$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/ab8b3e70-9d7c-3af2-9b11-c5c28e60ef00.roa File: ab8b3e70-9d7c-3af2-9b11-c5c28e60ef00.roa (raw, json) Hash identifier: CmKKMA4mlD/s18WC1YecfO6jTmxrqlPGZPo8rmoD4FE= Subject key identifier: 8F:4A:72:9E:71:1C:E6:82:4A:40:97:32:09:F2:E0:F9:92:C1:2D:60 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F43285845C1791AB9E6E82993DC474090 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/ab8b3e70-9d7c-3af2-9b11-c5c28e60ef00.roa Signing time: Sat 04 May 2024 01:00:25 +0000 ROA not before: Sat 04 May 2024 01:00:25 +0000 ROA not after: Fri 02 Aug 2024 01:00:25 +0000 asID: 25645 IP address blocks: 137.239.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c1:79:1a:b9:e6:e8:29:93:dc:47:40:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: May 4 01:00:25 2024 GMT Not After : Aug 2 01:00:25 2024 GMT Subject: CN=95ffd721-5f5f-4f5f-90df-4e3f16fd05a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f3:36:26:f4:e8:59:b8:4b:05:1a:67:3e:ad: e0:0d:9b:12:71:c0:e5:01:3c:3a:0c:c0:dd:91:fd: 31:8c:7d:70:92:cc:e5:a5:f1:87:25:fc:4a:83:b7: 28:ae:48:45:2c:1c:b3:c3:c6:d4:0b:c1:ea:78:b4: 18:0c:e7:34:2a:63:db:35:dd:af:22:43:7f:3b:c7: c4:50:cc:25:08:c8:b3:b1:aa:df:a3:b1:70:87:22: 08:d6:94:b3:39:02:c0:a0:93:c2:eb:81:0d:de:6e: 4f:75:e2:aa:e3:72:9e:8e:20:e3:f0:82:65:07:ed: 09:cb:f9:3a:f4:12:1b:99:35:f4:d1:6a:88:4b:66: 9c:37:25:2d:28:86:39:d1:ac:f1:60:90:84:0b:95: f8:2a:46:8a:c1:36:5a:49:63:c2:75:70:69:c8:40: d2:1c:59:3e:0a:46:5f:6f:f4:fa:72:ec:f1:a1:2c: 71:db:9b:d4:58:a5:9a:52:52:4c:63:c6:2d:86:06: 23:15:39:26:9d:bb:5a:11:b7:32:00:46:a5:de:9a: 4b:84:ae:bb:a8:7b:04:96:a8:48:ca:e4:44:c3:9c: 6b:04:50:37:6a:f9:cb:27:83:56:3c:0c:68:bd:a4: fc:94:26:5a:4d:48:5d:16:ec:70:e8:c0:ba:92:ea: dc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4A:72:9E:71:1C:E6:82:4A:40:97:32:09:F2:E0:F9:92:C1:2D:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/ab8b3e70-9d7c-3af2-9b11-c5c28e60ef00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:95:3c:e4:68:e1:be:39:18:17:f4:b7:42:08:4e:05:4c:72: 37:b2:01:3b:85:1b:3a:3e:be:bb:c3:a5:ec:40:b9:26:a7:94: d6:bd:e5:be:30:cb:07:2d:54:55:1e:12:e6:4c:11:ed:a6:c4: 54:ee:d7:05:0e:f3:7f:c3:cf:54:74:1b:f3:ce:32:8f:6e:79: 5f:14:e4:02:51:83:92:61:f1:93:96:3f:5a:0f:37:05:60:d2: e1:8e:5b:f4:78:f7:52:04:6d:d9:e7:04:e0:11:29:03:bb:c7: 13:d5:a1:2b:3d:14:a3:e3:a3:d2:74:5d:5c:52:33:46:13:cc: 64:23:6b:2d:aa:e9:8c:e0:26:b0:c6:ef:b0:f9:04:26:7b:93: 65:88:1b:71:24:bb:2e:53:66:67:d0:b8:72:40:76:94:69:15: a2:63:c9:1e:57:45:ce:9d:e9:17:ab:ec:4f:a7:15:10:aa:5c: 93:95:5c:0a:bb:63:d5:0f:2c:a5:3e:cc:f5:7a:a5:a1:10:e3: 33:eb:ae:f8:e3:2e:17:26:6a:a3:12:13:df:95:df:e4:78:5f: 6f:20:68:0f:38:28:5f:7a:dc:93:3d:a4:e2:73:73:e0:4c:1b: 04:e5:1c:5e:f9:ef:29:e7:a8:6d:f0:4c:1d:d9:95:c9:d0:95: 24:cf:d4:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXBeRq55ugpk9xHQJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI0MDUwNDAxMDAyNVoXDTI0MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk OTVmZmQ3MjEtNWY1Zi00ZjVmLTkwZGYtNGUzZjE2ZmQwNWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvM2JvToWbhLBRpnPq3gDZsSccDlATw6DMDd kf0xjH1wkszlpfGHJfxKg7corkhFLByzw8bUC8HqeLQYDOc0KmPbNd2vIkN/O8fE UMwlCMizsarfo7FwhyII1pSzOQLAoJPC64EN3m5PdeKq43KejiDj8IJlB+0Jy/k6 9BIbmTX00WqIS2acNyUtKIY50azxYJCEC5X4KkaKwTZaSWPCdXBpyEDSHFk+CkZf b/T6cuzxoSxx25vUWKWaUlJMY8YthgYjFTkmnbtaEbcyAEal3ppLhK67qHsElqhI yuREw5xrBFA3avnLJ4NWPAxovaT8lCZaTUhdFuxw6MC6kurcKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9Kcp5xHOaCSkCXMgny4PmSwS1gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvYWI4YjNlNzAtOWQ3Yy0z YWYyLTliMTEtYzVjMjhlNjBlZjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiVPORo4b45GBf0t0IITgVMcjeyATuFGzo+vrvDpexAuSanlNa95b4w ywctVFUeEuZMEe2mxFTu1wUO83/Dz1R0G/POMo9ueV8U5AJRg5Jh8ZOWP1oPNwVg 0uGOW/R491IEbdnnBOARKQO7xxPVoSs9FKPjo9J0XVxSM0YTzGQjay2q6YzgJrDG 77D5BCZ7k2WIG3Ekuy5TZmfQuHJAdpRpFaJjyR5XRc6d6Rer7E+nFRCqXJOVXAq7 Y9UPLKU+zPV6paEQ4zPrrvjjLhcmaqMSE9+V3+R4X28gaA84KF963JM9pOJzc+BM GwTlHF757ynnqG3wTB3ZlcnQlSTP1PY= -----END CERTIFICATE-----Generated at Sat May 18 15:35:49 2024 by rpki-client on console-fra.rpki-client.org