$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa File: 8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa (raw, json) Hash identifier: jIK647ymo7m77XYXf0IeoAk8RsqH4TyfjY/J5SMyc3o= Subject key identifier: 9E:6C:6A:7E:DD:D3:B7:A1:16:CB:3F:7A:73:C2:44:CE:C3:62:4F:45 Certificate issuer: /CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Certificate serial: 010D0C9F43285845131ADDFE3BED61A565AAEAC0 Authority key identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa Signing time: Sat 02 Mar 2024 14:00:31 +0000 ROA not before: Sat 02 Mar 2024 14:00:31 +0000 ROA not after: Fri 31 May 2024 13:00:31 +0000 asID: 40867 IP address blocks: 74.114.72.0/21 maxlen: 21 208.90.96.0/21 maxlen: 21 172.86.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:13:1a:dd:fe:3b:ed:61:a5:65:aa:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Validity Not Before: Mar 2 14:00:31 2024 GMT Not After : May 31 13:00:31 2024 GMT Subject: CN=039421cf-dec6-410c-928d-5d5efe44f3fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6a:f0:b3:cb:c6:d7:28:de:b7:6c:db:64:9a: ce:ad:0c:6b:6c:88:06:e8:a3:36:0c:6c:f8:32:c3: 16:69:f3:06:4a:4b:48:bb:ee:12:fc:21:1a:b6:33: 3e:a7:7b:ab:8c:b3:cd:fc:e7:94:a0:f3:d5:b2:5d: b4:5d:b2:ed:c7:fa:5b:b2:43:c7:40:25:31:87:4c: 71:b5:60:66:c1:d4:8a:bd:9f:97:1f:b3:87:b2:53: 34:b0:87:b6:49:a5:0a:32:fe:94:d2:f1:17:5c:c1: 14:6a:df:b7:34:df:a4:89:b4:4b:f4:67:3b:29:bd: df:af:65:17:6c:69:11:73:9a:4d:3c:19:17:6f:c8: e3:87:4e:a1:66:53:e6:23:26:24:57:ba:6f:ba:71: 4a:90:49:11:80:eb:3e:88:c6:31:07:d3:9f:6f:c5: 7d:38:fd:69:47:bd:eb:a1:f3:4b:9a:4a:c4:9f:4e: 3f:59:db:ae:37:95:34:58:90:06:9f:2a:cb:1b:35: 9d:94:02:ef:96:d0:de:de:a3:d0:b3:41:b8:d7:1e: a7:07:73:e8:c7:05:da:a0:83:9b:c1:b8:b5:ea:20: 99:89:e5:c2:7b:00:6f:c5:f5:b1:9d:99:32:39:ed: 9f:11:66:39:35:aa:11:45:1b:4b:a9:bb:fb:7a:d8: 2a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6C:6A:7E:DD:D3:B7:A1:16:CB:3F:7A:73:C2:44:CE:C3:62:4F:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl X509v3 Authority Key Identifier: keyid:BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer sbgp-ipAddrBlock: critical IPv4: 74.114.72.0/21 172.86.240.0/21 208.90.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:93:ff:04:2b:f6:c0:ea:5b:2d:e6:31:1f:d2:5c:1b:98:b3: 2b:72:e2:a9:60:3c:e3:c4:8e:39:59:87:17:0d:05:c7:48:ff: 26:f7:94:f8:e0:f3:03:78:b6:79:2e:e6:31:93:f7:3a:ae:34: 71:4e:c4:dc:a8:f9:0f:5e:aa:8b:e3:10:9e:a2:85:bd:d9:d5: 4f:db:b7:f3:bf:63:30:b6:0f:a5:89:92:dc:5b:94:8c:58:62: 05:14:06:eb:ba:02:58:93:bb:e7:72:c8:f1:3d:51:67:da:06: 9b:40:fa:18:53:0d:82:dc:e3:76:a8:9f:71:28:58:5f:eb:57: de:40:37:1f:a2:78:51:0d:2c:fb:0c:65:00:19:df:47:a8:d7: c4:a3:8f:5a:9e:2a:3c:30:bb:26:64:67:e1:eb:cd:a1:ce:41: 82:d2:d8:2d:3f:30:c0:4c:7a:a9:66:3a:c0:7d:6a:71:8b:7e: 4a:82:09:b0:15:53:f6:8b:9f:89:ca:79:cf:71:fd:91:4d:c5: d2:27:a9:d8:a6:0e:23:ee:f3:12:9f:f4:50:0a:ed:47:74:d1: 61:af:ca:84:93:f9:c4:40:3a:79:d0:f5:e8:40:3c:03:29:f0: ab:46:f8:1c:ec:95:1f:de:36:7c:c3:3b:7a:2a:46:27:43:e4: 37:69:ec:5b -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEUTGt3+O+1hpWWq6sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYzYzNiZDUtM2I5NC00N2UyLTgxZmMtZjQ5MDA4MTRl NDk0MB4XDTI0MDMwMjE0MDAzMVoXDTI0MDUzMTEzMDAzMVowLzEtMCsGA1UEAxMk MDM5NDIxY2YtZGVjNi00MTBjLTkyOGQtNWQ1ZWZlNDRmM2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWrws8vG1yjet2zbZJrOrQxrbIgG6KM2DGz4 MsMWafMGSktIu+4S/CEatjM+p3urjLPN/OeUoPPVsl20XbLtx/pbskPHQCUxh0xx tWBmwdSKvZ+XH7OHslM0sIe2SaUKMv6U0vEXXMEUat+3NN+kibRL9Gc7Kb3fr2UX bGkRc5pNPBkXb8jjh06hZlPmIyYkV7pvunFKkEkRgOs+iMYxB9Ofb8V9OP1pR73r ofNLmkrEn04/WduuN5U0WJAGnyrLGzWdlALvltDe3qPQs0G41x6nB3PoxwXaoIOb wbi16iCZieXCewBvxfWxnZkyOe2fEWY5NaoRRRtLqbv7etgqtwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFJ5san7d07ehFss/enPCRM7DYk9FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNj M2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkwMDgxNGU0OTQvOGI1YjNmNjAtZDk0ZC0z Yjk2LWJkNTEtN2VjZWY5MTlhMDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYzYzNiZDUtM2I5NC00N2UyLTgx ZmMtZjQ5MDA4MTRlNDk0L2JmM2MzYmQ1LTNiOTQtNDdlMi04MWZjLWY0OTAwODE0 ZTQ5NC5jcmwwHwYDVR0jBBgwFoAUv27gzbQvdJZGDC7Ndgx/FlpcgW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNjM2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkw MDgxNGU0OTQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDSnJIAwQD rFbwAwQD0FpgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAC6T/wQr9sDqWy3mMR/SXBuYsyty4qlgPOPEjjlZ hxcNBcdI/yb3lPjg8wN4tnku5jGT9zquNHFOxNyo+Q9eqovjEJ6ihb3Z1U/bt/O/ YzC2D6WJktxblIxYYgUUBuu6AliTu+dyyPE9UWfaBptA+hhTDYLc43aon3EoWF/r V95ANx+ieFENLPsMZQAZ30eo18Sjj1qeKjwwuyZkZ+HrzaHOQYLS2C0/MMBMeqlm OsB9anGLfkqCCbAVU/aLn4nKec9x/ZFNxdInqdimDiPu8xKf9FAK7Ud00WGvyoST +cRAOnnQ9ehAPAMp8KtG+BzslR/eNnzDO3oqRidD5Ddp7Fs= -----END CERTIFICATE-----Generated at Fri May 17 16:13:57 2024 by rpki-client on console-fra.rpki-client.org