$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/bfa6ba25-68fd-3493-8d45-45583c8b97c5.roa File: bfa6ba25-68fd-3493-8d45-45583c8b97c5.roa (raw, json) Hash identifier: YOTNWrsicYdPKD1Yuy9x04Gl3tlgDqny6y0jFmxgReI= Subject key identifier: B8:D7:2C:02:70:9F:7D:B3:13:B3:35:7F:A6:C0:C7:43:7F:2A:59:D3 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285840B7104D7A77272B9E9EEC08C0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/bfa6ba25-68fd-3493-8d45-45583c8b97c5.roa Signing time: Fri 27 Jan 2023 15:03:07 +0000 ROA not before: Fri 27 Jan 2023 15:03:07 +0000 ROA not after: Thu 01 May 2025 04:00:00 +0000 asID: 1239 IP address blocks: 149.143.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Mar 2023 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:40:b7:10:4d:7a:77:27:2b:9e:9e:ec:08:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jan 27 15:03:07 2023 GMT Not After : May 1 04:00:00 2025 GMT Subject: CN=5b619d81-3f4d-47c6-8332-0da2d4f478f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:42:51:91:6b:57:2b:ff:0d:16:8d:2f:a9:48: ee:ec:4c:7c:f1:14:b1:2c:ed:23:82:cc:d3:ac:f2: 4d:a2:3f:4b:81:e3:99:00:0f:85:dc:14:ff:b2:5a: 62:98:7c:ca:eb:51:19:1b:bb:2d:7b:bd:2a:b6:b7: 31:1f:01:67:aa:49:a7:51:da:4a:bc:ab:12:11:7b: be:cc:56:bc:22:ec:4b:dd:f9:37:25:ca:75:35:28: 9d:a8:2e:29:f0:f0:e6:ab:85:d9:92:fb:28:73:f9: 44:ee:ee:cc:92:a8:a3:9d:1b:85:20:3c:ff:6f:9a: 1d:d1:34:74:86:ee:7d:8f:3a:bd:25:ae:00:7c:4a: 0d:c4:38:6f:11:35:31:9e:69:7f:86:1b:9b:50:77: bf:69:f7:28:1f:90:b1:18:d5:b2:50:c0:71:05:4b: f9:4c:89:ae:fa:c1:59:ef:50:8e:d7:05:c8:a3:4a: ec:41:d3:9a:8a:f0:12:68:82:e7:ff:06:01:93:a3: 6a:ae:8d:f2:36:ab:b5:05:a5:d9:fc:43:62:99:19: d0:dc:14:80:fa:86:56:f4:ef:d5:08:de:e1:52:9f: 24:04:4d:f5:87:cd:82:d0:2c:f3:59:1f:b0:0e:b2: b0:c7:1f:a3:ce:a9:8e:7a:f7:1e:ed:c3:8d:43:43: 09:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D7:2C:02:70:9F:7D:B3:13:B3:35:7F:A6:C0:C7:43:7F:2A:59:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/bfa6ba25-68fd-3493-8d45-45583c8b97c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:95:a5:21:30:3d:39:b0:e7:da:17:a8:10:c3:42:1c:87:7a: 27:c5:79:1c:a9:e2:b2:9e:85:29:65:43:83:14:60:5c:99:72: 01:fd:77:3f:e8:15:04:6e:c3:1b:be:49:06:60:2a:1d:9f:53: 76:62:7d:32:d8:cc:e9:c7:37:60:cb:91:26:64:91:fe:25:9a: cf:c9:00:b7:53:50:0d:8a:0e:ce:b0:66:b8:c8:4e:02:18:8c: 73:a6:c8:dd:5d:d6:5f:3e:e4:40:bb:08:27:bc:11:16:8a:70: 84:2a:55:36:6e:a4:1e:44:b9:f6:3c:59:80:9a:28:a1:4d:40: f8:c3:40:6f:20:fe:00:8d:35:e5:ce:67:34:78:23:93:8d:61: e5:f7:1a:5d:da:80:79:78:06:01:69:fc:c9:f1:25:44:13:55: b9:25:cb:ac:fe:70:6f:5b:de:b9:06:81:c7:7f:e6:42:a7:10: 58:8b:95:b4:37:24:7c:e1:d4:d7:a9:9e:b5:29:12:d6:ee:af: 30:ef:7e:ee:b3:82:b0:b1:cd:77:f0:a7:8c:ff:90:b2:f0:39: 3c:35:33:8c:c1:06:b3:55:e8:88:0b:71:cb:4c:e7:d7:f2:11: 23:ad:df:ad:44:a8:c3:97:1e:ce:45:d2:53:fc:de:ae:ba:45: 3d:0f:1e:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEC3EE16dycrnp7sCMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTIzMDEyNzE1MDMwN1oXDTI1MDUwMTA0MDAwMFowLzEtMCsGA1UEAxMk NWI2MTlkODEtM2Y0ZC00N2M2LTgzMzItMGRhMmQ0ZjQ3OGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkJRkWtXK/8NFo0vqUju7Ex88RSxLO0jgszT rPJNoj9LgeOZAA+F3BT/slpimHzK61EZG7ste70qtrcxHwFnqkmnUdpKvKsSEXu+ zFa8IuxL3fk3Jcp1NSidqC4p8PDmq4XZkvsoc/lE7u7MkqijnRuFIDz/b5od0TR0 hu59jzq9Ja4AfEoNxDhvETUxnml/hhubUHe/afcoH5CxGNWyUMBxBUv5TImu+sFZ 71CO1wXIo0rsQdOaivASaILn/wYBk6Nqro3yNqu1BaXZ/ENimRnQ3BSA+oZW9O/V CN7hUp8kBE31h82C0CzzWR+wDrKwxx+jzqmOevce7cONQ0MJrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjXLAJwn32zE7M1f6bAx0N/KlnTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYmZhNmJhMjUtNjhmZC0z NDkzLThkNDUtNDU1ODNjOGI5N2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWVpSEwPTmw59oXqBDDQhyHeifFeRyp4rKehSllQ4MUYFyZcgH9dz/o FQRuwxu+SQZgKh2fU3ZifTLYzOnHN2DLkSZkkf4lms/JALdTUA2KDs6wZrjITgIY jHOmyN1d1l8+5EC7CCe8ERaKcIQqVTZupB5EufY8WYCaKKFNQPjDQG8g/gCNNeXO ZzR4I5ONYeX3Gl3agHl4BgFp/MnxJUQTVbkly6z+cG9b3rkGgcd/5kKnEFiLlbQ3 JHzh1NepnrUpEtburzDvfu6zgrCxzXfwp4z/kLLwOTw1M4zBBrNV6IgLcctM59fy ESOt361EqMOXHs5F0lP83q66RT0PHks= -----END CERTIFICATE-----Generated at Wed Mar 15 11:48:41 2023 by rpki-client on console-ams.rpki-client.org