$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/22e3e202-13e4-317f-8ee3-87def900f31d.roa File: 22e3e202-13e4-317f-8ee3-87def900f31d.roa (raw, json) Hash identifier: hV48tKF2lwsTYnGJ9ZACBtvNp+0hGRAFeKQ87Tr2OzA= Subject key identifier: F6:2B:26:BA:F2:27:43:04:EA:1D:7A:E2:F9:89:B0:FD:99:12:81:CC Certificate issuer: /CN=fc9bd684-883b-41b8-9890-8cd78117898c Certificate serial: 010D0C9F43285845D39E50AA3133D32ED66A9540 Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/22e3e202-13e4-317f-8ee3-87def900f31d.roa Signing time: Fri 10 May 2024 13:00:36 +0000 ROA not before: Fri 10 May 2024 13:00:36 +0000 ROA not after: Thu 08 Aug 2024 13:00:36 +0000 asID: 46557 IP address blocks: 139.104.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d3:9e:50:aa:31:33:d3:2e:d6:6a:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c Validity Not Before: May 10 13:00:36 2024 GMT Not After : Aug 8 13:00:36 2024 GMT Subject: CN=d04f6659-da59-4c34-9063-1886a5dca662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dc:7b:8c:97:4c:d8:76:b5:c3:5d:32:74:0d: 00:d3:3e:cc:ff:9c:45:b2:2c:7d:1d:09:e9:7e:18: f4:59:c5:e7:9b:36:ad:e5:b8:c6:0a:a3:12:92:42: 95:c6:9e:03:3d:b4:70:6a:ee:c4:bf:c7:20:8d:ca: 8f:41:ef:d4:a5:21:1c:25:65:c8:5b:30:92:0f:32: 59:eb:7b:d7:41:6c:ca:a5:10:d5:6d:6d:8f:46:79: 17:bd:88:4e:4b:97:26:11:ed:9b:cc:07:66:2b:09: 3c:e6:8f:5e:1a:ab:40:f8:c1:08:9e:63:d1:2e:90: 49:30:99:20:d6:1e:f3:ad:44:f9:99:74:7b:91:b8: fc:a9:1f:a5:f2:06:1f:47:d0:2f:de:7e:6e:ed:0a: 12:a8:3a:46:fd:30:70:4d:55:04:7e:58:f9:0f:bf: ae:24:76:85:4d:b2:54:21:82:5d:b2:95:1f:e3:93: 12:08:15:32:36:d7:36:7c:a0:54:e5:b2:a7:6f:b5: 86:46:be:b7:21:b7:7a:b4:88:c0:46:bb:8d:0a:7c: e4:5f:ee:dc:f8:ac:1c:9a:a0:5c:4e:31:49:71:eb: c3:46:28:75:91:a7:15:1b:10:14:76:c5:b8:88:f0: 93:62:0a:04:03:21:79:ff:22:08:00:7e:d2:c2:c0: 6d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2B:26:BA:F2:27:43:04:EA:1D:7A:E2:F9:89:B0:FD:99:12:81:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/22e3e202-13e4-317f-8ee3-87def900f31d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl X509v3 Authority Key Identifier: keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer sbgp-ipAddrBlock: critical IPv4: 139.104.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:3a:9b:bf:34:ff:3a:b1:5d:32:03:35:f1:a5:bd:05:87:4a: 97:a3:6b:46:84:10:5f:70:02:a4:55:56:36:50:14:e1:79:88: 87:5a:fd:71:44:a1:55:88:d3:60:0b:de:6e:12:5d:46:fc:4e: 94:ef:24:4b:90:90:3e:ee:12:9d:41:67:0b:f5:fc:ae:26:72: 55:54:3f:53:7c:ab:a1:38:ab:40:67:1f:ea:16:e5:d0:73:5b: 80:ac:0d:b1:c9:f5:91:29:9b:90:15:46:23:1b:05:29:91:d6: 4f:32:60:f5:7c:b2:23:01:00:fc:08:6e:08:ef:fd:b3:64:01: b9:21:e4:3e:fd:f8:a2:85:f4:49:7a:ae:a9:2f:4e:a3:1b:cc: 03:ff:38:b3:21:26:92:ed:55:d2:97:ef:1c:de:d2:a2:ea:72: 5a:2a:f0:52:4a:5f:ea:db:51:a1:e1:ec:28:e0:e0:56:c7:6f: ad:1f:ca:be:c0:6d:0c:76:58:7a:39:89:89:86:86:76:b5:73: 56:79:43:16:f6:d9:2a:21:52:7b:d2:7e:44:90:a7:f9:53:90: 36:45:b3:e7:cf:2a:10:9b:fc:0f:1c:37:de:cd:33:ab:2a:8c: 0b:48:69:1a:c4:df:1d:f7:aa:50:ff:0a:15:0a:b0:3f:dc:83: 75:05:8b:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXTnlCqMTPTLtZqlUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmM5YmQ2ODQtODgzYi00MWI4LTk4OTAtOGNkNzgxMTc4 OThjMB4XDTI0MDUxMDEzMDAzNloXDTI0MDgwODEzMDAzNlowLzEtMCsGA1UEAxMk ZDA0ZjY2NTktZGE1OS00YzM0LTkwNjMtMTg4NmE1ZGNhNjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9x7jJdM2Ha1w10ydA0A0z7M/5xFsix9HQnp fhj0WcXnmzat5bjGCqMSkkKVxp4DPbRwau7Ev8cgjcqPQe/UpSEcJWXIWzCSDzJZ 63vXQWzKpRDVbW2PRnkXvYhOS5cmEe2bzAdmKwk85o9eGqtA+MEInmPRLpBJMJkg 1h7zrUT5mXR7kbj8qR+l8gYfR9Av3n5u7QoSqDpG/TBwTVUEflj5D7+uJHaFTbJU IYJdspUf45MSCBUyNtc2fKBU5bKnb7WGRr63Ibd6tIjARruNCnzkX+7c+KwcmqBc TjFJcevDRih1kacVGxAUdsW4iPCTYgoEAyF5/yIIAH7SwsBteQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYrJrryJ0ME6h164vmJsP2ZEoHMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mYzli ZDY4NC04ODNiLTQxYjgtOTg5MC04Y2Q3ODExNzg5OGMvMjJlM2UyMDItMTNlNC0z MTdmLThlZTMtODdkZWY5MDBmMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmM5YmQ2ODQtODgzYi00MWI4LTk4 OTAtOGNkNzgxMTc4OThjL2ZjOWJkNjg0LTg4M2ItNDFiOC05ODkwLThjZDc4MTE3 ODk4Yy5jcmwwHwYDVR0jBBgwFoAUUaHv6hItj28wFZq7IItgmAGJg3gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mYzliZDY4NC04ODNiLTQxYjgtOTg5MC04Y2Q3 ODExNzg5OGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi2jrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFo6m780/zqxXTIDNfGlvQWHSpeja0aEEF9wAqRVVjZQFOF5iIda/XFE oVWI02AL3m4SXUb8TpTvJEuQkD7uEp1BZwv1/K4mclVUP1N8q6E4q0BnH+oW5dBz W4CsDbHJ9ZEpm5AVRiMbBSmR1k8yYPV8siMBAPwIbgjv/bNkAbkh5D79+KKF9El6 rqkvTqMbzAP/OLMhJpLtVdKX7xze0qLqcloq8FJKX+rbUaHh7Cjg4FbHb60fyr7A bQx2WHo5iYmGhna1c1Z5Qxb22SohUnvSfkSQp/lTkDZFs+fPKhCb/A8cN97NM6sq jAtIaRrE3x33qlD/ChUKsD/cg3UFi0Q= -----END CERTIFICATE-----Generated at Sat May 18 18:22:02 2024 by rpki-client on console-ams.rpki-client.org