$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cecd56b1-7e2b-3f23-9635-89b5421c2af2.roa File: cecd56b1-7e2b-3f23-9635-89b5421c2af2.roa (raw, json) Hash identifier: w+Yd11hdCHVYxDgqCclw8n3nkAU8B46xSWDH5s+4ImQ= Subject key identifier: 01:7B:02:E0:75:E7:58:5C:7A:42:6C:88:DF:3A:75:4C:21:A6:D1:D4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285845708AF92DFB6FB10526CD3740 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cecd56b1-7e2b-3f23-9635-89b5421c2af2.roa Signing time: Fri 05 Apr 2024 01:16:37 +0000 ROA not before: Fri 05 Apr 2024 01:16:37 +0000 ROA not after: Thu 04 Jul 2024 01:16:37 +0000 asID: 22394 IP address blocks: 174.41.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:70:8a:f9:2d:fb:6f:b1:05:26:cd:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 5 01:16:37 2024 GMT Not After : Jul 4 01:16:37 2024 GMT Subject: CN=a57b4da6-8a48-48cc-9dd9-0b5c3312d19f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:35:24:60:53:ce:c7:83:cb:46:99:9f:3e:2e: 79:57:1f:0e:0f:f2:71:2a:8e:e6:ab:ad:83:0f:2c: a9:15:cb:d0:00:dd:67:28:c1:a2:bd:9c:d6:b8:8c: de:b8:de:b1:fe:51:b3:9e:a6:41:c2:af:64:06:7c: 89:3b:9b:df:5b:5f:9a:96:71:50:a0:71:42:be:09: d8:7e:48:a5:51:32:9a:d0:a5:56:3d:f9:65:e1:02: 47:fc:84:94:ba:85:85:07:3d:6f:4d:52:24:7a:d8: 9e:a6:3a:1f:d0:5e:83:c6:eb:c8:c7:5b:e9:c2:1e: 5d:62:01:13:81:aa:cb:9a:a7:75:82:33:10:5b:23: 39:43:14:f0:b1:a2:66:2d:f4:58:7f:a5:a2:eb:51: 78:ba:ed:22:3b:28:21:20:87:93:e7:00:2e:34:c5: 0d:c9:5b:0e:59:89:d3:bd:3d:98:22:46:2d:d7:50: 49:1a:e0:d5:fc:97:b1:f3:f2:80:df:37:a5:cc:1e: b3:b1:94:da:93:62:d2:6d:0b:f3:79:ca:45:ff:5e: e0:c6:5c:7e:20:c0:90:ad:df:ef:8e:ca:57:2e:65: 6b:c7:8b:ba:87:63:46:44:b7:ba:13:ca:50:a9:c0: 9f:9d:9e:5c:4e:9f:bb:36:4e:c9:6c:26:3d:82:56: 23:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7B:02:E0:75:E7:58:5C:7A:42:6C:88:DF:3A:75:4C:21:A6:D1:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cecd56b1-7e2b-3f23-9635-89b5421c2af2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:60:53:cc:72:74:46:42:49:c4:27:de:6c:70:9a:42:3f:29: 01:7e:db:61:a4:d4:2b:13:8f:fb:08:e4:12:17:0b:06:9c:9a: 04:97:f7:45:92:39:ed:3c:23:7b:0e:b8:84:ad:02:ed:30:dd: 26:62:2a:ff:3e:50:0d:8a:b6:89:74:17:b6:0b:7d:0d:0b:4f: f4:86:08:1b:ea:d9:54:7c:75:3f:0d:af:54:7d:30:e5:0a:5d: 29:de:e4:56:fa:e4:d6:ce:0d:e5:27:ed:30:be:54:0a:52:99: ba:15:e7:19:f7:68:7d:ae:9f:bc:e3:47:61:c5:3d:7b:64:e9: 07:38:1b:3c:57:68:e5:96:32:0e:3a:0f:1a:54:2b:e6:56:0b: 8f:21:09:c5:0f:fc:fe:e0:57:da:5d:f8:20:f7:bb:27:fc:06: aa:b6:b1:c6:a7:29:3f:de:40:0e:9f:48:06:3c:1e:d9:a3:f7: c3:90:5a:2f:b2:37:cb:f8:62:02:1a:49:6f:4a:0a:f5:70:d2: c0:53:69:b3:9e:df:0a:26:13:5f:1d:2b:a1:89:99:2f:e3:0a: b2:c5:32:a6:32:39:14:f0:b7:40:85:34:83:55:23:39:dd:c0: 3f:68:54:91:ee:40:f4:8d:b2:98:3e:62:40:a2:18:92:1c:9d: ab:0b:2b:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVwivkt+2+xBSbNN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDQwNTAxMTYzN1oXDTI0MDcwNDAxMTYzN1owLzEtMCsGA1UEAxMk YTU3YjRkYTYtOGE0OC00OGNjLTlkZDktMGI1YzMzMTJkMTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDUkYFPOx4PLRpmfPi55Vx8OD/JxKo7mq62D DyypFcvQAN1nKMGivZzWuIzeuN6x/lGznqZBwq9kBnyJO5vfW1+alnFQoHFCvgnY fkilUTKa0KVWPfll4QJH/ISUuoWFBz1vTVIketiepjof0F6DxuvIx1vpwh5dYgET garLmqd1gjMQWyM5QxTwsaJmLfRYf6Wi61F4uu0iOyghIIeT5wAuNMUNyVsOWYnT vT2YIkYt11BJGuDV/Jex8/KA3zelzB6zsZTak2LSbQvzecpF/17gxlx+IMCQrd/v jspXLmVrx4u6h2NGRLe6E8pQqcCfnZ5cTp+7Nk7JbCY9glYj4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAF7AuB151hcekJsiN86dUwhptHUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2VjZDU2YjEtN2UyYi0z ZjIzLTk2MzUtODliNTQyMWMyYWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrinuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1gU8xydEZCScQn3mxwmkI/KQF+22Gk1CsTj/sI5BIXCwacmgSX90WS Oe08I3sOuIStAu0w3SZiKv8+UA2Ktol0F7YLfQ0LT/SGCBvq2VR8dT8Nr1R9MOUK XSne5Fb65NbODeUn7TC+VApSmboV5xn3aH2un7zjR2HFPXtk6Qc4GzxXaOWWMg46 DxpUK+ZWC48hCcUP/P7gV9pd+CD3uyf8Bqq2scanKT/eQA6fSAY8Htmj98OQWi+y N8v4YgIaSW9KCvVw0sBTabOe3womE18dK6GJmS/jCrLFMqYyORTwt0CFNINVIznd wD9oVJHuQPSNspg+YkCiGJIcnasLK5k= -----END CERTIFICATE-----Generated at Thu May 9 15:36:01 2024 by rpki-client on console-fra.rpki-client.org