$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/2b8293b4-6f04-3436-b0f2-07c56dc8fcea.roa File: 2b8293b4-6f04-3436-b0f2-07c56dc8fcea.roa (raw, json) Hash identifier: 3DBTKbKHqX+2lFweo1bEG03ZXXQr1wjlmUO5acklXQQ= Subject key identifier: 3B:26:BB:D7:66:5E:A0:DF:25:11:64:AB:28:FF:78:65:A1:75:BE:B0 Certificate issuer: /CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8 Certificate serial: 010D0C9F43285845B21E1E43167B657BC2C53080 Authority key identifier: D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/2b8293b4-6f04-3436-b0f2-07c56dc8fcea.roa Signing time: Sun 28 Apr 2024 13:00:34 +0000 ROA not before: Sun 28 Apr 2024 13:00:34 +0000 ROA not after: Sat 27 Jul 2024 13:00:34 +0000 asID: 3257 IP address blocks: 104.171.208.0/20 maxlen: 20 2602:fd43::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b2:1e:1e:43:16:7b:65:7b:c2:c5:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8 Validity Not Before: Apr 28 13:00:34 2024 GMT Not After : Jul 27 13:00:34 2024 GMT Subject: CN=ad9673e2-83dc-4220-958a-b9e79ed49d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a1:e3:e2:48:47:a5:eb:3f:24:e0:3a:7d:77: 97:a8:bf:b9:34:e5:41:1b:f1:08:a1:e0:25:65:f5: 98:07:98:58:19:79:92:3f:d2:b0:d4:57:7c:4a:fc: b6:98:bd:c2:c1:e9:c1:82:89:be:3d:ba:36:ae:57: 47:d8:17:02:22:95:47:0d:51:06:e8:8d:b3:58:c8: a1:0d:db:e0:1f:0c:e4:a9:0a:ef:d1:7b:c6:1d:9b: d9:e1:a7:2f:95:b7:1c:10:58:56:3e:60:b9:ce:ed: f1:76:d5:82:2a:f4:79:12:29:b4:18:5e:8b:0f:55: 9c:03:84:43:9b:31:db:49:3c:67:2f:69:a7:1f:c0: de:86:bc:b4:7a:1f:89:1b:eb:74:35:6a:02:ea:c0: 4b:13:56:c0:a0:70:9a:b2:ee:c4:63:c9:08:e7:db: a9:a1:a9:70:f4:01:e8:78:3c:b7:4a:29:4f:b2:8b: d1:9b:1c:ea:66:9a:91:d0:68:5d:7d:42:c4:04:c1: d2:6f:77:d3:ad:c3:83:e0:fe:e0:75:80:68:44:e9: d9:1f:eb:2d:85:3a:16:72:a1:30:be:6e:bd:93:4a: b8:0d:6d:df:c5:9b:29:f4:1f:79:e7:00:1f:e1:96: 70:bc:e6:7a:35:56:54:b5:57:82:68:36:35:f2:8a: e5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:26:BB:D7:66:5E:A0:DF:25:11:64:AB:28:FF:78:65:A1:75:BE:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/2b8293b4-6f04-3436-b0f2-07c56dc8fcea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl X509v3 Authority Key Identifier: keyid:D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer sbgp-ipAddrBlock: critical IPv4: 104.171.208.0/20 IPv6: 2602:fd43::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:75:e4:33:b9:5d:b8:c7:01:46:4c:d2:de:b0:dc:66:2f:9d: 27:62:a3:f2:3d:ae:dc:d2:21:3c:dd:e4:5f:94:18:cf:68:bc: 3b:1e:09:3d:be:b0:ae:b6:85:69:7a:48:b4:76:ab:ab:1e:16: 7f:21:2e:ee:bf:ee:2d:5f:94:19:48:12:0f:e5:e2:2f:d4:d5: 61:bf:2f:5c:5b:7d:1a:13:5d:81:ab:df:8c:49:0a:df:fa:e1: d5:d5:f2:e7:72:dc:f7:76:55:80:09:bb:95:7c:53:77:5f:08: 98:26:22:d4:1e:8b:d0:e8:eb:87:d4:b6:49:0e:98:34:15:47: a2:4d:7d:40:05:77:cc:e4:bd:78:d3:4a:3a:ae:a7:84:9f:9c: e9:58:dc:a9:04:82:49:dc:ca:da:dc:cd:8b:ff:77:e1:2a:04: 00:e7:4d:ec:bb:a0:01:8c:f1:4f:15:80:9a:3b:e9:48:5e:b9: bb:b0:70:1c:88:d0:62:3f:47:77:01:80:29:6e:a5:14:71:90: ee:71:34:ec:1a:75:75:a2:51:58:5d:64:e8:d0:68:6a:fc:c5: df:3d:34:f9:a9:a9:53:7b:11:e5:85:a6:8b:38:2d:9d:32:21: b0:2f:d4:74:2f:8a:85:54:56:c1:f2:5e:b9:70:13:cb:77:57: b3:25:a0:fc -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEWyHh5DFntle8LFMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjdjN2EzNDQtNGJjNy00NjhiLWFkMzAtM2I5YzAwNmNk MGM4MB4XDTI0MDQyODEzMDAzNFoXDTI0MDcyNzEzMDAzNFowLzEtMCsGA1UEAxMk YWQ5NjczZTItODNkYy00MjIwLTk1OGEtYjllNzllZDQ5ZDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6Hj4khHpes/JOA6fXeXqL+5NOVBG/EIoeAl ZfWYB5hYGXmSP9Kw1Fd8Svy2mL3CwenBgom+Pbo2rldH2BcCIpVHDVEG6I2zWMih DdvgHwzkqQrv0XvGHZvZ4acvlbccEFhWPmC5zu3xdtWCKvR5Eim0GF6LD1WcA4RD mzHbSTxnL2mnH8Dehry0eh+JG+t0NWoC6sBLE1bAoHCasu7EY8kI59upoalw9AHo eDy3SilPsovRmxzqZpqR0GhdfULEBMHSb3fTrcOD4P7gdYBoROnZH+sthToWcqEw vm69k0q4DW3fxZsp9B955wAf4ZZwvOZ6NVZUtVeCaDY18orlywIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDsmu9dmXqDfJRFkqyj/eGWhdb6wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yN2M3 YTM0NC00YmM3LTQ2OGItYWQzMC0zYjljMDA2Y2QwYzgvMmI4MjkzYjQtNmYwNC0z NDM2LWIwZjItMDdjNTZkYzhmY2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjdjN2EzNDQtNGJjNy00NjhiLWFk MzAtM2I5YzAwNmNkMGM4LzI3YzdhMzQ0LTRiYzctNDY4Yi1hZDMwLTNiOWMwMDZj ZDBjOC5jcmwwHwYDVR0jBBgwFoAU2UqH6Z9k85IcgEkD0OABbmMYM90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yN2M3YTM0NC00YmM3LTQ2OGItYWQzMC0zYjlj MDA2Y2QwYzguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQEaKvQMA4E AgACMAgDBgQmAv1DADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIdeQzuV24xwFGTNLesNxmL50nYqPyPa7c 0iE83eRflBjPaLw7Hgk9vrCutoVpeki0dqurHhZ/IS7uv+4tX5QZSBIP5eIv1NVh vy9cW30aE12Bq9+MSQrf+uHV1fLnctz3dlWACbuVfFN3XwiYJiLUHovQ6OuH1LZJ Dpg0FUeiTX1ABXfM5L1400o6rqeEn5zpWNypBIJJ3Mra3M2L/3fhKgQA503su6AB jPFPFYCaO+lIXrm7sHAciNBiP0d3AYApbqUUcZDucTTsGnV1olFYXWTo0Ghq/MXf PTT5qalTexHlhaaLOC2dMiGwL9R0L4qFVFbB8l65cBPLd1ezJaD8 -----END CERTIFICATE-----Generated at Sat May 4 02:39:21 2024 by rpki-client on console-fra.rpki-client.org