$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa File: 4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa (raw, json) Hash identifier: Pgg6CB6VHWeEqSZlvSrt0PJ+q8ycng5LiD1u2ZZl4RI= Subject key identifier: 8B:50:3F:5A:D5:80:3F:30:A0:31:B8:96:68:91:39:D8:5F:AE:6A:A4 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285844FCC5662FCE71E6D4C1AE6900 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa Signing time: Fri 23 Feb 2024 14:00:31 +0000 ROA not before: Fri 23 Feb 2024 14:00:31 +0000 ROA not after: Thu 23 May 2024 13:00:31 +0000 asID: 1239 IP address blocks: 149.143.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:fc:c5:66:2f:ce:71:e6:d4:c1:ae:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Feb 23 14:00:31 2024 GMT Not After : May 23 13:00:31 2024 GMT Subject: CN=71e9ee2d-ecc4-4a0a-a589-db21a752611c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9a:f1:b1:e4:ef:c0:8b:1d:11:c2:fa:1a:d3: bb:72:e1:09:c7:f0:67:42:b4:6d:2b:8e:ac:b6:7d: 97:17:6b:e3:b7:82:7b:78:d6:b0:3e:59:a8:c6:76: 4f:dd:01:c5:1b:da:91:49:c2:61:90:f5:44:44:87: e0:0c:d3:0e:5d:57:79:dc:65:84:5e:11:ed:9d:24: a2:28:df:fd:bd:85:ca:3b:3d:27:26:ab:30:4b:88: ac:6c:8e:2d:33:fb:4a:6f:7d:82:48:a2:1b:6b:bb: 69:6a:db:e8:da:87:f4:f1:cc:75:94:2f:0c:29:97: 59:99:3c:5a:2a:95:04:15:bc:d5:13:87:64:01:6c: a7:74:63:77:25:93:e3:2c:bb:a3:62:da:fc:15:49: 4d:3f:09:21:43:20:4a:a9:84:0f:9f:97:34:aa:32: 69:64:09:54:1c:16:63:6e:b5:82:96:a3:7f:e7:05: 9b:70:46:c5:b2:4d:64:ae:31:ac:e3:66:99:73:a2: e1:54:dd:ec:5a:0d:c0:94:2e:46:56:c0:3f:50:99: 42:2e:a1:7f:eb:11:cf:d6:49:f9:40:25:b2:f5:dd: 06:f7:8c:bc:0b:f7:7b:98:f7:45:04:5e:ed:b0:71: a5:c7:38:99:f0:e8:20:a6:e1:31:d8:fb:b2:c7:bd: 44:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:50:3F:5A:D5:80:3F:30:A0:31:B8:96:68:91:39:D8:5F:AE:6A:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:2c:6a:56:30:e7:4f:0b:76:d7:fe:06:d6:ba:1f:1c:45:c0: 5a:50:56:39:fd:58:06:85:9d:76:ee:ad:ff:28:5b:22:6b:8c: ce:56:cd:76:29:88:08:54:5b:06:5b:e1:09:38:e4:2f:03:48: cf:b7:48:a9:53:31:2a:d5:50:0a:6e:d7:dd:d9:bd:50:48:74: af:0f:56:47:3e:99:61:c8:d8:60:e5:83:56:58:4f:3f:4c:74: b7:f8:2e:ca:09:d8:43:47:79:92:ce:17:e9:5f:ab:5a:63:c3: ea:02:f0:13:c2:b4:dd:cd:b4:92:22:24:12:ef:c4:ec:67:52: dd:79:f0:9c:48:15:35:b5:05:15:e6:fb:fa:fc:7a:b4:d2:02: 1c:21:09:8c:4e:65:79:6b:54:a6:b2:8b:eb:69:ca:79:38:df: d0:31:c5:97:b3:7a:df:00:e9:63:2c:42:4f:8c:c3:9b:c4:fa: da:c9:cd:34:bb:7f:a9:8e:63:cc:53:33:73:c4:43:6c:bc:bb: 37:51:03:a5:40:98:32:30:7f:25:5f:5b:2a:d9:13:52:a6:1e: 85:41:ef:19:85:3a:fe:65:7e:e4:1d:69:4e:8d:fc:21:c2:a0: 4e:6e:bb:4c:7c:f7:52:27:cb:cc:22:fb:df:8b:bf:e5:a5:5e: 47:7e:d2:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET8xWYvznHm1MGuaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MDIyMzE0MDAzMVoXDTI0MDUyMzEzMDAzMVowLzEtMCsGA1UEAxMk NzFlOWVlMmQtZWNjNC00YTBhLWE1ODktZGIyMWE3NTI2MTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JrxseTvwIsdEcL6GtO7cuEJx/BnQrRtK46s tn2XF2vjt4J7eNawPlmoxnZP3QHFG9qRScJhkPVERIfgDNMOXVd53GWEXhHtnSSi KN/9vYXKOz0nJqswS4isbI4tM/tKb32CSKIba7tpatvo2of08cx1lC8MKZdZmTxa KpUEFbzVE4dkAWyndGN3JZPjLLujYtr8FUlNPwkhQyBKqYQPn5c0qjJpZAlUHBZj brWClqN/5wWbcEbFsk1krjGs42aZc6LhVN3sWg3AlC5GVsA/UJlCLqF/6xHP1kn5 QCWy9d0G94y8C/d7mPdFBF7tsHGlxziZ8OggpuEx2Puyx71EVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItQP1rVgD8woDG4lmiROdhfrmqkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNGJkZmE1ZjYtY2Q3My0z YmJiLWIxMGEtYzE1Y2Q0NGZkNTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAsalYw508Ldtf+Bta6HxxFwFpQVjn9WAaFnXburf8oWyJrjM5WzXYp iAhUWwZb4Qk45C8DSM+3SKlTMSrVUApu193ZvVBIdK8PVkc+mWHI2GDlg1ZYTz9M dLf4LsoJ2ENHeZLOF+lfq1pjw+oC8BPCtN3NtJIiJBLvxOxnUt158JxIFTW1BRXm +/r8erTSAhwhCYxOZXlrVKayi+tpynk439AxxZezet8A6WMsQk+Mw5vE+trJzTS7 f6mOY8xTM3PEQ2y8uzdRA6VAmDIwfyVfWyrZE1KmHoVB7xmFOv5lfuQdaU6N/CHC oE5uu0x891Iny8wi+9+Lv+WlXkd+0nw= -----END CERTIFICATE-----Generated at Wed Apr 24 14:33:34 2024 by rpki-client on console-fra.rpki-client.org