$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa File: 4049c44a-f808-3c97-bfb6-a323f04f3436.roa (raw, json) Hash identifier: tofJBLOQ3S86fiYusiQkjLgg9PfnNt4BLCGYC51TLrw= Subject key identifier: 7D:FE:4D:95:33:AB:63:5F:8F:E3:89:E1:79:CC:D2:43:D9:D0:FC:0A Certificate issuer: /CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Certificate serial: 010D0C9F432858459E9368698C93834DB5BBEB80 Authority key identifier: 88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa Signing time: Sun 21 Apr 2024 13:00:35 +0000 ROA not before: Sun 21 Apr 2024 13:00:35 +0000 ROA not after: Sat 20 Jul 2024 13:00:35 +0000 asID: 395927 IP address blocks: 208.72.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:9e:93:68:69:8c:93:83:4d:b5:bb:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Validity Not Before: Apr 21 13:00:35 2024 GMT Not After : Jul 20 13:00:35 2024 GMT Subject: CN=03d3da49-c34c-4bd1-ad81-ef78729cbe52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:71:e5:31:8d:9f:c2:5a:c9:54:35:fe:08:12: fe:bf:81:e5:b1:57:4f:e5:c3:73:36:37:46:47:e9: 0a:72:36:eb:8c:3b:e6:db:8d:06:99:29:1b:6e:d2: 48:35:4f:73:16:13:6b:c5:d1:c1:6b:31:f9:24:31: 86:c7:bf:43:e1:25:74:82:f4:72:73:7f:51:25:5d: f2:6d:47:2b:e3:7d:9c:2e:dc:ed:0e:36:5b:0a:07: e0:43:12:93:56:f9:05:75:c5:27:62:d9:4a:a3:c4: 6e:12:86:5e:21:dd:64:24:53:83:d6:20:f0:ec:a0: 68:8f:e3:4a:ef:d2:27:38:88:18:cd:44:4c:a5:91: e0:10:f8:ec:33:2a:4c:0a:c1:62:81:03:25:22:10: ae:88:d4:71:97:bf:69:a4:fc:45:62:29:ae:4b:fe: 9e:42:ad:2d:31:4a:ea:39:b5:56:97:1e:d5:67:dd: 91:50:43:ef:1f:15:8a:4e:13:4f:c4:14:1a:b8:e7: 95:f7:40:aa:e8:34:85:c1:48:fb:3c:7a:66:d4:74: 33:1f:27:c1:e9:85:22:93:91:1d:50:5e:30:ed:1c: c7:e9:67:8c:0f:36:f2:97:f6:3c:bb:d5:fd:60:54: ab:18:3b:fb:15:5d:ec:a8:1a:a7:e3:82:ee:21:01: d1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FE:4D:95:33:AB:63:5F:8F:E3:89:E1:79:CC:D2:43:D9:D0:FC:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl X509v3 Authority Key Identifier: keyid:88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer sbgp-ipAddrBlock: critical IPv4: 208.72.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:d4:92:5a:26:27:a3:b3:46:d3:b3:82:4f:0e:a1:15:be:2d: 90:aa:d1:5c:08:56:12:93:6c:20:03:1e:9b:0c:ba:96:c5:13: b3:7d:7f:38:d4:71:13:b1:c5:0c:b8:dc:83:5e:8e:a0:51:d0: d4:cc:50:d3:1c:7f:8b:9d:80:18:63:8c:1c:b4:65:8f:c1:88: 81:9c:17:64:1e:34:a0:b6:cd:ce:31:35:6a:43:03:16:60:ca: 5c:d6:f9:32:4e:b7:1f:23:32:3e:27:68:26:98:a6:32:e6:a4: 86:43:cb:24:09:82:78:23:c1:b3:59:39:e1:9e:09:52:92:5c: 6e:db:13:14:34:db:f0:59:5f:0b:51:8b:8f:7b:92:94:b6:da: 85:db:fd:1a:98:8c:b9:f4:aa:11:0c:2f:22:b0:74:5d:4b:fa: 9c:3b:fa:a1:06:84:76:41:b3:41:e0:39:ec:2b:90:ed:c1:15: 5e:16:a2:76:de:b4:1b:ea:29:a4:a0:5f:d5:d7:c8:4b:c5:6d: a4:32:53:27:dc:b4:54:a7:10:85:49:68:de:82:e7:35:8f:56: 0c:15:d0:b8:41:7b:41:ce:0e:95:51:fd:70:0d:22:06:f7:6a: 7b:91:73:0c:e2:35:35:47:0a:26:26:55:07:b7:1a:e2:1b:ca: 23:a0:3f:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWek2hpjJODTbW764AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2NTVhYWYtNzZmNC00YmFiLWI0ZjctOGZiMjNjM2Q0 MDExMB4XDTI0MDQyMTEzMDAzNVoXDTI0MDcyMDEzMDAzNVowLzEtMCsGA1UEAxMk MDNkM2RhNDktYzM0Yy00YmQxLWFkODEtZWY3ODcyOWNiZTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nHlMY2fwlrJVDX+CBL+v4HlsVdP5cNzNjdG R+kKcjbrjDvm240GmSkbbtJINU9zFhNrxdHBazH5JDGGx79D4SV0gvRyc39RJV3y bUcr432cLtztDjZbCgfgQxKTVvkFdcUnYtlKo8RuEoZeId1kJFOD1iDw7KBoj+NK 79InOIgYzURMpZHgEPjsMypMCsFigQMlIhCuiNRxl79ppPxFYimuS/6eQq0tMUrq ObVWlx7VZ92RUEPvHxWKThNPxBQauOeV90Cq6DSFwUj7PHpm1HQzHyfB6YUik5Ed UF4w7RzH6WeMDzbyl/Y8u9X9YFSrGDv7FV3sqBqn44LuIQHRIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3+TZUzq2Nfj+OJ4XnM0kPZ0PwKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1 NWFhZi03NmY0LTRiYWItYjRmNy04ZmIyM2MzZDQwMTEvNDA0OWM0NGEtZjgwOC0z Yzk3LWJmYjYtYTMyM2YwNGYzNDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2M2NTVhYWYtNzZmNC00YmFiLWI0 ZjctOGZiMjNjM2Q0MDExLzNjNjU1YWFmLTc2ZjQtNGJhYi1iNGY3LThmYjIzYzNk NDAxMS5jcmwwHwYDVR0jBBgwFoAUiHOJW9dIB54yw37e57iTyJjsLBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1NWFhZi03NmY0LTRiYWItYjRmNy04ZmIy M2MzZDQwMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Eg0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvUklomJ6OzRtOzgk8OoRW+LZCq0VwIVhKTbCADHpsMupbFE7N9fzjU cROxxQy43INejqBR0NTMUNMcf4udgBhjjBy0ZY/BiIGcF2QeNKC2zc4xNWpDAxZg ylzW+TJOtx8jMj4naCaYpjLmpIZDyyQJgngjwbNZOeGeCVKSXG7bExQ02/BZXwtR i497kpS22oXb/RqYjLn0qhEMLyKwdF1L+pw7+qEGhHZBs0HgOewrkO3BFV4Wonbe tBvqKaSgX9XXyEvFbaQyUyfctFSnEIVJaN6C5zWPVgwV0LhBe0HODpVR/XANIgb3 anuRcwziNTVHCiYmVQe3GuIbyiOgP6Y= -----END CERTIFICATE-----Generated at Thu May 23 05:43:22 2024 by rpki-client on console-ams.rpki-client.org