d50-4a37-8000-038c38671a86 Certificate serial: 010D0C9F432858458C6DD2D65F2512EAAA069D80 Authority key identifier: 03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa Signing time: Mon 15 Apr 2024 01:00:26 +0000 ROA not before: Mon 15 Apr 2024 01:00:26 +0000 ROA not after: Sun 14 Jul 2024 01:00:26 +0000 asID: 40562 IP address blocks: 172.111.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:8c:6d:d2:d6:5f:25:12:ea:aa:06:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94543699-4d50-4a37-8000-038c38671a86 Validity Not Before: Apr 15 01:00:26 2024 GMT Not After : Jul 14 01:00:26 2024 GMT Subject: CN=4c556259-bf05-44d6-aaa9-d8635ba3b85d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:34:55:62:86:dd:2e:3f:4d:85:eb:0c:ae:f8: 27:8f:91:61:75:b2:8c:1e:74:ae:cf:2b:39:44:d2: cd:36:18:7c:bb:af:4c:99:02:52:47:1e:45:3f:c7: 8e:14:99:7a:c0:0f:47:90:89:2f:e3:dd:44:2e:cc: 6f:99:98:e6:02:b3:7a:31:08:7d:86:20:ae:e4:7a: fb:06:f4:c2:14:7b:44:14:b8:15:cb:e3:fc:44:ce: 80:d0:5f:d0:7c:33:97:e3:b5:f7:ed:16:cc:cb:27: 4d:63:15:d3:84:0a:ed:78:03:5b:f5:94:9a:db:a8: f7:18:3a:54:92:ff:77:a3:b3:27:3e:2a:e9:a0:8c: 9c:07:ef:69:18:d2:9f:a2:99:d6:3b:90:25:f8:a1: 5e:83:84:cd:d2:d0:d7:09:9f:b0:19:5a:2b:33:68: 0e:e4:fa:c2:12:d2:ae:67:bb:b8:9d:ef:5c:62:5a: 71:80:d0:52:ff:7b:e8:9c:7b:ec:53:ce:93:61:cc: 12:b3:8b:56:88:16:40:0d:95:d0:48:e5:77:cc:c8: 9d:72:f4:67:1a:f6:ea:0e:ca:c3:49:8d:fe:66:14: 68:64:48:31:39:ac:9c:64:c0:d5:ca:0c:2a:36:bd: 11:8e:33:cf:d5:47:7a:5f:99:2c:09:fb:10:8f:7c: 8f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BE:C9:F7:A2:EE:40:99:01:4B:DA:0F:FF:EA:CA:4F:0B:A3:70:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl X509v3 Authority Key Identifier: keyid:03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer sbgp-ipAddrBlock: critical IPv4: 172.111.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:72:4f:d9:f9:9c:66:a1:42:18:d6:59:f8:32:cb:e8:e3:b1: 3b:bf:eb:23:e4:3f:f9:3a:46:c8:69:7d:88:64:4e:52:0f:8a: b2:91:26:44:6e:af:5d:2d:8d:e6:51:ca:ec:db:8b:b5:a7:bf: 41:ec:38:ad:f3:19:4e:eb:18:04:9b:f1:f3:50:bb:50:b8:3a: 24:38:5e:68:62:d5:50:89:d7:00:dd:a1:7b:98:7d:71:83:5b: 52:e0:df:95:5d:d4:d9:a3:78:04:b9:a5:32:c7:7f:4b:f1:32: a4:f2:fc:c4:d9:72:9f:70:21:ca:18:44:21:44:fd:a6:02:ba: 3b:e3:34:e1:81:71:1c:3e:68:c4:e8:18:f1:f7:71:9e:a8:3a: ac:62:04:a3:f0:ea:a3:72:90:cf:b8:fa:84:69:40:92:51:e8: 66:c6:0d:c2:0d:b1:96:7f:0d:89:55:c1:00:25:ad:62:71:74: 61:cf:95:60:8f:34:df:90:27:77:39:98:12:f6:86:6e:13:d9: f5:e1:46:f5:dd:14:36:19:33:6e:42:a3:ef:a7:61:04:cf:7e: 88:4f:ff:a6:7a:cb:3f:84:33:34:bb:02:d7:77:e9:61:43:3a: 4c:d8:b5:28:c6:ea:e6:57:eb:bb:67:e6:2f:43:93:7b:38:45: e6:f7:cc:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWMbdLWXyUS6qoGnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1NDM2OTktNGQ1MC00YTM3LTgwMDAtMDM4YzM4Njcx YTg2MB4XDTI0MDQxNTAxMDAyNloXDTI0MDcxNDAxMDAyNlowLzEtMCsGA1UEAxMk NGM1NTYyNTktYmYwNS00NGQ2LWFhYTktZDg2MzViYTNiODVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzRVYobdLj9NhesMrvgnj5FhdbKMHnSuzys5 RNLNNhh8u69MmQJSRx5FP8eOFJl6wA9HkIkv491ELsxvmZjmArN6MQh9hiCu5Hr7 BvTCFHtEFLgVy+P8RM6A0F/QfDOX47X37RbMyydNYxXThArteANb9ZSa26j3GDpU kv93o7MnPirpoIycB+9pGNKfopnWO5Al+KFeg4TN0tDXCZ+wGVorM2gO5PrCEtKu Z7u4ne9cYlpxgNBS/3vonHvsU86TYcwSs4tWiBZADZXQSOV3zMidcvRnGvbqDsrD SY3+ZhRoZEgxOaycZMDVygwqNr0RjjPP1Ud6X5ksCfsQj3yPJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEi+yfei7kCZAUvaD//qyk8Lo3DxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0 MzY5OS00ZDUwLTRhMzctODAwMC0wMzhjMzg2NzFhODYvMzAwNmI3Y2YtZWM3OC0z ZmU2LTkyZTEtMDRiMDg0M2Y1OTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTQ1NDM2OTktNGQ1MC00YTM3LTgw MDAtMDM4YzM4NjcxYTg2Lzk0NTQzNjk5LTRkNTAtNGEzNy04MDAwLTAzOGMzODY3 MWE4Ni5jcmwwHwYDVR0jBBgwFoAUA/mT0DrEyfWVfSGEZ/9sW9FWgeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0MzY5OS00ZDUwLTRhMzctODAwMC0wMzhj Mzg2NzFhODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClyT9n5nGahQhjWWfgyy+jjsTu/6yPkP/k6RshpfYhkTlIPirKRJkRu r10tjeZRyuzbi7Wnv0HsOK3zGU7rGASb8fNQu1C4OiQ4Xmhi1VCJ1wDdoXuYfXGD W1Lg35Vd1NmjeAS5pTLHf0vxMqTy/MTZcp9wIcoYRCFE/aYCujvjNOGBcRw+aMTo GPH3cZ6oOqxiBKPw6qNykM+4+oRpQJJR6GbGDcINsZZ/DYlVwQAlrWJxdGHPlWCP NN+QJ3c5mBL2hm4T2fXhRvXdFDYZM25Co++nYQTPfohP/6Z6yz+EMzS7Atd36WFD OkzYtSjG6uZX67tn5i9Dk3s4Reb3zP0= -----END CERTIFICATE-----Generated at Sun Apr 28 16:15:39 2024 by rpki-client on console-fra.rpki-client.org