$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0372aea9-be0b-3757-96b4-a238d1512e50.roa File: 0372aea9-be0b-3757-96b4-a238d1512e50.roa (raw, json) Hash identifier: 9aSdWz0llDDH51kLhBFj6Yj3TzIhx6eCO4/O64Kwp4M= Subject key identifier: 01:FA:C7:A1:1A:11:34:BF:07:B1:75:AA:DE:AC:F1:EA:89:8D:9F:58 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858459368B4CA87F4348BEA9C9D80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0372aea9-be0b-3757-96b4-a238d1512e50.roa Signing time: Wed 17 Apr 2024 13:00:34 +0000 ROA not before: Wed 17 Apr 2024 13:00:34 +0000 ROA not after: Tue 16 Jul 2024 13:00:34 +0000 asID: 701 IP address blocks: 108.34.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:93:68:b4:ca:87:f4:34:8b:ea:9c:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 17 13:00:34 2024 GMT Not After : Jul 16 13:00:34 2024 GMT Subject: CN=3fd2c3dd-3730-4271-9a3d-cd0e40039483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d4:f5:c3:ff:67:b1:98:02:a2:9f:d1:8d:3c: f1:ca:6c:47:ce:c1:cd:f6:96:b4:5e:0a:07:13:6c: 81:9e:9e:d1:5b:c6:cc:fd:3b:24:86:e7:cc:09:25: a0:5b:23:a7:79:76:a4:21:94:66:f4:7f:e4:dc:99: 2c:af:12:e9:07:23:95:e0:1d:46:72:74:f3:ca:1e: 3f:f1:b6:70:9b:b6:7e:cb:bd:23:19:4b:68:f5:1f: e4:e5:f3:31:20:29:1d:51:f3:68:d4:48:9c:94:88: 50:05:5d:f0:8c:70:76:e5:c1:96:dc:a0:66:e1:5e: 18:06:88:fa:65:da:d6:35:71:7f:0a:31:1c:a4:9c: 80:08:e4:5e:6c:0d:c0:b3:ae:a7:14:64:57:8f:39: ca:22:c2:57:90:f5:57:f8:b3:d0:f3:12:89:8c:5c: 5a:dd:17:84:ff:8b:3f:7f:76:86:fa:e2:9a:ce:28: 14:ab:e7:25:1a:ac:d5:54:0a:37:ec:6d:1e:ee:66: 2c:32:5b:bd:58:0a:1b:8c:07:c4:c5:d7:1d:6a:9f: 16:d5:e9:5c:94:c5:79:93:73:1d:7f:bb:63:1e:3e: 5d:a6:52:bf:d5:23:ec:25:45:25:66:00:6c:24:81: 4b:d4:69:6b:59:46:ad:8f:10:24:19:ca:38:7e:3e: 02:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FA:C7:A1:1A:11:34:BF:07:B1:75:AA:DE:AC:F1:EA:89:8D:9F:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0372aea9-be0b-3757-96b4-a238d1512e50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.34.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:c1:8a:33:21:02:e3:ff:24:ce:bc:47:80:65:76:c5:a6:3e: 69:9a:3f:a4:5a:43:d9:fc:64:af:18:39:18:05:11:a1:f3:b1: 43:4f:d7:af:ab:2d:ab:9d:24:d0:d4:eb:1f:1a:84:20:ac:9a: 29:bb:7d:eb:df:e0:5a:48:3c:b8:6c:05:10:74:27:4f:4d:36: df:16:34:ab:4f:8a:7f:fe:7a:e5:42:99:46:57:2b:d1:40:b2: d2:dd:33:e5:eb:2e:34:e1:1c:0a:78:a5:9e:2a:e7:6d:8a:13: 1c:16:4c:91:21:ee:90:76:12:b6:0b:38:98:0e:78:22:fc:be: a4:c3:80:dc:95:ad:53:43:44:c8:ae:66:39:57:47:4c:85:11: ff:35:f2:ba:98:b1:1d:8a:c4:73:80:e7:67:50:ac:60:22:d3: 41:1c:4a:db:bf:a7:00:05:d4:d4:8b:ba:3f:59:01:f3:9f:ed: 0a:28:2f:c8:c7:cc:a9:da:cd:63:e9:0f:ef:3d:c1:73:2f:a2: ee:6c:95:2b:a3:fa:f8:8e:92:66:f9:b6:83:ff:19:c5:d0:23: 23:79:36:d1:90:5d:60:09:17:0d:35:59:74:2e:dd:b9:83:ac: 7c:50:a6:4c:a5:61:4a:04:49:0e:3f:33:b9:58:f1:cd:31:d3: 34:99:a1:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWTaLTKh/Q0i+qcnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk M2ZkMmMzZGQtMzczMC00MjcxLTlhM2QtY2QwZTQwMDM5NDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tT1w/9nsZgCop/RjTzxymxHzsHN9pa0XgoH E2yBnp7RW8bM/TskhufMCSWgWyOneXakIZRm9H/k3JksrxLpByOV4B1GcnTzyh4/ 8bZwm7Z+y70jGUto9R/k5fMxICkdUfNo1EiclIhQBV3wjHB25cGW3KBm4V4YBoj6 ZdrWNXF/CjEcpJyACORebA3As66nFGRXjznKIsJXkPVX+LPQ8xKJjFxa3ReE/4s/ f3aG+uKazigUq+clGqzVVAo37G0e7mYsMlu9WAobjAfExdcdap8W1elclMV5k3Md f7tjHj5dplK/1SPsJUUlZgBsJIFL1GlrWUatjxAkGco4fj4CPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAH6x6EaETS/B7F1qt6s8eqJjZ9YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDM3MmFlYTktYmUwYi0z NzU3LTk2YjQtYTIzOGQxNTEyZTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbCIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrBijMhAuP/JM68R4BldsWmPmmaP6RaQ9n8ZK8YORgFEaHzsUNP16+r LaudJNDU6x8ahCCsmim7fevf4FpIPLhsBRB0J09NNt8WNKtPin/+euVCmUZXK9FA stLdM+XrLjThHAp4pZ4q522KExwWTJEh7pB2ErYLOJgOeCL8vqTDgNyVrVNDRMiu ZjlXR0yFEf818rqYsR2KxHOA52dQrGAi00EcStu/pwAF1NSLuj9ZAfOf7QooL8jH zKnazWPpD+89wXMvou5slSuj+viOkmb5toP/GcXQIyN5NtGQXWAJFw01WXQu3bmD rHxQpkylYUoESQ4/M7lY8c0x0zSZodc= -----END CERTIFICATE-----Generated at Thu May 9 13:11:28 2024 by rpki-client on console-fra.rpki-client.org