$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa File: 900f5454-5a4b-3c72-a9e6-09f19630db71.roa (raw, json) Hash identifier: gi/1XUTegUNf4KqCo0M4Aqoinyazp3pW6YhppiR8BGU= Subject key identifier: AF:E9:C3:FC:BA:C3:1C:E6:12:EC:CB:16:2A:2B:BC:DD:CE:B9:00:74 Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F43285845CE08F04590A46C0868406E80 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa Signing time: Wed 08 May 2024 13:00:34 +0000 ROA not before: Wed 08 May 2024 13:00:34 +0000 ROA not after: Tue 06 Aug 2024 13:00:34 +0000 asID: 88 IP address blocks: 128.112.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ce:08:f0:45:90:a4:6c:08:68:40:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: May 8 13:00:34 2024 GMT Not After : Aug 6 13:00:34 2024 GMT Subject: CN=a608d0d6-5603-4eec-afdb-f4651f162565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0e:be:d4:06:6f:47:32:70:99:4e:b9:c8:f4: 2e:85:7e:94:8a:15:fd:74:a7:e9:f2:be:02:fb:00: 0b:98:c8:09:38:ce:97:75:ef:14:01:eb:82:1c:06: fe:c0:7a:df:7c:39:9d:ad:44:f4:b5:02:b2:54:28: dd:e4:4c:44:dd:40:b3:61:36:e8:5d:5e:30:05:0e: a2:81:ff:4f:95:b3:e9:ed:b5:ad:64:b9:e0:9b:d6: 89:24:f6:2f:39:28:16:9d:13:62:2f:f0:73:53:fb: 43:1d:81:08:5e:a9:8d:5d:4d:b4:8a:4c:87:50:f7: 7f:b9:7a:2b:87:1a:c3:38:c7:7f:e3:f0:a3:5d:f4: 2e:a0:f4:5c:64:35:a6:cc:d3:0d:37:31:44:04:18: 06:4d:8f:30:99:e8:f5:f9:38:2f:ff:d7:76:d0:7d: 7e:e0:9c:fa:03:f4:ca:ae:c0:0b:88:95:cb:ef:2f: d9:f4:14:25:b1:5d:29:bd:12:2a:2d:cf:d7:50:a0: f4:fd:3f:f8:c9:2d:aa:56:a9:c6:20:49:eb:bb:01: 62:58:27:f9:d4:dc:f2:ad:fb:9d:2c:9a:ea:5a:ab: b6:68:37:8a:43:b7:da:2d:b6:1a:38:68:1a:28:3f: ec:12:a1:b4:e1:d9:ad:43:25:28:43:ab:03:9a:f3: aa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E9:C3:FC:BA:C3:1C:E6:12:EC:CB:16:2A:2B:BC:DD:CE:B9:00:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 128.112.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:c6:0d:47:ea:de:10:49:46:60:83:ed:d0:5c:c3:15:86:47: 05:68:1b:60:ce:02:4b:3b:15:f9:13:f1:d2:fd:27:7a:bc:6f: 34:a2:00:95:f4:a5:bf:50:a6:1c:41:ca:20:11:b2:c3:6e:b2: 87:d8:20:6f:27:7b:89:aa:48:72:37:2a:2d:14:bf:4e:77:c7: ca:98:65:03:89:1e:30:e4:d7:59:75:ad:03:35:20:b9:6b:0a: b0:2b:98:c8:3f:1a:82:60:78:76:d8:43:ef:e4:22:0e:a0:85: 4d:55:c1:52:11:6d:8e:8e:5b:83:58:d2:eb:4e:61:30:2a:54: 68:52:d2:52:f3:ed:90:ba:65:7b:4d:3f:e5:f3:9c:f6:47:f1: 07:17:c6:3d:f3:06:39:b6:24:d3:ad:e9:6a:f1:22:8e:cd:ce: fb:52:fb:92:6b:9f:47:1d:c3:11:84:1d:50:96:6b:18:5d:fe: f0:a5:ca:c0:21:1a:8c:79:95:20:a1:fc:05:f4:5d:9c:9c:28: 65:24:b7:d2:e4:44:0c:74:88:18:24:01:1d:d2:57:50:a4:06: b8:6c:38:53:85:27:25:94:d2:96:ef:e3:95:6e:2b:b7:86:69: 24:16:84:da:33:dd:e5:64:13:b0:d7:07:f6:41:c0:0b:1e:66: fb:ef:31:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXOCPBFkKRsCGhAboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI0MDUwODEzMDAzNFoXDTI0MDgwNjEzMDAzNFowLzEtMCsGA1UEAxMk YTYwOGQwZDYtNTYwMy00ZWVjLWFmZGItZjQ2NTFmMTYyNTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ6+1AZvRzJwmU65yPQuhX6UihX9dKfp8r4C +wALmMgJOM6Xde8UAeuCHAb+wHrffDmdrUT0tQKyVCjd5ExE3UCzYTboXV4wBQ6i gf9PlbPp7bWtZLngm9aJJPYvOSgWnRNiL/BzU/tDHYEIXqmNXU20ikyHUPd/uXor hxrDOMd/4/CjXfQuoPRcZDWmzNMNNzFEBBgGTY8wmej1+Tgv/9d20H1+4Jz6A/TK rsALiJXL7y/Z9BQlsV0pvRIqLc/XUKD0/T/4yS2qVqnGIEnruwFiWCf51Nzyrfud LJrqWqu2aDeKQ7faLbYaOGgaKD/sEqG04dmtQyUoQ6sDmvOqXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/pw/y6wxzmEuzLFiorvN3OuQB0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvOTAwZjU0NTQtNWE0Yi0z YzcyLWE5ZTYtMDlmMTk2MzBkYjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgHACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPGDUfq3hBJRmCD7dBcwxWGRwVoG2DOAks7FfkT8dL9J3q8bzSiAJX0 pb9QphxByiARssNusofYIG8ne4mqSHI3Ki0Uv053x8qYZQOJHjDk11l1rQM1ILlr CrArmMg/GoJgeHbYQ+/kIg6ghU1VwVIRbY6OW4NY0utOYTAqVGhS0lLz7ZC6ZXtN P+XznPZH8QcXxj3zBjm2JNOt6WrxIo7NzvtS+5Jrn0cdwxGEHVCWaxhd/vClysAh Gox5lSCh/AX0XZycKGUkt9LkRAx0iBgkAR3SV1CkBrhsOFOFJyWU0pbv45VuK7eG aSQWhNoz3eVkE7DXB/ZBwAseZvvvMWc= -----END CERTIFICATE-----Generated at Fri May 17 16:13:58 2024 by rpki-client on console-fra.rpki-client.org