$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1b795fc3-e947-3601-9a66-049b1c150f32.roa File: 1b795fc3-e947-3601-9a66-049b1c150f32.roa (raw, json) Hash identifier: kdkZHrCvjyFH1TL5RvFjxnLi2nSb/7p2YibkGxXj3k4= Subject key identifier: B8:FC:9F:EE:5C:D1:71:14:5D:02:7F:D7:FF:87:21:2A:D5:E6:0D:8F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285845068ABB6B234B638BB940AE80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1b795fc3-e947-3601-9a66-049b1c150f32.roa Signing time: Tue 27 Feb 2024 02:00:26 +0000 ROA not before: Tue 27 Feb 2024 02:00:26 +0000 ROA not after: Mon 27 May 2024 01:00:26 +0000 asID: 397270 IP address blocks: 72.52.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:06:8a:bb:6b:23:4b:63:8b:b9:40:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 27 02:00:26 2024 GMT Not After : May 27 01:00:26 2024 GMT Subject: CN=e33d1be0-320d-4707-b11a-0deff8b72474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9b:8f:e4:4c:0d:04:3d:8d:44:57:0d:04:88: 4b:a0:20:d4:e6:9d:c9:c0:8e:fa:cc:da:1d:87:81: 54:ab:8c:27:fb:f5:a0:97:6f:ab:4d:f1:ec:bc:ee: b2:1e:52:c5:e8:a5:d7:99:de:db:1a:c9:fe:8e:59: ab:cf:e9:ae:36:41:6e:13:24:74:f5:a1:cc:1b:cb: 74:4a:ed:ee:f0:ec:29:3c:de:4b:10:8c:b5:00:62: cb:f5:00:2d:b2:c3:4e:16:77:50:60:6a:13:c4:a3: 91:30:96:4e:6e:66:19:54:d7:46:d9:ba:24:f2:60: 97:b8:34:d3:88:7c:7b:b2:6c:e0:a1:d7:f6:f2:9f: e0:b8:b3:b8:54:80:5f:90:6a:28:f8:20:4e:c0:ed: 69:a2:97:8d:94:37:1a:f0:ec:36:cf:27:51:56:af: 6d:18:1e:6b:bb:3f:b0:d6:54:22:b0:17:8d:3b:77: c6:db:6a:cb:7b:69:7b:c7:a9:15:a3:1d:12:22:c7: 22:79:dd:87:4c:5a:45:13:c3:7c:90:17:a0:6a:9c: 84:7f:95:ab:81:a9:f4:99:3e:4f:9b:e5:89:6c:a8: 44:e8:b4:cc:b4:bb:47:68:77:65:e6:86:e7:6e:f0: a8:8f:2c:3c:f7:c2:b8:c6:3f:63:a1:b1:90:34:55: 1c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FC:9F:EE:5C:D1:71:14:5D:02:7F:D7:FF:87:21:2A:D5:E6:0D:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1b795fc3-e947-3601-9a66-049b1c150f32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 72.52.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:56:33:da:c2:44:ad:8a:fe:10:ac:c0:10:15:1d:1f:f1:e8: 4f:d5:6f:dd:6f:fa:79:1b:aa:c6:3e:cd:0b:fa:15:a5:4b:9d: 25:bb:9c:01:bd:33:3c:16:f7:5d:1d:d0:84:57:0d:39:7d:0d: 2d:7c:37:3a:63:95:f4:0e:cd:27:da:26:56:5d:16:cf:86:ad: 41:cb:45:1f:9b:47:4d:66:4d:f6:01:15:0c:6e:de:17:25:2e: 7c:b0:93:fa:d4:e3:d8:01:e0:a3:20:71:56:b0:2d:24:0b:18: 37:68:b2:21:df:7f:2e:55:57:9a:d5:7d:a4:89:0a:ed:2c:3a: a3:a3:5a:2e:87:91:3a:1f:0c:8e:f0:c3:03:ca:ba:1d:19:83: 3a:c5:c0:e0:37:5e:9a:d3:4b:b4:92:5f:f3:88:11:65:b1:c0: 14:5c:91:64:e5:dd:39:b2:74:62:c5:4a:00:4e:95:26:57:74: 56:24:8b:5d:1d:b6:1d:d6:87:b2:de:ff:96:88:22:62:f5:ff: 6d:c6:23:32:29:01:b0:97:4a:07:a6:90:3b:33:5a:25:8b:10: e7:90:0d:ac:0d:73:95:2b:ee:2a:b4:13:17:9f:c4:b4:a5:60: 5a:e5:67:bd:56:e3:e4:4e:d3:fc:ca:ef:7c:13:f6:89:ed:7e: 26:46:0a:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUGirtrI0tji7lAroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDIyNzAyMDAyNloXDTI0MDUyNzAxMDAyNlowLzEtMCsGA1UEAxMk ZTMzZDFiZTAtMzIwZC00NzA3LWIxMWEtMGRlZmY4YjcyNDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZuP5EwNBD2NRFcNBIhLoCDU5p3JwI76zNod h4FUq4wn+/Wgl2+rTfHsvO6yHlLF6KXXmd7bGsn+jlmrz+muNkFuEyR09aHMG8t0 Su3u8OwpPN5LEIy1AGLL9QAtssNOFndQYGoTxKORMJZObmYZVNdG2bok8mCXuDTT iHx7smzgodf28p/guLO4VIBfkGoo+CBOwO1popeNlDca8Ow2zydRVq9tGB5ruz+w 1lQisBeNO3fG22rLe2l7x6kVox0SIscied2HTFpFE8N8kBegapyEf5Wrgan0mT5P m+WJbKhE6LTMtLtHaHdl5obnbvCojyw898K4xj9jobGQNFUc6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLj8n+5c0XEUXQJ/1/+HISrV5g2PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWI3OTVmYzMtZTk0Ny0z NjAxLTlhNjYtMDQ5YjFjMTUwZjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDRHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhWM9rCRK2K/hCswBAVHR/x6E/Vb91v+nkbqsY+zQv6FaVLnSW7nAG9 MzwW910d0IRXDTl9DS18NzpjlfQOzSfaJlZdFs+GrUHLRR+bR01mTfYBFQxu3hcl Lnywk/rU49gB4KMgcVawLSQLGDdosiHffy5VV5rVfaSJCu0sOqOjWi6HkTofDI7w wwPKuh0ZgzrFwOA3XprTS7SSX/OIEWWxwBRckWTl3TmydGLFSgBOlSZXdFYki10d th3Wh7Le/5aIImL1/23GIzIpAbCXSgemkDszWiWLEOeQDawNc5Ur7iq0ExefxLSl YFrlZ71W4+RO0/zK73wT9ontfiZGCvk= -----END CERTIFICATE-----Generated at Mon May 6 20:28:37 2024 by rpki-client on console-fra.rpki-client.org