$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/27fb50ad-2b05-3265-be7c-7d3d367f8588.roa File: 27fb50ad-2b05-3265-be7c-7d3d367f8588.roa (raw, json) Hash identifier: H5a8h8nQgeqQoRnFPP98VYUQhESgFESHPrTv8etadMM= Subject key identifier: FA:93:C3:B6:35:15:A9:9D:3D:08:46:8B:37:06:CA:06:F6:A7:7D:45 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F43285845A6F357DC1F43836151F6BA40 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/27fb50ad-2b05-3265-be7c-7d3d367f8588.roa Signing time: Wed 24 Apr 2024 13:00:33 +0000 ROA not before: Wed 24 Apr 2024 13:00:33 +0000 ROA not after: Tue 23 Jul 2024 13:00:33 +0000 asID: 14061 IP address blocks: 208.68.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a6:f3:57:dc:1f:43:83:61:51:f6:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Apr 24 13:00:33 2024 GMT Not After : Jul 23 13:00:33 2024 GMT Subject: CN=c072fbce-1901-44eb-82ab-3ab822334b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d7:21:a7:36:90:15:e7:fd:0c:d8:53:c8:77: 6e:c3:1e:cc:99:c3:f4:9f:e3:5d:5a:28:a7:3d:b1: e5:60:71:36:ad:b5:53:55:d1:09:1d:26:70:d2:93: 3b:dc:c8:56:b2:b5:dc:e1:58:18:2e:50:19:98:53: 88:2e:48:f2:08:d0:40:a8:03:51:7d:57:7d:f8:d6: 88:18:61:de:2a:fb:2c:2f:e3:16:63:ff:96:7d:51: bb:4e:14:35:be:e6:27:e7:a7:b1:cb:a9:b0:8a:57: 7f:c0:1f:0f:91:cc:0b:4b:6f:f2:ad:80:7d:24:e6: 99:07:bf:67:41:9e:d5:37:32:53:95:2a:5e:bd:ca: f2:e2:c8:6f:ff:c5:e3:91:b7:b1:bb:51:46:14:3c: a5:4c:63:55:58:d9:4d:b9:ba:e4:39:81:41:2f:2d: 43:c1:a7:98:a5:b0:19:51:e9:f1:ff:76:3f:c8:a7: 49:1c:33:5f:b6:b4:a2:65:d8:df:2c:b1:79:f1:bd: 94:d3:4c:84:38:09:3a:20:3d:67:ba:8b:f0:68:a9: 3a:34:ac:85:3d:5c:b3:89:56:ed:ee:5c:a3:24:8c: ff:26:1c:2e:f2:66:66:78:0f:42:c9:d9:75:4a:6a: 5f:95:09:69:b1:00:9f:26:10:ea:20:83:18:e8:89: 28:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:93:C3:B6:35:15:A9:9D:3D:08:46:8B:37:06:CA:06:F6:A7:7D:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/27fb50ad-2b05-3265-be7c-7d3d367f8588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 208.68.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:8b:31:28:29:ea:a4:c5:b4:27:0e:d5:a1:93:8d:8f:c2:43: 79:20:a5:6d:e7:b6:a6:ed:4e:4b:53:ef:74:b9:e2:15:bc:ce: 28:d8:29:a0:14:26:45:0b:d3:39:59:64:51:44:4c:9d:db:51: 3a:8e:b7:22:d3:58:b9:ad:e5:8d:53:18:4e:b9:e1:a5:4b:d3: 0c:cd:4f:8f:28:4a:9f:a3:63:7a:2e:5b:f7:3d:a9:73:f7:e0: c8:a3:bf:30:29:d6:00:1f:d2:31:ba:ab:d3:df:e0:9a:0d:99: 53:f2:7b:10:8c:61:eb:a9:f0:26:da:3e:31:ef:92:5e:b2:99: f9:cd:86:22:47:42:65:34:3c:32:77:c8:9d:93:07:bc:de:90: 89:b4:13:8e:66:63:e3:19:5d:3c:89:3d:1c:bb:0e:1f:da:b3: a1:59:eb:06:b5:ca:91:9c:ae:68:48:ae:11:e9:21:c5:4e:a5: 8d:fb:74:c4:a9:97:cf:e3:a8:89:02:a5:15:11:e3:4d:58:e5: ec:d5:32:a4:4e:3c:e9:6c:74:2f:09:c0:f2:70:34:a2:04:ce: 1b:17:c1:7d:63:96:74:21:de:d8:07:2a:8b:a1:1f:8b:ba:70: 57:a6:ac:6f:5f:fe:22:d4:59:64:34:db:bb:f3:41:ab:d5:7e: e6:4c:33:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWm81fcH0ODYVH2ukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI0MDQyNDEzMDAzM1oXDTI0MDcyMzEzMDAzM1owLzEtMCsGA1UEAxMk YzA3MmZiY2UtMTkwMS00NGViLTgyYWItM2FiODIyMzM0YjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tchpzaQFef9DNhTyHduwx7MmcP0n+NdWiin PbHlYHE2rbVTVdEJHSZw0pM73MhWsrXc4VgYLlAZmFOILkjyCNBAqANRfVd9+NaI GGHeKvssL+MWY/+WfVG7ThQ1vuYn56exy6mwild/wB8PkcwLS2/yrYB9JOaZB79n QZ7VNzJTlSpevcry4shv/8Xjkbexu1FGFDylTGNVWNlNubrkOYFBLy1DwaeYpbAZ Uenx/3Y/yKdJHDNftrSiZdjfLLF58b2U00yEOAk6ID1nuovwaKk6NKyFPVyziVbt 7lyjJIz/Jhwu8mZmeA9Cydl1SmpflQlpsQCfJhDqIIMY6IkoqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqTw7Y1FamdPQhGizcGygb2p31FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMjdmYjUwYWQtMmIwNS0z MjY1LWJlN2MtN2QzZDM2N2Y4NTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EQkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMiLMSgp6qTFtCcO1aGTjY/CQ3kgpW3ntqbtTktT73S54hW8zijYKaAU JkUL0zlZZFFETJ3bUTqOtyLTWLmt5Y1TGE654aVL0wzNT48oSp+jY3ouW/c9qXP3 4MijvzAp1gAf0jG6q9Pf4JoNmVPyexCMYeup8CbaPjHvkl6ymfnNhiJHQmU0PDJ3 yJ2TB7zekIm0E45mY+MZXTyJPRy7Dh/as6FZ6wa1ypGcrmhIrhHpIcVOpY37dMSp l8/jqIkCpRUR401Y5ezVMqROPOlsdC8JwPJwNKIEzhsXwX1jlnQh3tgHKouhH4u6 cFemrG9f/iLUWWQ027vzQavVfuZMM+g= -----END CERTIFICATE-----Generated at Sun May 12 01:24:21 2024 by rpki-client on console-fra.rpki-client.org