$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa File: cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa (raw, json) Hash identifier: s9BACAG5DFkU1tLgWXqehDMQ3ljs5mUe5BRZm5AHVpc= Subject key identifier: 5A:D9:90:18:01:3B:1E:F3:51:EC:D0:55:74:DB:51:15:72:A9:94:0A Certificate issuer: /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Certificate serial: 010D0C9F43285844E50A8F548C279F7099221280 Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa Signing time: Thu 15 Feb 2024 02:00:26 +0000 ROA not before: Thu 15 Feb 2024 02:00:26 +0000 ROA not after: Wed 15 May 2024 01:00:26 +0000 asID: 7922 IP address blocks: 72.22.32.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:e5:0a:8f:54:8c:27:9f:70:99:22:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Validity Not Before: Feb 15 02:00:26 2024 GMT Not After : May 15 01:00:26 2024 GMT Subject: CN=5b5bc148-3c56-4eff-a762-d5cab9026f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:37:3b:10:8d:0c:12:24:60:d7:df:b8:51:6d: cf:63:3f:83:09:95:d7:cb:e4:96:ef:9d:19:2b:03: e1:8e:6b:ed:70:f4:09:0c:50:56:66:fd:86:ef:c8: b4:86:ae:ec:90:bd:8f:09:65:2d:ee:f8:96:f5:d0: 14:b6:de:c6:5c:0f:74:45:4b:03:94:75:50:68:09: c7:ff:b6:26:ac:24:5b:27:9c:d7:ed:49:22:9c:2b: aa:03:d0:c7:b1:7f:86:d2:c3:ac:2e:4e:7c:65:c5: 78:aa:35:9b:21:01:f5:ac:cc:d4:c1:2e:52:de:07: f3:3e:1c:ba:e2:7d:e8:42:1a:da:8b:0d:ff:b9:8a: 1c:e3:f2:f0:04:06:a6:df:6b:a9:e3:83:27:72:c4: f9:19:f7:df:b4:76:e2:9b:4b:0f:17:6f:79:62:bb: 0b:94:b5:94:1f:3d:d8:be:40:25:4d:d5:d2:58:08: 02:c3:d9:53:2d:57:93:ad:1b:eb:52:9b:f1:93:1b: 12:2d:2d:0c:7e:89:91:a3:1e:b8:2d:6b:aa:5f:fb: 90:ed:77:de:89:24:64:44:7f:45:87:92:52:7c:28: 98:3c:e4:9f:3a:3f:56:80:ab:ec:91:82:24:d9:10: 36:36:d2:09:96:e8:1a:29:2a:fd:fa:9c:a6:3d:aa: d9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D9:90:18:01:3B:1E:F3:51:EC:D0:55:74:DB:51:15:72:A9:94:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl X509v3 Authority Key Identifier: keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer sbgp-ipAddrBlock: critical IPv4: 72.22.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:b1:66:4f:c8:03:dd:1a:2a:44:43:47:d1:fa:1a:d2:a4:ad: 59:5e:eb:2f:d9:19:f2:a7:b8:8a:6b:22:dc:7b:e0:9f:5f:30: 0b:ba:79:05:32:17:73:1c:f3:f3:08:cb:2e:17:d6:1d:f0:3d: ec:df:c8:ca:1f:fd:fa:6d:09:06:67:61:6b:5f:95:8b:10:2c: d4:65:2e:20:92:83:d9:56:6b:a1:3f:ab:f6:00:bd:dd:53:f6: 1c:38:d5:3c:e6:c2:bf:ff:6c:0d:00:7c:56:9f:be:c3:c7:9f: 41:a2:0c:7f:39:d9:63:37:79:73:3a:ae:4a:cb:63:7d:6f:22: d9:61:66:a7:62:62:2e:81:35:7c:69:dc:e4:2f:25:d8:64:ff: 59:a5:aa:e8:ef:1f:1b:65:a7:3c:5f:8d:57:00:3f:d7:4a:fe: 1e:66:45:88:95:39:92:3e:95:33:25:1d:4f:09:17:67:03:21: 3f:b5:2e:a7:ae:7e:b6:f7:ee:48:ea:84:b5:2a:5f:37:ac:6a: e6:d0:df:10:c0:d3:0f:0e:45:d8:1a:cd:a8:ae:d4:46:2a:b0: 42:af:f0:d0:9e:88:88:16:0c:09:2a:66:ee:df:f6:d5:0b:b3: 24:53:a6:ac:6f:0f:fa:98:33:7f:e9:80:78:11:56:a3:0e:96: 86:b2:ef:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETlCo9UjCefcJkiEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDNmYWMtYWI5OS00YjM3LWE0MmUtZGJmNjdhOTVj NDYwMB4XDTI0MDIxNTAyMDAyNloXDTI0MDUxNTAxMDAyNlowLzEtMCsGA1UEAxMk NWI1YmMxNDgtM2M1Ni00ZWZmLWE3NjItZDVjYWI5MDI2Zjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjc7EI0MEiRg19+4UW3PYz+DCZXXy+SW750Z KwPhjmvtcPQJDFBWZv2G78i0hq7skL2PCWUt7viW9dAUtt7GXA90RUsDlHVQaAnH /7YmrCRbJ5zX7UkinCuqA9DHsX+G0sOsLk58ZcV4qjWbIQH1rMzUwS5S3gfzPhy6 4n3oQhraiw3/uYoc4/LwBAam32up44MncsT5GffftHbim0sPF295YrsLlLWUHz3Y vkAlTdXSWAgCw9lTLVeTrRvrUpvxkxsSLS0MfomRox64LWuqX/uQ7XfeiSRkRH9F h5JSfCiYPOSfOj9WgKvskYIk2RA2NtIJlugaKSr9+pymParZOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrZkBgBOx7zUezQVXTbURVyqZQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk M2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2N2E5NWM0NjAvY2ZiZDE5ODQtYjM0Zi0z MzI4LTgwNzItODVlMmUxZWNmZGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDNmYWMtYWI5OS00YjM3LWE0 MmUtZGJmNjdhOTVjNDYwL2Q0NGQzZmFjLWFiOTktNGIzNy1hNDJlLWRiZjY3YTk1 YzQ2MC5jcmwwHwYDVR0jBBgwFoAUEHfkdKYtZFtD8H4411+2zqs3WzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkM2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2 N2E5NWM0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSBYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6xZk/IA90aKkRDR9H6GtKkrVle6y/ZGfKnuIprItx74J9fMAu6eQUy F3Mc8/MIyy4X1h3wPezfyMof/fptCQZnYWtflYsQLNRlLiCSg9lWa6E/q/YAvd1T 9hw41Tzmwr//bA0AfFafvsPHn0GiDH852WM3eXM6rkrLY31vItlhZqdiYi6BNXxp 3OQvJdhk/1mlqujvHxtlpzxfjVcAP9dK/h5mRYiVOZI+lTMlHU8JF2cDIT+1Lqeu frb37kjqhLUqXzesaubQ3xDA0w8ORdgazaiu1EYqsEKv8NCeiIgWDAkqZu7f9tUL syRTpqxvD/qYM3/pgHgRVqMOloay7/I= -----END CERTIFICATE-----Generated at Sun Apr 28 17:11:13 2024 by rpki-client on console-ams.rpki-client.org