$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa File: c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa (raw, json) Hash identifier: 06LKT9hGIL2LYsUtdNTjlX+H8XsLYhB0CkcbL2jUvRw= Subject key identifier: 8E:0C:2E:F2:90:19:9E:41:76:64:E6:09:FD:62:D3:8B:E7:CF:D5:25 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F43285845AB61144D7ABAF9ECE4DA9840 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa Signing time: Fri 26 Apr 2024 03:04:54 +0000 ROA not before: Fri 26 Apr 2024 03:04:54 +0000 ROA not after: Thu 25 Jul 2024 03:04:54 +0000 asID: 35908 IP address blocks: 100.43.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Jun 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ab:61:14:4d:7a:ba:f9:ec:e4:da:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Apr 26 03:04:54 2024 GMT Not After : Jul 25 03:04:54 2024 GMT Subject: CN=cc2e20c9-376a-4855-afd5-4b06b85dfa29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2e:80:1f:21:ee:6b:45:c5:b4:0d:6c:58:42: 83:f5:97:1a:e9:cb:c9:ed:d3:7d:76:ff:f9:5d:b6: 5e:d1:92:1b:6a:79:11:f7:36:ba:a7:ff:32:16:84: 7e:2d:95:05:33:10:d5:2d:84:5d:b8:e3:dc:cf:70: 9f:cb:c7:38:a5:39:e4:8d:9f:e2:60:df:6b:0c:07: 0c:fa:3e:72:d8:a6:fc:d6:39:cf:f3:c2:42:cf:3a: 3e:42:ea:59:a8:b2:49:aa:35:ba:8e:72:0c:0e:3b: 11:42:e3:f7:93:f9:0a:5b:b7:5e:9a:0a:ca:de:bb: 88:1a:80:49:bf:fd:1b:09:f6:4f:f9:43:2c:34:6a: 09:29:50:05:56:84:a7:65:ff:bd:f6:45:18:66:18: 5a:96:fc:23:43:9f:f1:ec:a9:cc:63:43:97:74:b2: 32:ad:62:30:d8:f7:27:66:68:d9:a4:b2:a9:49:0a: 55:10:b6:b9:4e:fe:7a:34:2f:ca:e9:7b:83:4e:c5: 96:82:cd:f5:fe:b6:8d:f8:d9:43:15:16:74:ca:90: fe:cc:2f:bf:47:64:4e:ec:f0:a2:9b:22:00:7e:f3: 6c:f7:0e:c5:29:10:21:6a:61:c7:f0:91:77:7a:c1: 70:12:07:4f:4f:37:6d:79:88:74:76:1b:76:c9:56: 14:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0C:2E:F2:90:19:9E:41:76:64:E6:09:FD:62:D3:8B:E7:CF:D5:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 100.43.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:0c:e3:cd:3f:2e:8c:76:e9:9f:9f:00:c5:cc:b9:19:08:d1: 19:da:6f:b7:a0:dc:e7:28:6b:aa:ea:5d:14:7e:d9:43:2f:6f: d5:cb:8a:d9:65:43:1d:fc:e9:a3:ef:32:02:fa:6c:3d:4f:63: e4:1a:f7:23:30:07:87:6d:6c:74:62:27:7c:4b:4a:8a:20:56: d4:66:56:6b:20:f9:c3:b1:09:f4:85:41:e3:61:cc:2e:d9:73: 5b:27:33:3a:63:1f:48:89:27:80:3a:99:3b:dc:f2:70:c8:44: 59:d1:3f:2a:f0:2d:9f:3d:57:a3:fc:6a:7a:39:8c:63:7f:d5: 9a:8f:a0:b0:2b:4b:2a:a5:98:27:9f:ef:9d:8b:f7:77:22:03: a2:83:9b:34:ed:63:42:f0:15:0c:7a:49:71:83:eb:44:c6:6e: 84:af:32:ff:ce:9f:da:e2:20:55:d2:39:2b:95:16:e3:07:33: 76:60:06:6d:47:6a:9e:d1:cf:00:bd:84:1e:a6:18:e7:98:0b: 00:4f:38:38:d3:07:86:45:75:24:45:df:c6:54:f7:b2:e7:b9: 22:66:79:c4:08:34:95:31:75:55:84:ee:5e:c6:92:d6:ae:5b: c1:ae:15:3d:01:fe:46:9c:6c:12:f6:fd:ca:af:2a:44:d7:b6: 45:3d:02:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWrYRRNerr57OTamEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI0MDQyNjAzMDQ1NFoXDTI0MDcyNTAzMDQ1NFowLzEtMCsGA1UEAxMk Y2MyZTIwYzktMzc2YS00ODU1LWFmZDUtNGIwNmI4NWRmYTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS6AHyHua0XFtA1sWEKD9Zca6cvJ7dN9dv/5 XbZe0ZIbankR9za6p/8yFoR+LZUFMxDVLYRduOPcz3Cfy8c4pTnkjZ/iYN9rDAcM +j5y2Kb81jnP88JCzzo+QupZqLJJqjW6jnIMDjsRQuP3k/kKW7demgrK3ruIGoBJ v/0bCfZP+UMsNGoJKVAFVoSnZf+99kUYZhhalvwjQ5/x7KnMY0OXdLIyrWIw2Pcn ZmjZpLKpSQpVELa5Tv56NC/K6XuDTsWWgs31/raN+NlDFRZ0ypD+zC+/R2RO7PCi myIAfvNs9w7FKRAhamHH8JF3esFwEgdPTzdteYh0dht2yVYULwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4MLvKQGZ5BdmTmCf1i04vnz9UlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvYzRkODA0MTctMTE3Ny0z MTkwLWEyZjEtNDcyYTViZDRjM2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGZCuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAM480/Lox26Z+fAMXMuRkI0Rnab7eg3Ocoa6rqXRR+2UMvb9XLitll Qx386aPvMgL6bD1PY+Qa9yMwB4dtbHRiJ3xLSoogVtRmVmsg+cOxCfSFQeNhzC7Z c1snMzpjH0iJJ4A6mTvc8nDIRFnRPyrwLZ89V6P8ano5jGN/1ZqPoLArSyqlmCef 752L93ciA6KDmzTtY0LwFQx6SXGD60TGboSvMv/On9riIFXSOSuVFuMHM3ZgBm1H ap7RzwC9hB6mGOeYCwBPODjTB4ZFdSRF38ZU97LnuSJmecQINJUxdVWE7l7Gktau W8GuFT0B/kacbBL2/cqvKkTXtkU9ArA= -----END CERTIFICATE-----Generated at Tue Jun 25 22:25:17 2024 by rpki-client on console-ams.rpki-client.org