$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3e0869f2-979b-3a34-9bb1-dbf0b47ac488.roa File: 3e0869f2-979b-3a34-9bb1-dbf0b47ac488.roa (raw, json) Hash identifier: E5+Z8qZuS48dsYQHBqvBFWVwnRqujcAm5Cll1+uEmuI= Subject key identifier: BA:FF:C0:05:C0:B1:FF:9A:27:4A:A9:FA:1C:2A:E5:1D:EC:38:75:A8 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584531C35E87A5C57345528F5940 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3e0869f2-979b-3a34-9bb1-dbf0b47ac488.roa Signing time: Wed 13 Mar 2024 13:34:20 +0000 ROA not before: Wed 13 Mar 2024 13:34:20 +0000 ROA not after: Tue 11 Jun 2024 13:34:20 +0000 asID: 3738 IP address blocks: 192.250.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:31:c3:5e:87:a5:c5:73:45:52:8f:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Mar 13 13:34:20 2024 GMT Not After : Jun 11 13:34:20 2024 GMT Subject: CN=03f7f312-e903-46ec-b6d7-d4049a43706a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:23:a4:0c:5c:a9:c9:9d:34:ae:f3:5b:c0:cb: fd:9a:1c:97:9e:e0:f6:99:95:2d:3e:2d:25:36:a6: f9:d1:78:e2:5c:40:32:0c:45:35:d7:33:88:b9:49: c8:88:dc:24:f8:7a:1d:ff:61:70:e0:08:cc:45:2d: 73:20:e2:5b:dc:15:9a:e5:21:20:58:ac:7d:05:dc: 13:51:bf:b8:2a:fb:75:1b:50:46:3a:5f:80:1d:e6: 27:f9:61:54:a3:1b:7f:05:44:02:17:39:24:f0:8d: 56:2e:c5:41:60:fd:61:70:1b:61:41:0d:24:e3:22: 75:c7:e1:53:bd:ec:be:46:ca:9b:01:a8:ff:cf:77: 68:86:c2:1a:8c:e0:5b:9d:67:1e:57:b6:39:67:ab: 41:a0:99:4f:1e:f6:a4:42:a3:2d:ee:6c:7a:2b:dc: 79:d6:b1:09:26:81:6c:3e:bb:11:ba:32:1f:e7:e7: 09:44:e4:9a:4c:dc:41:92:92:41:d3:3f:98:3c:a2: bd:f4:9e:c8:ed:90:0d:77:61:72:08:4b:d1:14:0a: 8f:b0:64:ed:b8:f6:e2:5b:5d:ad:e6:16:c7:a1:fe: 34:da:66:b7:db:bd:93:f9:25:6b:3b:d9:a7:5d:4d: 5e:c1:56:4a:13:1d:8b:c0:94:e9:8f:cb:96:b4:bd: a1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FF:C0:05:C0:B1:FF:9A:27:4A:A9:FA:1C:2A:E5:1D:EC:38:75:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3e0869f2-979b-3a34-9bb1-dbf0b47ac488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:22:63:2c:77:ac:92:d2:b7:5d:f9:bf:0a:d9:b9:a4:d4:e1: 01:db:86:d9:e1:01:bf:b9:a9:cb:2d:46:85:e4:f1:19:10:16: 58:11:d0:58:55:ec:87:06:52:29:a2:78:b0:97:29:15:ec:da: 1b:26:94:bf:3b:cd:7e:10:df:88:9e:37:33:25:b1:f3:39:54: e5:60:25:ed:31:39:51:5d:a7:6b:be:77:dc:da:74:32:89:1d: 94:bc:ca:af:8c:7a:a2:bf:d3:e6:2e:9a:e9:a4:11:40:6f:83: 38:09:fa:aa:93:5d:69:92:bd:ea:79:d5:48:6f:fe:cf:1a:f3: 12:fa:bd:08:6d:fc:78:28:3d:1e:ba:0d:10:1b:59:7c:76:c0: 64:5d:b5:ad:03:6d:1b:c0:ea:0e:da:f8:c6:66:03:f2:c8:38: 70:2d:91:ee:88:d9:42:01:2c:24:ca:c7:06:84:94:aa:b2:02: bb:86:ae:8d:76:ad:eb:43:1d:34:d2:69:b4:21:9c:a2:af:97: 53:68:aa:23:93:d9:ed:f3:0f:5b:31:e5:54:b1:d5:9b:d2:64: ba:e6:b6:a9:40:a9:eb:7a:de:aa:87:29:92:6a:7c:74:ad:0c: 8f:3c:00:67:c5:3e:c5:b3:28:9f:c8:3f:29:b0:11:cb:27:73: 84:8b:e3:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUxw16HpcVzRVKPWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI0MDMxMzEzMzQyMFoXDTI0MDYxMTEzMzQyMFowLzEtMCsGA1UEAxMk MDNmN2YzMTItZTkwMy00NmVjLWI2ZDctZDQwNDlhNDM3MDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSOkDFypyZ00rvNbwMv9mhyXnuD2mZUtPi0l Nqb50XjiXEAyDEU11zOIuUnIiNwk+Hod/2Fw4AjMRS1zIOJb3BWa5SEgWKx9BdwT Ub+4Kvt1G1BGOl+AHeYn+WFUoxt/BUQCFzkk8I1WLsVBYP1hcBthQQ0k4yJ1x+FT vey+RsqbAaj/z3dohsIajOBbnWceV7Y5Z6tBoJlPHvakQqMt7mx6K9x51rEJJoFs PrsRujIf5+cJROSaTNxBkpJB0z+YPKK99J7I7ZANd2FyCEvRFAqPsGTtuPbiW12t 5hbHof402ma3272T+SVrO9mnXU1ewVZKEx2LwJTpj8uWtL2hKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLr/wAXAsf+aJ0qp+hwq5R3sOHWoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvM2UwODY5ZjItOTc5Yi0z YTM0LTliYjEtZGJmMGI0N2FjNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMiYyx3rJLSt135vwrZuaTU4QHbhtnhAb+5qcstRoXk8RkQFlgR0FhV 7IcGUimieLCXKRXs2hsmlL87zX4Q34ieNzMlsfM5VOVgJe0xOVFdp2u+d9zadDKJ HZS8yq+MeqK/0+YumumkEUBvgzgJ+qqTXWmSvep51Uhv/s8a8xL6vQht/HgoPR66 DRAbWXx2wGRdta0DbRvA6g7a+MZmA/LIOHAtke6I2UIBLCTKxwaElKqyAruGro12 retDHTTSabQhnKKvl1NoqiOT2e3zD1sx5VSx1ZvSZLrmtqlAqet63qqHKZJqfHSt DI88AGfFPsWzKJ/IPymwEcsnc4SL44c= -----END CERTIFICATE-----Generated at Wed May 15 15:09:02 2024 by rpki-client on console-fra.rpki-client.org