$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d8086889-6f1b-352b-8d9e-4174cd5980da.roa File: d8086889-6f1b-352b-8d9e-4174cd5980da.roa (raw, json) Hash identifier: FQWxYuvAXSDwyxUQXeCeD/WY/vBYrVMATg7sEMwSi+Y= Subject key identifier: D5:58:B0:3F:35:6D:26:46:3F:A7:12:0D:80:CB:3D:6F:D8:FE:5A:B5 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F43285845C1791A2BDFD2BA7F65D3C540 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d8086889-6f1b-352b-8d9e-4174cd5980da.roa Signing time: Sat 04 May 2024 01:00:25 +0000 ROA not before: Sat 04 May 2024 01:00:25 +0000 ROA not after: Fri 02 Aug 2024 01:00:25 +0000 asID: 25645 IP address blocks: 137.239.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c1:79:1a:2b:df:d2:ba:7f:65:d3:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: May 4 01:00:25 2024 GMT Not After : Aug 2 01:00:25 2024 GMT Subject: CN=0f66989a-07ef-4dce-913e-177155d25d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:14:7c:4e:aa:8c:ce:4c:7b:2a:60:9e:bc:13: a5:5d:5a:f0:c1:ca:d8:e8:16:a3:9d:17:70:37:0f: a7:7c:9d:1e:5b:4e:7e:31:7c:be:a3:bf:59:db:09: 33:38:f4:c2:af:2d:fa:e8:52:11:30:c5:e8:e2:c5: b0:10:6e:1b:91:21:98:60:16:9e:1c:a3:77:38:cc: 5b:f7:cf:c7:ae:ec:46:fd:12:dd:a8:2c:ad:77:12: c4:3a:95:39:18:de:35:39:a8:c1:d0:3d:f2:45:f8: d9:b9:b1:c0:7c:6d:9d:2c:49:e5:38:4c:8e:a1:36: 32:c2:c5:73:21:88:cb:78:45:9a:1a:50:11:bf:4d: f1:04:4b:3b:bd:84:47:d4:ee:0c:21:ab:1f:67:77: 1d:8a:c5:92:59:54:d5:56:88:7c:f3:9f:41:1b:0b: 9c:ba:ba:6b:01:e5:2e:59:9b:be:31:e6:20:5c:0e: fa:03:44:34:f8:f6:1c:2c:74:b8:f8:bd:21:63:43: f2:38:68:10:74:f9:11:19:2a:ee:29:70:49:ee:54: 1c:3c:43:14:9b:78:ee:c7:63:cd:63:7a:f9:97:08: 29:04:2e:f5:40:dc:02:0c:c9:1a:0c:5d:00:25:92: 3d:ce:3a:42:e4:15:55:85:78:3b:69:b9:0f:7f:71: af:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:58:B0:3F:35:6D:26:46:3F:A7:12:0D:80:CB:3D:6F:D8:FE:5A:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d8086889-6f1b-352b-8d9e-4174cd5980da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:a2:25:8c:e9:ed:a2:20:fb:0f:82:2a:0e:b3:0e:93:a0:71: 1a:b9:ee:d1:de:a1:6f:58:70:54:5f:04:61:21:ee:fc:ea:d8: ed:f2:37:c1:f8:44:82:7d:01:86:74:38:2f:61:51:0a:99:22: 9b:ad:62:ec:ee:da:2e:ab:4f:fa:3b:18:5c:9c:41:4a:80:c8: 32:de:4a:4a:0c:25:90:58:31:4f:ef:9a:78:2e:23:11:cb:15: ed:ff:f9:af:a0:8e:41:92:79:0d:39:26:a7:67:bc:e0:36:62: 07:55:6e:71:52:76:89:8d:4d:cc:8b:8a:31:d0:13:d2:2f:ec: 46:b7:f6:8a:f3:c3:bb:5f:f2:d2:1f:7e:e9:85:7f:9a:33:76: cf:25:64:37:e1:04:c8:c3:5a:4e:93:5b:e2:6a:2d:e3:ec:ee: 79:f0:bf:a8:31:47:1b:c3:1c:a0:50:ff:fa:e2:7c:5c:b6:a9: b2:76:64:29:10:56:c2:23:91:3e:c9:59:ba:37:96:84:77:84: 41:bb:bf:2f:9d:a6:25:b2:f9:82:b8:4c:36:72:f7:a7:46:98: 5e:8a:fa:71:5f:e4:77:2d:0f:38:17:77:32:ed:3c:b8:a6:4e: 88:c2:9d:ed:c0:f3:3a:fa:f1:3c:28:a4:ac:a1:40:c6:b4:59: bd:5c:f0:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXBeRor39K6f2XTxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI0MDUwNDAxMDAyNVoXDTI0MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk MGY2Njk4OWEtMDdlZi00ZGNlLTkxM2UtMTc3MTU1ZDI1ZDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxR8TqqMzkx7KmCevBOlXVrwwcrY6BajnRdw Nw+nfJ0eW05+MXy+o79Z2wkzOPTCry366FIRMMXo4sWwEG4bkSGYYBaeHKN3OMxb 98/HruxG/RLdqCytdxLEOpU5GN41OajB0D3yRfjZubHAfG2dLEnlOEyOoTYywsVz IYjLeEWaGlARv03xBEs7vYRH1O4MIasfZ3cdisWSWVTVVoh8859BGwucurprAeUu WZu+MeYgXA76A0Q0+PYcLHS4+L0hY0PyOGgQdPkRGSruKXBJ7lQcPEMUm3jux2PN Y3r5lwgpBC71QNwCDMkaDF0AJZI9zjpC5BVVhXg7abkPf3GvKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVYsD81bSZGP6cSDYDLPW/Y/lq1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZDgwODY4ODktNmYxYi0z NTJiLThkOWUtNDE3NGNkNTk4MGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqiJYzp7aIg+w+CKg6zDpOgcRq57tHeoW9YcFRfBGEh7vzq2O3yN8H4 RIJ9AYZ0OC9hUQqZIputYuzu2i6rT/o7GFycQUqAyDLeSkoMJZBYMU/vmnguIxHL Fe3/+a+gjkGSeQ05JqdnvOA2YgdVbnFSdomNTcyLijHQE9Iv7Ea39orzw7tf8tIf fumFf5ozds8lZDfhBMjDWk6TW+JqLePs7nnwv6gxRxvDHKBQ//rifFy2qbJ2ZCkQ VsIjkT7JWbo3loR3hEG7vy+dpiWy+YK4TDZy96dGmF6K+nFf5HctDzgXdzLtPLim TojCne3A8zr68TwopKyhQMa0Wb1c8Ak= -----END CERTIFICATE-----Generated at Thu May 23 17:58:08 2024 by rpki-client on console-fra.rpki-client.org