$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/33a3b984-a77f-3d78-88ae-30ae68813e02.roa File: 33a3b984-a77f-3d78-88ae-30ae68813e02.roa (raw, json) Hash identifier: U99i2euIk5CJeJy60LvYmub6jpe7/42vnis7UEda3QM= Subject key identifier: 73:2B:93:C3:7F:E0:4C:23:88:38:43:C7:8A:31:EA:16:CA:50:5A:E8 Certificate issuer: /CN=a7001425-6965-4c1f-8e35-f578d112295c Certificate serial: 010D0C9F43285845F32CA11A6ABB89A30B32A500 Authority key identifier: F4:6C:4D:F0:5E:17:96:E6:79:88:21:0F:C0:BA:29:70:32:D6:2B:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/33a3b984-a77f-3d78-88ae-30ae68813e02.roa Signing time: Tue 21 May 2024 20:17:26 +0000 ROA not before: Tue 21 May 2024 20:17:26 +0000 ROA not after: Mon 19 Aug 2024 20:17:26 +0000 asID: 16920 IP address blocks: 128.224.254.0/24 maxlen: 24 128.224.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jul 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:f3:2c:a1:1a:6a:bb:89:a3:0b:32:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7001425-6965-4c1f-8e35-f578d112295c Validity Not Before: May 21 20:17:26 2024 GMT Not After : Aug 19 20:17:26 2024 GMT Subject: CN=58ba9b67-b85a-4ca1-aae4-c3e90f485c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9b:8b:99:e7:b4:61:bd:8b:8e:69:81:46:cb: 60:28:8c:25:84:cf:9b:8b:c5:79:2f:08:87:5b:4a: 14:a0:c8:71:27:9f:79:01:3f:b7:52:ae:ec:32:ae: ac:4b:6c:25:5d:53:13:cf:06:71:49:6c:fa:2a:cc: 10:03:43:5b:9a:08:70:32:eb:4a:d9:ba:b3:55:e8: d0:07:cf:3c:a4:19:cf:1a:b5:aa:a9:45:22:dc:2c: f0:ad:b0:80:00:f7:3d:56:24:a0:ce:63:76:a8:4f: 5d:03:34:82:a0:60:7e:7d:43:75:17:1b:80:8f:06: d7:da:ef:97:86:6f:66:67:8c:22:d4:6f:b9:77:d2: 93:04:35:85:d6:cc:cb:05:64:22:65:d0:56:42:1b: d9:5d:6a:52:4b:75:89:be:58:86:47:3f:1e:4f:5f: 73:7f:5b:b7:b3:7e:4a:00:c5:49:f9:ef:34:75:82: dd:93:1f:fd:55:00:f5:b2:6c:13:39:c9:36:d5:05: af:57:d5:61:36:f8:8c:e7:c1:87:32:aa:c5:48:97: e4:61:ff:34:13:42:96:bd:48:ea:f8:32:d0:dd:9e: 71:ae:e2:f0:30:5d:f8:45:39:a4:c6:85:83:84:4f: 4a:94:1f:f6:d4:1f:ae:2e:ff:a2:50:a0:a4:30:7b: 07:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2B:93:C3:7F:E0:4C:23:88:38:43:C7:8A:31:EA:16:CA:50:5A:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/33a3b984-a77f-3d78-88ae-30ae68813e02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.crl X509v3 Authority Key Identifier: keyid:F4:6C:4D:F0:5E:17:96:E6:79:88:21:0F:C0:BA:29:70:32:D6:2B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer sbgp-ipAddrBlock: critical IPv4: 128.224.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:f9:94:88:e2:0d:85:8a:d8:a2:57:88:18:21:dc:0b:10:b3: dc:c7:46:c3:68:58:0e:9b:4b:a6:a5:cd:7d:cf:2f:c0:6d:92: 48:db:74:08:49:19:98:cc:cf:ad:5f:14:61:d7:06:31:55:7f: 5b:48:75:51:2c:1a:5c:81:8e:13:82:b2:43:7f:90:17:54:92: c9:c1:fc:3f:c7:fc:e6:85:80:95:6e:76:39:96:49:60:c5:67: 5c:f8:02:1e:46:9a:29:c7:c7:55:db:78:3b:9d:ac:ab:42:ef: a0:b4:c2:ef:d8:54:07:5d:63:d9:fd:bf:a8:39:4f:7a:83:02: 77:05:6c:59:ea:05:02:8a:48:2b:60:28:87:0f:3a:29:3f:01: 9e:31:5c:cd:17:e3:0c:7d:01:43:75:f6:82:b3:91:fd:46:aa: 3c:53:68:d3:2d:45:65:2c:40:8d:03:ad:87:c3:52:67:cf:0f: a5:d4:28:ca:59:2a:1e:44:bf:98:fc:b7:2c:d2:6f:b6:ee:72: d4:e7:73:f1:45:6f:40:7d:1a:eb:03:1f:5b:fa:44:80:4b:a1: 4a:78:6d:fe:b0:29:77:9c:b4:7b:88:03:7c:a6:50:7f:ab:80: c9:44:32:43:68:ed:34:4c:8a:77:67:b3:3d:76:1d:99:9b:eb: a1:01:1e:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXzLKEaaruJowsypQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcwMDE0MjUtNjk2NS00YzFmLThlMzUtZjU3OGQxMTIy OTVjMB4XDTI0MDUyMTIwMTcyNloXDTI0MDgxOTIwMTcyNlowLzEtMCsGA1UEAxMk NThiYTliNjctYjg1YS00Y2ExLWFhZTQtYzNlOTBmNDg1YzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJuLmee0Yb2LjmmBRstgKIwlhM+bi8V5LwiH W0oUoMhxJ595AT+3Uq7sMq6sS2wlXVMTzwZxSWz6KswQA0NbmghwMutK2bqzVejQ B888pBnPGrWqqUUi3CzwrbCAAPc9ViSgzmN2qE9dAzSCoGB+fUN1FxuAjwbX2u+X hm9mZ4wi1G+5d9KTBDWF1szLBWQiZdBWQhvZXWpSS3WJvliGRz8eT19zf1u3s35K AMVJ+e80dYLdkx/9VQD1smwTOck21QWvV9VhNviM58GHMqrFSJfkYf80E0KWvUjq +DLQ3Z5xruLwMF34RTmkxoWDhE9KlB/21B+uLv+iUKCkMHsH8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMrk8N/4EwjiDhDx4ox6hbKUFroMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hNzAw MTQyNS02OTY1LTRjMWYtOGUzNS1mNTc4ZDExMjI5NWMvMzNhM2I5ODQtYTc3Zi0z ZDc4LTg4YWUtMzBhZTY4ODEzZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTcwMDE0MjUtNjk2NS00YzFmLThl MzUtZjU3OGQxMTIyOTVjL2E3MDAxNDI1LTY5NjUtNGMxZi04ZTM1LWY1NzhkMTEy Mjk1Yy5jcmwwHwYDVR0jBBgwFoAU9GxN8F4XluZ5iCEPwLopcDLWK8swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hNzAwMTQyNS02OTY1LTRjMWYtOGUzNS1mNTc4 ZDExMjI5NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgOD+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADj5lIjiDYWK2KJXiBgh3AsQs9zHRsNoWA6bS6alzX3PL8BtkkjbdAhJ GZjMz61fFGHXBjFVf1tIdVEsGlyBjhOCskN/kBdUksnB/D/H/OaFgJVudjmWSWDF Z1z4Ah5GminHx1XbeDudrKtC76C0wu/YVAddY9n9v6g5T3qDAncFbFnqBQKKSCtg KIcPOik/AZ4xXM0X4wx9AUN19oKzkf1GqjxTaNMtRWUsQI0DrYfDUmfPD6XUKMpZ Kh5Ev5j8tyzSb7buctTnc/FFb0B9GusDH1v6RIBLoUp4bf6wKXectHuIA3ymUH+r gMlEMkNo7TRMindnsz12HZmb66EBHvk= -----END CERTIFICATE-----Generated at Wed Jul 3 03:33:45 2024 by rpki-client on console-fra.rpki-client.org