$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/98d614dc-607e-3732-aa86-1eb4ea2f52a7.roa File: 98d614dc-607e-3732-aa86-1eb4ea2f52a7.roa (raw, json) Hash identifier: vcT28pxrS1jv0e80vZFaoXqjq+01U5xH1t3AfEnIbp4= Subject key identifier: E6:57:55:64:37:80:0D:EF:46:10:EF:06:70:B0:2A:8F:EE:C5:DC:39 Certificate issuer: /CN=35fbc5b3-479b-405d-8578-f7c792a1f375 Certificate serial: 010D0C9F432858456C113A4372D3538DBF180800 Authority key identifier: 0C:96:56:30:07:2E:19:B2:B9:4C:5C:16:F7:22:7E:2C:86:C4:6F:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/98d614dc-607e-3732-aa86-1eb4ea2f52a7.roa Signing time: Wed 03 Apr 2024 10:48:05 +0000 ROA not before: Wed 03 Apr 2024 10:48:05 +0000 ROA not after: Tue 02 Jul 2024 10:48:05 +0000 asID: 397071 IP address blocks: 130.51.100.0/24 maxlen: 24 130.51.101.0/24 maxlen: 24 130.51.102.0/24 maxlen: 24 130.51.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/35fbc5b3-479b-405d-8578-f7c792a1f375.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/35fbc5b3-479b-405d-8578-f7c792a1f375.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6c:11:3a:43:72:d3:53:8d:bf:18:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35fbc5b3-479b-405d-8578-f7c792a1f375 Validity Not Before: Apr 3 10:48:05 2024 GMT Not After : Jul 2 10:48:05 2024 GMT Subject: CN=72980491-048d-4105-8c09-71129eaaedf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:04:30:13:37:7f:1a:1a:c9:8a:bf:e0:a1:fb: 9c:a6:14:c6:f4:2c:8c:f7:a3:db:d6:43:19:20:bf: 1d:ba:c0:08:f6:ad:11:88:22:9a:4e:10:a0:7f:bf: 17:cb:5f:9f:1f:69:1a:ca:23:63:a1:3f:5c:cf:5d: a0:84:70:ea:e8:02:af:2d:8c:a8:76:c3:6c:fa:55: 08:11:59:74:e4:cb:0f:1f:bd:ae:67:c5:b2:f1:75: d3:05:fc:33:fd:69:8e:84:64:8f:9c:58:e1:5a:70: 0f:26:d8:48:be:a0:b6:9e:b0:ff:70:2d:5c:ff:6d: 7e:28:a4:9a:5d:a7:9c:2f:b1:77:19:48:40:9b:17: 84:80:a7:ba:3f:53:f4:3f:6d:bf:5b:3b:15:f0:70: db:7d:90:81:f6:04:39:76:aa:0b:b6:ff:6f:f0:eb: 14:90:1f:36:fe:58:99:e9:96:7f:e0:6c:9d:da:95: d8:f8:2e:24:61:46:85:74:e3:f1:3f:5a:76:7d:28: 73:6e:81:42:05:2d:71:6f:19:6a:4a:ef:c3:48:be: a7:13:6c:7f:83:6b:47:f3:dd:07:81:81:e4:ed:95: 4d:82:13:2f:ff:79:73:2d:98:75:36:f9:e9:64:ee: 69:13:5a:8f:5b:79:54:90:de:e3:40:c9:4a:ad:1c: ed:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:57:55:64:37:80:0D:EF:46:10:EF:06:70:B0:2A:8F:EE:C5:DC:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/98d614dc-607e-3732-aa86-1eb4ea2f52a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/35fbc5b3-479b-405d-8578-f7c792a1f375.crl X509v3 Authority Key Identifier: keyid:0C:96:56:30:07:2E:19:B2:B9:4C:5C:16:F7:22:7E:2C:86:C4:6F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375.cer sbgp-ipAddrBlock: critical IPv4: 130.51.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:b7:5c:e4:e6:7e:4b:aa:3c:9b:9b:3a:7b:a1:df:11:1d:f3: 8e:06:eb:5c:02:05:8c:31:c1:dc:fe:09:02:99:47:27:fb:ab: b7:ea:b2:bb:b4:b3:a4:a0:9f:7f:92:5e:a5:fd:d6:41:1d:f0: 73:d6:34:d2:b2:74:7d:43:c2:07:4c:11:9f:55:a3:1c:15:b8: 8a:68:8e:42:ce:26:bb:6d:3e:05:de:e5:d9:e0:ed:17:5f:ff: 3b:18:c5:e8:3c:03:92:a4:dd:1f:6f:1d:28:45:a9:2e:02:50: 7b:c2:be:45:c5:13:94:47:ed:45:76:e3:4e:4b:01:61:d5:62: c3:2c:17:7e:f2:ef:b3:55:f9:ca:1a:7d:e3:ea:c1:37:2d:16: ef:64:ca:17:17:eb:a4:51:ac:ab:a9:ca:68:17:4f:6d:8b:08: cf:19:c4:23:7a:7c:8c:3d:09:71:ea:b8:e5:06:52:08:6f:c5: 14:ab:c7:54:49:a2:c0:9c:b3:a6:c4:f5:09:6f:2a:e9:91:4d: 97:f3:5b:1e:6a:fe:fc:9d:ae:a5:65:51:03:86:96:75:ca:b0: 77:06:55:c4:8b:64:5a:4f:7a:59:d4:28:04:bf:ed:af:19:de: ba:65:a5:a3:e7:9d:57:ba:96:e4:da:93:d0:e0:5a:59:f2:ec: a9:46:8d:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVsETpDctNTjb8YCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVmYmM1YjMtNDc5Yi00MDVkLTg1NzgtZjdjNzkyYTFm Mzc1MB4XDTI0MDQwMzEwNDgwNVoXDTI0MDcwMjEwNDgwNVowLzEtMCsGA1UEAxMk NzI5ODA0OTEtMDQ4ZC00MTA1LThjMDktNzExMjllYWFlZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAQwEzd/GhrJir/gofucphTG9CyM96Pb1kMZ IL8dusAI9q0RiCKaThCgf78Xy1+fH2kayiNjoT9cz12ghHDq6AKvLYyodsNs+lUI EVl05MsPH72uZ8Wy8XXTBfwz/WmOhGSPnFjhWnAPJthIvqC2nrD/cC1c/21+KKSa XaecL7F3GUhAmxeEgKe6P1P0P22/WzsV8HDbfZCB9gQ5dqoLtv9v8OsUkB82/liZ 6ZZ/4Gyd2pXY+C4kYUaFdOPxP1p2fShzboFCBS1xbxlqSu/DSL6nE2x/g2tH890H gYHk7ZVNghMv/3lzLZh1NvnpZO5pE1qPW3lUkN7jQMlKrRzthQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZXVWQ3gA3vRhDvBnCwKo/uxdw5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNWZi YzViMy00NzliLTQwNWQtODU3OC1mN2M3OTJhMWYzNzUvOThkNjE0ZGMtNjA3ZS0z NzMyLWFhODYtMWViNGVhMmY1MmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzVmYmM1YjMtNDc5Yi00MDVkLTg1 NzgtZjdjNzkyYTFmMzc1LzM1ZmJjNWIzLTQ3OWItNDA1ZC04NTc4LWY3Yzc5MmEx ZjM3NS5jcmwwHwYDVR0jBBgwFoAUDJZWMAcuGbK5TFwW9yJ+LIbEb4gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNWZiYzViMy00NzliLTQwNWQtODU3OC1mN2M3 OTJhMWYzNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgjNkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+3XOTmfkuqPJubOnuh3xEd844G61wCBYwxwdz+CQKZRyf7q7fqsru0 s6Sgn3+SXqX91kEd8HPWNNKydH1DwgdMEZ9VoxwVuIpojkLOJrttPgXe5dng7Rdf /zsYxeg8A5Kk3R9vHShFqS4CUHvCvkXFE5RH7UV2405LAWHVYsMsF37y77NV+coa fePqwTctFu9kyhcX66RRrKupymgXT22LCM8ZxCN6fIw9CXHquOUGUghvxRSrx1RJ osCcs6bE9QlvKumRTZfzWx5q/vydrqVlUQOGlnXKsHcGVcSLZFpPelnUKAS/7a8Z 3rplpaPnnVe6luTak9DgWlny7KlGjXU= -----END CERTIFICATE-----Generated at Wed May 8 18:23:10 2024 by rpki-client on console-fra.rpki-client.org