$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/38342da4-e45f-3645-a61f-9ff395a6995d.roa File: 38342da4-e45f-3645-a61f-9ff395a6995d.roa (raw, json) Hash identifier: D6Gym7Z8arsImGLMbDoNxtYImK6bK+GWsW9DWGV4N+M= Subject key identifier: AF:A1:4A:8A:DD:27:18:2B:EE:B4:6C:DF:0F:4C:EA:E1:2D:8F:23:37 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F432858454D9D7CEA0842D06208AB4B50 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/38342da4-e45f-3645-a61f-9ff395a6995d.roa Signing time: Sat 23 Mar 2024 13:00:32 +0000 ROA not before: Sat 23 Mar 2024 13:00:32 +0000 ROA not after: Fri 21 Jun 2024 13:00:32 +0000 asID: 7018 IP address blocks: 149.143.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:4d:9d:7c:ea:08:42:d0:62:08:ab:4b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 23 13:00:32 2024 GMT Not After : Jun 21 13:00:32 2024 GMT Subject: CN=edecfd77-2b57-4fed-8c08-55640214ddcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:27:b6:ba:97:45:48:bf:ff:b9:9a:e1:3c:53: 24:6e:db:9a:a7:be:87:0c:6e:b8:09:96:2a:6a:cc: f3:da:5c:d2:fb:36:17:59:7a:c9:37:c8:01:e7:1f: 26:99:93:b9:b2:9b:7f:26:98:63:9a:34:dc:72:dc: b1:99:1d:34:aa:7f:c6:e1:ce:61:f7:09:10:f0:cf: 69:da:97:d0:60:5a:56:b6:01:e7:a0:fe:f5:cf:30: 1c:da:40:9f:68:86:cb:de:24:17:0b:d5:e0:21:b0: bf:7d:22:62:13:1c:36:dc:82:06:4b:dc:55:e5:18: 26:85:81:09:f0:81:40:ab:2e:fa:6a:0b:24:36:ee: 18:2b:13:95:b3:8a:12:0d:63:a7:8b:8d:bc:aa:50: fe:15:d3:00:55:5e:3b:22:b8:a3:6c:e7:dc:0b:0c: ac:b5:3e:cf:a5:5a:f1:c5:33:fc:b2:8d:1f:2a:07: cd:61:fd:f1:d5:15:81:e6:96:68:61:9e:0c:5d:5a: ba:53:ce:68:ee:07:4e:b6:13:51:fb:e4:f1:fe:7d: 9b:02:cc:f8:33:17:d6:91:e5:2e:63:aa:09:eb:96: c1:5c:58:9e:15:c5:9e:e9:4a:84:76:52:33:55:e6: 20:d2:57:ed:25:f7:25:19:7e:71:ef:d9:1c:81:2d: 6f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A1:4A:8A:DD:27:18:2B:EE:B4:6C:DF:0F:4C:EA:E1:2D:8F:23:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/38342da4-e45f-3645-a61f-9ff395a6995d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:63:33:78:b1:7a:94:c3:e3:a9:a9:03:ae:10:c2:71:18:45: b7:b0:08:2d:07:83:3d:d2:62:f9:5d:f6:ee:b3:2a:9d:fc:fd: 02:b8:98:6d:78:e3:0a:69:02:56:62:02:c8:42:b6:5b:9e:2d: b8:31:df:e9:45:5c:fb:4a:2b:43:b8:b4:73:72:d6:9d:2f:3d: 1e:96:e3:ec:ef:16:0b:d6:86:1c:db:c9:a6:84:31:d7:8c:77: 8c:88:1b:22:d5:f1:33:de:76:34:6b:03:0a:9e:e2:f7:a4:75: f4:fd:b1:85:8c:43:5a:f5:46:8c:98:fa:fd:38:c9:ae:c4:82: b5:f5:76:36:04:29:33:3c:2c:db:d2:80:83:13:33:8e:34:c7: ce:9a:12:65:d1:9f:e6:22:d5:3a:9d:15:94:36:f2:ee:85:3f: cd:82:ce:3d:b4:09:4f:ca:8d:b8:be:18:08:df:56:8c:8f:dd: 50:3b:4c:43:f0:35:ed:78:1f:60:0a:28:63:b0:c8:e0:f0:b6: 97:7a:d4:0e:02:2c:66:9d:bc:44:27:44:a8:8d:62:e1:71:e9: 0b:a2:0a:fe:ea:76:c8:1a:a9:c3:1f:e1:0a:be:61:e3:15:81: ad:a4:24:89:c9:dd:2e:8b:73:bd:e3:83:ca:7c:2a:8e:ef:b7: 44:7a:87:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVNnXzqCELQYgirS1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MDMyMzEzMDAzMloXDTI0MDYyMTEzMDAzMlowLzEtMCsGA1UEAxMk ZWRlY2ZkNzctMmI1Ny00ZmVkLThjMDgtNTU2NDAyMTRkZGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSe2updFSL//uZrhPFMkbtuap76HDG64CZYq aszz2lzS+zYXWXrJN8gB5x8mmZO5spt/JphjmjTcctyxmR00qn/G4c5h9wkQ8M9p 2pfQYFpWtgHnoP71zzAc2kCfaIbL3iQXC9XgIbC/fSJiExw23IIGS9xV5RgmhYEJ 8IFAqy76agskNu4YKxOVs4oSDWOni428qlD+FdMAVV47IrijbOfcCwystT7PpVrx xTP8so0fKgfNYf3x1RWB5pZoYZ4MXVq6U85o7gdOthNR++Tx/n2bAsz4MxfWkeUu Y6oJ65bBXFieFcWe6UqEdlIzVeYg0lftJfclGX5x79kcgS1vBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+hSordJxgr7rRs3w9M6uEtjyM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMzgzNDJkYTQtZTQ1Zi0z NjQ1LWE2MWYtOWZmMzk1YTY5OTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5jM3ixepTD46mpA64QwnEYRbewCC0Hgz3SYvld9u6zKp38/QK4mG14 4wppAlZiAshCtlueLbgx3+lFXPtKK0O4tHNy1p0vPR6W4+zvFgvWhhzbyaaEMdeM d4yIGyLV8TPedjRrAwqe4vekdfT9sYWMQ1r1RoyY+v04ya7EgrX1djYEKTM8LNvS gIMTM440x86aEmXRn+Yi1TqdFZQ28u6FP82Czj20CU/Kjbi+GAjfVoyP3VA7TEPw Ne14H2AKKGOwyODwtpd61A4CLGadvEQnRKiNYuFx6QuiCv7qdsgaqcMf4Qq+YeMV ga2kJInJ3S6Lc73jg8p8Ko7vt0R6h+M= -----END CERTIFICATE-----Generated at Thu Apr 25 22:42:14 2024 by rpki-client on console-fra.rpki-client.org