$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa File: 4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa (raw, json) Hash identifier: xwkQj/Le99BxFodvnPco3dBiTwFH6fvtUxmJr5XMpjM= Subject key identifier: F5:D1:74:E6:7D:02:95:AF:C2:55:AE:6A:11:C0:B5:7F:AD:BB:D6:AB Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285845DBFE703698B84A77DE99D180 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa Signing time: Mon 13 May 2024 13:00:34 +0000 ROA not before: Mon 13 May 2024 13:00:34 +0000 ROA not after: Sun 11 Aug 2024 13:00:34 +0000 asID: 1239 IP address blocks: 149.143.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:db:fe:70:36:98:b8:4a:77:de:99:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: May 13 13:00:34 2024 GMT Not After : Aug 11 13:00:34 2024 GMT Subject: CN=0561d564-97ad-4761-bee6-f8db180adbe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a7:48:c6:2b:b3:09:af:64:41:85:d4:77:20: a9:a5:88:b4:7c:a1:36:d8:47:87:ce:1a:44:09:73: 1b:b1:fd:ab:77:4e:81:c2:db:74:28:a2:af:51:a1: b6:7a:9a:27:99:32:aa:34:dc:58:83:39:28:8d:19: d2:57:c4:53:57:9e:cc:6e:ca:dc:7d:5e:ea:11:ec: bd:ad:2b:50:4b:f6:43:fe:6b:58:c1:54:e2:2d:d9: 9a:6a:00:39:d6:6a:53:df:f8:b1:8c:2c:1d:8e:91: 03:1c:48:89:34:92:0d:2e:51:d4:de:82:d5:3c:82: 7b:af:c4:31:04:ab:ef:3d:e1:ff:4f:92:76:90:52: 68:72:d8:66:d8:68:91:b1:2f:e5:49:92:22:ef:d7: a2:a6:bb:81:28:cf:55:9c:a3:26:36:33:54:2c:a2: 64:90:fb:86:86:2b:2d:21:30:1f:b6:ee:ac:95:0c: 51:1e:03:e2:41:80:86:20:5e:38:e6:7c:c3:69:2d: 41:36:64:8f:8f:5f:76:85:2c:37:71:06:c9:9b:9f: 50:f8:58:7e:ad:3b:3c:cc:f9:a7:25:29:67:90:d5: 6e:ba:f7:4f:6f:bc:7b:0e:61:03:41:fd:ac:f7:15: 48:9a:a0:f4:4d:ff:b5:ac:1a:50:51:e2:88:bb:37: 8a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D1:74:E6:7D:02:95:AF:C2:55:AE:6A:11:C0:B5:7F:AD:BB:D6:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:a1:49:4c:76:8e:d4:c5:e5:a4:43:3f:12:e2:10:6a:f1:52: cc:dd:53:4a:3e:bf:c6:a6:72:10:d2:40:29:22:39:b6:86:23: c3:83:8b:8c:10:47:e3:47:38:94:35:8a:14:92:6b:dd:44:f0: 65:d8:80:a8:b1:4e:8f:9a:f2:87:2b:b4:c7:8f:b0:4d:ee:0c: 03:86:93:7b:43:89:8b:d8:a0:1b:a4:a1:d0:a2:2a:d7:af:57: 4e:f8:4f:92:42:2e:37:f1:b5:51:a7:bf:00:46:a1:1c:c5:9a: c7:b1:78:90:83:29:91:74:6d:6a:a7:53:3b:5d:88:7d:2b:7e: 83:32:d8:0d:81:93:d9:71:4c:e9:be:32:eb:8c:71:54:6b:e6: 4c:24:ea:9e:1b:30:22:50:eb:57:5c:ff:8b:8b:a0:f4:b6:6a: 18:0f:d2:7c:d6:68:98:3e:2e:5c:78:d2:b6:be:5a:5a:7f:51: de:00:22:0f:bc:3b:70:9b:d5:22:72:2e:2c:d3:9e:37:c5:5a: be:b6:7b:26:b7:99:74:e7:d0:df:b6:d2:f3:31:35:ce:6a:c5: 0f:3b:8a:b1:e7:b0:4e:50:89:26:b3:a8:49:fd:95:f3:46:e1: b5:65:36:cc:7d:f9:2d:15:a7:7d:57:a4:b6:ac:6b:d9:ec:d4: 38:80:33:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXb/nA2mLhKd96Z0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MDUxMzEzMDAzNFoXDTI0MDgxMTEzMDAzNFowLzEtMCsGA1UEAxMk MDU2MWQ1NjQtOTdhZC00NzYxLWJlZTYtZjhkYjE4MGFkYmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3adIxiuzCa9kQYXUdyCppYi0fKE22EeHzhpE CXMbsf2rd06Bwtt0KKKvUaG2eponmTKqNNxYgzkojRnSV8RTV57MbsrcfV7qEey9 rStQS/ZD/mtYwVTiLdmaagA51mpT3/ixjCwdjpEDHEiJNJINLlHU3oLVPIJ7r8Qx BKvvPeH/T5J2kFJocthm2GiRsS/lSZIi79eipruBKM9VnKMmNjNULKJkkPuGhist ITAftu6slQxRHgPiQYCGIF445nzDaS1BNmSPj192hSw3cQbJm59Q+Fh+rTs8zPmn JSlnkNVuuvdPb7x7DmEDQf2s9xVImqD0Tf+1rBpQUeKIuzeKUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXRdOZ9ApWvwlWuahHAtX+tu9arMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNGJkZmE1ZjYtY2Q3My0z YmJiLWIxMGEtYzE1Y2Q0NGZkNTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADChSUx2jtTF5aRDPxLiEGrxUszdU0o+v8amchDSQCkiObaGI8ODi4wQ R+NHOJQ1ihSSa91E8GXYgKixTo+a8ocrtMePsE3uDAOGk3tDiYvYoBukodCiKtev V074T5JCLjfxtVGnvwBGoRzFmsexeJCDKZF0bWqnUztdiH0rfoMy2A2Bk9lxTOm+ MuuMcVRr5kwk6p4bMCJQ61dc/4uLoPS2ahgP0nzWaJg+Llx40ra+Wlp/Ud4AIg+8 O3Cb1SJyLizTnjfFWr62eya3mXTn0N+20vMxNc5qxQ87irHnsE5QiSazqEn9lfNG 4bVlNsx9+S0Vp31XpLasa9ns1DiAMys= -----END CERTIFICATE-----Generated at Sat May 18 09:23:45 2024 by rpki-client on console-fra.rpki-client.org