$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa File: 1874f955-17d1-3887-9a8e-47cc98129e03.roa (raw, json) Hash identifier: x0B1ELRAQN17R5rS8uXnplL0q+MJMrRqkAwNWHv8dEU= Subject key identifier: F9:1A:01:62:ED:4A:E2:8A:74:9C:AE:24:29:85:13:88:77:ED:34:BD Certificate issuer: /CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Certificate serial: 010D0C9F43285844D44A76D399B73C8A6C53EB80 Authority key identifier: 71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa Signing time: Fri 09 Feb 2024 02:00:25 +0000 ROA not before: Fri 09 Feb 2024 02:00:25 +0000 ROA not after: Thu 09 May 2024 01:00:25 +0000 asID: 397026 IP address blocks: 139.64.170.0/23 maxlen: 23 139.64.168.0/22 maxlen: 22 139.64.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:d4:4a:76:d3:99:b7:3c:8a:6c:53:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Validity Not Before: Feb 9 02:00:25 2024 GMT Not After : May 9 01:00:25 2024 GMT Subject: CN=dc70ac58-1f78-4235-8bfb-851b55601ac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:75:5a:8e:be:95:ae:92:f6:c4:90:95:02:a6: af:16:15:7f:d6:b1:0f:2d:0f:14:47:f5:26:ec:47: 38:0f:a8:6c:55:34:db:60:70:4e:09:49:ce:5e:42: 84:1e:46:f2:7d:0a:aa:7b:75:7b:22:94:58:4b:40: 1a:83:e6:31:85:44:4c:3a:25:2c:31:96:34:15:72: 32:18:11:35:3a:87:0a:c2:82:37:96:fd:d4:b2:07: 78:22:b9:3d:c8:ce:05:a4:32:a0:35:10:03:73:cb: a2:82:67:cf:0d:16:0f:0d:b6:c7:3f:14:56:08:92: f4:98:0b:79:f7:ef:37:5a:b5:2c:6c:0e:fd:26:61: 22:89:e2:1f:3f:2c:d6:62:2c:6d:6b:e6:e0:42:a0: e9:05:7e:b9:0c:d8:57:7b:87:be:0f:08:3b:10:bf: e4:4a:92:5f:1d:2f:8a:17:8a:89:07:91:0d:b2:50: 47:4c:d6:34:79:25:a0:b4:ec:8c:2f:07:0b:df:96: d8:11:94:c0:59:d1:f9:82:25:d0:21:74:f5:b8:27: 84:b1:62:04:7f:03:35:c9:d6:21:68:ff:b5:b4:ee: 9b:4d:11:b2:fd:01:66:bb:98:9a:ce:89:b3:c1:c4: 7c:df:00:9b:bd:ad:7a:f3:e6:9c:2a:7a:a2:8e:ed: 36:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1A:01:62:ED:4A:E2:8A:74:9C:AE:24:29:85:13:88:77:ED:34:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl X509v3 Authority Key Identifier: keyid:71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer sbgp-ipAddrBlock: critical IPv4: 139.64.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:95:a8:7c:6c:d5:d2:2e:86:c8:e0:8b:b7:8a:e5:b8:84:a8: cc:09:23:ee:0e:ff:f9:f5:ff:f5:5b:de:7d:ac:05:57:9c:9f: da:69:98:5e:c0:72:68:1a:0b:7c:41:b7:29:ca:95:60:eb:fd: 10:06:bc:16:20:a0:1a:76:d9:ea:72:13:64:f7:73:5d:53:ed: ee:af:5a:2e:e0:dd:1f:83:2b:4f:11:40:19:a5:a4:d0:f6:7f: a9:0a:0f:f3:6e:f1:16:9f:00:6b:fa:9a:a2:c8:da:83:f8:1c: b0:50:97:fc:2c:31:a1:9e:1b:cd:96:15:0d:a5:87:1a:58:11: ee:05:f0:ef:22:6f:06:3f:8c:01:1a:77:81:bc:cd:25:e6:09: b7:f3:9f:25:e1:39:19:07:14:d3:93:c7:04:e1:9d:ce:1b:08: 57:f8:71:6a:b1:07:77:ae:dc:ce:b2:21:dc:5d:59:9a:be:e4: 2e:e0:98:9a:19:09:6e:e1:e9:97:4e:11:04:5c:9f:91:8f:46: 38:24:51:5a:ac:d4:88:66:bb:18:aa:08:f5:00:86:a2:d4:72: 77:f3:fc:a2:fb:53:61:2a:18:4c:87:76:a5:16:52:ab:20:77: c6:c2:3f:f9:61:8a:cf:f3:43:62:b8:f7:8d:03:e5:f4:ca:80: 5d:9d:72:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETUSnbTmbc8imxT64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY4Y2ZiNzYtZDNjZi00ZGE2LWJmZTAtMzYxZDc3NTBj OTAyMB4XDTI0MDIwOTAyMDAyNVoXDTI0MDUwOTAxMDAyNVowLzEtMCsGA1UEAxMk ZGM3MGFjNTgtMWY3OC00MjM1LThiZmItODUxYjU1NjAxYWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXVajr6VrpL2xJCVAqavFhV/1rEPLQ8UR/Um 7Ec4D6hsVTTbYHBOCUnOXkKEHkbyfQqqe3V7IpRYS0Aag+YxhURMOiUsMZY0FXIy GBE1OocKwoI3lv3Usgd4Irk9yM4FpDKgNRADc8uigmfPDRYPDbbHPxRWCJL0mAt5 9+83WrUsbA79JmEiieIfPyzWYixta+bgQqDpBX65DNhXe4e+Dwg7EL/kSpJfHS+K F4qJB5ENslBHTNY0eSWgtOyMLwcL35bYEZTAWdH5giXQIXT1uCeEsWIEfwM1ydYh aP+1tO6bTRGy/QFmu5iazomzwcR83wCbva168+acKnqiju02UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkaAWLtSuKKdJyuJCmFE4h37TS9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhj ZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFkNzc1MGM5MDIvMTg3NGY5NTUtMTdkMS0z ODg3LTlhOGUtNDdjYzk4MTI5ZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmY4Y2ZiNzYtZDNjZi00ZGE2LWJm ZTAtMzYxZDc3NTBjOTAyL2ZmOGNmYjc2LWQzY2YtNGRhNi1iZmUwLTM2MWQ3NzUw YzkwMi5jcmwwHwYDVR0jBBgwFoAUcTf+y8F0P+MrRxupXh6iaicOSMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhjZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFk Nzc1MGM5MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi0CoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeVqHxs1dIuhsjgi7eK5biEqMwJI+4O//n1//Vb3n2sBVecn9ppmF7A cmgaC3xBtynKlWDr/RAGvBYgoBp22epyE2T3c11T7e6vWi7g3R+DK08RQBmlpND2 f6kKD/Nu8RafAGv6mqLI2oP4HLBQl/wsMaGeG82WFQ2lhxpYEe4F8O8ibwY/jAEa d4G8zSXmCbfznyXhORkHFNOTxwThnc4bCFf4cWqxB3eu3M6yIdxdWZq+5C7gmJoZ CW7h6ZdOEQRcn5GPRjgkUVqs1IhmuxiqCPUAhqLUcnfz/KL7U2EqGEyHdqUWUqsg d8bCP/lhis/zQ2K4940D5fTKgF2dcgs= -----END CERTIFICATE-----Generated at Thu Apr 25 22:42:57 2024 by rpki-client on console-fra.rpki-client.org