$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e87e11c-8c61-3665-888b-beee4180b6af.roa File: 3e87e11c-8c61-3665-888b-beee4180b6af.roa (raw, json) Hash identifier: unER2WzJ/Jb6GSE7xYFPRIijRBYjR9G8YUWYAf0jIvg= Subject key identifier: 67:A5:75:01:44:73:41:5B:A0:F1:88:87:57:08:F4:BE:C7:47:7B:53 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858451FAAE97D8D31B133258D5200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e87e11c-8c61-3665-888b-beee4180b6af.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 63949 IP address blocks: 139.144.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:aa:e9:7d:8d:31:b1:33:25:8d:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=ed8f8c8e-a74d-4542-bbad-de6204857e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:12:07:d7:9f:9c:a8:8e:01:a3:74:c9:a8:24: b7:5a:cf:61:86:29:64:b4:43:27:42:ec:f9:20:65: 8d:de:22:99:5c:5a:e9:80:39:66:8f:f7:7b:4c:6b: 04:81:90:aa:e6:08:24:c9:e3:0e:c7:e8:7e:25:fa: c8:25:f6:14:ec:5e:da:9e:75:c2:6f:31:0d:50:3d: 73:cf:fa:b2:dd:ce:04:d2:a0:e1:34:3d:ff:0c:63: d2:27:7a:8e:05:b0:16:02:9f:6f:d9:5a:e4:a9:1c: 09:20:9e:c5:64:15:84:ea:63:21:c6:74:35:1f:38: d2:24:9f:6d:19:ee:c3:a2:be:5b:0f:2e:90:28:76: db:84:3f:c1:77:f7:4d:e1:8d:6d:53:4c:98:ff:b0: 11:d3:e6:5d:03:9d:8e:67:d6:d7:31:64:71:4c:47: 81:80:d0:c4:81:07:c6:ae:52:a6:c1:ee:0c:ec:e7: 96:2c:cc:f1:59:ba:b3:5a:8f:e8:2f:05:33:5f:a5: a6:25:d3:04:44:be:67:aa:dd:3a:e0:b2:cb:c9:0b: 1c:9e:2b:66:4f:9c:7f:19:ce:cc:1e:eb:6a:3c:85: ba:6c:52:8f:02:80:cf:cc:b4:1c:b1:db:91:2b:3a: fb:08:f9:9b:9a:73:46:48:11:58:e6:f5:ff:a7:58: 96:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A5:75:01:44:73:41:5B:A0:F1:88:87:57:08:F4:BE:C7:47:7B:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e87e11c-8c61-3665-888b-beee4180b6af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 139.144.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:fc:48:1d:69:15:3f:37:98:8b:3d:fa:a7:f1:f8:20:16:61: c6:56:95:75:93:0f:31:d1:90:87:d8:69:55:dc:cc:ae:c8:a2: 35:8a:c1:a2:c5:a8:28:64:42:ac:32:fc:96:61:94:ac:d0:0c: ab:5a:24:dd:b3:ea:6c:73:82:de:85:c4:74:50:a4:e3:97:9b: 3f:8b:cf:a0:e8:01:0b:e0:2b:a2:1b:43:e7:72:77:63:36:9f: 9f:c7:6c:c2:98:47:f5:b9:02:65:15:5d:8f:1f:8a:ab:37:64: 44:61:e9:b2:38:53:b6:87:47:ae:19:be:37:9b:74:fd:12:06: a0:13:36:99:ef:b7:56:6c:09:4d:5a:b0:df:cf:81:14:7f:ba: ac:26:c3:d6:68:a1:7a:3e:65:3d:00:d4:cc:e0:2f:08:d2:12: 90:23:bb:55:42:fc:a7:5c:f3:36:ca:3a:fc:66:05:80:95:5d: 77:d1:4d:c8:45:7f:f2:ef:a1:b5:dc:dd:c6:34:26:55:17:66: 2f:87:90:cd:e0:9c:6a:1f:1a:f2:7c:c0:4b:78:79:c5:8f:ea: 85:cf:f2:fc:59:1f:bd:75:1d:87:c6:05:99:48:b7:3f:37:3e: bc:9a:fd:f9:8c:84:6e:11:47:9b:5f:f6:ca:dd:43:37:82:78: 58:61:cb:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfqul9jTGxMyWNUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk ZWQ4ZjhjOGUtYTc0ZC00NTQyLWJiYWQtZGU2MjA0ODU3ZTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRIH15+cqI4Bo3TJqCS3Ws9hhilktEMnQuz5 IGWN3iKZXFrpgDlmj/d7TGsEgZCq5ggkyeMOx+h+JfrIJfYU7F7annXCbzENUD1z z/qy3c4E0qDhND3/DGPSJ3qOBbAWAp9v2VrkqRwJIJ7FZBWE6mMhxnQ1HzjSJJ9t Ge7Dor5bDy6QKHbbhD/Bd/dN4Y1tU0yY/7AR0+ZdA52OZ9bXMWRxTEeBgNDEgQfG rlKmwe4M7OeWLMzxWbqzWo/oLwUzX6WmJdMERL5nqt064LLLyQscnitmT5x/Gc7M HutqPIW6bFKPAoDPzLQcsduRKzr7CPmbmnNGSBFY5vX/p1iWYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeldQFEc0FboPGIh1cI9L7HR3tTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2U4N2UxMWMtOGM2MS0z NjY1LTg4OGItYmVlZTQxODBiNmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEi5BAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABv8SB1pFT83mIs9+qfx+CAWYcZWlXWTDzHRkIfYaVXczK7IojWKwaLF qChkQqwy/JZhlKzQDKtaJN2z6mxzgt6FxHRQpOOXmz+Lz6DoAQvgK6IbQ+dyd2M2 n5/HbMKYR/W5AmUVXY8fiqs3ZERh6bI4U7aHR64ZvjebdP0SBqATNpnvt1ZsCU1a sN/PgRR/uqwmw9ZooXo+ZT0A1MzgLwjSEpAju1VC/Kdc8zbKOvxmBYCVXXfRTchF f/LvobXc3cY0JlUXZi+HkM3gnGofGvJ8wEt4ecWP6oXP8vxZH711HYfGBZlItz83 Prya/fmMhG4RR5tf9srdQzeCeFhhyxk= -----END CERTIFICATE-----Generated at Fri May 17 20:57:58 2024 by rpki-client on console-fra.rpki-client.org