$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/a0ac2aa7-20c3-3813-8979-7448fcaa856e.roa File: a0ac2aa7-20c3-3813-8979-7448fcaa856e.roa (raw, json) Hash identifier: QVobfmBja+dXoomAfHRhb+Cm6jRs0IgE3G5CUKfpRkY= Subject key identifier: D0:A4:CE:D7:D9:8D:45:8B:69:B1:0F:79:C1:81:54:2C:D4:54:AB:35 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F43285845833C943676E6946070A87640 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/a0ac2aa7-20c3-3813-8979-7448fcaa856e.roa Signing time: Thu 11 Apr 2024 17:59:02 +0000 ROA not before: Thu 11 Apr 2024 17:59:02 +0000 ROA not after: Wed 10 Jul 2024 17:59:02 +0000 asID: 32209 IP address blocks: 137.239.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 May 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:83:3c:94:36:76:e6:94:60:70:a8:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Apr 11 17:59:02 2024 GMT Not After : Jul 10 17:59:02 2024 GMT Subject: CN=8781d793-8d78-4e29-9758-9171435605b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:65:a2:92:8f:8b:2f:e7:5a:c6:16:64:bb:5d: 56:f0:dc:4f:e7:71:d3:31:bf:3d:09:56:e7:12:0f: 8b:95:a3:87:b7:1b:92:22:16:f3:00:e1:b2:c8:ea: 5d:a5:96:d5:be:f4:a6:d5:41:ac:6a:76:61:4e:8c: 90:96:ba:f1:d2:46:37:63:8b:57:91:8e:17:ef:24: e1:aa:2b:79:90:77:0e:aa:ef:11:08:cf:32:59:d8: 64:a5:e1:0c:2b:b4:bb:28:a8:a4:ac:79:ea:63:da: db:1a:0b:32:84:7f:a8:dc:d1:80:d6:d2:cb:10:b8: 67:19:f2:ca:1b:bd:59:1e:fe:ff:44:86:79:9d:6f: fa:04:19:5d:73:b7:8c:92:08:25:85:d9:aa:97:30: 9c:5c:02:1e:99:c4:42:fe:dd:e4:1a:fe:61:f0:78: 5b:e7:50:2a:15:1a:d4:4e:97:5a:8e:1c:af:c1:31: 12:2f:cf:76:48:79:41:86:56:db:07:79:bf:99:9c: 4b:6b:7d:32:36:39:67:bc:48:66:b0:e1:43:0b:e4: b1:d2:41:d8:61:8f:c9:3a:b2:2f:c2:bf:21:c8:ff: bc:de:08:88:85:c3:87:80:26:b4:78:b3:8e:f6:74: 7b:61:77:a8:bd:20:c9:b3:68:34:87:eb:5b:91:49: 15:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A4:CE:D7:D9:8D:45:8B:69:B1:0F:79:C1:81:54:2C:D4:54:AB:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/a0ac2aa7-20c3-3813-8979-7448fcaa856e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:14:99:8d:9d:b8:11:00:d2:f5:5b:8f:31:fb:ff:6a:08:c7: 30:02:5a:10:ad:9f:8f:ae:7a:bf:5b:18:fe:ab:6b:4f:1c:35: c5:52:b6:0c:01:0e:9b:d1:34:d7:a0:16:2c:9a:25:a1:13:6f: b1:a4:f7:21:49:bf:91:77:15:f4:49:9a:ad:7b:af:df:c2:c1: c9:6c:db:a2:9e:64:61:09:95:f3:80:c5:e0:7d:7e:2d:da:d6: 9a:63:fd:c4:9d:a6:c0:ea:33:9c:81:80:3a:95:3e:01:97:a2: ea:c3:9c:a4:d9:eb:bd:5e:6c:6d:9e:20:ed:82:93:88:ab:4c: fb:9f:82:b2:0b:27:9e:f9:7c:f3:eb:c0:4c:55:56:cd:71:3d: 0d:15:e8:79:41:31:11:1a:5e:eb:55:52:76:75:c3:72:46:71: 1c:07:98:55:8f:c5:4f:e7:00:86:4b:09:2f:0b:5f:b2:c2:07: 76:bf:3f:48:9b:0c:ac:a2:08:c2:f4:68:db:d9:12:5b:32:c2: 94:2d:eb:31:5f:c5:ca:e6:8b:e1:a2:1c:8e:f9:91:b0:a5:fa: a9:43:89:e5:a8:e2:ca:df:13:64:e1:ff:6c:a1:5b:f3:52:df: 48:be:50:eb:16:35:69:3c:a3:7e:65:f5:d0:98:a0:52:92:57: 8b:bb:89:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWDPJQ2duaUYHCodkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI0MDQxMTE3NTkwMloXDTI0MDcxMDE3NTkwMlowLzEtMCsGA1UEAxMk ODc4MWQ3OTMtOGQ3OC00ZTI5LTk3NTgtOTE3MTQzNTYwNWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2Wiko+LL+daxhZku11W8NxP53HTMb89CVbn Eg+LlaOHtxuSIhbzAOGyyOpdpZbVvvSm1UGsanZhToyQlrrx0kY3Y4tXkY4X7yTh qit5kHcOqu8RCM8yWdhkpeEMK7S7KKikrHnqY9rbGgsyhH+o3NGA1tLLELhnGfLK G71ZHv7/RIZ5nW/6BBldc7eMkgglhdmqlzCcXAIemcRC/t3kGv5h8Hhb51AqFRrU TpdajhyvwTESL892SHlBhlbbB3m/mZxLa30yNjlnvEhmsOFDC+Sx0kHYYY/JOrIv wr8hyP+83giIhcOHgCa0eLOO9nR7YXeovSDJs2g0h+tbkUkVTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCkztfZjUWLabEPecGBVCzUVKs1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvYTBhYzJhYTctMjBjMy0z ODEzLTg5NzktNzQ0OGZjYWE4NTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4UmY2duBEA0vVbjzH7/2oIxzACWhCtn4+uer9bGP6ra08cNcVStgwB DpvRNNegFiyaJaETb7Gk9yFJv5F3FfRJmq17r9/Cwcls26KeZGEJlfOAxeB9fi3a 1ppj/cSdpsDqM5yBgDqVPgGXourDnKTZ671ebG2eIO2Ck4irTPufgrILJ575fPPr wExVVs1xPQ0V6HlBMREaXutVUnZ1w3JGcRwHmFWPxU/nAIZLCS8LX7LCB3a/P0ib DKyiCML0aNvZElsywpQt6zFfxcrmi+GiHI75kbCl+qlDieWo4srfE2Th/2yhW/NS 30i+UOsWNWk8o35l9dCYoFKSV4u7idM= -----END CERTIFICATE-----Generated at Sat May 25 01:33:41 2024 by rpki-client on console-fra.rpki-client.org