$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa File: 4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa (raw, json) Hash identifier: AvdrUH0mMfpFXcmVnJKJ/Ds6YkauC8uRP6wLdx378CM= Subject key identifier: E9:A8:5C:1C:5A:63:0E:FB:99:BB:E8:AF:39:9E:0D:B5:9F:0F:0B:A8 Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584574B31A2A2F87E8A6C10C5A00 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa Signing time: Sat 06 Apr 2024 13:00:35 +0000 ROA not before: Sat 06 Apr 2024 13:00:35 +0000 ROA not after: Fri 05 Jul 2024 13:00:35 +0000 asID: 25649 IP address blocks: 208.86.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:74:b3:1a:2a:2f:87:e8:a6:c1:0c:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Apr 6 13:00:35 2024 GMT Not After : Jul 5 13:00:35 2024 GMT Subject: CN=7320d65e-6b27-4e01-b169-5a40efaa7bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c9:33:8b:19:69:37:3e:92:d6:50:b0:39:8a: 27:d2:d7:93:a3:7e:78:04:27:e8:7a:17:87:15:de: de:1e:01:ba:68:84:f1:86:00:6e:83:02:82:cb:2f: cf:56:eb:02:ff:7a:67:25:f1:66:48:94:c8:41:4c: da:71:34:a9:d4:d5:18:4b:de:22:2c:8a:5b:9a:b2: e5:ed:22:c6:14:be:3f:b8:74:9d:43:58:a8:a1:9f: f8:88:3e:27:35:99:46:5f:16:49:ec:e6:e6:50:0f: f4:3d:7a:bc:bb:0a:82:6f:cd:df:5f:0e:5b:6f:46: 6d:f4:86:6d:d4:e5:7d:e0:f2:f9:68:ca:b9:a6:5d: 22:82:58:eb:16:e5:13:1e:f4:30:62:89:fb:6c:9a: b4:ff:7d:92:17:c9:e7:d5:97:c2:63:91:56:96:e1: a8:0c:af:18:b4:7f:a1:5e:14:23:f4:ec:f7:41:45: a2:60:cc:96:9c:64:05:c3:96:91:88:26:d8:61:e0: c5:7c:55:c9:e6:23:46:96:db:22:8b:b1:51:68:6a: 4d:49:3b:56:f3:b1:65:0a:15:6f:c8:c5:f7:e7:4f: 5a:81:65:dd:eb:64:40:7c:db:21:45:fa:58:ee:ad: f2:01:55:74:f4:3b:c0:84:af:61:04:05:6f:ef:4f: 5e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A8:5C:1C:5A:63:0E:FB:99:BB:E8:AF:39:9E:0D:B5:9F:0F:0B:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 208.86.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:af:bf:4b:5d:ea:82:0f:9f:51:67:00:27:30:ab:44:fa:5c: c6:d2:89:41:68:01:c3:a1:b5:b5:70:75:9a:a7:a4:95:a8:dd: 74:bb:7f:b4:fd:17:aa:b1:02:72:82:c2:6b:31:a9:fe:6d:b8: 39:85:3c:f4:26:a9:4c:8f:88:0d:da:5e:c6:f8:cc:e9:58:87: 60:7d:b9:81:c6:e9:d9:71:04:14:a6:35:23:75:9a:c2:ce:f8: a8:e2:9e:3f:92:86:62:2c:9c:50:f0:6b:23:99:87:4e:22:b2: ed:55:31:02:cb:55:74:d7:62:ab:51:28:5e:5c:a7:20:e3:7e: d8:95:eb:77:06:ad:4f:7f:e3:ce:8e:45:69:44:2b:c0:84:39: d5:8a:92:db:58:cb:ea:36:a9:22:7a:3b:15:6c:6b:de:3b:8f: 9c:1a:a1:de:5e:f9:c2:fa:1d:f8:9c:f3:ef:e6:ad:ca:2d:cd: 08:77:e1:ef:eb:2f:22:f0:1d:22:69:28:78:67:fc:0c:c1:20: 67:f5:ec:12:9a:82:71:6f:49:7d:93:b0:bc:96:b2:f7:83:83: 5c:60:cd:0c:be:ec:c3:72:8a:13:29:b6:26:0b:1f:c8:7b:fa: 4c:93:cf:ce:68:57:32:ac:9c:f3:ff:9d:b3:0b:85:3b:e8:49: d6:93:90:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV0sxoqL4fopsEMWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI0MDQwNjEzMDAzNVoXDTI0MDcwNTEzMDAzNVowLzEtMCsGA1UEAxMk NzMyMGQ2NWUtNmIyNy00ZTAxLWIxNjktNWE0MGVmYWE3YmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjckzixlpNz6S1lCwOYon0teTo354BCfoeheH Fd7eHgG6aITxhgBugwKCyy/PVusC/3pnJfFmSJTIQUzacTSp1NUYS94iLIpbmrLl 7SLGFL4/uHSdQ1iooZ/4iD4nNZlGXxZJ7ObmUA/0PXq8uwqCb83fXw5bb0Zt9IZt 1OV94PL5aMq5pl0igljrFuUTHvQwYon7bJq0/32SF8nn1ZfCY5FWluGoDK8YtH+h XhQj9Oz3QUWiYMyWnGQFw5aRiCbYYeDFfFXJ5iNGltsii7FRaGpNSTtW87FlChVv yMX3509agWXd62RAfNshRfpY7q3yAVV09DvAhK9hBAVv709eqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmoXBxaYw77mbvorzmeDbWfDwuoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvNGRmYjJlYTctMmMxNC0z MWFkLTk4ZGEtMGFlNzY0MGUyZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FYsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKvv0td6oIPn1FnACcwq0T6XMbSiUFoAcOhtbVwdZqnpJWo3XS7f7T9 F6qxAnKCwmsxqf5tuDmFPPQmqUyPiA3aXsb4zOlYh2B9uYHG6dlxBBSmNSN1msLO +Kjinj+ShmIsnFDwayOZh04isu1VMQLLVXTXYqtRKF5cpyDjftiV63cGrU9/486O RWlEK8CEOdWKkttYy+o2qSJ6OxVsa947j5waod5e+cL6Hfic8+/mrcotzQh34e/r LyLwHSJpKHhn/AzBIGf17BKagnFvSX2TsLyWsveDg1xgzQy+7MNyihMptiYLH8h7 +kyTz85oVzKsnPP/nbMLhTvoSdaTkHg= -----END CERTIFICATE-----Generated at Thu May 23 04:28:54 2024 by rpki-client on console-fra.rpki-client.org