$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/945985bd-cb39-3ed8-8e41-623103623946.roa File: 945985bd-cb39-3ed8-8e41-623103623946.roa (raw, json) Hash identifier: 0ZOAVNvo5HN4BJ2/UoLLoc5NiFKIjvVVesxrjou3Zug= Subject key identifier: D1:5E:18:A4:75:28:E2:C3:E9:26:58:C3:40:03:79:1F:A6:09:71:33 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285840D34DBFF50905BA38984AAB80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/945985bd-cb39-3ed8-8e41-623103623946.roa Signing time: Sun 05 Feb 2023 12:00:00 +0000 ROA not before: Sun 05 Feb 2023 12:00:00 +0000 ROA not after: Mon 29 Jan 2029 05:00:00 +0000 asID: 20115 IP address blocks: 159.111.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:40:d3:4d:bf:f5:09:05:ba:38:98:4a:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 5 12:00:00 2023 GMT Not After : Jan 29 05:00:00 2029 GMT Subject: CN=4fbe06f4-a41f-4713-97cf-ae6a604405c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bc:3c:70:d8:a2:c3:17:a5:8d:6c:9b:c7:f5: ae:43:ee:b8:6e:fc:81:4e:64:d8:fb:fe:1d:3a:7e: 81:b1:dd:36:8c:1c:28:30:4e:62:05:ad:5b:6c:53: c0:31:b7:4b:58:5e:70:27:81:63:9d:2c:71:1d:c3: 6a:dc:b9:f7:83:3c:01:6c:b5:2d:03:f3:ac:11:b9: 11:dd:70:4c:d9:10:cc:78:c4:db:f3:64:00:2e:e3: 26:48:23:96:54:f0:37:fa:a6:9f:2b:fe:0a:97:61: 4b:a0:fb:0b:77:1a:05:0e:e6:3c:19:10:7e:3a:3d: 4b:d0:3d:ac:ed:0f:2a:34:a1:e7:1d:c6:bf:af:a0: 5a:05:11:3b:5a:cd:ad:45:b8:99:fc:e8:41:b0:5d: e2:4b:0c:55:db:68:a6:7e:aa:ab:bc:c9:4e:a5:df: b5:b1:22:3e:0d:71:70:d2:b1:00:96:51:d0:04:b0: 5e:27:93:ff:dd:81:99:45:0c:70:03:81:85:9c:d2: 09:2a:5c:89:52:3c:01:3f:a7:dd:bb:b8:39:ce:33: e8:71:08:5d:d2:19:2e:bf:5c:4a:d1:f0:b7:65:0e: b8:b9:f7:06:0b:25:99:9c:92:a8:59:c5:a9:90:69: be:f0:25:00:87:3b:f4:fe:2f:44:71:0a:1e:b6:73: c0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5E:18:A4:75:28:E2:C3:E9:26:58:C3:40:03:79:1F:A6:09:71:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/945985bd-cb39-3ed8-8e41-623103623946.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 159.111.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:c9:c1:c6:22:36:f2:7a:e6:2b:47:28:ef:c5:03:45:92:ed: 6b:3a:08:7e:a2:7e:b8:d8:fc:d1:c6:77:8f:ee:05:2f:57:9b: 54:d8:9d:d3:53:fc:0d:de:3e:f2:4b:43:da:1b:12:14:8d:ea: e1:38:c0:7b:75:67:a4:1f:a6:1e:85:bf:f6:dc:c2:25:8e:6a: b5:1f:28:98:aa:ea:41:66:25:1e:9f:bd:65:70:7b:68:68:c2: 99:1b:23:68:bc:2a:9c:d6:2e:f9:f4:c3:2b:24:0b:88:02:4a: 53:0d:63:5a:51:7a:d5:0d:88:e9:a7:4e:9c:33:46:38:69:7a: 2f:12:31:92:34:a4:79:1f:a0:2a:65:de:a1:ba:f9:b8:88:9b: 75:de:62:b1:0e:c5:06:dd:21:6b:7b:1c:66:6f:23:f3:bb:2c: 13:b1:06:c7:71:82:7a:19:05:22:e6:ca:79:a4:9c:42:96:6c: 1a:f3:7b:30:91:ef:f2:f5:19:51:80:f6:46:bc:ff:ce:a6:91: 93:9b:f0:e5:07:63:58:5f:17:58:61:fc:c1:71:90:63:0b:d5: a1:4a:57:4c:c2:c3:46:65:94:7c:0a:39:5f:0b:7d:b6:1a:03: 8a:3d:b6:19:be:34:a7:ba:04:e2:42:45:ef:9b:90:bc:d5:56: cc:a7:76:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEDTTb/1CQW6OJhKq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTIzMDIwNTEyMDAwMFoXDTI5MDEyOTA1MDAwMFowLzEtMCsGA1UEAxMk NGZiZTA2ZjQtYTQxZi00NzEzLTk3Y2YtYWU2YTYwNDQwNWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbw8cNiiwxeljWybx/WuQ+64bvyBTmTY+/4d On6Bsd02jBwoME5iBa1bbFPAMbdLWF5wJ4FjnSxxHcNq3Ln3gzwBbLUtA/OsEbkR 3XBM2RDMeMTb82QALuMmSCOWVPA3+qafK/4Kl2FLoPsLdxoFDuY8GRB+Oj1L0D2s 7Q8qNKHnHca/r6BaBRE7Ws2tRbiZ/OhBsF3iSwxV22imfqqrvMlOpd+1sSI+DXFw 0rEAllHQBLBeJ5P/3YGZRQxwA4GFnNIJKlyJUjwBP6fdu7g5zjPocQhd0hkuv1xK 0fC3ZQ64ufcGCyWZnJKoWcWpkGm+8CUAhzv0/i9EcQoetnPALQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFeGKR1KOLD6SZYw0ADeR+mCXEzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOTQ1OTg1YmQtY2IzOS0z ZWQ4LThlNDEtNjIzMTAzNjIzOTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCn2/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7JwcYiNvJ65itHKO/FA0WS7Ws6CH6ifrjY/NHGd4/uBS9Xm1TYndNT /A3ePvJLQ9obEhSN6uE4wHt1Z6Qfph6Fv/bcwiWOarUfKJiq6kFmJR6fvWVwe2ho wpkbI2i8KpzWLvn0wyskC4gCSlMNY1pRetUNiOmnTpwzRjhpei8SMZI0pHkfoCpl 3qG6+biIm3XeYrEOxQbdIWt7HGZvI/O7LBOxBsdxgnoZBSLmynmknEKWbBrzezCR 7/L1GVGA9ka8/86mkZOb8OUHY1hfF1hh/MFxkGML1aFKV0zCw0ZllHwKOV8LfbYa A4o9thm+NKe6BOJCRe+bkLzVVsyndmg= -----END CERTIFICATE-----Generated at Sun May 12 15:25:39 2024 by rpki-client on console-ams.rpki-client.org