$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/137f1c67-600a-38aa-a4ab-32ec74755869.roa File: 137f1c67-600a-38aa-a4ab-32ec74755869.roa (raw, json) Hash identifier: jHdOHNe66cnkclS0Mxd9Vm/Ktccj00Oo4m2pWnr0Rdw= Subject key identifier: CA:B7:99:CA:10:5F:A2:10:5E:E5:38:C6:D4:FA:BC:B9:10:9E:B5:18 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285845331801C53531095CC8814800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/137f1c67-600a-38aa-a4ab-32ec74755869.roa Signing time: Thu 14 Mar 2024 01:00:25 +0000 ROA not before: Thu 14 Mar 2024 01:00:25 +0000 ROA not after: Wed 12 Jun 2024 01:00:25 +0000 asID: 7922 IP address blocks: 96.97.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:33:18:01:c5:35:31:09:5c:c8:81:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 14 01:00:25 2024 GMT Not After : Jun 12 01:00:25 2024 GMT Subject: CN=38ec1f25-a901-4223-863f-edc75c6d3212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bf:0f:83:8a:c3:6b:9e:2c:c4:e3:b4:0c:fd: b1:82:68:61:4b:d9:66:26:e3:35:7b:66:58:5c:ad: 67:2a:71:70:f9:28:52:f3:a4:eb:18:eb:c5:71:fb: 70:d0:7b:b5:48:25:71:39:e5:56:ff:e1:66:a2:2d: d2:1d:8b:af:48:01:1c:22:46:3c:86:65:72:dd:8a: b5:95:31:d0:4e:8c:17:0e:ce:06:7d:84:e2:22:e9: c5:86:77:9e:11:da:2d:34:66:13:6b:fa:31:a1:7d: 49:2e:0c:4c:b3:61:a0:56:71:30:cd:d8:6e:4f:10: 6c:ab:4f:40:5a:f3:63:24:8a:c9:00:cb:a9:cf:c5: 54:13:69:37:03:cc:8b:09:60:6c:ee:b4:ab:67:d9: 85:84:44:0e:09:94:23:7e:71:bc:f0:e4:42:67:11: 71:e4:df:46:86:f0:c8:06:c5:fb:15:3f:6f:ce:a2: 21:42:90:d0:fb:83:68:85:74:5a:ea:71:9d:f1:c5: d5:f1:22:5b:85:23:5b:f2:ea:78:97:df:39:62:9f: 3e:a1:df:68:ad:e9:62:46:1d:77:d1:9a:18:7a:3d: 15:1d:69:0c:b0:e7:1a:19:ff:15:79:86:c0:99:08: c6:ec:9f:ae:c3:b5:9d:07:17:06:9a:56:be:9c:4b: 58:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B7:99:CA:10:5F:A2:10:5E:E5:38:C6:D4:FA:BC:B9:10:9E:B5:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/137f1c67-600a-38aa-a4ab-32ec74755869.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.97.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:f2:98:d3:00:6d:88:e6:10:c9:d3:23:8e:af:58:bc:d5:c0: 4b:48:4d:ca:92:60:35:d9:67:0d:46:59:8d:fe:bf:5b:3f:cf: 9e:8b:a9:0e:12:9c:9b:73:94:34:3e:68:ca:21:21:27:c0:3d: 42:2d:02:e5:13:8e:52:f2:e7:ad:9e:5d:1b:7b:a9:7f:9e:3c: 0f:20:df:5a:4e:e1:53:28:cc:0d:79:70:e4:6a:61:a2:4b:f4: ca:df:10:3a:39:d8:9b:aa:d0:c2:90:92:59:79:1e:35:56:5a: 72:3e:83:55:8e:dd:1e:cd:33:94:a2:99:16:9a:49:28:b2:f2: e1:d9:ff:e2:9e:f2:ba:41:bd:e2:1b:ed:7f:66:3c:27:fb:2a: 9d:8e:9b:f7:39:e6:2e:21:eb:68:04:b1:a2:26:57:0b:45:c4: f7:b7:b5:03:f8:37:60:6c:81:93:13:fa:7d:e8:d5:68:d3:24: 23:07:dd:70:cf:ce:fd:67:e8:18:db:79:49:57:30:de:10:c7: 69:25:9f:61:9c:aa:4a:1f:50:9f:9e:b2:2f:88:04:1c:3b:b1: 25:59:71:da:8b:22:59:ae:44:13:1e:52:e5:bf:79:c5:e6:3b: 63:59:97:76:80:18:90:15:90:38:fe:37:2c:a7:3f:73:8f:25: 5b:f7:df:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUzGAHFNTEJXMiBSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMxNDAxMDAyNVoXDTI0MDYxMjAxMDAyNVowLzEtMCsGA1UEAxMk MzhlYzFmMjUtYTkwMS00MjIzLTg2M2YtZWRjNzVjNmQzMjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr8Pg4rDa54sxOO0DP2xgmhhS9lmJuM1e2ZY XK1nKnFw+ShS86TrGOvFcftw0Hu1SCVxOeVW/+Fmoi3SHYuvSAEcIkY8hmVy3Yq1 lTHQTowXDs4GfYTiIunFhneeEdotNGYTa/oxoX1JLgxMs2GgVnEwzdhuTxBsq09A WvNjJIrJAMupz8VUE2k3A8yLCWBs7rSrZ9mFhEQOCZQjfnG88ORCZxFx5N9GhvDI BsX7FT9vzqIhQpDQ+4NohXRa6nGd8cXV8SJbhSNb8up4l985Yp8+od9oreliRh13 0ZoYej0VHWkMsOcaGf8VeYbAmQjG7J+uw7WdBxcGmla+nEtYzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMq3mcoQX6IQXuU4xtT6vLkQnrUYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTM3ZjFjNjctNjAwYS0z OGFhLWE0YWItMzJlYzc0NzU1ODY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYGE4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfymNMAbYjmEMnTI46vWLzVwEtITcqSYDXZZw1GWY3+v1s/z56LqQ4S nJtzlDQ+aMohISfAPUItAuUTjlLy562eXRt7qX+ePA8g31pO4VMozA15cORqYaJL 9MrfEDo52Juq0MKQkll5HjVWWnI+g1WO3R7NM5SimRaaSSiy8uHZ/+Ke8rpBveIb 7X9mPCf7Kp2Om/c55i4h62gEsaImVwtFxPe3tQP4N2BsgZMT+n3o1WjTJCMH3XDP zv1n6BjbeUlXMN4Qx2kln2GcqkofUJ+esi+IBBw7sSVZcdqLIlmuRBMeUuW/ecXm O2NZl3aAGJAVkDj+NyynP3OPJVv33/g= -----END CERTIFICATE-----Generated at Fri May 3 14:55:31 2024 by rpki-client on console-fra.rpki-client.org