$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/28c297e9-6701-3a4f-bea0-343929f7fbc3.roa File: 28c297e9-6701-3a4f-bea0-343929f7fbc3.roa (raw, json) Hash identifier: XufrXYm2TT//qxc+kaYIXct6WlRDV5iybhv1VSfRN0c= Subject key identifier: 0E:0C:C1:18:6C:8A:6C:28:F6:F0:20:7F:45:E7:5C:D9:75:81:CD:CB Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F432858452AB7DCF49FC7E6B48C508BC0 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/28c297e9-6701-3a4f-bea0-343929f7fbc3.roa Signing time: Mon 11 Mar 2024 01:00:26 +0000 ROA not before: Mon 11 Mar 2024 01:00:26 +0000 ROA not after: Sun 09 Jun 2024 01:00:26 +0000 asID: 14340 IP address blocks: 140.190.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:2a:b7:dc:f4:9f:c7:e6:b4:8c:50:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Mar 11 01:00:26 2024 GMT Not After : Jun 9 01:00:26 2024 GMT Subject: CN=ba486d4d-624b-4024-bed7-68288ec9e624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8a:87:40:62:2c:42:e1:3c:9a:10:1d:6c:e7: 6e:38:1b:bf:ea:ae:2e:4a:52:1e:1c:8e:b0:59:65: 1b:c1:00:aa:23:de:cc:af:4f:76:06:19:75:29:5f: 41:61:f0:7d:c2:e9:4b:e1:10:10:c2:d4:c3:7e:e7: 5f:18:be:11:67:de:0b:cc:91:db:64:84:e2:bd:bb: 6c:9e:9b:83:db:e8:68:dd:47:e4:f5:1a:8f:be:6c: e2:3f:76:00:79:2f:55:d5:27:dc:d2:a2:a6:52:ab: ec:e8:55:09:3b:35:a3:07:e8:37:8d:35:5c:14:8c: 1e:87:c2:ba:54:13:27:91:b2:ae:45:d2:32:02:59: bd:21:8e:5e:2f:81:4d:df:13:f4:83:d6:4b:23:c9: 19:2d:e7:6d:d2:f8:07:ad:67:b5:c1:3a:e9:99:a0: 12:2c:ad:b5:87:6f:7a:63:a9:7f:93:c6:9b:d0:21: a3:75:6d:54:77:74:e0:72:82:f2:84:87:a0:aa:43: db:3b:31:d8:96:e9:07:9e:ee:e1:5d:de:4a:64:05: 86:d1:ba:42:16:e6:9c:7d:9b:31:1d:6b:a6:46:09: c1:1b:5f:86:b4:f0:77:4c:66:58:c0:37:42:b9:8d: fc:e9:bf:06:62:f8:d6:7b:e6:2c:b5:c4:11:b2:c1: ad:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0C:C1:18:6C:8A:6C:28:F6:F0:20:7F:45:E7:5C:D9:75:81:CD:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/28c297e9-6701-3a4f-bea0-343929f7fbc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 140.190.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:08:9a:7e:b7:2f:51:21:a3:c9:e6:b3:46:33:20:76:1d:13: f1:36:58:92:d4:0d:bd:b7:13:fb:28:9f:b7:17:3d:e8:89:6a: d6:0c:fa:8b:95:aa:92:8e:7a:6a:61:02:66:c8:dd:fb:7e:d3: bf:59:5f:a9:f0:03:6c:73:23:f8:9a:a7:29:88:8e:ac:08:7f: 8d:b9:8b:41:fe:21:c7:8a:11:2d:8f:73:2b:6f:20:62:a0:f7: e6:35:6e:5d:a8:56:0f:6c:28:fe:53:90:95:2e:75:b0:41:bd: 3d:ac:76:40:43:cb:82:f0:f5:91:ae:87:90:24:6e:a3:6f:68: 6e:c9:7c:cd:d5:3b:8c:6c:95:e5:44:4c:15:17:8a:f9:dc:0d: 99:e3:d5:1c:5d:cc:af:ac:08:3c:99:24:00:54:d8:e0:ce:6e: a3:ad:10:cc:ed:18:d0:ca:57:cd:81:7a:ed:ef:11:4e:bb:cf: 75:e7:3e:8a:ee:cf:76:73:37:5f:20:cb:6b:90:48:46:bd:f6: 43:86:f6:cc:59:e1:87:95:65:2f:70:f0:a7:b1:d8:7e:60:82: cf:ca:9d:b8:25:ad:3a:5d:f2:39:6c:de:63:37:1f:a9:f4:8b: a0:8b:d1:0a:df:dd:5d:72:e5:1a:c2:ce:9d:eb:18:5b:67:10: 76:42:fc:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUqt9z0n8fmtIxQi8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI0MDMxMTAxMDAyNloXDTI0MDYwOTAxMDAyNlowLzEtMCsGA1UEAxMk YmE0ODZkNGQtNjI0Yi00MDI0LWJlZDctNjgyODhlYzllNjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIqHQGIsQuE8mhAdbOduOBu/6q4uSlIeHI6w WWUbwQCqI97Mr092Bhl1KV9BYfB9wulL4RAQwtTDfudfGL4RZ94LzJHbZITivbts npuD2+ho3Ufk9RqPvmziP3YAeS9V1Sfc0qKmUqvs6FUJOzWjB+g3jTVcFIweh8K6 VBMnkbKuRdIyAlm9IY5eL4FN3xP0g9ZLI8kZLedt0vgHrWe1wTrpmaASLK21h296 Y6l/k8ab0CGjdW1Ud3TgcoLyhIegqkPbOzHYlukHnu7hXd5KZAWG0bpCFuacfZsx HWumRgnBG1+GtPB3TGZYwDdCuY386b8GYvjWe+YstcQRssGtYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4MwRhsimwo9vAgf0XnXNl1gc3LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvMjhjMjk3ZTktNjcwMS0z YTRmLWJlYTAtMzQzOTI5ZjdmYmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjL5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALAImn63L1Eho8nms0YzIHYdE/E2WJLUDb23E/son7cXPeiJatYM+ouV qpKOemphAmbI3ft+079ZX6nwA2xzI/iapymIjqwIf425i0H+IceKES2PcytvIGKg 9+Y1bl2oVg9sKP5TkJUudbBBvT2sdkBDy4Lw9ZGuh5AkbqNvaG7JfM3VO4xsleVE TBUXivncDZnj1RxdzK+sCDyZJABU2ODObqOtEMztGNDKV82Beu3vEU67z3XnPoru z3ZzN18gy2uQSEa99kOG9sxZ4YeVZS9w8Kex2H5ggs/KnbglrTpd8jls3mM3H6n0 i6CL0Qrf3V1y5RrCzp3rGFtnEHZC/Nk= -----END CERTIFICATE-----Generated at Thu May 9 20:33:05 2024 by rpki-client on console-ams.rpki-client.org