$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9/7961b13c-9b43-3f98-9cc8-d43cb70db50f.roa File: 7961b13c-9b43-3f98-9cc8-d43cb70db50f.roa (raw, json) Hash identifier: h8hrVPuioG0MkvJkYO4ehzBqB8120+lFOaMjGX+kh08= Subject key identifier: 65:60:EE:2E:85:2C:4D:81:EC:39:BC:0A:24:A1:3B:EB:7F:E5:C3:43 Certificate issuer: /CN=5b5b70d4-ae45-4386-977d-1875706017e9 Certificate serial: 010D0C9F43285844F5CAA14724DEDE1604EC7680 Authority key identifier: 7B:A9:7F:7E:C9:40:BD:38:1D:0A:39:19:B5:F5:74:05:E3:82:0A:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9/7961b13c-9b43-3f98-9cc8-d43cb70db50f.roa Signing time: Wed 21 Feb 2024 02:00:25 +0000 ROA not before: Wed 21 Feb 2024 02:00:25 +0000 ROA not after: Tue 21 May 2024 01:00:25 +0000 asID: 4637 IP address blocks: 136.175.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9/5b5b70d4-ae45-4386-977d-1875706017e9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9/5b5b70d4-ae45-4386-977d-1875706017e9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f5:ca:a1:47:24:de:de:16:04:ec:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b5b70d4-ae45-4386-977d-1875706017e9 Validity Not Before: Feb 21 02:00:25 2024 GMT Not After : May 21 01:00:25 2024 GMT Subject: CN=d2f943d7-f7e4-4f48-bdea-2d76de76347f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:76:b0:d8:46:3d:59:8e:04:2e:19:1c:7c:1c: 02:8e:0c:bf:bd:83:7c:92:32:13:26:94:3b:95:26: 42:01:b2:0c:86:b5:12:cf:7b:ec:5a:c9:a0:38:5c: 2f:8a:e0:c2:78:d4:25:a1:3a:9a:ec:29:0b:f5:69: 58:9b:84:ae:89:d8:a2:64:b8:16:58:24:10:07:9c: cd:80:c3:0f:e9:50:b5:bf:34:67:5f:1e:af:bb:55: 88:29:4e:7b:a3:20:e7:a3:8c:a7:82:dd:d4:bd:39: 04:69:33:dc:a0:a8:bc:37:92:c6:d1:8c:62:f1:25: 71:94:44:59:2d:fe:47:74:e0:de:ed:31:12:97:15: 44:59:e9:2a:df:9e:0b:52:00:c9:5e:4f:f9:20:ae: e5:88:2a:70:3e:0a:61:68:ff:58:18:19:b4:e5:c5: f4:0d:63:ef:11:68:c2:45:3e:96:a8:de:07:c1:29: fa:e8:5b:85:09:50:35:15:d9:57:d2:2b:1d:09:29: 67:2a:6a:25:75:b8:30:73:6b:db:a8:f0:6a:b3:46: 20:50:8d:ab:9e:af:4e:c8:a4:01:99:9a:4e:1b:22: 55:5e:c0:a5:a9:5f:96:de:3d:d6:6a:16:08:e5:27: 11:e2:0f:9d:80:5d:41:c5:fb:d5:5d:47:7b:a7:26: 01:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:60:EE:2E:85:2C:4D:81:EC:39:BC:0A:24:A1:3B:EB:7F:E5:C3:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9/7961b13c-9b43-3f98-9cc8-d43cb70db50f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9/5b5b70d4-ae45-4386-977d-1875706017e9.crl X509v3 Authority Key Identifier: keyid:7B:A9:7F:7E:C9:40:BD:38:1D:0A:39:19:B5:F5:74:05:E3:82:0A:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9.cer sbgp-ipAddrBlock: critical IPv4: 136.175.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:cd:57:6f:d8:62:98:88:cf:2e:f1:85:22:d0:78:da:ee:2a: 7e:c4:82:60:ee:57:e5:ad:89:ef:a6:e7:67:98:ae:51:54:d9: a9:3b:6f:a1:d7:6f:10:b8:bb:c3:4e:b8:3c:e6:f4:f4:b3:e4: 5c:6a:cb:60:95:cc:25:4d:2f:06:01:90:db:a5:4b:51:c1:47: c7:f1:33:71:a8:34:fc:31:42:23:b6:bc:14:a8:de:5c:e2:63: 7b:ab:95:21:78:a4:cd:f3:ac:7f:42:19:68:5b:97:16:7f:22: 2c:f8:ad:32:62:30:c0:df:da:c5:4b:b4:94:aa:e8:5f:40:33: 08:b5:07:cf:6a:ad:db:c5:38:6b:e3:91:79:31:d9:d6:92:65: 9f:97:aa:07:d9:74:ce:84:d7:14:36:94:36:51:34:34:ba:6b: f7:40:52:18:b9:c4:64:06:db:ea:52:65:7b:4e:6f:be:1a:99: a2:d5:70:35:3e:fa:6d:0d:52:ea:f0:c3:6d:f1:c6:7c:0e:11: c2:e5:e4:49:af:71:ff:c2:ee:ad:bc:05:59:5a:52:71:8e:96: 1e:57:f3:b1:26:05:ff:3f:e9:51:c7:53:84:46:29:36:ca:3e: bd:d8:ee:bb:47:ac:fe:70:16:04:cc:c1:c4:d1:70:67:07:fc: 69:0c:0a:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET1yqFHJN7eFgTsdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI1YjcwZDQtYWU0NS00Mzg2LTk3N2QtMTg3NTcwNjAx N2U5MB4XDTI0MDIyMTAyMDAyNVoXDTI0MDUyMTAxMDAyNVowLzEtMCsGA1UEAxMk ZDJmOTQzZDctZjdlNC00ZjQ4LWJkZWEtMmQ3NmRlNzYzNDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHaw2EY9WY4ELhkcfBwCjgy/vYN8kjITJpQ7 lSZCAbIMhrUSz3vsWsmgOFwviuDCeNQloTqa7CkL9WlYm4SuidiiZLgWWCQQB5zN gMMP6VC1vzRnXx6vu1WIKU57oyDno4yngt3UvTkEaTPcoKi8N5LG0Yxi8SVxlERZ Lf5HdODe7TESlxVEWekq354LUgDJXk/5IK7liCpwPgphaP9YGBm05cX0DWPvEWjC RT6WqN4HwSn66FuFCVA1FdlX0isdCSlnKmoldbgwc2vbqPBqs0YgUI2rnq9OyKQB mZpOGyJVXsClqV+W3j3WahYI5ScR4g+dgF1BxfvVXUd7pyYBdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVg7i6FLE2B7Dm8CiShO+t/5cNDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81YjVi NzBkNC1hZTQ1LTQzODYtOTc3ZC0xODc1NzA2MDE3ZTkvNzk2MWIxM2MtOWI0My0z Zjk4LTljYzgtZDQzY2I3MGRiNTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWI1YjcwZDQtYWU0NS00Mzg2LTk3 N2QtMTg3NTcwNjAxN2U5LzViNWI3MGQ0LWFlNDUtNDM4Ni05NzdkLTE4NzU3MDYw MTdlOS5jcmwwHwYDVR0jBBgwFoAUe6l/fslAvTgdCjkZtfV0BeOCCiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YjViNzBkNC1hZTQ1LTQzODYtOTc3ZC0xODc1 NzA2MDE3ZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiK+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrNV2/YYpiIzy7xhSLQeNruKn7EgmDuV+Wtie+m52eYrlFU2ak7b6HX bxC4u8NOuDzm9PSz5Fxqy2CVzCVNLwYBkNulS1HBR8fxM3GoNPwxQiO2vBSo3lzi Y3urlSF4pM3zrH9CGWhblxZ/Iiz4rTJiMMDf2sVLtJSq6F9AMwi1B89qrdvFOGvj kXkx2daSZZ+XqgfZdM6E1xQ2lDZRNDS6a/dAUhi5xGQG2+pSZXtOb74amaLVcDU+ +m0NUurww23xxnwOEcLl5Emvcf/C7q28BVlaUnGOlh5X87EmBf8/6VHHU4RGKTbK Pr3Y7rtHrP5wFgTMwcTRcGcH/GkMCqE= -----END CERTIFICATE-----Generated at Wed May 8 21:05:06 2024 by rpki-client on console-fra.rpki-client.org