$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa File: eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa (raw, json) Hash identifier: sRvcEua3phPhAnND7L1rB+ik1FsbnritbxFKZhKbW8o= Subject key identifier: 0C:B3:7A:51:07:56:79:F2:0B:CD:83:13:1D:44:8C:72:F2:C1:3A:47 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858459368B1A60BB1773CA1101D80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa Signing time: Wed 17 Apr 2024 13:00:34 +0000 ROA not before: Wed 17 Apr 2024 13:00:34 +0000 ROA not after: Tue 16 Jul 2024 13:00:34 +0000 asID: 701 IP address blocks: 70.21.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:93:68:b1:a6:0b:b1:77:3c:a1:10:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 17 13:00:34 2024 GMT Not After : Jul 16 13:00:34 2024 GMT Subject: CN=f83c174d-3c52-42a3-8f3f-3ab58ccdb612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a9:27:b6:97:d8:80:d1:3c:5d:e3:49:a6:52: 1e:95:13:70:92:dd:06:85:51:45:3f:f2:0b:01:cc: 5c:50:37:58:9b:c0:99:b2:6e:0d:b3:b6:8a:c0:be: 33:44:8a:cf:f0:2b:41:2f:98:f4:78:be:49:60:db: b9:2a:9a:fd:82:b6:bd:ee:d2:97:ee:49:14:d3:b3: aa:5c:18:77:f8:54:9f:8d:c7:51:4c:be:a2:f1:72: e9:f1:e1:94:1b:02:17:e3:71:7c:30:7f:09:35:5a: 3b:d1:74:79:a7:9f:eb:c5:3c:06:45:50:3c:37:d1: ed:f6:a5:d3:e8:46:e8:de:54:c9:3b:f0:f0:11:9a: c7:66:a5:64:09:c1:82:a6:87:da:87:86:21:1e:f3: 3c:4f:0c:0a:39:2c:b1:9c:1d:36:21:a2:98:7a:5c: 8e:18:9b:86:89:10:4c:df:78:9c:89:58:b6:8b:49: 59:57:80:4e:03:d9:c1:5f:e7:db:0b:4f:6b:5f:39: 5f:8d:e2:c7:1c:ea:e3:93:af:9c:7a:43:18:88:9f: 9e:ea:7f:34:68:80:3a:9b:a6:b2:c5:9a:8a:67:be: 3a:9c:92:40:f8:cd:b1:18:02:20:97:b1:41:d3:7d: 1e:52:fe:37:aa:9d:02:57:65:84:70:56:ed:58:58: bc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B3:7A:51:07:56:79:F2:0B:CD:83:13:1D:44:8C:72:F2:C1:3A:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.21.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:15:8c:be:f1:e0:aa:5f:31:7e:c7:8b:f0:f4:6b:5c:f7:3a: bc:7b:c1:b7:0a:43:d1:c3:a3:1a:cb:1c:04:4a:99:d8:e2:13: 61:81:ec:c7:17:b6:fb:c9:3a:11:6e:9e:46:83:16:e4:bb:ef: 7f:00:40:80:bd:39:5d:bf:6c:7c:69:34:0d:c0:72:a2:c9:60: a7:74:4b:72:24:d2:48:65:a8:08:fa:48:b7:54:68:44:57:12: d7:81:56:82:92:f2:da:65:07:45:d8:8c:1b:26:94:94:3e:4d: 54:f3:4e:c8:4e:e4:e0:73:d0:56:ea:1c:e4:3e:0f:51:bc:1a: 3d:97:3c:87:f9:5a:38:7b:4b:ef:a9:51:18:c7:74:dc:87:d9: 6e:30:b7:3a:5a:75:81:81:bf:aa:5e:29:5f:76:1f:21:4c:75: 69:fd:d6:9f:3b:f2:5c:5f:68:d6:c8:24:1b:57:8d:c3:bc:10: 04:0c:b0:0f:a5:6f:64:7f:a7:9e:d1:9e:f6:cf:23:cb:b6:b7: 38:68:ba:2a:15:77:65:c4:a1:6f:1d:77:dd:6c:6f:5b:8b:5c: fd:b5:5e:f4:a6:b9:8e:e8:e8:c9:a8:d8:59:58:0c:3f:4f:ff: ed:e6:ec:77:c7:87:5b:d8:82:c6:6d:5b:66:43:34:11:2f:e8: 7a:6a:08:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWTaLGmC7F3PKEQHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk ZjgzYzE3NGQtM2M1Mi00MmEzLThmM2YtM2FiNThjY2RiNjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKkntpfYgNE8XeNJplIelRNwkt0GhVFFP/IL AcxcUDdYm8CZsm4Ns7aKwL4zRIrP8CtBL5j0eL5JYNu5Kpr9gra97tKX7kkU07Oq XBh3+FSfjcdRTL6i8XLp8eGUGwIX43F8MH8JNVo70XR5p5/rxTwGRVA8N9Ht9qXT 6Ebo3lTJO/DwEZrHZqVkCcGCpofah4YhHvM8TwwKOSyxnB02IaKYelyOGJuGiRBM 33iciVi2i0lZV4BOA9nBX+fbC09rXzlfjeLHHOrjk6+cekMYiJ+e6n80aIA6m6ay xZqKZ746nJJA+M2xGAIgl7FB030eUv43qp0CV2WEcFbtWFi8CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyzelEHVnnyC82DEx1EjHLywTpHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWZmNWYzY2MtZDA1NC0z YWMxLWE2MmUtNDgxYmY4ZjlkN2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRhWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4VjL7x4KpfMX7Hi/D0a1z3Orx7wbcKQ9HDoxrLHARKmdjiE2GB7McX tvvJOhFunkaDFuS7738AQIC9OV2/bHxpNA3AcqLJYKd0S3Ik0khlqAj6SLdUaERX EteBVoKS8tplB0XYjBsmlJQ+TVTzTshO5OBz0FbqHOQ+D1G8Gj2XPIf5Wjh7S++p URjHdNyH2W4wtzpadYGBv6peKV92HyFMdWn91p878lxfaNbIJBtXjcO8EAQMsA+l b2R/p57RnvbPI8u2tzhouioVd2XEoW8dd91sb1uLXP21XvSmuY7o6Mmo2FlYDD9P /+3m7HfHh1vYgsZtW2ZDNBEv6HpqCAk= -----END CERTIFICATE-----Generated at Thu May 9 15:25:08 2024 by rpki-client on console-ams.rpki-client.org