$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/f2ad73f3-0f80-3cc2-9399-881a9101068b.roa File: f2ad73f3-0f80-3cc2-9399-881a9101068b.roa (raw, json) Hash identifier: szgt9Mu75KsqzD/p+xtpmp2S0a3JTsdvTblDlyIa1CQ= Subject key identifier: 7C:54:FF:2A:4D:92:46:D7:F8:8C:30:40:EC:73:F1:ED:9F:E3:8A:65 Certificate issuer: /CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Certificate serial: 010D0C9F43285845A6F36EAD45DB2A2C456B9600 Authority key identifier: 11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/f2ad73f3-0f80-3cc2-9399-881a9101068b.roa Signing time: Wed 24 Apr 2024 13:00:33 +0000 ROA not before: Wed 24 Apr 2024 13:00:33 +0000 ROA not after: Tue 23 Jul 2024 13:00:33 +0000 asID: 14860 IP address blocks: 104.255.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 May 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a6:f3:6e:ad:45:db:2a:2c:45:6b:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Validity Not Before: Apr 24 13:00:33 2024 GMT Not After : Jul 23 13:00:33 2024 GMT Subject: CN=dcd5f813-e9fb-4cc2-8912-4e35358f3f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a9:42:66:22:4d:f1:58:af:8f:b5:9b:6e:e5: 5c:18:85:33:cb:78:4e:ec:df:d7:c3:aa:c8:85:2d: 0e:c2:66:06:d7:82:f2:5f:ba:24:59:53:1d:2e:08: 89:a7:2e:df:35:38:81:bb:94:98:74:17:76:7f:fd: 3d:bf:59:99:74:a2:04:e0:9e:86:40:fa:41:76:b2: a2:14:93:0d:e7:7a:b6:a4:a9:02:f5:45:44:7a:8e: e5:07:82:a3:9f:42:d2:fb:e5:40:cb:ce:8e:9c:ef: 36:62:5c:42:dc:8b:4b:b5:f8:b4:70:50:bb:fd:a3: 25:b0:7b:5d:2c:85:27:74:8c:ec:e1:d2:cd:f4:9c: 96:6c:6e:c5:00:31:4a:b3:54:d5:90:d7:4f:d2:50: 22:dc:1a:e4:f6:8d:80:d6:58:f1:41:9d:9c:64:0c: d8:d7:01:c5:90:eb:33:65:19:79:2c:90:e6:33:a8: d5:34:9e:57:56:c3:a7:7c:3f:32:39:b7:ce:c8:8b: 75:b0:45:51:c2:0d:dd:de:ac:f7:42:5d:d7:30:12: 8b:80:92:9b:4c:c2:37:57:4a:0d:2e:53:c5:d5:f3: ec:71:c3:fd:41:3b:15:38:20:0e:3b:62:a9:8b:9d: 64:fd:19:de:87:2a:a6:40:be:19:8b:6f:8a:fd:c8: 70:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:54:FF:2A:4D:92:46:D7:F8:8C:30:40:EC:73:F1:ED:9F:E3:8A:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/f2ad73f3-0f80-3cc2-9399-881a9101068b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl X509v3 Authority Key Identifier: keyid:11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer sbgp-ipAddrBlock: critical IPv4: 104.255.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:8a:83:e6:19:be:55:ee:79:71:83:41:29:03:03:64:42:e4: a8:3d:66:02:08:02:47:16:87:26:49:b9:d3:bf:a3:ef:04:7b: ba:a9:a4:fe:f7:dd:bf:03:cf:69:84:21:30:60:cc:47:9c:c1: 60:6b:e3:b6:c5:5c:b3:74:b4:2d:7c:a8:c6:3f:97:ac:72:cb: 2d:62:9e:93:1f:84:02:14:77:ab:52:bc:9d:21:07:99:80:be: c1:2c:15:09:3d:91:6c:65:af:05:3e:ac:a1:3d:1f:d0:d2:fe: 48:1c:08:7e:50:c6:92:4e:c2:4c:a1:ee:ef:b8:85:56:7b:09: ff:b4:d3:71:69:78:6c:1d:af:bd:28:b3:23:ef:35:06:fb:7e: ec:94:f3:e2:ee:ca:a3:01:49:1a:05:0e:cd:20:03:3e:39:97: 77:86:03:7b:67:7c:57:fc:92:42:e3:63:e3:20:90:9e:4a:72: 72:ac:69:a2:ff:47:b6:a3:df:6f:3b:7d:47:a6:56:87:ac:a9: 3b:b0:35:f5:4b:8c:56:19:d6:87:55:b6:15:e6:51:db:3b:99: de:0f:7f:e4:8f:02:0f:11:4d:58:84:bd:76:2d:0f:c4:4d:d1: 63:b3:9f:45:90:9e:5c:f3:e5:bc:63:b2:6d:a7:fe:d0:ab:ff: fb:74:88:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWm826tRdsqLEVrlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxMGZlNzUtOTgxZi00YTNjLWI3N2EtMjhlMjM1YmVk OWYxMB4XDTI0MDQyNDEzMDAzM1oXDTI0MDcyMzEzMDAzM1owLzEtMCsGA1UEAxMk ZGNkNWY4MTMtZTlmYi00Y2MyLTg5MTItNGUzNTM1OGYzZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKlCZiJN8Vivj7WbbuVcGIUzy3hO7N/Xw6rI hS0OwmYG14LyX7okWVMdLgiJpy7fNTiBu5SYdBd2f/09v1mZdKIE4J6GQPpBdrKi FJMN53q2pKkC9UVEeo7lB4Kjn0LS++VAy86OnO82YlxC3ItLtfi0cFC7/aMlsHtd LIUndIzs4dLN9JyWbG7FADFKs1TVkNdP0lAi3Brk9o2A1ljxQZ2cZAzY1wHFkOsz ZRl5LJDmM6jVNJ5XVsOnfD8yObfOyIt1sEVRwg3d3qz3Ql3XMBKLgJKbTMI3V0oN LlPF1fPsccP9QTsVOCAOO2Kpi51k/RnehyqmQL4Zi2+K/chw0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxU/ypNkkbX+IwwQOxz8e2f44plMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEw ZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUyMzViZWQ5ZjEvZjJhZDczZjMtMGY4MC0z Y2MyLTkzOTktODgxYTkxMDEwNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYxMGZlNzUtOTgxZi00YTNjLWI3 N2EtMjhlMjM1YmVkOWYxL2JmMTBmZTc1LTk4MWYtNGEzYy1iNzdhLTI4ZTIzNWJl ZDlmMS5jcmwwHwYDVR0jBBgwFoAUEV4BnEx9mLt1kmRbjdsLOL4Rd7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEwZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUy MzViZWQ5ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGKg+YZvlXueXGDQSkDA2RC5Kg9ZgIIAkcWhyZJudO/o+8Ee7qppP73 3b8Dz2mEITBgzEecwWBr47bFXLN0tC18qMY/l6xyyy1inpMfhAIUd6tSvJ0hB5mA vsEsFQk9kWxlrwU+rKE9H9DS/kgcCH5QxpJOwkyh7u+4hVZ7Cf+003FpeGwdr70o syPvNQb7fuyU8+LuyqMBSRoFDs0gAz45l3eGA3tnfFf8kkLjY+MgkJ5KcnKsaaL/ R7aj3287fUemVoesqTuwNfVLjFYZ1odVthXmUds7md4Pf+SPAg8RTViEvXYtD8RN 0WOzn0WQnlzz5bxjsm2n/tCr//t0iB8= -----END CERTIFICATE-----Generated at Mon May 13 01:59:16 2024 by rpki-client on console-fra.rpki-client.org