$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d4a09bdc-1a34-32e9-95c1-afcba7627345.roa File: d4a09bdc-1a34-32e9-95c1-afcba7627345.roa (raw, json) Hash identifier: HJbA1X2pKkC67/3r/zeWW4BgK3z8F0ZDWsJZyEwU+w0= Subject key identifier: DF:78:8F:A2:F7:C5:95:56:38:3E:35:09:A3:0F:BD:5D:F3:75:A6:F6 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584558C8384E0EE7322DA7E37AC0 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d4a09bdc-1a34-32e9-95c1-afcba7627345.roa Signing time: Wed 27 Mar 2024 13:00:35 +0000 ROA not before: Wed 27 Mar 2024 13:00:35 +0000 ROA not after: Tue 25 Jun 2024 13:00:35 +0000 asID: 701 IP address blocks: 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 81.199.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:58:c8:38:4e:0e:e7:32:2d:a7:e3:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Mar 27 13:00:35 2024 GMT Not After : Jun 25 13:00:35 2024 GMT Subject: CN=8068d6cb-537a-474d-9b31-55110b370954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:26:de:2e:72:1f:46:ce:05:51:0d:43:47:f9: 40:ac:86:2c:c9:15:d2:3d:48:e1:b5:08:d7:be:c2: 75:1d:a6:3f:52:f5:2b:f8:ed:29:24:d6:6d:77:6f: de:b2:1a:4a:2d:92:70:62:31:7d:bc:87:a2:b9:86: 84:c9:b1:45:21:d1:ec:3b:c4:dc:b8:b4:97:5b:84: 05:91:c2:e7:c9:23:8e:06:19:e0:49:07:35:a9:79: 35:16:95:84:69:58:c3:02:1a:f7:c3:ef:05:e7:7c: cc:b2:d6:a3:e1:af:e2:1d:b6:fc:d9:81:99:1b:62: 9a:0d:d0:60:4b:32:70:6b:4b:2b:63:c0:36:80:e4: b8:d1:71:1c:4f:af:75:87:9b:fb:f1:38:25:ff:e7: d7:d4:1f:88:f1:29:be:6a:41:c7:76:3e:e5:c9:f1: 90:36:71:9f:d0:3b:5f:c3:f4:10:8f:d0:d1:bc:1c: cf:7b:16:a6:bf:70:10:9f:e4:07:da:91:d7:dd:30: 4d:a4:b6:1a:58:81:50:93:62:fd:2b:a6:27:6a:e8: f3:52:46:69:b0:10:4b:11:4f:1f:ce:c2:56:6f:1e: be:e0:c1:bf:88:3e:9b:d1:3c:a3:4c:08:3d:7f:3e: 5e:1b:bb:b7:53:bc:b8:42:20:ab:45:e0:ae:6c:e9: 19:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:78:8F:A2:F7:C5:95:56:38:3E:35:09:A3:0F:BD:5D:F3:75:A6:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d4a09bdc-1a34-32e9-95c1-afcba7627345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 81.199.64.0/20 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ac:21:14:f7:97:e0:3f:54:96:5e:5b:62:72:9f:59:49:e4: fb:81:cd:d7:7c:84:6d:df:1b:18:3b:74:60:8a:4a:75:25:66: 48:86:a0:35:d5:28:65:6a:8f:ff:55:cb:a1:11:16:b0:f5:99: a1:1a:35:eb:b6:27:38:a4:13:da:9b:c1:89:c6:3e:b8:b3:4f: 86:3a:0b:dd:d8:14:76:cf:21:3c:56:dc:d6:dc:2d:6f:9e:45: 39:e3:8b:1d:3d:77:f1:6d:68:a7:a5:58:ff:ba:a6:96:39:6a: b3:11:88:d6:c2:20:09:b5:fd:e8:66:74:2b:2a:c1:75:e6:f0: 20:0c:6b:6f:5e:b4:4a:f5:b5:ed:c3:51:6f:ef:0a:60:5f:ab: 61:0a:04:07:a4:2e:b9:6b:46:26:0f:43:20:55:6a:3a:3e:5f: 37:eb:28:f2:ea:0c:6e:e7:d4:f5:86:b7:d3:4a:e6:2c:28:74: 96:25:5b:69:95:9a:58:26:ff:24:bd:50:63:c8:7c:2e:80:5e: 7b:f8:dc:8f:8b:cc:8d:37:6a:fc:35:c0:9f:16:1c:45:ee:4c: 00:cc:77:cc:28:49:52:09:61:43:0c:f1:7f:30:48:02:52:8c: 49:d3:4f:23:4e:06:ce:52:ba:f7:75:ca:e0:9c:bd:f4:ba:8a: 96:e1:00:87 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEVYyDhODucyLafjesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI0MDMyNzEzMDAzNVoXDTI0MDYyNTEzMDAzNVowLzEtMCsGA1UEAxMk ODA2OGQ2Y2ItNTM3YS00NzRkLTliMzEtNTUxMTBiMzcwOTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ybeLnIfRs4FUQ1DR/lArIYsyRXSPUjhtQjX vsJ1HaY/UvUr+O0pJNZtd2/eshpKLZJwYjF9vIeiuYaEybFFIdHsO8TcuLSXW4QF kcLnySOOBhngSQc1qXk1FpWEaVjDAhr3w+8F53zMstaj4a/iHbb82YGZG2KaDdBg SzJwa0srY8A2gOS40XEcT691h5v78Tgl/+fX1B+I8Sm+akHHdj7lyfGQNnGf0Dtf w/QQj9DRvBzPexamv3AQn+QH2pHX3TBNpLYaWIFQk2L9K6YnaujzUkZpsBBLEU8f zsJWbx6+4MG/iD6b0TyjTAg9fz5eG7u3U7y4QiCrReCubOkZHwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFN94j6L3xZVWOD41CaMPvV3zdab2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvZDRhMDliZGMtMWEzNC0z MmU5LTk1YzEtYWZjYmE3NjI3MzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQEUcdAMAsD BAR5W9ADAwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBerCEU95fgP1SWXlticp9ZSeT7gc3XfIRt3xsY O3Rgikp1JWZIhqA11Shlao//VcuhERaw9ZmhGjXrtic4pBPam8GJxj64s0+GOgvd 2BR2zyE8VtzW3C1vnkU544sdPXfxbWinpVj/uqaWOWqzEYjWwiAJtf3oZnQrKsF1 5vAgDGtvXrRK9bXtw1Fv7wpgX6thCgQHpC65a0YmD0MgVWo6Pl836yjy6gxu59T1 hrfTSuYsKHSWJVtplZpYJv8kvVBjyHwugF57+NyPi8yNN2r8NcCfFhxF7kwAzHfM KElSCWFDDPF/MEgCUoxJ008jTgbOUrr3dcrgnL30uoqW4QCH -----END CERTIFICATE-----Generated at Thu May 9 15:21:00 2024 by rpki-client on console-ams.rpki-client.org