$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa File: 72be6899-0a9c-3151-8e0d-f784d1f56c09.roa (raw, json) Hash identifier: oyOTcYWfe9rYYFxF51zr53uRM0iwygf9usTP5ignf0Q= Subject key identifier: 03:83:FA:7A:DD:68:BC:0E:3D:16:A9:87:76:5C:54:BA:DD:FA:0A:6E Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285845DBFE70487B99394BE8482C80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa Signing time: Mon 13 May 2024 13:00:34 +0000 ROA not before: Mon 13 May 2024 13:00:34 +0000 ROA not after: Sun 11 Aug 2024 13:00:34 +0000 asID: 1239 IP address blocks: 149.143.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:db:fe:70:48:7b:99:39:4b:e8:48:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: May 13 13:00:34 2024 GMT Not After : Aug 11 13:00:34 2024 GMT Subject: CN=eaa4cee4-c74f-41f3-bde8-18b74eb458d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ed:3f:5a:2c:f7:ba:0b:57:4a:76:37:b2:c5: 9a:fd:2d:49:34:96:2a:66:bf:e0:08:ef:6f:a2:61: 99:06:e4:cc:8e:c8:e2:f6:68:35:28:2c:f6:a3:a8: ac:4f:62:46:30:7a:87:0d:55:1c:5b:46:d6:3d:a0: d4:e4:58:69:11:a3:ea:34:08:72:21:ba:c4:07:25: 62:30:3f:50:23:a8:b3:77:b9:8c:79:3b:63:59:a4: 98:0b:6c:bd:fa:eb:9b:58:53:6b:f3:d9:95:c5:8e: 78:3a:23:a1:b1:d4:3e:ad:de:f5:13:ef:d2:79:48: a4:20:16:e5:e6:c4:5f:d2:ec:2f:6d:e9:1d:ca:c6: 00:4c:ec:c9:e0:ba:c3:ed:27:54:4b:c4:fb:43:6f: fe:58:ad:64:f8:17:95:77:0b:08:1a:b2:9d:31:87: 1c:d8:99:82:40:62:77:c1:34:43:df:11:3e:b4:e9: 07:08:5d:41:14:f2:3b:a8:80:af:a0:ab:51:4c:ec: 3d:2a:b4:8f:45:14:4c:ed:3b:6e:20:47:fb:b2:3c: 40:35:56:df:be:09:ff:63:b0:94:3a:93:13:cd:9b: 1b:d1:46:66:ca:de:a2:53:cd:1c:01:83:a7:d9:39: 42:c1:32:e7:bc:cf:e8:94:88:50:e6:3f:92:3e:2f: 50:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:83:FA:7A:DD:68:BC:0E:3D:16:A9:87:76:5C:54:BA:DD:FA:0A:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:63:ee:5f:a0:da:d8:dd:6f:8b:02:68:95:97:e0:90:72:7b: cd:90:c4:88:95:e0:50:53:0a:aa:28:71:ad:cd:90:51:9f:5a: 6c:18:7e:6a:4f:a5:03:11:bb:6d:99:f5:5f:e0:fd:96:26:af: d1:7e:64:04:da:8f:8c:db:34:0b:54:28:3c:da:05:b1:b4:f5: e1:83:5c:17:55:d4:0f:55:27:7e:bb:43:11:7f:5f:04:f8:05: ea:73:ff:c2:30:33:b5:90:c9:40:40:65:cb:9b:29:cb:92:4b: 23:cd:2e:d6:cf:1a:a8:ea:21:06:2a:20:f6:a1:42:3f:99:21: 7a:cc:f4:7c:68:b9:21:2e:58:78:ad:4c:55:5f:f8:5d:06:5c: c5:dc:94:2b:b2:c1:3e:43:ca:23:7a:fc:9e:93:b3:49:9f:99: e4:11:a4:ee:54:47:cb:8d:c0:84:e3:f0:31:86:66:c6:d9:82: 1f:d4:0f:11:57:24:30:ca:05:b5:3c:4f:e8:8a:c2:e1:28:5a: f7:82:db:27:4c:64:35:6f:0d:32:bf:13:4c:f2:34:78:51:0e: 8b:2e:d6:a3:3b:9e:52:c2:47:a2:54:d6:fd:75:3d:88:b3:6e: a7:da:21:a4:3f:a5:85:dc:f6:21:6a:16:6d:43:9b:fe:a4:a5: 9c:f9:22:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXb/nBIe5k5S+hILIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MDUxMzEzMDAzNFoXDTI0MDgxMTEzMDAzNFowLzEtMCsGA1UEAxMk ZWFhNGNlZTQtYzc0Zi00MWYzLWJkZTgtMThiNzRlYjQ1OGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle0/Wiz3ugtXSnY3ssWa/S1JNJYqZr/gCO9v omGZBuTMjsji9mg1KCz2o6isT2JGMHqHDVUcW0bWPaDU5FhpEaPqNAhyIbrEByVi MD9QI6izd7mMeTtjWaSYC2y9+uubWFNr89mVxY54OiOhsdQ+rd71E+/SeUikIBbl 5sRf0uwvbekdysYATOzJ4LrD7SdUS8T7Q2/+WK1k+BeVdwsIGrKdMYcc2JmCQGJ3 wTRD3xE+tOkHCF1BFPI7qICvoKtRTOw9KrSPRRRM7TtuIEf7sjxANVbfvgn/Y7CU OpMTzZsb0UZmyt6iU80cAYOn2TlCwTLnvM/olIhQ5j+SPi9QrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOD+nrdaLwOPRaph3ZcVLrd+gpuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNzJiZTY4OTktMGE5Yy0z MTUxLThlMGQtZjc4NGQxZjU2YzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtj7l+g2tjdb4sCaJWX4JBye82QxIiV4FBTCqooca3NkFGfWmwYfmpP pQMRu22Z9V/g/ZYmr9F+ZATaj4zbNAtUKDzaBbG09eGDXBdV1A9VJ367QxF/XwT4 Bepz/8IwM7WQyUBAZcubKcuSSyPNLtbPGqjqIQYqIPahQj+ZIXrM9HxouSEuWHit TFVf+F0GXMXclCuywT5DyiN6/J6Ts0mfmeQRpO5UR8uNwITj8DGGZsbZgh/UDxFX JDDKBbU8T+iKwuEoWveC2ydMZDVvDTK/E0zyNHhRDosu1qM7nlLCR6JU1v11PYiz bqfaIaQ/pYXc9iFqFm1Dm/6kpZz5Io0= -----END CERTIFICATE-----Generated at Thu May 23 02:53:48 2024 by rpki-client on console-ams.rpki-client.org