$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3cc38345-6550-34c7-91a9-c41099c6e187.roa File: 3cc38345-6550-34c7-91a9-c41099c6e187.roa (raw, json) Hash identifier: soSAaOnSEE3vKqc5EzGuwT2ECw0/Jz7GeDBiAfHsnGs= Subject key identifier: CA:95:A5:EB:1A:33:FE:56:C0:39:F9:E4:96:5E:1C:8F:38:C9:86:41 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584598FE0CAC79D36443B1545980 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3cc38345-6550-34c7-91a9-c41099c6e187.roa Signing time: Fri 19 Apr 2024 13:00:36 +0000 ROA not before: Fri 19 Apr 2024 13:00:36 +0000 ROA not after: Thu 18 Jul 2024 13:00:36 +0000 asID: 1225 IP address blocks: 129.250.35.96/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:98:fe:0c:ac:79:d3:64:43:b1:54:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 19 13:00:36 2024 GMT Not After : Jul 18 13:00:36 2024 GMT Subject: CN=5524320d-33aa-4c5d-8c6f-ce23ac0de45e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a6:ac:9d:ca:49:04:e9:c1:ee:e0:37:92:9b: bd:10:3b:f0:fd:4e:41:13:2c:e3:8e:40:e9:f0:c2: c4:1c:af:59:3b:28:a5:87:06:37:c2:92:65:46:ca: a8:f5:18:f6:62:58:d7:10:6a:63:f4:12:f8:59:54: c3:96:55:3d:c6:ab:db:a9:50:54:79:f1:9f:0a:14: 29:32:8e:6b:d1:ed:32:5f:b9:28:8a:f2:4a:c0:36: 08:14:01:0f:c8:27:07:c0:b5:dc:4e:15:d8:50:ce: f1:d4:d5:98:4e:04:44:b6:41:0b:10:3e:6f:5c:a4: 4a:af:1f:6d:dd:e1:af:21:e2:0f:1a:73:00:4e:51: 4d:0b:d7:c6:ef:ba:09:5b:75:02:a7:3c:00:9e:2f: f9:af:38:b8:1c:0a:fb:51:65:ce:25:83:cc:f5:af: 4a:28:f0:83:b8:56:ba:55:b8:9e:53:be:52:60:9d: e8:5b:95:3d:3d:4d:9c:ae:9d:95:fc:2b:4b:cb:f8: 2c:03:36:2b:5f:ff:86:b3:1d:db:54:ed:cd:09:71: 2a:3a:0a:7c:51:ec:25:4d:62:c4:47:b1:f7:f6:49: 25:92:cf:fb:2a:8a:18:d8:9a:65:5b:70:ee:6a:62: 23:5d:3f:70:78:78:bb:0f:c5:68:23:84:47:fb:71: 67:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:95:A5:EB:1A:33:FE:56:C0:39:F9:E4:96:5E:1C:8F:38:C9:86:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3cc38345-6550-34c7-91a9-c41099c6e187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.35.96/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:0e:4b:14:fd:b4:9d:36:71:8a:f0:0d:9f:37:33:48:d9:c5: 7e:d2:f3:59:96:ff:f3:2a:a7:45:09:1f:5b:08:a1:4d:ae:66: a5:05:fb:8d:80:62:c4:f8:15:44:0c:b7:ad:13:1e:79:57:74: 0b:ab:83:99:c8:03:c3:72:09:1d:e6:11:c8:cd:19:49:dc:85: f9:e7:d7:4b:83:c7:60:b9:90:d9:36:1b:ee:12:e3:16:30:9b: cc:c7:b8:c1:23:32:8c:06:ad:ee:da:a9:1f:33:44:9f:49:e0: 49:38:ac:25:11:f2:39:7f:cb:bf:27:11:31:c3:4c:06:cd:b6: 67:21:d7:35:88:bb:cd:a9:ee:26:39:7e:98:69:de:42:ff:75: 0a:d0:33:34:dd:06:b0:49:d6:65:bc:17:da:e0:db:cc:c8:c6: d3:63:37:19:94:e8:7c:6b:9f:f8:c2:6a:65:23:19:62:1c:13: d2:51:7e:d0:ae:78:5a:48:f4:fc:4e:54:23:45:37:fc:df:a5: b4:05:74:f0:88:97:6f:5f:62:c6:36:1c:1c:15:e1:f1:d5:59: 11:6b:e9:e5:1e:1b:4e:26:28:9e:11:1e:c9:20:85:8f:20:13: 42:3d:e8:8a:78:18:6e:73:76:83:40:81:6c:82:a1:79:66:5d: 0c:d8:fe:7a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEWY/gysedNkQ7FUWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI0MDQxOTEzMDAzNloXDTI0MDcxODEzMDAzNlowLzEtMCsGA1UEAxMk NTUyNDMyMGQtMzNhYS00YzVkLThjNmYtY2UyM2FjMGRlNDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqasncpJBOnB7uA3kpu9EDvw/U5BEyzjjkDp 8MLEHK9ZOyilhwY3wpJlRsqo9Rj2YljXEGpj9BL4WVTDllU9xqvbqVBUefGfChQp Mo5r0e0yX7koivJKwDYIFAEPyCcHwLXcThXYUM7x1NWYTgREtkELED5vXKRKrx9t 3eGvIeIPGnMATlFNC9fG77oJW3UCpzwAni/5rzi4HAr7UWXOJYPM9a9KKPCDuFa6 VbieU75SYJ3oW5U9PU2crp2V/CtLy/gsAzYrX/+Gsx3bVO3NCXEqOgp8UewlTWLE R7H39kklks/7KooY2JplW3DuamIjXT9weHi7D8VoI4RH+3Fn0QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMqVpesaM/5WwDn55JZeHI84yYZBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2NjMzgzNDUtNjU1MC0z NGM3LTkxYTktYzQxMDk5YzZlMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEgfojYDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDADksU/bSdNnGK8A2fNzNI2cV+0vNZlv/zKqdFCR9bCKFNrmalBfuN gGLE+BVEDLetEx55V3QLq4OZyAPDcgkd5hHIzRlJ3IX559dLg8dguZDZNhvuEuMW MJvMx7jBIzKMBq3u2qkfM0SfSeBJOKwlEfI5f8u/JxExw0wGzbZnIdc1iLvNqe4m OX6Yad5C/3UK0DM03QawSdZlvBfa4NvMyMbTYzcZlOh8a5/4wmplIxliHBPSUX7Q rnhaSPT8TlQjRTf836W0BXTwiJdvX2LGNhwcFeHx1VkRa+nlHhtOJiieER7JIIWP IBNCPeiKeBhuc3aDQIFsgqF5Zl0M2P56 -----END CERTIFICATE-----Generated at Mon May 6 14:48:34 2024 by rpki-client on console-fra.rpki-client.org