$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/393e7f75-5248-3b0e-90dc-0be84f528422.roa File: 393e7f75-5248-3b0e-90dc-0be84f528422.roa (raw, json) Hash identifier: OG9vjm4nL1rCt4otmbZnYaVPgGlEiZdtwP9tp1s3WAE= Subject key identifier: 0C:2B:49:0C:76:0C:56:12:43:4C:E9:ED:71:36:28:FC:44:6B:5B:D4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584540BBCCC4D7FB9F8F4B7F7D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/393e7f75-5248-3b0e-90dc-0be84f528422.roa Signing time: Mon 18 Mar 2024 22:16:12 +0000 ROA not before: Mon 18 Mar 2024 22:16:12 +0000 ROA not after: Sun 16 Jun 2024 22:16:12 +0000 asID: 396982 IP address blocks: 104.199.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:40:bb:cc:c4:d7:fb:9f:8f:4b:7f:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 18 22:16:12 2024 GMT Not After : Jun 16 22:16:12 2024 GMT Subject: CN=bb23504b-c763-4fb8-b8c6-dbae4951f37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:30:8c:1e:79:e1:e0:bc:33:37:0e:32:cf:89: e0:fa:a3:73:fb:09:18:8f:d0:0a:b0:cb:87:af:93: 46:1b:d6:1d:df:a0:4f:09:c5:14:d7:28:76:8f:e4: 6a:85:1a:28:68:c3:38:92:4f:5f:f0:cf:43:bf:01: c1:bd:ba:17:c7:08:a3:2c:3c:76:f5:22:52:49:d3: 88:7a:21:c5:b3:98:06:46:69:38:79:9b:9d:5d:73: 9c:9f:60:d8:ab:34:d8:34:b1:36:d9:00:6a:a9:96: 80:68:08:f0:06:93:16:75:b3:6a:11:1e:fa:d7:63: cd:7d:70:42:cd:fc:22:c6:90:f0:8d:d5:14:f4:b4: 12:f2:34:30:ce:71:cd:15:70:31:11:e2:ae:0c:9b: 1c:d8:b0:0e:2a:b6:b1:59:c8:95:11:a7:c2:e5:80: 83:07:0e:2e:13:a8:11:1d:b4:d8:47:0b:72:86:1a: 4b:ed:d5:4e:ac:f0:05:7c:58:f6:78:61:27:73:4c: d6:37:22:fa:c9:92:b2:39:7e:77:4f:78:f4:81:6c: d8:2c:4d:d9:d6:6c:a8:fa:42:9e:49:73:e8:70:21: aa:26:1d:11:fc:98:5d:d3:67:dd:d4:02:20:66:4f: bf:82:53:b0:54:e2:68:c7:f0:11:30:e1:70:05:d6: e7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2B:49:0C:76:0C:56:12:43:4C:E9:ED:71:36:28:FC:44:6B:5B:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/393e7f75-5248-3b0e-90dc-0be84f528422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.199.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:f7:1d:34:df:e7:e1:c5:48:96:00:5c:25:8f:9a:c3:87:bd: c7:87:c4:b0:0f:2d:7f:38:7d:f8:11:42:84:62:40:96:3c:bc: 38:44:64:1b:a0:67:d0:ad:d3:71:0e:32:7c:b0:ef:35:3e:a2: f6:91:fb:7e:13:c8:55:a5:d5:16:c3:df:c5:c3:ff:66:0f:b9: 9a:b7:6f:7f:cb:43:27:92:a7:ec:7c:08:52:74:82:2b:94:4c: c2:3f:67:4d:44:10:9e:c2:68:04:df:72:ef:4a:62:7a:d3:a1: 50:83:c3:b6:e1:ff:98:df:0e:45:fe:b4:17:38:aa:3a:4e:99: 8f:f3:cd:5f:d9:8f:6a:c8:d6:a5:9c:53:0e:4f:fa:57:85:29: 13:19:c8:4b:73:b2:5e:7b:76:9b:74:bf:a2:ee:6e:48:ff:aa: 9b:c0:97:52:89:e8:3c:30:5d:38:51:9a:f4:81:81:06:03:fc: 82:42:63:0d:7a:25:88:54:8b:62:8b:77:c1:34:c4:95:a1:15: b8:5d:79:f7:44:85:fc:79:69:6c:8d:01:81:64:78:f7:0b:3d: d8:36:6c:10:31:ed:87:d9:77:74:96:19:87:e6:57:5c:46:f5: f6:e4:57:b6:82:79:d2:b1:93:2b:2f:43:f1:a9:b6:dc:a3:54: 53:47:0d:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAu8zE1/ufj0t/fQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMxODIyMTYxMloXDTI0MDYxNjIyMTYxMlowLzEtMCsGA1UEAxMk YmIyMzUwNGItYzc2My00ZmI4LWI4YzYtZGJhZTQ5NTFmMzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDCMHnnh4LwzNw4yz4ng+qNz+wkYj9AKsMuH r5NGG9Yd36BPCcUU1yh2j+RqhRooaMM4kk9f8M9DvwHBvboXxwijLDx29SJSSdOI eiHFs5gGRmk4eZudXXOcn2DYqzTYNLE22QBqqZaAaAjwBpMWdbNqER7612PNfXBC zfwixpDwjdUU9LQS8jQwznHNFXAxEeKuDJsc2LAOKraxWciVEafC5YCDBw4uE6gR HbTYRwtyhhpL7dVOrPAFfFj2eGEnc0zWNyL6yZKyOX53T3j0gWzYLE3Z1myo+kKe SXPocCGqJh0R/Jhd02fd1AIgZk+/glOwVOJox/ARMOFwBdbn/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwrSQx2DFYSQ0zp7XE2KPxEa1vUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzkzZTdmNzUtNTI0OC0z YjBlLTkwZGMtMGJlODRmNTI4NDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFT3HTTf5+HFSJYAXCWPmsOHvceHxLAPLX84ffgRQoRiQJY8vDhEZBug Z9Ct03EOMnyw7zU+ovaR+34TyFWl1RbD38XD/2YPuZq3b3/LQyeSp+x8CFJ0giuU TMI/Z01EEJ7CaATfcu9KYnrToVCDw7bh/5jfDkX+tBc4qjpOmY/zzV/Zj2rI1qWc Uw5P+leFKRMZyEtzsl57dpt0v6Lubkj/qpvAl1KJ6DwwXThRmvSBgQYD/IJCYw16 JYhUi2KLd8E0xJWhFbhdefdEhfx5aWyNAYFkePcLPdg2bBAx7YfZd3SWGYfmV1xG 9fbkV7aCedKxkysvQ/GpttyjVFNHDcw= -----END CERTIFICATE-----Generated at Sun May 5 15:35:00 2024 by rpki-client on console-fra.rpki-client.org