$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/903906b2-b483-3cef-8d4e-b15b9bf1e0e4.roa File: 903906b2-b483-3cef-8d4e-b15b9bf1e0e4.roa (raw, json) Hash identifier: Q1GPQi8TFipAd6Xxnkiyex02Dkn9a46F0eo3z6F+6Ls= Subject key identifier: 1E:7B:20:62:19:48:89:80:E9:BA:41:79:28:CC:DB:59:13:AC:13:8A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285845859ED843FB0C0AB1CCC64100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/903906b2-b483-3cef-8d4e-b15b9bf1e0e4.roa Signing time: Fri 12 Apr 2024 14:28:38 +0000 ROA not before: Fri 12 Apr 2024 14:28:38 +0000 ROA not after: Thu 11 Jul 2024 14:28:38 +0000 asID: 16625 IP address blocks: 72.246.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:85:9e:d8:43:fb:0c:0a:b1:cc:c6:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 12 14:28:38 2024 GMT Not After : Jul 11 14:28:38 2024 GMT Subject: CN=46615bea-3beb-4dda-b632-ecde48258a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c1:4e:37:1e:bb:20:a9:ad:83:f2:1e:69:a6: e8:fb:ab:a6:dc:b5:4c:aa:41:77:99:cd:3a:88:d9: a5:01:a5:2f:4a:2c:98:cb:d9:0b:9d:df:4c:c6:af: 6e:2f:fe:21:80:88:3a:4e:21:ab:64:df:a2:01:d7: 8c:72:3e:97:94:b7:71:a2:00:df:d5:46:79:d8:67: 52:2e:83:36:2d:11:1a:77:54:29:9a:9c:4c:6d:f7: 1c:65:1b:f0:90:43:92:aa:41:c4:7e:23:64:5e:df: 94:43:ad:4c:3f:ab:28:04:0c:0a:ac:78:a7:d7:fe: e0:32:a8:47:30:74:c6:e2:4b:e5:e1:e2:7d:b0:57: b0:9e:6d:11:e2:be:32:d6:a0:54:23:aa:f6:40:a6: 1c:cf:29:01:b5:98:bc:82:29:10:a8:90:53:a1:b9: 99:34:90:72:05:16:df:32:ab:71:7e:41:64:ad:dc: de:a0:3f:b0:2a:e8:48:59:51:21:7c:4b:5a:be:4c: 41:f6:27:03:4d:00:a1:29:fd:77:d1:c9:e5:58:7a: ff:16:dc:78:c6:cf:d5:e2:41:c3:14:49:a0:d8:68: e5:08:26:a7:51:f4:04:3a:a3:78:f1:97:a4:ab:7f: 53:30:59:cb:24:18:5d:06:49:f1:c9:1c:8b:55:ff: 92:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7B:20:62:19:48:89:80:E9:BA:41:79:28:CC:DB:59:13:AC:13:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/903906b2-b483-3cef-8d4e-b15b9bf1e0e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:97:55:e1:bb:ba:41:aa:38:dd:a4:bf:52:91:65:03:05:89: 6f:6e:1f:2b:cc:8b:22:39:d9:b6:d2:14:d4:8a:2e:aa:58:81: 0c:ac:27:0f:94:2a:27:11:79:99:3a:4a:95:21:c6:f5:6a:de: 45:14:1f:da:cc:ab:d2:ad:81:f1:4f:a7:b4:f3:3e:0c:97:77: d2:4a:03:3e:c0:a4:e3:fe:95:59:83:96:cd:94:47:70:f5:7c: b9:48:1d:90:d2:29:cc:33:06:73:0c:6e:cc:d2:ac:dc:32:c0: a4:d9:88:48:a7:3a:31:00:3f:8e:0b:c3:c3:69:10:f1:bd:52: 0e:a2:ee:37:8e:60:d8:b3:f4:77:8c:8d:1d:f3:c1:55:50:c5: 51:d4:83:50:46:62:09:c8:62:c6:f5:71:ad:49:f5:6e:fa:ef: bf:a1:96:e7:bd:a0:b9:f8:56:64:24:7b:89:0e:a4:a6:1a:b0: 42:09:fb:9e:32:71:3f:d9:12:c5:5a:80:8a:1a:49:cf:2c:e9: 1a:0f:c9:3d:f5:47:50:ee:ef:59:81:e3:ce:c5:2a:3d:94:f2: e9:5b:75:67:c0:0d:65:da:e1:ab:92:2e:53:46:8e:4d:e8:a7: c7:8d:2e:9f:c8:9e:d7:2b:b6:94:94:c6:dd:50:fb:3a:69:27: d2:27:62:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWFnthD+wwKsczGQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDQxMjE0MjgzOFoXDTI0MDcxMTE0MjgzOFowLzEtMCsGA1UEAxMk NDY2MTViZWEtM2JlYi00ZGRhLWI2MzItZWNkZTQ4MjU4YThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MFONx67IKmtg/Ieaabo+6um3LVMqkF3mc06 iNmlAaUvSiyYy9kLnd9Mxq9uL/4hgIg6TiGrZN+iAdeMcj6XlLdxogDf1UZ52GdS LoM2LREad1QpmpxMbfccZRvwkEOSqkHEfiNkXt+UQ61MP6soBAwKrHin1/7gMqhH MHTG4kvl4eJ9sFewnm0R4r4y1qBUI6r2QKYczykBtZi8gikQqJBTobmZNJByBRbf MqtxfkFkrdzeoD+wKuhIWVEhfEtavkxB9icDTQChKf130cnlWHr/Ftx4xs/V4kHD FEmg2GjlCCanUfQEOqN48Zekq39TMFnLJBhdBknxyRyLVf+SowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB57IGIZSImA6bpBeSjM21kTrBOKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTAzOTA2YjItYjQ4My0z Y2VmLThkNGUtYjE1YjliZjFlMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+XVeG7ukGqON2kv1KRZQMFiW9uHyvMiyI52bbSFNSKLqpYgQysJw+U KicReZk6SpUhxvVq3kUUH9rMq9KtgfFPp7TzPgyXd9JKAz7ApOP+lVmDls2UR3D1 fLlIHZDSKcwzBnMMbszSrNwywKTZiEinOjEAP44Lw8NpEPG9Ug6i7jeOYNiz9HeM jR3zwVVQxVHUg1BGYgnIYsb1ca1J9W7677+hlue9oLn4VmQke4kOpKYasEIJ+54y cT/ZEsVagIoaSc8s6RoPyT31R1Du71mB487FKj2U8ulbdWfADWXa4auSLlNGjk3o p8eNLp/IntcrtpSUxt1Q+zppJ9InYsU= -----END CERTIFICATE-----Generated at Fri May 17 22:03:12 2024 by rpki-client on console-ams.rpki-client.org