$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/43d529a5-06fc-3596-b306-3805ee39efec.roa File: 43d529a5-06fc-3596-b306-3805ee39efec.roa (raw, json) Hash identifier: 98CEbmVsdUENO5WH+BoN/sRCTEjrr800q+PiH+Qmir0= Subject key identifier: 17:94:6D:34:01:7B:16:23:7D:82:6C:69:57:79:2A:94:01:B8:0A:69 Certificate issuer: /CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Certificate serial: 010D0C9F432858450C201E160156C426E0A5BD00 Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/43d529a5-06fc-3596-b306-3805ee39efec.roa Signing time: Thu 29 Feb 2024 02:00:27 +0000 ROA not before: Thu 29 Feb 2024 02:00:27 +0000 ROA not after: Wed 29 May 2024 01:00:27 +0000 asID: 7029 IP address blocks: 134.195.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:0c:20:1e:16:01:56:c4:26:e0:a5:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Validity Not Before: Feb 29 02:00:27 2024 GMT Not After : May 29 01:00:27 2024 GMT Subject: CN=5f689d99-cdab-4ab3-a3df-1a5eccb33d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ee:10:79:b1:84:32:3d:cf:63:d7:54:f8:82: f5:b6:c3:4a:fb:21:36:74:ca:b8:19:d2:8c:af:0d: f4:cf:44:ec:17:49:5a:3d:1e:2e:ae:9e:f4:68:37: 1d:5b:23:b3:02:91:7e:d1:ca:1b:35:ba:51:fb:58: 73:e9:2e:32:ff:aa:0d:7c:f5:dc:14:f6:a8:e3:59: 3e:aa:62:3e:46:a4:56:31:4d:67:e5:5a:37:a1:6d: 48:48:d4:60:c9:4e:2e:28:de:77:7a:6f:96:7a:6d: 53:80:85:23:bc:cd:d0:b4:3e:1a:b6:a7:1f:91:b9: 2f:d9:a4:bd:0e:21:65:73:0a:80:28:60:a0:5d:8b: 9c:80:7c:4b:70:15:a1:c7:1b:a5:ea:5a:47:b6:27: ac:5f:a0:70:e4:e8:70:5a:f6:4c:29:7c:c2:fc:91: f4:4e:9f:ef:48:89:7a:3f:76:18:c0:a6:72:cd:41: 95:8b:45:2c:ae:02:40:a4:d7:dd:fd:c4:d0:b1:37: 0a:a4:d1:ed:e4:a7:06:a1:a1:25:7d:81:d9:10:ca: 1e:2e:3f:8d:79:8a:82:66:9a:83:66:dc:b6:6e:9c: 1e:5d:df:a0:72:fa:8b:cf:cc:8c:90:5d:02:f9:87: e2:32:03:40:86:7f:69:9a:e9:17:4a:41:7d:70:7c: b7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:94:6D:34:01:7B:16:23:7D:82:6C:69:57:79:2A:94:01:B8:0A:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/43d529a5-06fc-3596-b306-3805ee39efec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl X509v3 Authority Key Identifier: keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer sbgp-ipAddrBlock: critical IPv4: 134.195.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:66:fb:bd:a1:ac:1d:2a:55:ec:48:99:81:a1:88:98:4c:13: 17:8a:a0:25:09:d9:5d:de:aa:50:20:47:b4:6b:fb:89:f1:96: ba:83:ed:af:db:52:64:e3:61:66:d6:8a:96:93:d6:b0:cf:fd: 34:72:04:37:93:69:40:53:a7:27:b2:b0:77:bf:f4:1d:7c:a3: 4b:1c:5e:f9:c5:03:b1:bb:59:4b:af:78:6c:65:a4:38:c9:8e: 62:49:81:85:dd:0e:e7:91:a8:ca:6a:e3:5f:27:9a:94:92:7e: 7a:18:15:6c:73:cd:79:0e:bc:b4:71:15:4f:58:45:bf:ea:7c: 05:e3:17:ae:73:5e:34:66:62:a6:4e:7e:43:62:1c:13:9a:fb: 52:d5:de:b3:91:2e:27:08:7c:b9:7e:37:88:7c:84:10:d9:7f: 13:49:5c:58:33:05:9b:2e:1f:04:5c:02:b3:81:fa:11:ea:5e: 80:a3:e3:c2:05:bd:53:e2:39:8d:ab:5a:dc:dd:9f:ca:60:3e: 80:c0:77:3c:6b:4e:bd:c9:9a:00:f5:3b:ee:b0:5a:56:43:21: 09:a5:a2:d8:5f:76:8d:9a:e0:e2:3b:25:10:2c:06:eb:cf:dc: c6:5e:e5:8f:5b:ec:cf:c2:4a:d4:f0:1e:42:82:d2:da:88:34: b2:a8:84:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUMIB4WAVbEJuClvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZTc5N2YtZjQyNi00YmE4LTk4YjAtMWMyYjVmNzUy NzUzMB4XDTI0MDIyOTAyMDAyN1oXDTI0MDUyOTAxMDAyN1owLzEtMCsGA1UEAxMk NWY2ODlkOTktY2RhYi00YWIzLWEzZGYtMWE1ZWNjYjMzZDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4O4QebGEMj3PY9dU+IL1tsNK+yE2dMq4GdKM rw30z0TsF0laPR4urp70aDcdWyOzApF+0cobNbpR+1hz6S4y/6oNfPXcFPao41k+ qmI+RqRWMU1n5Vo3oW1ISNRgyU4uKN53em+Wem1TgIUjvM3QtD4atqcfkbkv2aS9 DiFlcwqAKGCgXYucgHxLcBWhxxul6lpHtiesX6Bw5OhwWvZMKXzC/JH0Tp/vSIl6 P3YYwKZyzUGVi0UsrgJApNfd/cTQsTcKpNHt5KcGoaElfYHZEMoeLj+NeYqCZpqD Zty2bpweXd+gcvqLz8yMkF0C+YfiMgNAhn9pmukXSkF9cHy3zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeUbTQBexYjfYJsaVd5KpQBuAppMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84NWJl Nzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJiNWY3NTI3NTMvNDNkNTI5YTUtMDZmYy0z NTk2LWIzMDYtMzgwNWVlMzllZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODViZTc5N2YtZjQyNi00YmE4LTk4 YjAtMWMyYjVmNzUyNzUzLzg1YmU3OTdmLWY0MjYtNGJhOC05OGIwLTFjMmI1Zjc1 Mjc1My5jcmwwHwYDVR0jBBgwFoAUSbHJSQelRk0j2lxomUD5c5meMFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84NWJlNzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJi NWY3NTI3NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZm+72hrB0qVexImYGhiJhMExeKoCUJ2V3eqlAgR7Rr+4nxlrqD7a/b UmTjYWbWipaT1rDP/TRyBDeTaUBTpyeysHe/9B18o0scXvnFA7G7WUuveGxlpDjJ jmJJgYXdDueRqMpq418nmpSSfnoYFWxzzXkOvLRxFU9YRb/qfAXjF65zXjRmYqZO fkNiHBOa+1LV3rORLicIfLl+N4h8hBDZfxNJXFgzBZsuHwRcArOB+hHqXoCj48IF vVPiOY2rWtzdn8pgPoDAdzxrTr3JmgD1O+6wWlZDIQmlothfdo2a4OI7JRAsBuvP 3MZe5Y9b7M/CStTwHkKC0tqINLKohDo= -----END CERTIFICATE-----Generated at Sat May 11 15:32:10 2024 by rpki-client on console-fra.rpki-client.org