$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa4a2299-f3e0-3a68-b692-7689970f1f7a.roa File: aa4a2299-f3e0-3a68-b692-7689970f1f7a.roa (raw, json) Hash identifier: q6R8i4JbxjUZGUX/LfIjC8h+o69u5eTzRSqsLQBuyIA= Subject key identifier: 71:2F:86:49:EC:A8:86:98:BF:07:08:38:16:3A:8B:1B:3E:FD:CE:FA Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285845708B14D5DBC6DB610EBF6000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa4a2299-f3e0-3a68-b692-7689970f1f7a.roa Signing time: Fri 05 Apr 2024 01:16:50 +0000 ROA not before: Fri 05 Apr 2024 01:16:50 +0000 ROA not after: Thu 04 Jul 2024 01:16:50 +0000 asID: 6167 IP address blocks: 174.42.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:70:8b:14:d5:db:c6:db:61:0e:bf:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 5 01:16:50 2024 GMT Not After : Jul 4 01:16:50 2024 GMT Subject: CN=01b4f9b8-9238-42f6-9af1-f891bf5f3419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d0:85:8b:47:38:36:5a:da:d4:30:18:68:ba: 8f:4d:21:e2:56:09:7e:19:2d:fa:82:79:e8:08:ce: ee:94:44:b5:16:fc:5b:3d:e2:9e:98:7b:e2:e5:e2: 50:7d:07:25:b1:5b:59:13:e5:a3:d9:9c:c9:1d:a2: 44:8f:6b:d2:6b:32:32:b6:9f:71:08:93:ad:3d:58: 99:07:4f:d6:2a:1e:49:4d:74:a1:cc:91:07:9a:b8: 64:fd:71:ca:2f:54:d6:a0:31:31:e9:24:8c:36:7c: dc:67:db:9e:59:e2:cc:44:c3:97:99:ee:da:fc:f0: 30:40:c8:d1:00:05:d8:a6:6c:a9:da:92:d4:8d:61: 92:1c:d9:02:4f:9f:37:5b:47:90:93:9d:0b:cb:5b: a7:71:18:58:8b:8b:70:72:ef:c9:38:ee:44:fe:3a: 99:03:8b:1d:52:b7:d6:e5:92:c5:f5:ea:1e:aa:cd: bb:e7:f8:46:2a:f8:80:9d:51:4c:f1:4f:6b:89:c3: 2e:1e:80:f0:f6:98:f7:ad:79:8c:96:85:78:25:00: 71:a7:a8:3e:3b:3c:e9:bb:e9:40:c1:f8:aa:66:7c: e3:36:25:b6:12:48:e7:8a:de:76:d3:4b:69:a1:34: 33:e8:44:50:3a:3c:98:d2:33:a4:79:3b:1d:b9:1b: 4e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2F:86:49:EC:A8:86:98:BF:07:08:38:16:3A:8B:1B:3E:FD:CE:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa4a2299-f3e0-3a68-b692-7689970f1f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.42.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:25:dd:31:ac:f8:be:31:05:03:72:70:e4:bb:dd:e4:e0:c5: 6e:63:6b:50:5f:7d:74:8c:44:78:0f:b9:ec:c6:d9:2d:a2:65: 53:82:b6:f1:8c:16:b4:e8:f3:90:c1:4f:a2:5c:a1:f2:c4:a5: a1:50:55:30:ef:7c:f1:e8:4a:dc:75:31:84:13:04:32:35:4c: 18:1c:9f:b8:f5:a3:f4:f1:ee:f7:ad:c0:9f:b2:45:f1:e9:07: 75:e8:3b:2b:97:d3:e1:93:2c:6d:bf:04:09:e0:c4:29:04:e7: ba:cd:14:2e:ff:b4:a2:69:ef:62:3c:4f:7f:61:16:ee:7e:db: d1:a9:93:bb:ec:14:8a:5f:e8:36:08:93:ce:13:19:85:03:fe: 85:68:4a:c0:1b:52:6d:4e:75:d8:de:1f:d5:ea:35:19:b1:ed: 22:c9:5c:62:5e:29:89:56:ba:30:4f:a3:fa:9c:cd:eb:44:9c: 44:bb:e6:a0:3c:55:03:a7:f7:ad:9c:73:d7:4b:0c:33:47:1e: 8d:82:08:97:f7:b3:3d:00:58:9c:0d:d1:82:a0:5e:6c:db:24: 1c:a8:d2:9b:13:1d:c7:62:53:d8:3e:61:52:e0:42:0b:a7:65: 17:da:d8:25:67:00:d8:0f:a3:02:37:d0:94:9a:ef:dc:72:c2: fd:29:f6:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVwixTV28bbYQ6/YAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDQwNTAxMTY1MFoXDTI0MDcwNDAxMTY1MFowLzEtMCsGA1UEAxMk MDFiNGY5YjgtOTIzOC00MmY2LTlhZjEtZjg5MWJmNWYzNDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNCFi0c4Nlra1DAYaLqPTSHiVgl+GS36gnno CM7ulES1FvxbPeKemHvi5eJQfQclsVtZE+Wj2ZzJHaJEj2vSazIytp9xCJOtPViZ B0/WKh5JTXShzJEHmrhk/XHKL1TWoDEx6SSMNnzcZ9ueWeLMRMOXme7a/PAwQMjR AAXYpmyp2pLUjWGSHNkCT583W0eQk50Ly1uncRhYi4twcu/JOO5E/jqZA4sdUrfW 5ZLF9eoeqs275/hGKviAnVFM8U9ricMuHoDw9pj3rXmMloV4JQBxp6g+Ozzpu+lA wfiqZnzjNiW2Ekjnit5200tpoTQz6ERQOjyY0jOkeTsduRtOqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEvhknsqIaYvwcIOBY6ixs+/c76MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWE0YTIyOTktZjNlMC0z YTY4LWI2OTItNzY4OTk3MGYxZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCriocMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8l3TGs+L4xBQNycOS73eTgxW5ja1BffXSMRHgPuezG2S2iZVOCtvGM FrTo85DBT6JcofLEpaFQVTDvfPHoStx1MYQTBDI1TBgcn7j1o/Tx7vetwJ+yRfHp B3XoOyuX0+GTLG2/BAngxCkE57rNFC7/tKJp72I8T39hFu5+29Gpk7vsFIpf6DYI k84TGYUD/oVoSsAbUm1OddjeH9XqNRmx7SLJXGJeKYlWujBPo/qczetEnES75qA8 VQOn962cc9dLDDNHHo2CCJf3sz0AWJwN0YKgXmzbJByo0psTHcdiU9g+YVLgQgun ZRfa2CVnANgPowI30JSa79xywv0p9oE= -----END CERTIFICATE-----Generated at Sun May 12 01:37:52 2024 by rpki-client on console-fra.rpki-client.org