$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/28735348-6cda-374a-978a-a2aabf659d86.roa File: 28735348-6cda-374a-978a-a2aabf659d86.roa (raw, json) Hash identifier: nybHyTnK6qdGtnihuT0dZtwyCm7f7m17BY+cC1Dja4w= Subject key identifier: 13:CF:5E:CE:E2:06:3C:71:1B:9C:51:15:FC:5A:C0:C3:D5:E0:40:F0 Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F43285845B3835F3348BE65E66E310B00 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/28735348-6cda-374a-978a-a2aabf659d86.roa Signing time: Mon 29 Apr 2024 01:00:25 +0000 ROA not before: Mon 29 Apr 2024 01:00:25 +0000 ROA not after: Sun 28 Jul 2024 01:00:25 +0000 asID: 8075 IP address blocks: 138.32.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b3:83:5f:33:48:be:65:e6:6e:31:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Apr 29 01:00:25 2024 GMT Not After : Jul 28 01:00:25 2024 GMT Subject: CN=c824d9e6-82b9-4dd9-ad1c-9bfbb8b42aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fc:aa:4b:d0:44:2a:c7:b1:41:0f:4f:b6:57: 37:df:bc:26:06:d9:2f:fa:da:43:bb:db:59:fb:3a: 96:eb:ce:2d:c8:47:25:32:e8:4a:f3:c9:b2:e7:69: 3d:6b:bf:8a:10:80:b7:84:82:36:a4:d8:6d:9e:8c: 4e:e6:ec:d1:41:64:79:cd:bc:f9:ce:ff:08:f8:07: 39:b0:d7:ed:43:8f:3e:10:c4:f8:bc:14:dd:00:60: 1b:02:21:6f:5c:58:ce:8c:34:0f:e3:12:17:dd:fa: 8a:e6:0e:a5:20:ab:63:6f:d3:2d:e0:9d:a1:7d:de: 87:b2:29:75:93:8a:03:55:c8:ed:43:c2:5a:d3:9a: 3a:d9:5e:a1:62:02:73:95:6e:a7:b6:fb:b3:30:b5: 8e:4b:0b:5e:96:e2:16:eb:77:91:8c:07:f0:1a:0d: a4:eb:1e:d7:4d:6b:e8:06:c4:a1:6c:80:85:94:e2: 1d:18:1a:f5:c8:b4:88:b3:98:dc:63:02:9c:1d:d6: a8:93:a2:3d:89:ae:7e:65:fa:a6:48:56:26:b2:91: 87:c8:35:09:68:49:4d:e0:8d:75:5f:1f:1b:33:25: 17:04:58:f1:78:27:73:59:66:e1:27:28:c7:eb:0f: a6:68:01:6b:7b:62:8c:7e:55:0f:7c:85:ff:69:7e: 1d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:CF:5E:CE:E2:06:3C:71:1B:9C:51:15:FC:5A:C0:C3:D5:E0:40:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/28735348-6cda-374a-978a-a2aabf659d86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:47:b3:03:7c:07:ac:88:83:01:32:05:4f:ec:09:1b:a0:35: f4:3e:b9:d7:c7:c1:be:0e:c9:7d:7b:20:d6:9d:fc:02:ad:17: 71:d7:6f:dc:16:72:32:09:f2:0d:77:41:cc:f6:ef:c9:36:0e: e0:35:03:c0:c4:59:63:51:25:36:14:e6:4c:14:5a:97:5d:d7: 3f:4d:29:f5:bf:8c:b8:62:27:1f:df:ec:e4:73:ad:4f:ee:1b: ee:77:0e:ce:68:4a:66:92:d5:fe:75:80:33:52:66:f1:81:fe: 14:71:99:53:f2:8f:41:2e:95:b2:24:7e:04:c4:ae:c6:e1:0e: 7c:d7:f6:96:b1:cf:31:66:bc:4e:43:a4:1d:ec:f7:c4:db:b8: 54:8d:1a:d4:21:50:70:ef:20:1c:33:bd:e8:8c:38:13:21:95: 9d:c4:68:ee:64:af:1b:24:67:fb:af:63:8e:79:53:d9:1c:bc: 90:ac:a8:33:23:ca:7f:35:ac:a3:25:07:42:22:1e:da:56:55: 6d:b1:eb:0c:0c:8f:df:92:62:bf:c2:2b:94:12:34:95:32:b5: fe:e5:58:cc:3b:78:9c:67:79:36:f5:d3:3e:4e:5c:8a:83:2a: b5:ad:37:5f:7b:5c:43:ff:a4:0e:64:c9:e7:20:73:8c:2c:15: aa:0a:9b:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWzg18zSL5l5m4xCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI0MDQyOTAxMDAyNVoXDTI0MDcyODAxMDAyNVowLzEtMCsGA1UEAxMk YzgyNGQ5ZTYtODJiOS00ZGQ5LWFkMWMtOWJmYmI4YjQyYWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvyqS9BEKsexQQ9Ptlc337wmBtkv+tpDu9tZ +zqW684tyEclMuhK88my52k9a7+KEIC3hII2pNhtnoxO5uzRQWR5zbz5zv8I+Ac5 sNftQ48+EMT4vBTdAGAbAiFvXFjOjDQP4xIX3fqK5g6lIKtjb9Mt4J2hfd6Hsil1 k4oDVcjtQ8Ja05o62V6hYgJzlW6ntvuzMLWOSwteluIW63eRjAfwGg2k6x7XTWvo BsShbICFlOIdGBr1yLSIs5jcYwKcHdaok6I9ia5+ZfqmSFYmspGHyDUJaElN4I11 Xx8bMyUXBFjxeCdzWWbhJyjH6w+maAFre2KMflUPfIX/aX4dHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPPXs7iBjxxG5xRFfxawMPV4EDwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvMjg3MzUzNDgtNmNkYS0z NzRhLTk3OGEtYTJhYWJmNjU5ZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiiBtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5HswN8B6yIgwEyBU/sCRugNfQ+udfHwb4OyX17INad/AKtF3HXb9wW cjIJ8g13Qcz278k2DuA1A8DEWWNRJTYU5kwUWpdd1z9NKfW/jLhiJx/f7ORzrU/u G+53Ds5oSmaS1f51gDNSZvGB/hRxmVPyj0EulbIkfgTErsbhDnzX9paxzzFmvE5D pB3s98TbuFSNGtQhUHDvIBwzveiMOBMhlZ3EaO5krxskZ/uvY455U9kcvJCsqDMj yn81rKMlB0IiHtpWVW2x6wwMj9+SYr/CK5QSNJUytf7lWMw7eJxneTb10z5OXIqD KrWtN197XEP/pA5kyecgc4wsFaoKm2E= -----END CERTIFICATE-----Generated at Wed May 15 15:09:12 2024 by rpki-client on console-fra.rpki-client.org