$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f9b23ccb-bde4-33eb-9a8f-c6e42051569e.roa File: f9b23ccb-bde4-33eb-9a8f-c6e42051569e.roa (raw, json) Hash identifier: JiJNwzn5g8Gs8Nw525Tm/RZCeVVlEmEy1tCuYLTka90= Subject key identifier: A7:CD:B4:86:FB:92:B0:7D:CA:7F:04:C6:20:73:6D:8F:8A:DE:E7:BC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328583A5B2845AC440C8E9586101DE0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f9b23ccb-bde4-33eb-9a8f-c6e42051569e.roa Signing time: Wed 23 Jun 2021 04:00:00 +0000 ROA not before: Wed 23 Jun 2021 04:00:00 +0000 ROA not after: Thu 27 Apr 2028 04:00:00 +0000 asID: 13335 IP address blocks: 172.70.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3a:5b:28:45:ac:44:0c:8e:95:86:10:1d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 23 04:00:00 2021 GMT Not After : Apr 27 04:00:00 2028 GMT Subject: CN=b508d72f-01ea-4f9e-8fc5-084550e5ec98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:58:43:d9:1e:3a:ef:d0:9e:a0:16:a9:df:4a: 38:d5:ed:a9:f3:e7:f6:cb:7d:b2:b8:8a:2a:23:61: 09:73:93:cf:c5:18:c6:cf:8b:8b:1d:7a:82:5b:03: 03:b7:00:9d:b6:a1:83:59:e6:be:80:71:0b:21:03: 7a:b1:a4:27:a0:65:ec:bf:c8:42:81:4f:87:66:6a: 01:33:d6:79:20:87:d5:f2:9b:93:5d:72:e3:87:1c: b9:a4:38:aa:a2:d2:86:6d:a1:b6:55:ab:2b:9a:b4: ad:c9:e0:e5:62:60:14:d9:4f:c7:7d:47:49:e7:95: 07:c1:0f:76:ca:d0:49:c4:0c:92:47:be:23:1a:b5: bb:86:13:56:43:64:52:a1:af:93:b1:e2:fc:1d:fc: 8a:d5:e6:e9:4c:49:e8:47:49:8b:dd:cd:fb:c2:58: e3:cb:fd:00:6f:c5:0b:ba:c3:8f:17:90:9c:63:3a: 86:7e:d6:57:e5:94:c4:8d:dc:67:d0:69:9b:97:b8: 7f:6a:c1:50:5f:96:2c:f9:dc:5f:2b:f2:22:a7:61: b3:d6:be:57:49:5a:9a:b1:69:c2:85:86:94:c5:79: d2:a1:65:91:a9:36:8a:a1:bc:de:a5:46:80:43:ac: 77:ca:5b:6b:fc:90:f6:c8:16:ca:f4:e5:7c:37:57: 44:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:CD:B4:86:FB:92:B0:7D:CA:7F:04:C6:20:73:6D:8F:8A:DE:E7:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f9b23ccb-bde4-33eb-9a8f-c6e42051569e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f6:d3:3f:a7:15:e9:6a:d1:f9:c1:a5:ce:bd:f2:5e:e9:2c: 8e:49:39:b2:82:60:ce:30:c4:4c:9f:11:97:c9:7b:b6:f8:34: cc:63:8a:0a:53:c5:9f:b2:e4:69:26:3d:0f:07:1c:ca:64:b0: 5b:1d:2f:82:74:bd:e0:ae:da:ab:bf:4d:dc:84:89:10:b0:b7: 93:3e:cb:ae:dc:ba:e8:f3:fe:64:68:f5:4d:e5:d9:0e:91:b4: 26:b6:cf:7a:b3:26:9f:28:0d:43:01:24:4c:c8:48:2e:ab:bf: 01:8c:0e:81:c1:29:01:77:3b:25:e8:5b:12:eb:1d:5b:04:1d: ef:f9:ba:d9:b4:72:a3:93:42:a2:b2:a4:28:91:2c:c0:4a:bd: 16:9a:3b:4f:21:9f:5c:8a:88:59:e6:98:84:53:39:86:65:c6: 64:b3:97:ae:ad:c6:20:74:92:56:27:19:f6:5b:37:2d:6e:66: 82:20:8f:b3:d2:7e:98:c2:31:20:f9:87:c4:87:0d:d0:ee:99: 09:09:d6:c7:23:48:88:fa:f8:52:c2:41:06:5b:cc:79:b2:02: a4:be:11:33:9e:41:11:5a:cf:26:9d:f8:76:5e:34:49:d9:92: c6:84:d5:9f:fd:c5:30:b7:db:20:7d:71:45:a0:f8:e8:b5:42: 8e:4c:61:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDpbKEWsRAyOlYYQHeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTIxMDYyMzA0MDAwMFoXDTI4MDQyNzA0MDAwMFowLzEtMCsGA1UEAxMk YjUwOGQ3MmYtMDFlYS00ZjllLThmYzUtMDg0NTUwZTVlYzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1hD2R4679CeoBap30o41e2p8+f2y32yuIoq I2EJc5PPxRjGz4uLHXqCWwMDtwCdtqGDWea+gHELIQN6saQnoGXsv8hCgU+HZmoB M9Z5IIfV8puTXXLjhxy5pDiqotKGbaG2VasrmrStyeDlYmAU2U/HfUdJ55UHwQ92 ytBJxAySR74jGrW7hhNWQ2RSoa+TseL8HfyK1ebpTEnoR0mL3c37wljjy/0Ab8UL usOPF5CcYzqGftZX5ZTEjdxn0Gmbl7h/asFQX5Ys+dxfK/Iip2Gz1r5XSVqasWnC hYaUxXnSoWWRqTaKobzepUaAQ6x3yltr/JD2yBbK9OV8N1dEMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfNtIb7krB9yn8ExiBzbY+K3ue8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjliMjNjY2ItYmRlNC0z M2ViLTlhOGYtYzZlNDIwNTE1NjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADL20z+nFelq0fnBpc698l7pLI5JObKCYM4wxEyfEZfJe7b4NMxjigpT xZ+y5GkmPQ8HHMpksFsdL4J0veCu2qu/TdyEiRCwt5M+y67cuujz/mRo9U3l2Q6R tCa2z3qzJp8oDUMBJEzISC6rvwGMDoHBKQF3OyXoWxLrHVsEHe/5utm0cqOTQqKy pCiRLMBKvRaaO08hn1yKiFnmmIRTOYZlxmSzl66txiB0klYnGfZbNy1uZoIgj7PS fpjCMSD5h8SHDdDumQkJ1scjSIj6+FLCQQZbzHmyAqS+ETOeQRFazyad+HZeNEnZ ksaE1Z/9xTC32yB9cUWg+Oi1Qo5MYa4= -----END CERTIFICATE-----Generated at Sat May 11 02:48:13 2024 by rpki-client on console-fra.rpki-client.org