$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4aab42ce-78dc-3da2-ba07-030a87b4dad2.roa File: 4aab42ce-78dc-3da2-ba07-030a87b4dad2.roa (raw, json) Hash identifier: aKgFMv8nWz75xwcNlHf/XN+jCjfNaHD4vQwpmhy+1WY= Subject key identifier: 83:84:45:C8:1A:CE:82:56:CF:F3:2B:60:4B:49:F2:B6:BB:EC:BD:68 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F43285845DBFE5B39CDE70A192B5070C0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4aab42ce-78dc-3da2-ba07-030a87b4dad2.roa Signing time: Mon 13 May 2024 13:00:34 +0000 ROA not before: Mon 13 May 2024 13:00:34 +0000 ROA not after: Sun 11 Aug 2024 13:00:34 +0000 asID: 16509 IP address blocks: 208.95.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:db:fe:5b:39:cd:e7:0a:19:2b:50:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: May 13 13:00:34 2024 GMT Not After : Aug 11 13:00:34 2024 GMT Subject: CN=534dd93a-4f2e-495f-8d7c-7f6d95130fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a2:0d:f5:5a:20:9e:32:23:93:bd:42:76:2d: f8:d6:bc:2a:7f:a3:cf:ab:e7:21:22:f5:51:09:e5: 87:04:dc:24:94:53:a8:e2:88:4b:db:3e:4a:70:15: 5d:db:94:d6:04:e3:e1:de:7e:79:6d:e0:44:ea:a4: 2f:3f:87:61:50:8b:ad:b1:e7:c8:88:06:61:ac:5f: 94:77:55:2f:7e:88:89:53:e7:80:72:97:ad:ce:d7: d2:0d:eb:3c:81:32:e1:a4:9f:bc:fa:62:02:47:ba: 88:a1:b6:d1:ab:3b:81:c5:ee:bc:9c:95:a5:7e:7b: c2:04:49:d1:14:cb:20:1c:a4:02:68:66:11:c6:7e: bd:13:4e:cc:34:c4:97:b0:b6:3b:df:f3:bf:69:14: fa:b5:f7:19:9e:55:d1:86:ed:3b:67:3b:92:58:33: d0:ff:38:7b:24:5f:8a:18:15:3f:4f:a6:64:9a:16: 98:39:24:05:74:b3:37:02:e9:96:c4:dd:53:4a:39: 21:f8:d7:0a:84:5f:eb:80:ce:f0:e2:6d:1f:93:78: a5:78:3b:52:7e:f4:a1:83:c8:3c:2e:ed:c3:12:a3: 70:98:3d:3a:bf:b6:79:1f:41:35:52:2a:f2:59:00: f3:20:02:a8:a2:d2:43:e6:c7:f4:f2:70:d2:08:57: 0f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:84:45:C8:1A:CE:82:56:CF:F3:2B:60:4B:49:F2:B6:BB:EC:BD:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4aab42ce-78dc-3da2-ba07-030a87b4dad2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.95.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:64:5b:57:74:fd:bf:84:1b:7a:54:8a:51:7c:f8:f5:f1:13: a5:6b:40:03:74:f8:12:f3:1a:2f:c2:4c:c2:26:51:c8:bb:e9: 6c:2b:29:75:36:b8:52:7e:fa:aa:2a:8a:15:a0:cf:1f:3e:03: 77:47:23:c6:e0:a2:13:51:f0:87:5c:cd:2e:29:73:ab:52:db: 07:9c:af:13:3f:2c:e8:c1:9e:90:f9:8b:2c:25:91:67:e8:db: 1d:23:58:90:1d:6a:3d:01:50:03:f7:50:f9:75:9d:bd:b1:8e: 60:3f:f1:28:64:d0:20:80:98:e0:79:2a:4c:45:50:12:5a:47: 21:d7:ee:53:73:b4:c5:77:5a:3f:6d:3a:2c:9c:e9:56:d7:ad: 92:15:3e:a3:17:f3:3f:78:dd:b3:9b:28:50:c2:b5:ab:3f:52: ef:9d:11:6f:a8:cd:31:f8:22:83:90:77:89:b5:38:19:c0:28: f4:c3:13:76:ae:07:11:b9:8c:f1:4b:86:00:ce:2c:be:09:12: fc:9d:a4:f5:ce:b9:de:c3:ce:08:0a:f7:2c:12:d8:01:f3:71: 7c:dd:df:e2:25:33:e0:f4:1d:35:1b:22:2b:c6:31:83:ba:08: 87:59:d0:5d:e7:20:1d:8b:e1:c9:78:d0:1a:79:1e:95:bc:4e: bf:48:06:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXb/ls5zecKGStQcMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI0MDUxMzEzMDAzNFoXDTI0MDgxMTEzMDAzNFowLzEtMCsGA1UEAxMk NTM0ZGQ5M2EtNGYyZS00OTVmLThkN2MtN2Y2ZDk1MTMwZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKIN9VognjIjk71Cdi341rwqf6PPq+chIvVR CeWHBNwklFOo4ohL2z5KcBVd25TWBOPh3n55beBE6qQvP4dhUIutsefIiAZhrF+U d1UvfoiJU+eAcpetztfSDes8gTLhpJ+8+mICR7qIobbRqzuBxe68nJWlfnvCBEnR FMsgHKQCaGYRxn69E07MNMSXsLY73/O/aRT6tfcZnlXRhu07ZzuSWDPQ/zh7JF+K GBU/T6ZkmhaYOSQFdLM3AumWxN1TSjkh+NcKhF/rgM7w4m0fk3ileDtSfvShg8g8 Lu3DEqNwmD06v7Z5H0E1UiryWQDzIAKootJD5sf08nDSCFcPOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOERcgazoJWz/MrYEtJ8ra77L1oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNGFhYjQyY2UtNzhkYy0z ZGEyLWJhMDctMDMwYTg3YjRkYWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhkW1d0/b+EG3pUilF8+PXxE6VrQAN0+BLzGi/CTMImUci76WwrKXU2 uFJ++qoqihWgzx8+A3dHI8bgohNR8IdczS4pc6tS2wecrxM/LOjBnpD5iywlkWfo 2x0jWJAdaj0BUAP3UPl1nb2xjmA/8Shk0CCAmOB5KkxFUBJaRyHX7lNztMV3Wj9t Oiyc6VbXrZIVPqMX8z943bObKFDCtas/Uu+dEW+ozTH4IoOQd4m1OBnAKPTDE3au BxG5jPFLhgDOLL4JEvydpPXOud7DzggK9ywS2AHzcXzd3+IlM+D0HTUbIivGMYO6 CIdZ0F3nIB2L4cl40Bp5HpW8Tr9IBvI= -----END CERTIFICATE-----Generated at Sat May 18 15:40:24 2024 by rpki-client on console-fra.rpki-client.org