$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/4338433f-a208-3589-9c69-6c3b1db06a76.roa File: 4338433f-a208-3589-9c69-6c3b1db06a76.roa (raw, json) Hash identifier: Sm2OTrNnZaNqLf4jmo2OKxnsT6VQFUocA+Tbif3zVy0= Subject key identifier: E2:6B:6C:CC:98:E1:83:E7:A6:C5:43:EF:3C:87:97:E3:BB:71:7E:83 Certificate issuer: /CN=fe86722c-27ec-4059-a1ef-757cf5e15715 Certificate serial: 010D0C9F4328584598FE05B4F0B90CC95B22BE80 Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/4338433f-a208-3589-9c69-6c3b1db06a76.roa Signing time: Fri 19 Apr 2024 13:00:36 +0000 ROA not before: Fri 19 Apr 2024 13:00:36 +0000 ROA not after: Thu 18 Jul 2024 13:00:36 +0000 asID: 21976 IP address blocks: 130.156.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:98:fe:05:b4:f0:b9:0c:c9:5b:22:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715 Validity Not Before: Apr 19 13:00:36 2024 GMT Not After : Jul 18 13:00:36 2024 GMT Subject: CN=5b39288f-4173-4cd1-a464-8703f01e3dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:38:88:4a:18:94:65:99:a5:66:ff:de:bf:77: 85:33:ce:e7:b4:6f:9c:82:97:7e:d0:f8:67:60:50: 78:aa:4f:8b:c5:62:cd:ba:2d:49:1d:c5:fc:6d:d2: 27:e9:de:9d:64:d8:66:dc:57:f6:66:bd:c4:26:e7: db:11:3e:83:72:80:3b:1d:49:42:84:86:ae:1f:43: c4:e4:4e:c9:5d:57:50:a8:04:14:d0:0a:11:4c:97: 17:0f:f9:b3:eb:c1:b2:b6:b5:2a:2e:de:8a:c4:12: 6a:eb:5a:e7:44:df:57:5a:bf:c6:ff:d6:cf:f8:1b: e2:2a:c4:f4:af:07:73:ff:c4:1e:30:62:e3:f7:67: 20:d1:f2:8f:99:e9:8b:2a:02:e6:57:3b:d1:c8:0c: bb:41:36:c1:af:b6:90:87:ee:19:4f:6c:1f:6e:9e: 28:2a:5c:27:ab:4a:41:65:f6:ac:d4:0f:a6:c8:f6: ee:0b:18:76:47:3e:d1:3b:5d:a5:18:8c:74:b8:4c: e8:56:e2:55:81:d9:db:87:ca:4d:04:15:b4:57:2f: f4:e4:3c:3a:2d:78:c5:c3:c6:c8:1f:eb:12:0c:09: 7b:64:76:25:67:a5:cc:6c:fc:14:14:4d:1e:3f:5e: ca:78:78:c7:cd:29:b6:11:66:36:95:c2:7b:68:15: 8d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6B:6C:CC:98:E1:83:E7:A6:C5:43:EF:3C:87:97:E3:BB:71:7E:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/4338433f-a208-3589-9c69-6c3b1db06a76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl X509v3 Authority Key Identifier: keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer sbgp-ipAddrBlock: critical IPv4: 130.156.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:fe:31:e8:3a:e5:47:a7:85:11:0c:92:ab:81:67:42:75:42: a7:b3:84:a3:f4:f2:50:0d:58:df:83:ec:0e:eb:13:d7:74:9f: e5:f8:69:47:c7:a3:6a:2b:2e:0b:23:0d:63:03:be:45:d6:04: 29:1d:f9:c9:cb:22:ec:38:f6:42:d2:1e:84:7e:a0:e9:de:c2: 05:75:d2:86:12:13:a6:15:61:c2:97:61:f0:9b:11:fc:60:5a: 66:04:2e:04:4b:f1:27:32:a7:ca:5a:e8:04:4d:5e:75:fe:7e: 6d:9d:31:91:f9:e4:50:b0:40:98:fb:7e:f6:49:6b:fa:51:0b: 7f:61:98:9c:0f:eb:e0:f5:63:8a:99:69:3c:30:74:0d:fe:6b: 02:3f:7f:20:3d:3e:45:93:31:4a:8c:2d:a8:bb:1b:20:b5:55: 5f:ed:df:43:49:1d:ac:90:90:85:bf:38:fb:81:9b:3c:04:06: bf:f8:d3:ad:2b:cf:54:fc:15:ea:28:cd:4c:77:66:ad:3f:89: 88:61:14:8f:d7:d2:bc:93:69:d3:f0:c9:4b:fc:ff:e6:2f:91: 17:5a:31:ff:d9:72:17:fc:44:c4:2b:a5:46:49:d5:28:49:01: 42:a0:b9:a2:8e:7b:9a:5a:9d:09:bd:08:c7:a2:d6:72:a9:96: 3a:dd:4a:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWY/gW08LkMyVsivoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmU4NjcyMmMtMjdlYy00MDU5LWExZWYtNzU3Y2Y1ZTE1 NzE1MB4XDTI0MDQxOTEzMDAzNloXDTI0MDcxODEzMDAzNlowLzEtMCsGA1UEAxMk NWIzOTI4OGYtNDE3My00Y2QxLWE0NjQtODcwM2YwMWUzZGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDiIShiUZZmlZv/ev3eFM87ntG+cgpd+0Phn YFB4qk+LxWLNui1JHcX8bdIn6d6dZNhm3Ff2Zr3EJufbET6DcoA7HUlChIauH0PE 5E7JXVdQqAQU0AoRTJcXD/mz68GytrUqLt6KxBJq61rnRN9XWr/G/9bP+BviKsT0 rwdz/8QeMGLj92cg0fKPmemLKgLmVzvRyAy7QTbBr7aQh+4ZT2wfbp4oKlwnq0pB Zfas1A+myPbuCxh2Rz7RO12lGIx0uEzoVuJVgdnbh8pNBBW0Vy/05Dw6LXjFw8bI H+sSDAl7ZHYlZ6XMbPwUFE0eP17KeHjHzSm2EWY2lcJ7aBWNfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJrbMyY4YPnpsVD7zyHl+O7cX6DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZTg2 NzIyYy0yN2VjLTQwNTktYTFlZi03NTdjZjVlMTU3MTUvNDMzODQzM2YtYTIwOC0z NTg5LTljNjktNmMzYjFkYjA2YTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZmU4NjcyMmMtMjdlYy00MDU5LWEx ZWYtNzU3Y2Y1ZTE1NzE1L2ZlODY3MjJjLTI3ZWMtNDA1OS1hMWVmLTc1N2NmNWUx NTcxNS5jcmwwHwYDVR0jBBgwFoAUnK6jm4GtANWgU0O/JxPv/0fWuPcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZTg2NzIyYy0yN2VjLTQwNTktYTFlZi03NTdj ZjVlMTU3MTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgpwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKP+Meg65UenhREMkquBZ0J1QqezhKP08lANWN+D7A7rE9d0n+X4aUfH o2orLgsjDWMDvkXWBCkd+cnLIuw49kLSHoR+oOnewgV10oYSE6YVYcKXYfCbEfxg WmYELgRL8Scyp8pa6ARNXnX+fm2dMZH55FCwQJj7fvZJa/pRC39hmJwP6+D1Y4qZ aTwwdA3+awI/fyA9PkWTMUqMLai7GyC1VV/t30NJHayQkIW/OPuBmzwEBr/4060r z1T8FeoozUx3Zq0/iYhhFI/X0ryTadPwyUv8/+YvkRdaMf/Zchf8RMQrpUZJ1ShJ AUKguaKOe5panQm9CMei1nKpljrdSrE= -----END CERTIFICATE-----Generated at Fri May 10 03:53:46 2024 by rpki-client on console-ams.rpki-client.org