$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/3125937d-10bf-347b-bf28-785512b3e771.roa File: 3125937d-10bf-347b-bf28-785512b3e771.roa (raw, json) Hash identifier: z8sPhFmGWkkBmbTBaIvQ1GK8zwwXFejH5kfV+NASy1k= Subject key identifier: 5C:6F:ED:FE:53:D4:43:0D:2E:3E:D0:F7:1A:9D:E8:90:74:0A:2B:5C Certificate issuer: /CN=a07401de-4b0a-4532-ac08-dba8b0588c48 Certificate serial: 010D0C9F43285845CE090E5B36EA7B99ADCAE700 Authority key identifier: 2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/3125937d-10bf-347b-bf28-785512b3e771.roa Signing time: Wed 08 May 2024 13:00:34 +0000 ROA not before: Wed 08 May 2024 13:00:34 +0000 ROA not after: Tue 06 Aug 2024 13:00:34 +0000 asID: 17 IP address blocks: 128.10.0.0/16 maxlen: 24 128.46.0.0/16 maxlen: 24 192.5.40.0/24 maxlen: 24 192.12.63.0/24 maxlen: 24 192.5.48.0/24 maxlen: 24 192.31.0.0/24 maxlen: 24 128.210.0.0/16 maxlen: 24 128.211.0.0/16 maxlen: 24 192.5.91.0/24 maxlen: 24 192.5.101.0/24 maxlen: 24 192.5.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ce:09:0e:5b:36:ea:7b:99:ad:ca:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a07401de-4b0a-4532-ac08-dba8b0588c48 Validity Not Before: May 8 13:00:34 2024 GMT Not After : Aug 6 13:00:34 2024 GMT Subject: CN=a9507dfd-9b19-40bc-a6b7-a93af42b776d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b6:31:b3:eb:2b:b4:0c:6c:af:f6:8d:64:88: d3:48:12:fc:3d:47:17:b9:9c:75:c4:5a:cd:77:3e: d2:2d:1e:1a:1c:84:98:bd:74:6a:9b:35:3f:9e:ed: 19:81:b5:e7:95:1d:65:b0:33:63:14:d9:bd:4d:4d: e0:6c:3f:e7:31:09:d3:8d:c2:ab:be:51:c0:55:64: 5d:06:a9:5a:53:19:78:b9:99:61:4d:60:8f:8a:52: 24:35:47:52:a0:f3:94:64:fe:13:d2:22:b0:db:14: 3a:02:a6:c4:3d:7b:76:69:01:12:9e:5c:5d:fe:f9: b5:5e:27:14:61:4e:d4:cf:5b:b8:79:e5:d4:61:5b: 5f:c9:a3:43:d0:60:c5:0b:f8:17:c4:45:c8:25:99: 2c:a4:77:a2:97:b3:7f:bb:3e:c8:63:1d:59:8a:2a: 66:5c:18:93:98:a7:33:33:bc:9b:2c:95:b7:37:fe: 96:28:3d:fe:d3:c7:56:a8:e5:89:5f:3a:2c:3a:ac: e5:c1:e5:00:1d:5f:46:16:cf:fa:76:8c:0c:d5:04: 03:70:63:f5:88:71:2a:ae:19:ea:ae:bd:77:d9:c8: f7:cd:1e:10:62:93:6b:5c:bd:cc:22:97:8d:dc:96: 7f:9d:ad:a8:0e:cb:36:e3:88:47:f4:07:1b:82:3b: 85:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6F:ED:FE:53:D4:43:0D:2E:3E:D0:F7:1A:9D:E8:90:74:0A:2B:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/3125937d-10bf-347b-bf28-785512b3e771.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl X509v3 Authority Key Identifier: keyid:2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer sbgp-ipAddrBlock: critical IPv4: 128.10.0.0/16 128.46.0.0/16 128.210.0.0/15 192.5.40.0/24 192.5.48.0/24 192.5.91.0/24 192.5.101.0-192.5.102.255 192.12.63.0/24 192.31.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:95:a7:6d:11:44:4b:7a:4d:5c:ed:9d:28:e5:da:71:d0:1a: af:d0:bf:8d:66:7d:94:1b:dd:a5:20:13:3f:5d:81:62:43:4e: 07:70:73:27:d4:51:f9:6e:41:f9:d7:72:30:f3:a7:ea:39:69: 6c:50:36:4a:4b:2b:09:66:6e:10:c8:74:3f:ba:5b:ee:da:54: 2a:87:13:49:28:e2:c7:c2:2f:99:b4:6d:92:22:43:94:48:ef: 3d:6a:96:88:e7:0f:3a:52:66:4d:c7:18:5e:31:f9:da:a1:c5: 2b:35:9b:4e:e2:da:a8:61:c4:17:e8:49:59:b3:d7:90:fc:d5: 9c:a4:a1:92:2f:a7:c4:73:83:fc:e9:1f:4d:52:2e:3f:02:20: 26:52:03:21:1d:32:dc:e5:40:37:55:9c:be:8d:a0:34:01:54: 07:14:90:de:60:c9:43:3a:9d:c1:d7:54:0b:fd:d6:37:f4:33: d2:e4:e0:8d:5d:58:36:2c:28:7e:c9:88:ee:4b:29:eb:d6:38: af:96:9f:bc:0b:5c:cd:e0:5b:9c:bf:32:51:dc:84:13:1c:b7: d6:84:99:a2:43:05:62:f2:02:57:30:3c:22:9b:3b:91:9f:4e: a6:ec:2b:12:93:f0:8d:1b:79:46:02:57:49:ad:ab:6d:71:e7: 55:0f:c8:e4 -----BEGIN CERTIFICATE----- MIIGeDCCBWCgAwIBAgIUAQ0Mn0MoWEXOCQ5bNup7ma3K5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA3NDAxZGUtNGIwYS00NTMyLWFjMDgtZGJhOGIwNTg4 YzQ4MB4XDTI0MDUwODEzMDAzNFoXDTI0MDgwNjEzMDAzNFowLzEtMCsGA1UEAxMk YTk1MDdkZmQtOWIxOS00MGJjLWE2YjctYTkzYWY0MmI3NzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLYxs+srtAxsr/aNZIjTSBL8PUcXuZx1xFrN dz7SLR4aHISYvXRqmzU/nu0ZgbXnlR1lsDNjFNm9TU3gbD/nMQnTjcKrvlHAVWRd BqlaUxl4uZlhTWCPilIkNUdSoPOUZP4T0iKw2xQ6AqbEPXt2aQESnlxd/vm1XicU YU7Uz1u4eeXUYVtfyaND0GDFC/gXxEXIJZkspHeil7N/uz7IYx1ZiipmXBiTmKcz M7ybLJW3N/6WKD3+08dWqOWJXzosOqzlweUAHV9GFs/6dowM1QQDcGP1iHEqrhnq rr132cj3zR4QYpNrXL3MIpeN3JZ/na2oDss244hH9AcbgjuFCwIDAQABo4IDijCC A4YwHQYDVR0OBBYEFFxv7f5T1EMNLj7Q9xqd6JB0CitcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMDc0 MDFkZS00YjBhLTQ1MzItYWMwOC1kYmE4YjA1ODhjNDgvMzEyNTkzN2QtMTBiZi0z NDdiLWJmMjgtNzg1NTEyYjNlNzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTA3NDAxZGUtNGIwYS00NTMyLWFj MDgtZGJhOGIwNTg4YzQ4L2EwNzQwMWRlLTRiMGEtNDUzMi1hYzA4LWRiYThiMDU4 OGM0OC5jcmwwHwYDVR0jBBgwFoAULvOxC87kwzSIVBcirGl2pVE0A4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMDc0MDFkZS00YjBhLTQ1MzItYWMwOC1kYmE4 YjA1ODhjNDguY2VyMFQGCCsGAQUFBwEHAQH/BEUwQzBBBAIAATA7AwMAgAoDAwCA LgMDAYDSAwQAwAUoAwQAwAUwAwQAwAVbMAwDBADABWUDBADABWYDBADADD8DBADA HwAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAgZWnbRFES3pNXO2dKOXacdAar9C/jWZ9lBvdpSATP12BYkNO B3BzJ9RR+W5B+ddyMPOn6jlpbFA2SksrCWZuEMh0P7pb7tpUKocTSSjix8IvmbRt kiJDlEjvPWqWiOcPOlJmTccYXjH52qHFKzWbTuLaqGHEF+hJWbPXkPzVnKShki+n xHOD/OkfTVIuPwIgJlIDIR0y3OVAN1Wcvo2gNAFUBxSQ3mDJQzqdwddUC/3WN/Qz 0uTgjV1YNiwofsmI7ksp69Y4r5afvAtczeBbnL8yUdyEExy31oSZokMFYvICVzA8 Ips7kZ9OpuwrEpPwjRt5RgJXSa2rbXHnVQ/I5A== -----END CERTIFICATE-----Generated at Wed May 15 17:50:33 2024 by rpki-client on console-fra.rpki-client.org