$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/35eb9cfb-ee49-3018-8d88-729ca7bc9091.roa File: 35eb9cfb-ee49-3018-8d88-729ca7bc9091.roa (raw, json) Hash identifier: LHQgP1BRMuIhFgtzPvh5y5NDQwV5uZtvRdHC+jA+QyU= Subject key identifier: A9:FB:40:FA:E6:0E:83:C0:13:94:60:19:32:80:9C:35:7A:F0:2F:C5 Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5 Certificate serial: 010D0C9F432858454BB5F142B8069BFB53E5AD00 Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/35eb9cfb-ee49-3018-8d88-729ca7bc9091.roa Signing time: Fri 22 Mar 2024 20:38:18 +0000 ROA not before: Fri 22 Mar 2024 20:38:18 +0000 ROA not after: Thu 20 Jun 2024 20:38:18 +0000 asID: 14618 IP address blocks: 52.128.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:4b:b5:f1:42:b8:06:9b:fb:53:e5:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Validity Not Before: Mar 22 20:38:18 2024 GMT Not After : Jun 20 20:38:18 2024 GMT Subject: CN=f33268d1-56d4-4b04-b185-da28bd287458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fb:35:c2:b7:05:d6:03:de:de:97:15:6a:78: 1f:75:21:ec:49:92:5f:85:c6:67:82:46:42:bf:5b: d7:7d:7f:f8:29:f6:ed:f1:48:85:be:61:27:ba:a9: c8:a4:f0:b4:f5:4f:9a:c9:ab:47:59:2f:88:85:23: 3f:c8:45:58:0e:56:be:06:ae:f8:e1:52:24:b2:d3: 24:1b:cc:5f:d4:b4:ff:d8:6b:eb:be:3c:00:05:b6: f9:fd:e6:86:8f:20:f2:28:d9:b9:73:71:65:93:2e: bf:1e:26:06:bb:ac:71:07:03:13:c4:ac:40:cc:9b: 15:b5:02:71:34:f3:9a:33:79:3e:f6:53:eb:bf:67: 1b:1b:0d:05:e0:82:50:08:9b:7c:95:46:db:ad:41: 1f:0e:ad:d0:e2:c1:4a:d0:4f:5e:d5:0d:b7:49:b6: 38:26:88:08:99:36:c0:6f:10:bf:04:1f:1c:0f:0a: 75:9f:41:0c:37:e0:1d:10:30:15:9e:aa:48:45:6f: d5:6e:cd:a9:79:d8:36:f0:21:76:56:81:94:f2:24: ed:a5:fe:e8:fe:fd:2f:cd:ca:2e:45:55:0d:4d:76: e8:28:ff:79:1e:c2:80:1c:9a:6e:35:66:1f:a3:eb: 8b:18:50:4f:dd:19:b9:92:6a:77:86:bf:5d:7c:80: 24:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FB:40:FA:E6:0E:83:C0:13:94:60:19:32:80:9C:35:7A:F0:2F:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/35eb9cfb-ee49-3018-8d88-729ca7bc9091.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl X509v3 Authority Key Identifier: keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer sbgp-ipAddrBlock: critical IPv4: 52.128.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:65:b7:ec:dc:fa:75:e5:49:d6:86:56:67:3a:f7:93:77:39: ab:27:9c:a4:07:74:d1:4c:c0:a4:14:f3:5b:94:d7:b4:61:ed: ee:8c:d7:4b:7a:1c:9a:3a:46:e8:5b:27:17:c9:76:54:28:75: 85:5a:ae:08:d2:60:a0:36:62:55:01:e6:73:82:c9:8e:85:e1: 80:b5:ce:63:ba:86:9d:27:55:c4:1b:5c:09:38:22:42:c8:58: 4c:a7:08:1a:38:c0:6e:8f:b1:66:e3:7e:1f:0d:5a:2d:01:95: 8f:5f:37:bc:da:00:93:3f:af:6e:39:43:a6:51:c7:d0:b7:15: 10:b0:6f:3c:24:1d:b8:a2:5a:60:b0:01:71:1a:9b:1a:74:00: e0:86:07:ab:95:bd:85:03:c2:d7:58:c7:b1:ba:39:0a:1f:20: 8a:66:76:bd:06:8a:ef:bf:1d:cb:5c:59:7a:b8:ed:b1:b3:da: e4:4e:62:05:d2:63:de:c0:43:41:0f:de:9c:00:b5:2c:ef:b3: df:66:f0:bf:38:71:d2:d4:8c:1a:73:5b:d4:bb:ee:e6:7c:b8: e8:43:fe:33:03:91:ef:4c:e9:34:9b:0c:8e:e6:cb:5e:a7:90: 75:90:5b:05:ad:0c:54:27:49:03:1c:27:34:03:91:43:a1:da: d9:b7:e6:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVLtfFCuAab+1PlrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4 ZWU1MB4XDTI0MDMyMjIwMzgxOFoXDTI0MDYyMDIwMzgxOFowLzEtMCsGA1UEAxMk ZjMzMjY4ZDEtNTZkNC00YjA0LWIxODUtZGEyOGJkMjg3NDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPs1wrcF1gPe3pcVangfdSHsSZJfhcZngkZC v1vXfX/4Kfbt8UiFvmEnuqnIpPC09U+ayatHWS+IhSM/yEVYDla+Bq744VIkstMk G8xf1LT/2GvrvjwABbb5/eaGjyDyKNm5c3Flky6/HiYGu6xxBwMTxKxAzJsVtQJx NPOaM3k+9lPrv2cbGw0F4IJQCJt8lUbbrUEfDq3Q4sFK0E9e1Q23SbY4JogImTbA bxC/BB8cDwp1n0EMN+AdEDAVnqpIRW/Vbs2pedg28CF2VoGU8iTtpf7o/v0vzcou RVUNTXboKP95HsKAHJpuNWYfo+uLGFBP3Rm5kmp3hr9dfIAkQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKn7QPrmDoPAE5RgGTKAnDV68C/FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZk NmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvMzVlYjljZmItZWU0OS0z MDE4LThkODgtNzI5Y2E3YmM5MDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDM2ZDZkYTQtZjU5MC00ZGE4LWEy MmYtNTU1MTFkYTk4ZWU1LzAzNmQ2ZGE0LWY1OTAtNGRhOC1hMjJmLTU1NTExZGE5 OGVlNS5jcmwwHwYDVR0jBBgwFoAUacGfYD2zXxUuwYJa0qMXtxIkO2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUx MWRhOThlZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIAsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJlt+zc+nXlSdaGVmc695N3OasnnKQHdNFMwKQU81uU17Rh7e6M10t6 HJo6RuhbJxfJdlQodYVargjSYKA2YlUB5nOCyY6F4YC1zmO6hp0nVcQbXAk4IkLI WEynCBo4wG6PsWbjfh8NWi0BlY9fN7zaAJM/r245Q6ZRx9C3FRCwbzwkHbiiWmCw AXEamxp0AOCGB6uVvYUDwtdYx7G6OQofIIpmdr0Giu+/HctcWXq47bGz2uROYgXS Y97AQ0EP3pwAtSzvs99m8L84cdLUjBpzW9S77uZ8uOhD/jMDke9M6TSbDI7my16n kHWQWwWtDFQnSQMcJzQDkUOh2tm35gs= -----END CERTIFICATE-----Generated at Thu May 2 11:35:53 2024 by rpki-client on console-fra.rpki-client.org