$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa File: dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa (raw, json) Hash identifier: B6VirP/2FoiuDm3HIJz5bIkco2LMJN9VMQn1OXjxtSU= Subject key identifier: A8:A0:FB:36:9D:E9:CA:14:A5:46:FE:AB:A1:80:52:06:4A:33:A6:18 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F432858454C381240D80975262FD23780 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa Signing time: Sat 23 Mar 2024 01:00:24 +0000 ROA not before: Sat 23 Mar 2024 01:00:24 +0000 ROA not after: Fri 21 Jun 2024 01:00:24 +0000 asID: 11090 IP address blocks: 64.4.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:4c:38:12:40:d8:09:75:26:2f:d2:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 23 01:00:24 2024 GMT Not After : Jun 21 01:00:24 2024 GMT Subject: CN=9b61dae7-e7f9-49be-a937-153a469c234b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a9:a4:3a:73:8c:3f:ca:fb:3c:53:18:8f:89: 20:b0:c8:b0:c7:ba:c8:e9:a0:4c:3b:d4:2a:a1:a6: a5:d1:22:82:67:6e:86:5a:d2:6e:2e:45:86:fc:2b: 2e:83:5d:e1:81:02:2d:ca:ca:63:8b:7f:9f:2e:4a: 72:21:69:fb:15:3c:f7:2c:10:5d:6c:b7:87:cc:71: ad:b0:fd:9b:a8:e2:16:f7:46:fa:3e:6f:19:8a:32: 63:8e:e4:01:69:27:d8:1e:a8:06:db:0e:33:e6:88: 1e:94:6f:f4:4a:90:88:14:31:be:3c:4f:92:f7:cf: 31:33:26:8e:22:17:09:2f:49:d0:e2:f1:07:df:79: ce:15:2b:7f:9e:c1:f8:11:ed:01:44:df:8d:fa:cc: 89:a3:4f:96:0d:46:08:be:2b:f0:f0:36:1f:77:77: cc:0e:9c:23:64:e4:8b:f3:2c:0c:06:7c:42:1b:06: 8d:7f:0e:f0:f1:9e:b0:50:65:08:80:4b:c3:b9:f6: 23:c9:86:c0:3c:23:13:ec:24:2f:0f:ae:ce:fc:4f: 00:d0:ef:82:58:75:64:fd:d1:2f:ae:c4:fd:48:79: 71:9f:e7:49:d0:9e:e1:7d:c7:3a:c2:de:bf:c6:95: 05:4f:40:6d:e0:5d:9d:41:0d:c2:a1:35:02:04:82: 2d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A0:FB:36:9D:E9:CA:14:A5:46:FE:AB:A1:80:52:06:4A:33:A6:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ff:13:1e:7d:7c:05:20:2c:9a:27:a1:ff:43:aa:9c:bc:f2: 2b:a5:e8:bb:98:57:37:1f:9a:20:dc:26:43:d4:d1:81:6c:c3: 89:00:ec:37:7f:7c:67:e0:a1:a2:6f:d3:33:0a:e0:05:a1:00: 04:ce:87:a3:74:92:70:26:ef:e2:6e:c4:65:d0:a5:b6:24:fd: 72:bb:42:1a:8e:3e:98:90:91:6c:15:17:a8:4d:37:2f:20:a2: 92:49:ed:93:5f:1a:1b:b9:d0:fc:88:03:f0:88:0f:37:ed:06: 91:06:38:60:e6:f5:f6:55:33:58:d6:fa:b6:13:07:fb:14:6e: 0d:c7:3f:55:95:cb:04:9a:8f:96:41:68:60:77:b8:e8:09:4f: 8c:2f:a4:ba:8a:fc:8d:7f:88:16:00:e4:28:22:99:62:1c:b2: 30:de:bc:04:54:cc:82:b9:d7:7e:98:b3:12:93:b8:da:b1:2c: db:17:a4:07:7f:28:3a:84:48:42:8b:09:5e:a9:f6:e3:82:75: 7a:79:9d:33:36:0c:c6:63:c0:31:5a:88:44:41:c5:e4:82:68: 71:06:c2:30:03:e6:b0:1a:03:d4:96:7b:ee:78:4d:7d:18:a2: 75:4b:a6:ca:56:d4:ce:42:68:6c:c3:c5:39:72:01:24:98:78: 8e:67:73:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVMOBJA2Al1Ji/SN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI0MDMyMzAxMDAyNFoXDTI0MDYyMTAxMDAyNFowLzEtMCsGA1UEAxMk OWI2MWRhZTctZTdmOS00OWJlLWE5MzctMTUzYTQ2OWMyMzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqmkOnOMP8r7PFMYj4kgsMiwx7rI6aBMO9Qq oaal0SKCZ26GWtJuLkWG/Csug13hgQItyspji3+fLkpyIWn7FTz3LBBdbLeHzHGt sP2bqOIW90b6Pm8ZijJjjuQBaSfYHqgG2w4z5ogelG/0SpCIFDG+PE+S988xMyaO IhcJL0nQ4vEH33nOFSt/nsH4Ee0BRN+N+syJo0+WDUYIvivw8DYfd3fMDpwjZOSL 8ywMBnxCGwaNfw7w8Z6wUGUIgEvDufYjyYbAPCMT7CQvD67O/E8A0O+CWHVk/dEv rsT9SHlxn+dJ0J7hfcc6wt6/xpUFT0Bt4F2dQQ3CoTUCBIItwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKig+zad6coUpUb+q6GAUgZKM6YYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZGZmYzk3ZmItNzg2ZS0z MThiLWI0ZWUtMjkzZDFhMGYxZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQATgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHb/Ex59fAUgLJonof9Dqpy88iul6LuYVzcfmiDcJkPU0YFsw4kA7Dd/ fGfgoaJv0zMK4AWhAATOh6N0knAm7+JuxGXQpbYk/XK7QhqOPpiQkWwVF6hNNy8g opJJ7ZNfGhu50PyIA/CIDzftBpEGOGDm9fZVM1jW+rYTB/sUbg3HP1WVywSaj5ZB aGB3uOgJT4wvpLqK/I1/iBYA5CgimWIcsjDevARUzIK5136YsxKTuNqxLNsXpAd/ KDqESEKLCV6p9uOCdXp5nTM2DMZjwDFaiERBxeSCaHEGwjAD5rAaA9SWe+54TX0Y onVLpspW1M5CaGzDxTlyASSYeI5ncxE= -----END CERTIFICATE-----Generated at Sun Jun 2 14:32:15 2024 by rpki-client on console-fra.rpki-client.org