$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa File: 70876b56-c403-3345-8194-f6fcf917a625.roa (raw, json) Hash identifier: YjXeOLunx3/7caL8FHPt/Jf9c/QRgPdXjlq5RYfNA1s= Subject key identifier: 7B:9C:07:8E:AD:52:95:A8:25:E0:ED:DE:79:10:32:A8:F6:9E:21:EB Certificate issuer: /CN=94543699-4d50-4a37-8000-038c38671a86 Certificate serial: 010D0C9F432858459368910B4D4E58F56A5879E0 Authority key identifier: 03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa Signing time: Wed 17 Apr 2024 13:00:34 +0000 ROA not before: Wed 17 Apr 2024 13:00:34 +0000 ROA not after: Tue 16 Jul 2024 13:00:34 +0000 asID: 22115 IP address blocks: 172.111.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:93:68:91:0b:4d:4e:58:f5:6a:58:79:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94543699-4d50-4a37-8000-038c38671a86 Validity Not Before: Apr 17 13:00:34 2024 GMT Not After : Jul 16 13:00:34 2024 GMT Subject: CN=b2681f33-8318-4d02-a2ac-d83f0f1651ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:19:79:70:8c:96:7d:6d:0f:e2:a7:a7:88:b9: 96:db:af:ff:15:7c:38:56:46:44:57:3a:dd:a1:b3: 6f:cf:f4:1c:16:30:5c:f7:80:a9:13:05:b5:cf:7c: 3f:de:d5:f0:d2:29:5f:78:18:4b:6d:53:52:c3:62: 19:6e:64:32:b4:61:fd:9f:98:c7:ef:d6:db:5c:f0: 2f:8e:c9:b5:e6:2d:58:77:84:47:9b:bc:ff:df:75: 22:2f:63:6a:76:f0:68:39:68:85:5f:91:ac:7e:46: 6e:b5:26:fe:f5:b7:51:2c:fb:4c:58:2f:eb:29:eb: a8:05:f0:52:64:11:6c:ca:9f:45:f4:87:10:99:fe: f7:b7:4a:c0:44:12:33:be:7e:f6:6f:97:95:b5:7c: f5:43:cb:72:e5:b2:05:c3:96:1d:64:3b:e7:e4:61: 2d:7f:7c:bb:01:86:d3:fa:2a:1d:3e:7c:aa:4c:af: 65:0f:b1:77:5b:ed:c6:b8:44:f1:4f:c0:04:ff:b1: b8:9f:8c:b6:c1:eb:ec:05:f7:ac:3b:ad:3a:38:1c: 7d:12:b6:98:0a:be:69:6a:0a:84:12:6c:f0:9d:9e: ca:dc:62:90:a9:d9:be:ed:c0:87:b8:77:c6:8d:f6: 5e:5e:aa:43:1b:7f:cc:60:4a:a1:11:23:af:fc:02: 75:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9C:07:8E:AD:52:95:A8:25:E0:ED:DE:79:10:32:A8:F6:9E:21:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl X509v3 Authority Key Identifier: keyid:03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer sbgp-ipAddrBlock: critical IPv4: 172.111.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:c2:32:2e:82:3b:ef:16:0f:f9:f2:2f:ed:6f:cb:6c:af:54: 64:f2:b9:26:6a:27:05:f3:51:7c:1c:b7:9f:13:2d:53:b6:44: ac:0c:b7:6d:33:56:4b:11:d7:23:cd:e0:00:22:f5:ee:04:5e: 4f:4b:e2:e6:37:4f:14:3f:e9:66:96:e1:0f:9f:0a:bc:ab:09: 82:a5:d7:b3:bd:48:38:af:88:2f:25:99:78:22:fd:15:c1:82: d8:dc:a7:d9:61:b9:1a:50:fc:b2:cb:c6:54:5d:6b:b5:59:d0: 8a:fc:b5:94:5c:e3:ce:94:a4:04:82:d7:53:69:1e:67:99:2f: 63:80:2c:9f:ad:0f:f9:23:d4:4d:02:c4:eb:67:3f:dc:b9:8f: ea:0b:0d:cc:48:3d:1c:05:fc:b3:41:88:4f:0a:fd:32:87:fc: a4:d3:4d:2a:63:b3:15:46:f2:8e:85:90:0f:b4:b8:3f:ac:6e: f7:f4:50:24:25:a4:1f:a6:5e:0f:ab:ac:15:b4:92:55:71:e1: 23:1f:96:18:f0:cb:26:95:7e:68:f5:f0:99:d1:c0:f1:09:be: b3:06:ca:b5:95:06:a8:b7:e1:e1:71:d9:a4:5c:c4:cd:28:74: 63:6d:89:76:bc:9e:37:8c:d5:92:e5:0d:4b:8e:7f:6b:c4:6a: 5b:92:dd:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWTaJELTU5Y9WpYeeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1NDM2OTktNGQ1MC00YTM3LTgwMDAtMDM4YzM4Njcx YTg2MB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk YjI2ODFmMzMtODMxOC00ZDAyLWEyYWMtZDgzZjBmMTY1MWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxl5cIyWfW0P4qeniLmW26//FXw4VkZEVzrd obNvz/QcFjBc94CpEwW1z3w/3tXw0ilfeBhLbVNSw2IZbmQytGH9n5jH79bbXPAv jsm15i1Yd4RHm7z/33UiL2NqdvBoOWiFX5GsfkZutSb+9bdRLPtMWC/rKeuoBfBS ZBFsyp9F9IcQmf73t0rARBIzvn72b5eVtXz1Q8ty5bIFw5YdZDvn5GEtf3y7AYbT +iodPnyqTK9lD7F3W+3GuETxT8AE/7G4n4y2wevsBfesO606OBx9EraYCr5pagqE EmzwnZ7K3GKQqdm+7cCHuHfGjfZeXqpDG3/MYEqhESOv/AJ1KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHucB46tUpWoJeDt3nkQMqj2niHrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0 MzY5OS00ZDUwLTRhMzctODAwMC0wMzhjMzg2NzFhODYvNzA4NzZiNTYtYzQwMy0z MzQ1LTgxOTQtZjZmY2Y5MTdhNjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTQ1NDM2OTktNGQ1MC00YTM3LTgw MDAtMDM4YzM4NjcxYTg2Lzk0NTQzNjk5LTRkNTAtNGEzNy04MDAwLTAzOGMzODY3 MWE4Ni5jcmwwHwYDVR0jBBgwFoAUA/mT0DrEyfWVfSGEZ/9sW9FWgeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0MzY5OS00ZDUwLTRhMzctODAwMC0wMzhj Mzg2NzFhODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnCMi6CO+8WD/nyL+1vy2yvVGTyuSZqJwXzUXwct58TLVO2RKwMt20z VksR1yPN4AAi9e4EXk9L4uY3TxQ/6WaW4Q+fCryrCYKl17O9SDiviC8lmXgi/RXB gtjcp9lhuRpQ/LLLxlRda7VZ0Ir8tZRc486UpASC11NpHmeZL2OALJ+tD/kj1E0C xOtnP9y5j+oLDcxIPRwF/LNBiE8K/TKH/KTTTSpjsxVG8o6FkA+0uD+sbvf0UCQl pB+mXg+rrBW0klVx4SMflhjwyyaVfmj18JnRwPEJvrMGyrWVBqi34eFx2aRcxM0o dGNtiXa8njeM1ZLlDUuOf2vEaluS3TM= -----END CERTIFICATE-----Generated at Sat Apr 27 15:34:32 2024 by rpki-client on console-ams.rpki-client.org