$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa2a3435-0f1c-3bc2-9c04-bab7bd27ea0a.roa File: aa2a3435-0f1c-3bc2-9c04-bab7bd27ea0a.roa (raw, json) Hash identifier: Z4Mo+Y5FeH7lrPq35SMnJroAJZ1NAL6NtoBur9I9vaI= Subject key identifier: 32:E7:B6:B7:96:0F:AC:2E:9F:6F:E9:F9:4F:FF:1C:EB:75:B4:F4:46 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285845BEB37D183A0DCEA536C4FDD0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa2a3435-0f1c-3bc2-9c04-bab7bd27ea0a.roa Signing time: Fri 03 May 2024 01:11:19 +0000 ROA not before: Fri 03 May 2024 01:11:19 +0000 ROA not after: Thu 01 Aug 2024 01:11:19 +0000 asID: 6167 IP address blocks: 72.107.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:be:b3:7d:18:3a:0d:ce:a5:36:c4:fd:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 3 01:11:19 2024 GMT Not After : Aug 1 01:11:19 2024 GMT Subject: CN=a0a25f6f-1c20-4dd9-977e-6c319be39f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:97:08:f0:cb:bc:75:b5:3a:7b:d2:3d:cd:97: ed:f5:cf:fb:f5:38:af:4f:05:33:8a:96:7f:f0:79: f1:d9:d8:11:60:34:01:e4:98:cd:b2:35:c8:d4:fd: ea:1c:63:0c:0d:f8:7b:dd:52:1d:06:67:d0:f3:a5: 53:22:87:18:f9:8f:83:2b:79:7f:b0:37:d6:8b:7a: 6d:72:ef:e2:aa:9a:fe:e8:be:cf:ab:e4:2c:e5:97: 2c:b0:f6:a0:64:25:3d:79:11:b2:30:6b:b5:d4:45: 1d:0f:cd:1a:86:39:a4:97:1b:9c:55:bc:31:3a:3d: dd:e1:54:1f:5d:72:d8:a3:b8:87:ee:ea:d6:22:a2: 4e:91:48:48:35:8a:b9:45:2d:bc:7b:99:02:1a:b7: c0:c8:0d:60:8c:87:25:08:27:a9:80:5c:bc:58:d1: 6e:33:52:51:83:74:54:8d:f5:92:dd:e6:26:24:5a: b1:fd:7f:f8:1f:91:a3:f4:e9:c1:5f:b4:20:b2:1c: a2:e2:a0:41:24:82:11:52:d0:09:b5:e2:08:36:31: 8b:66:8e:00:5f:4f:86:36:a8:eb:dc:59:75:fb:67: 3a:4a:d6:6e:60:65:be:a5:2d:39:8a:82:f5:54:99: d4:89:fa:d2:81:65:c8:d0:05:22:c2:0d:74:30:f8: fb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E7:B6:B7:96:0F:AC:2E:9F:6F:E9:F9:4F:FF:1C:EB:75:B4:F4:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa2a3435-0f1c-3bc2-9c04-bab7bd27ea0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.107.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:48:fc:3e:c6:94:8f:db:a6:29:3c:0a:d8:1f:3e:76:2f:63: a1:06:33:06:00:a3:18:64:13:a5:61:3e:0d:e0:73:87:6c:7f: 0b:9d:75:39:bf:ff:3e:11:ff:5a:b7:42:c1:03:22:5c:90:e4: 92:54:c1:ae:79:1c:bc:3b:45:47:49:28:95:b2:c1:b5:39:aa: 4b:0c:11:c5:66:06:13:5c:7e:11:dd:60:13:fb:81:e1:65:69: dd:55:b1:68:29:14:4e:4a:5f:ab:cf:5f:82:9a:82:b9:41:2e: 34:c0:77:08:d2:9b:0a:ea:a1:da:63:24:2b:29:e2:1b:5f:b6: 04:e0:c2:8a:fc:a1:7c:ca:d0:3a:ea:cc:13:fe:40:f6:51:1d: 9d:c9:5c:1e:d8:0d:ef:3b:09:3d:e4:95:bd:18:02:74:5f:10: 0a:71:c4:77:97:0d:d6:33:7c:ea:cc:3e:18:1b:25:8f:14:eb: 6d:40:0f:de:53:fb:18:8d:1c:be:a2:09:96:d3:eb:c8:97:0a: c9:34:e0:66:71:0e:f3:fb:2d:aa:e1:7e:21:1c:fc:3b:4e:aa: 21:1e:d2:65:88:c3:f0:01:d9:de:9e:f0:39:af:a6:a4:25:be: 93:de:0d:b5:ad:20:72:ea:7e:14:1c:ec:a8:b2:0b:e1:c3:89: 76:af:9c:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW+s30YOg3OpTbE/dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDUwMzAxMTExOVoXDTI0MDgwMTAxMTExOVowLzEtMCsGA1UEAxMk YTBhMjVmNmYtMWMyMC00ZGQ5LTk3N2UtNmMzMTliZTM5ZjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipcI8Mu8dbU6e9I9zZft9c/79TivTwUzipZ/ 8Hnx2dgRYDQB5JjNsjXI1P3qHGMMDfh73VIdBmfQ86VTIocY+Y+DK3l/sDfWi3pt cu/iqpr+6L7Pq+Qs5ZcssPagZCU9eRGyMGu11EUdD80ahjmklxucVbwxOj3d4VQf XXLYo7iH7urWIqJOkUhINYq5RS28e5kCGrfAyA1gjIclCCepgFy8WNFuM1JRg3RU jfWS3eYmJFqx/X/4H5Gj9OnBX7Qgshyi4qBBJIIRUtAJteIINjGLZo4AX0+GNqjr 3Fl1+2c6StZuYGW+pS05ioL1VJnUifrSgWXI0AUiwg10MPj7zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLntreWD6wun2/p+U//HOt1tPRGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWEyYTM0MzUtMGYxYy0z YmMyLTljMDQtYmFiN2JkMjdlYTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGsoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARI/D7GlI/bpik8CtgfPnYvY6EGMwYAoxhkE6VhPg3gc4dsfwuddTm/ /z4R/1q3QsEDIlyQ5JJUwa55HLw7RUdJKJWywbU5qksMEcVmBhNcfhHdYBP7geFl ad1VsWgpFE5KX6vPX4KagrlBLjTAdwjSmwrqodpjJCsp4htftgTgwor8oXzK0Drq zBP+QPZRHZ3JXB7YDe87CT3klb0YAnRfEApxxHeXDdYzfOrMPhgbJY8U621AD95T +xiNHL6iCZbT68iXCsk04GZxDvP7LarhfiEc/DtOqiEe0mWIw/AB2d6e8DmvpqQl vpPeDbWtIHLqfhQc7KiyC+HDiXavnCQ= -----END CERTIFICATE-----Generated at Sun May 19 15:57:39 2024 by rpki-client on console-fra.rpki-client.org