$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/af53e0e2-15b1-3e87-b127-7e31d6281a11.roa File: af53e0e2-15b1-3e87-b127-7e31d6281a11.roa (raw, json) Hash identifier: jhjvqeUIYharQukKTOgXdTB5/3tGX4SHIBicT19ST08= Subject key identifier: 8A:39:93:FA:78:AE:5E:79:16:06:21:B1:53:57:ED:3F:91:D9:FB:87 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F432858455E5DA4E5C21A54C253C65280 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/af53e0e2-15b1-3e87-b127-7e31d6281a11.roa Signing time: Fri 29 Mar 2024 13:00:37 +0000 ROA not before: Fri 29 Mar 2024 13:00:37 +0000 ROA not after: Thu 27 Jun 2024 13:00:37 +0000 asID: 834 IP address blocks: 141.140.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5e:5d:a4:e5:c2:1a:54:c2:53:c6:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Mar 29 13:00:37 2024 GMT Not After : Jun 27 13:00:37 2024 GMT Subject: CN=158596a1-85e1-4731-b80a-6d51dc2abe31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f2:14:b0:fa:63:7a:bf:e8:92:99:30:da:77: cf:bb:aa:12:df:7b:21:0d:34:21:a1:2d:99:54:d4: 0c:e2:de:21:d2:b3:c1:c2:88:6a:0f:02:ed:a0:a7: c5:c6:a2:1e:f2:bb:83:70:f5:6d:3b:a2:92:a3:3e: e0:b8:ba:e6:7f:95:fd:32:0e:83:b8:86:da:db:ae: 10:bf:0c:a6:91:51:58:56:be:0e:8b:7f:f0:ca:c0: 50:2b:44:c3:a7:3b:5a:13:77:0f:b1:bb:e1:ee:61: 1c:63:9b:64:8d:35:b5:09:9e:86:3a:18:89:9b:4b: 01:bc:cb:5d:40:ed:26:59:7d:53:4c:84:06:cd:ec: c3:54:3d:82:2f:07:9c:6c:5b:49:be:38:3f:ee:38: 0e:e0:35:6c:a7:77:31:a6:b5:e3:eb:f1:8f:ec:b3: 29:da:c6:05:ec:8e:17:13:0e:dc:a2:10:2f:35:ef: 8c:c2:c1:5b:b7:fd:70:d7:ee:8d:b9:3f:c4:48:c6: a2:a1:c5:8d:40:3e:0c:1e:3d:05:eb:31:95:24:21: 63:7d:98:ac:f0:64:1e:94:de:c9:fa:43:16:58:5a: ae:16:f1:b2:e4:f3:7d:48:23:3b:a5:c4:20:06:ff: 1a:dc:37:f6:24:ce:62:a7:eb:58:32:3e:5a:c4:f6: 63:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:39:93:FA:78:AE:5E:79:16:06:21:B1:53:57:ED:3F:91:D9:FB:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/af53e0e2-15b1-3e87-b127-7e31d6281a11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 141.140.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:93:ac:2a:59:c9:19:44:e2:41:fb:c3:b4:ae:35:42:f9:53: 65:57:47:c5:9e:23:ed:df:29:9c:91:6a:8c:d8:c3:4a:46:bd: b5:ec:02:c2:24:98:f7:6b:27:54:f2:99:b2:b5:c4:5e:df:a3: 07:98:51:12:2b:3e:c9:56:24:5a:79:0a:c1:00:07:f6:0c:ba: 18:5f:b2:f1:a0:1a:91:70:c1:ff:0d:2a:6c:d0:e8:97:44:e6: 91:44:de:9f:ce:b3:2a:5c:5a:5c:dd:8d:05:a1:51:16:5d:e6: 53:05:8a:13:54:15:d2:3c:65:31:eb:a9:7c:44:17:ac:ea:a7: c0:59:c0:53:65:7b:4e:e4:34:78:4c:d2:62:a0:b7:f7:de:dc: f6:29:bf:2a:45:60:e8:2c:8e:fb:88:6e:04:6f:c3:fc:35:42: 15:97:a1:6e:a0:53:9f:f2:83:4b:6a:43:60:c4:be:d5:4d:c6: ea:86:3f:40:11:8c:aa:6e:ff:6a:e7:3b:38:fe:35:7e:95:b1: 2a:c6:67:2a:e0:21:b3:2c:c4:8f:b8:c5:70:f8:e5:10:b3:40: 20:4f:0c:b8:9f:36:47:b0:84:98:4a:9b:77:1a:47:0b:e7:bd: d4:ac:15:6c:4e:11:ba:26:1f:4b:86:33:d3:70:2e:c7:9c:19: a5:1d:18:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVeXaTlwhpUwlPGUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI0MDMyOTEzMDAzN1oXDTI0MDYyNzEzMDAzN1owLzEtMCsGA1UEAxMk MTU4NTk2YTEtODVlMS00NzMxLWI4MGEtNmQ1MWRjMmFiZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfIUsPpjer/okpkw2nfPu6oS33shDTQhoS2Z VNQM4t4h0rPBwohqDwLtoKfFxqIe8ruDcPVtO6KSoz7guLrmf5X9Mg6DuIba264Q vwymkVFYVr4Oi3/wysBQK0TDpztaE3cPsbvh7mEcY5tkjTW1CZ6GOhiJm0sBvMtd QO0mWX1TTIQGzezDVD2CLwecbFtJvjg/7jgO4DVsp3cxprXj6/GP7LMp2sYF7I4X Ew7cohAvNe+MwsFbt/1w1+6NuT/ESMaiocWNQD4MHj0F6zGVJCFjfZis8GQelN7J +kMWWFquFvGy5PN9SCM7pcQgBv8a3Df2JM5ip+tYMj5axPZjSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo5k/p4rl55FgYhsVNX7T+R2fuHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvYWY1M2UwZTItMTViMS0z ZTg3LWIxMjctN2UzMWQ2MjgxYTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjYwcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKTrCpZyRlE4kH7w7SuNUL5U2VXR8WeI+3fKZyRaozYw0pGvbXsAsIk mPdrJ1TymbK1xF7foweYURIrPslWJFp5CsEAB/YMuhhfsvGgGpFwwf8NKmzQ6JdE 5pFE3p/OsypcWlzdjQWhURZd5lMFihNUFdI8ZTHrqXxEF6zqp8BZwFNle07kNHhM 0mKgt/fe3PYpvypFYOgsjvuIbgRvw/w1QhWXoW6gU5/yg0tqQ2DEvtVNxuqGP0AR jKpu/2rnOzj+NX6VsSrGZyrgIbMsxI+4xXD45RCzQCBPDLifNkewhJhKm3caRwvn vdSsFWxOEbomH0uGM9NwLsecGaUdGC8= -----END CERTIFICATE-----Generated at Thu May 2 22:30:40 2024 by rpki-client on console-ams.rpki-client.org