$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2caed372-a750-3ba1-8e35-b17542ea5e5b.roa File: 2caed372-a750-3ba1-8e35-b17542ea5e5b.roa (raw, json) Hash identifier: 97eR0DRYx0xBMAwKF3UrLYXwNWOTakYJHwsp/07fcgE= Subject key identifier: CB:1C:8A:F2:DF:98:29:31:04:FE:23:96:5A:7A:57:41:20:06:A0:17 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858459368A86B00A6A4333CD4ECC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2caed372-a750-3ba1-8e35-b17542ea5e5b.roa Signing time: Wed 17 Apr 2024 13:00:34 +0000 ROA not before: Wed 17 Apr 2024 13:00:34 +0000 ROA not after: Tue 16 Jul 2024 13:00:34 +0000 asID: 701 IP address blocks: 173.72.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:93:68:a8:6b:00:a6:a4:33:3c:d4:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 17 13:00:34 2024 GMT Not After : Jul 16 13:00:34 2024 GMT Subject: CN=285817b4-6c6f-4328-ac88-854d1b8f2077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:81:95:22:f4:4a:ca:4e:af:bd:69:d6:85:92: 5d:73:ad:f0:6d:c0:ce:74:db:69:9b:92:45:59:b2: 94:72:f6:c9:e1:8c:23:9e:b0:dd:5e:bd:d9:8a:66: a7:9c:a1:ce:70:8b:81:44:08:89:4d:f6:f6:44:98: 18:30:59:03:58:5e:fa:90:01:96:5f:09:0f:ca:b1: 80:11:a2:d0:c1:8e:ca:0b:e5:11:4d:02:ca:a8:80: b4:80:6a:9b:e1:29:a7:c1:e5:bd:1e:fe:c3:2c:b1: e0:5d:02:05:cb:94:ab:53:ab:b3:ff:7b:99:98:c3: 69:0f:2f:99:0d:1d:4e:30:d8:a6:6a:62:45:70:0d: 98:72:d3:c3:39:ec:eb:c3:10:22:6a:9f:90:84:f5: 8e:f5:3c:0d:75:7a:d3:66:be:fb:e6:83:5f:d0:20: 2c:30:cf:bc:91:55:65:5e:0e:9d:65:f2:80:3e:1a: 90:18:7c:13:2b:89:7c:41:06:39:a9:22:3d:3b:1f: df:9a:0b:a0:df:b4:6c:cf:e5:88:ca:1b:bf:84:fa: eb:f0:f7:17:42:1f:c8:01:df:31:10:ce:07:0a:38: 95:ff:ba:27:75:77:bc:9f:af:ba:77:61:5d:c4:c9: b0:e2:0d:8c:d1:88:64:4e:35:a2:60:2e:4f:28:ad: 07:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1C:8A:F2:DF:98:29:31:04:FE:23:96:5A:7A:57:41:20:06:A0:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2caed372-a750-3ba1-8e35-b17542ea5e5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 173.72.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:9c:19:cd:36:b4:6d:92:5b:c6:4e:70:33:ce:ff:d9:99:85: 77:c5:29:7f:0c:57:37:57:21:07:19:9d:91:53:51:f4:e5:6a: 02:e0:b7:01:ad:56:bc:74:e2:ff:74:b0:13:c7:d0:2c:c9:4d: 19:0e:8d:34:44:b2:23:a9:0f:0e:ec:31:51:15:5d:b3:09:cb: 95:58:97:29:09:71:43:f7:ac:0d:5b:66:54:66:b9:83:47:90: 1f:6b:53:6e:1d:71:79:3c:e4:03:f1:5d:ff:95:23:4a:32:50: e5:f0:98:23:d2:31:ba:93:36:ad:bd:22:08:7b:71:1d:13:c0: fb:6c:0c:ba:71:d1:99:16:bb:91:12:3b:53:68:2e:16:1a:79: 08:e0:71:6b:58:65:f2:ac:06:4f:96:2f:62:7c:e5:52:15:ca: 51:10:ce:22:84:b8:99:a0:a4:ab:f8:8e:b4:99:14:ce:ce:4d: 42:4d:62:d1:5a:dd:7e:d4:7b:78:98:d4:de:ff:8e:71:89:0c: fa:46:59:23:9d:15:f4:1e:6c:22:07:4e:c9:5c:56:86:e1:5b: 6d:0b:44:56:57:99:05:3f:36:11:a3:26:e7:66:5d:13:93:12: 51:42:19:33:58:6b:89:1c:43:63:83:0d:55:fa:e8:6f:d8:3d: 8a:cf:a3:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWTaKhrAKakMzzU7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk Mjg1ODE3YjQtNmM2Zi00MzI4LWFjODgtODU0ZDFiOGYyMDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYGVIvRKyk6vvWnWhZJdc63wbcDOdNtpm5JF WbKUcvbJ4YwjnrDdXr3ZimannKHOcIuBRAiJTfb2RJgYMFkDWF76kAGWXwkPyrGA EaLQwY7KC+URTQLKqIC0gGqb4SmnweW9Hv7DLLHgXQIFy5SrU6uz/3uZmMNpDy+Z DR1OMNimamJFcA2YctPDOezrwxAiap+QhPWO9TwNdXrTZr775oNf0CAsMM+8kVVl Xg6dZfKAPhqQGHwTK4l8QQY5qSI9Ox/fmgug37Rsz+WIyhu/hPrr8PcXQh/IAd8x EM4HCjiV/7ondXe8n6+6d2FdxMmw4g2M0YhkTjWiYC5PKK0HsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMscivLfmCkxBP4jllp6V0EgBqAXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmNhZWQzNzItYTc1MC0z YmExLThlMzUtYjE3NTQyZWE1ZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrUgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCcGc02tG2SW8ZOcDPO/9mZhXfFKX8MVzdXIQcZnZFTUfTlagLgtwGt Vrx04v90sBPH0CzJTRkOjTREsiOpDw7sMVEVXbMJy5VYlykJcUP3rA1bZlRmuYNH kB9rU24dcXk85APxXf+VI0oyUOXwmCPSMbqTNq29Igh7cR0TwPtsDLpx0ZkWu5ES O1NoLhYaeQjgcWtYZfKsBk+WL2J85VIVylEQziKEuJmgpKv4jrSZFM7OTUJNYtFa 3X7Ue3iY1N7/jnGJDPpGWSOdFfQebCIHTslcVobhW20LRFZXmQU/NhGjJudmXROT ElFCGTNYa4kcQ2ODDVX66G/YPYrPo2A= -----END CERTIFICATE-----Generated at Thu May 9 15:24:58 2024 by rpki-client on console-ams.rpki-client.org