$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ae29e1c3-8e87-3b60-ab8f-c1f6564e5e6d.roa File: ae29e1c3-8e87-3b60-ab8f-c1f6564e5e6d.roa (raw, json) Hash identifier: NkLOwzqLXRwis9AS3j0BJlX3/KhxJ814uKCPPSlnyEI= Subject key identifier: 85:73:9B:FD:6C:A1:D8:29:DB:E2:24:97:2D:23:BE:C3:F2:B7:49:0E Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F43285845C5A8E16411CC16C17CEB8980 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ae29e1c3-8e87-3b60-ab8f-c1f6564e5e6d.roa Signing time: Sun 05 May 2024 13:00:34 +0000 ROA not before: Sun 05 May 2024 13:00:34 +0000 ROA not after: Sat 03 Aug 2024 13:00:34 +0000 asID: 14061 IP address blocks: 134.199.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c5:a8:e1:64:11:cc:16:c1:7c:eb:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: May 5 13:00:34 2024 GMT Not After : Aug 3 13:00:34 2024 GMT Subject: CN=47138cc7-c10a-4ca1-89be-f609faae7a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:49:5d:92:43:ea:87:d5:e1:51:7d:9f:c8:13: ce:f5:b9:bf:5c:2d:1c:ce:99:24:66:c6:3a:13:32: 71:04:23:92:49:f9:5e:a2:d2:04:54:56:8b:85:f0: f3:e2:f8:c3:18:29:09:77:3b:0f:27:cd:32:ab:5c: c9:49:ac:7f:fc:89:a0:24:b2:78:7e:8e:e7:0d:3b: 55:5e:1a:0d:db:33:0b:59:7b:e0:5b:b9:48:f8:ca: 29:c8:25:dd:cd:36:82:50:8d:fe:c2:38:69:f8:ee: 58:d1:95:d9:e4:be:6f:7a:16:f3:f6:9d:e5:5f:76: ea:39:c1:79:8d:61:1a:ba:fd:cd:d4:f9:81:ce:d8: 1b:7f:a7:33:12:33:94:74:8a:cd:1d:05:09:6f:34: e0:de:5e:b4:e7:55:8d:bd:f0:17:e5:1e:ac:54:c3: d3:59:d8:8f:3c:cd:24:7b:99:55:0f:c3:e9:84:88: 2f:c7:66:8a:0d:44:c4:62:1f:88:45:9e:1e:e9:77: c7:1a:5e:82:9b:30:83:14:6e:0d:12:94:9f:9d:29: 60:75:d0:09:17:ec:2a:c1:93:6f:fb:f2:c7:42:ff: 44:21:c1:69:b9:0a:8a:c0:1c:72:0b:89:8f:0a:36: c9:50:e5:5b:cc:30:0b:e6:aa:3a:dd:df:54:6b:53: b7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:73:9B:FD:6C:A1:D8:29:DB:E2:24:97:2D:23:BE:C3:F2:B7:49:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ae29e1c3-8e87-3b60-ab8f-c1f6564e5e6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 134.199.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:05:27:40:6f:cb:10:14:d0:15:35:b8:c7:a8:10:14:ed:63: fc:d8:d3:ea:37:5c:73:96:b7:b9:5b:f4:13:b2:b4:89:1a:c7: 0a:eb:50:54:e6:0f:c1:b2:4e:40:b9:eb:52:47:a5:30:6c:f4: da:7b:06:7e:a9:9e:0a:eb:36:d3:8d:f6:35:d3:a4:72:ae:bd: c4:00:87:53:2a:51:b1:8e:ec:dd:f2:38:ed:ee:59:6f:77:5b: d3:0c:68:b4:79:a5:3b:11:88:31:aa:5c:21:03:0e:48:e1:4d: 7e:cb:83:f8:1f:83:bf:23:f1:78:eb:8a:96:10:4b:da:14:da: 5c:10:92:c8:e3:4a:94:e8:4f:e3:01:82:20:ee:bd:57:68:62: 7f:e1:79:c2:34:43:65:fa:4b:9a:4e:2d:5f:3b:c5:c4:11:47: 2b:af:26:9d:cc:a1:32:d0:56:6e:0c:b8:8a:48:99:22:25:e1: d7:f3:80:35:8d:09:21:f8:76:31:54:04:13:d4:02:eb:37:06: df:59:f3:15:e7:ad:d7:30:56:1a:d9:48:af:3c:d8:ce:7a:f9: 25:8b:b9:ea:3d:5c:96:b7:f0:3a:76:78:de:16:56:de:f3:5c: 3f:61:d1:14:93:bd:d7:2a:2c:24:e2:2d:8c:f8:bb:db:44:da: 56:39:40:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXFqOFkEcwWwXzriYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI0MDUwNTEzMDAzNFoXDTI0MDgwMzEzMDAzNFowLzEtMCsGA1UEAxMk NDcxMzhjYzctYzEwYS00Y2ExLTg5YmUtZjYwOWZhYWU3YTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEldkkPqh9XhUX2fyBPO9bm/XC0czpkkZsY6 EzJxBCOSSfleotIEVFaLhfDz4vjDGCkJdzsPJ80yq1zJSax//ImgJLJ4fo7nDTtV XhoN2zMLWXvgW7lI+MopyCXdzTaCUI3+wjhp+O5Y0ZXZ5L5vehbz9p3lX3bqOcF5 jWEauv3N1PmBztgbf6czEjOUdIrNHQUJbzTg3l6051WNvfAX5R6sVMPTWdiPPM0k e5lVD8PphIgvx2aKDUTEYh+IRZ4e6XfHGl6CmzCDFG4NEpSfnSlgddAJF+wqwZNv +/LHQv9EIcFpuQqKwBxyC4mPCjbJUOVbzDAL5qo63d9Ua1O3LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVzm/1sodgp2+Ikly0jvsPyt0kOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvYWUyOWUxYzMtOGU4Ny0z YjYwLWFiOGYtYzFmNjU2NGU1ZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHhseAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMFJ0BvyxAU0BU1uMeoEBTtY/zY0+o3XHOWt7lb9BOytIkaxwrrUFTm D8GyTkC561JHpTBs9Np7Bn6pngrrNtON9jXTpHKuvcQAh1MqUbGO7N3yOO3uWW93 W9MMaLR5pTsRiDGqXCEDDkjhTX7Lg/gfg78j8XjripYQS9oU2lwQksjjSpToT+MB giDuvVdoYn/hecI0Q2X6S5pOLV87xcQRRyuvJp3MoTLQVm4MuIpImSIl4dfzgDWN CSH4djFUBBPUAus3Bt9Z8xXnrdcwVhrZSK882M56+SWLueo9XJa38Dp2eN4WVt7z XD9h0RSTvdcqLCTiLYz4u9tE2lY5QGM= -----END CERTIFICATE-----Generated at Sat May 11 15:23:28 2024 by rpki-client on console-fra.rpki-client.org