$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/3a5025bf-ee37-315a-a197-68996a369c6a.roa File: 3a5025bf-ee37-315a-a197-68996a369c6a.roa (raw, json) Hash identifier: e9MeCtI+Tn6hvR3InNFBIrI8oaWArNJiZr4D6+kLz5k= Subject key identifier: BE:8A:19:8C:20:B5:01:4B:7A:C6:C6:AB:D2:EC:B9:A7:83:4C:DE:B5 Certificate issuer: /CN=24b82191-9eab-4780-afd2-8d7640123b59 Certificate serial: 010D0C9F432858453A12AD7B6B11AC83ED7CD160 Authority key identifier: AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/3a5025bf-ee37-315a-a197-68996a369c6a.roa Signing time: Sat 16 Mar 2024 13:00:31 +0000 ROA not before: Sat 16 Mar 2024 13:00:31 +0000 ROA not after: Fri 14 Jun 2024 13:00:31 +0000 asID: 54714 IP address blocks: 172.83.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:3a:12:ad:7b:6b:11:ac:83:ed:7c:d1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b82191-9eab-4780-afd2-8d7640123b59 Validity Not Before: Mar 16 13:00:31 2024 GMT Not After : Jun 14 13:00:31 2024 GMT Subject: CN=e1950f70-7b69-4a6c-a8c3-702c62f8fdf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5a:38:de:a9:09:1a:ae:f2:ed:6f:94:1c:bf: 31:e3:ff:06:47:3a:ee:8c:a4:aa:45:10:0d:ca:62: 8b:9c:e2:8b:e3:54:42:b0:5f:a6:db:b5:54:6c:1a: 34:b5:70:7e:cc:90:bc:68:d7:a5:a0:c6:d9:c1:bd: 6f:2e:6c:c6:cf:3e:a2:2a:f8:fe:9c:42:5f:fd:b6: 5f:48:55:d1:44:81:bc:77:36:03:e5:80:b8:ae:5a: cf:29:43:57:f0:a2:a7:d1:78:13:9d:48:b2:93:cd: 76:2a:f2:de:fb:5d:90:8c:34:da:e3:38:2e:8b:39: 5e:dc:d0:d1:43:17:14:02:56:6b:88:75:23:65:38: 72:5f:76:0e:3a:34:40:12:2b:46:92:ee:2c:cb:d9: d4:e5:79:81:ad:2a:91:61:35:48:16:32:4f:e1:cc: 5b:fb:01:3f:5f:45:e9:4a:ed:5e:6e:61:89:5b:68: 3a:54:86:8c:53:6a:b7:7c:26:2a:5a:65:35:fd:a3: e9:03:36:86:b7:99:f0:4d:02:34:69:55:df:bc:db: 04:61:33:0a:c1:83:72:2e:89:87:54:54:0f:f6:1f: 47:cb:56:d1:a1:bd:03:4e:c8:29:09:c5:32:93:47: df:ba:fe:04:ba:b9:72:2d:81:7a:69:dd:e5:a4:fc: d0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8A:19:8C:20:B5:01:4B:7A:C6:C6:AB:D2:EC:B9:A7:83:4C:DE:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/3a5025bf-ee37-315a-a197-68996a369c6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl X509v3 Authority Key Identifier: keyid:AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer sbgp-ipAddrBlock: critical IPv4: 172.83.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:24:f4:79:d6:41:2c:0b:a2:3e:b1:19:97:47:a7:b1:94:91: f1:77:60:cb:57:8d:73:e3:0d:41:af:42:7e:6d:28:f1:fc:e8: 98:f9:63:fb:c8:9b:2f:7b:05:19:7e:fa:3f:32:ef:95:dc:38: 4e:95:d5:1e:50:97:0e:82:78:21:66:9b:62:ba:3b:15:ab:52: 26:30:28:a0:87:b5:e6:a7:08:64:1d:7e:6b:e7:08:17:b7:5f: 88:04:31:35:27:57:4e:04:9d:91:82:a2:49:e7:fb:b9:f5:7d: 27:a0:ca:d7:5a:23:7c:cf:b3:35:52:b9:d3:05:bd:b9:ca:9c: ba:a2:66:57:f3:78:99:f4:b4:f1:bd:33:f1:93:a2:fd:93:07: 3f:9e:77:ab:09:b8:fc:64:5e:e2:78:ce:d0:da:08:f3:55:c0: 89:0e:0d:0b:1b:bc:3b:d7:d1:37:63:4e:5c:f0:30:a1:d4:b5: a1:1a:f1:c7:f0:42:28:9c:2f:9c:b8:aa:55:47:a2:7d:0c:a5: 98:4b:b2:ca:a8:6c:eb:81:c9:62:13:25:f4:19:c8:bc:1f:b2: 7c:db:2f:c3:de:87:67:76:dd:79:62:86:4b:ff:05:5e:f4:1f: 04:b7:97:4d:a7:12:89:e4:d4:9c:36:06:01:b7:78:67:89:cd: 32:44:81:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU6Eq17axGsg+180WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRiODIxOTEtOWVhYi00NzgwLWFmZDItOGQ3NjQwMTIz YjU5MB4XDTI0MDMxNjEzMDAzMVoXDTI0MDYxNDEzMDAzMVowLzEtMCsGA1UEAxMk ZTE5NTBmNzAtN2I2OS00YTZjLWE4YzMtNzAyYzYyZjhmZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVo43qkJGq7y7W+UHL8x4/8GRzrujKSqRRAN ymKLnOKL41RCsF+m27VUbBo0tXB+zJC8aNeloMbZwb1vLmzGzz6iKvj+nEJf/bZf SFXRRIG8dzYD5YC4rlrPKUNX8KKn0XgTnUiyk812KvLe+12QjDTa4zguizle3NDR QxcUAlZriHUjZThyX3YOOjRAEitGku4sy9nU5XmBrSqRYTVIFjJP4cxb+wE/X0Xp Su1ebmGJW2g6VIaMU2q3fCYqWmU1/aPpAzaGt5nwTQI0aVXfvNsEYTMKwYNyLomH VFQP9h9Hy1bRob0DTsgpCcUyk0ffuv4EurlyLYF6ad3lpPzQ1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6KGYwgtQFLesbGq9LsuaeDTN61MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4 MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2NDAxMjNiNTkvM2E1MDI1YmYtZWUzNy0z MTVhLWExOTctNjg5OTZhMzY5YzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjRiODIxOTEtOWVhYi00NzgwLWFm ZDItOGQ3NjQwMTIzYjU5LzI0YjgyMTkxLTllYWItNDc4MC1hZmQyLThkNzY0MDEy M2I1OS5jcmwwHwYDVR0jBBgwFoAUr3tWawPkuaWa9aaCO55YgGC1EjowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2 NDAxMjNiNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFN+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwk9HnWQSwLoj6xGZdHp7GUkfF3YMtXjXPjDUGvQn5tKPH86Jj5Y/vI my97BRl++j8y75XcOE6V1R5Qlw6CeCFmm2K6OxWrUiYwKKCHteanCGQdfmvnCBe3 X4gEMTUnV04EnZGCoknn+7n1fSegytdaI3zPszVSudMFvbnKnLqiZlfzeJn0tPG9 M/GTov2TBz+ed6sJuPxkXuJ4ztDaCPNVwIkODQsbvDvX0TdjTlzwMKHUtaEa8cfw QiicL5y4qlVHon0MpZhLssqobOuByWITJfQZyLwfsnzbL8Peh2d23Xlihkv/BV70 HwS3l02nEonk1Jw2BgG3eGeJzTJEgQo= -----END CERTIFICATE-----Generated at Mon May 27 15:09:37 2024 by rpki-client on console-fra.rpki-client.org