$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/bfae38a7-ec79-38f1-8257-8b1b3c10ac5b.roa File: bfae38a7-ec79-38f1-8257-8b1b3c10ac5b.roa (raw, json) Hash identifier: BzOXLlWONeDQX1ezoOgDXG7Sovu14w+KfSlU7Rct/W0= Subject key identifier: 72:70:08:C2:D9:AA:12:EA:8C:E0:C7:E9:79:39:AB:E5:88:DA:81:2F Certificate issuer: /CN=f2bc6b7a-b8f5-4109-b7af-8975e2444d75 Certificate serial: 010D0C9F43285845EF893268818B9BE7E6F09600 Authority key identifier: 58:74:A0:D7:3F:5C:F6:7C:EA:E0:36:90:47:16:07:B8:01:5B:F8:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/bfae38a7-ec79-38f1-8257-8b1b3c10ac5b.roa Signing time: Mon 20 May 2024 13:00:35 +0000 ROA not before: Mon 20 May 2024 13:00:35 +0000 ROA not after: Sun 18 Aug 2024 13:00:35 +0000 asID: 15296 IP address blocks: 204.209.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ef:89:32:68:81:8b:9b:e7:e6:f0:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2bc6b7a-b8f5-4109-b7af-8975e2444d75 Validity Not Before: May 20 13:00:35 2024 GMT Not After : Aug 18 13:00:35 2024 GMT Subject: CN=84fe87cf-8ca4-41c2-b699-8bf2844e0153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2f:aa:69:8d:59:a2:5c:80:4a:80:bc:1a:a7: 17:75:29:f2:88:36:2b:de:53:bf:4c:9b:5f:47:83: 46:11:32:57:bb:7e:ac:1c:b9:e9:e7:65:d1:f9:30: bc:1b:93:3e:dd:f1:19:74:d9:d6:b8:00:ac:25:ef: 9e:9e:4e:cd:d6:1a:c7:07:56:ac:11:ed:07:f0:fa: 2c:12:0d:25:65:1b:3e:9b:a7:8a:d4:67:fe:65:39: a5:b1:82:c2:71:8c:da:db:ed:5c:6b:dc:1a:cd:e1: 39:9b:49:0a:66:6a:56:b9:3e:8c:8d:35:f7:df:ca: 04:66:30:dd:ea:9a:ff:c2:ec:0d:89:30:b0:42:da: 02:cd:74:3d:cb:30:fd:3d:75:9d:e7:de:9b:5d:74: 76:85:69:1c:9b:17:b0:69:1e:7b:0b:c1:94:0b:d1: a0:4a:20:dd:54:1e:79:5f:2e:9b:b8:9f:0d:0d:fd: 3c:90:2c:1e:65:8c:f4:b8:3c:0a:d3:57:26:c5:98: e2:d7:78:2a:ac:f4:b2:3e:c8:61:0d:85:1c:5b:a6: 0d:01:28:5f:8f:0f:2d:d9:d2:76:aa:7a:e2:46:91: d7:ac:e0:45:7a:b6:12:d9:a6:2a:c3:93:94:b0:86: 54:fe:f8:9c:a4:8c:21:ad:ab:6c:fe:d1:20:22:de: d0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:70:08:C2:D9:AA:12:EA:8C:E0:C7:E9:79:39:AB:E5:88:DA:81:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/bfae38a7-ec79-38f1-8257-8b1b3c10ac5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.crl X509v3 Authority Key Identifier: keyid:58:74:A0:D7:3F:5C:F6:7C:EA:E0:36:90:47:16:07:B8:01:5B:F8:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer sbgp-ipAddrBlock: critical IPv4: 204.209.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:0a:2a:96:b7:a2:14:03:cf:bf:a3:ef:a9:e6:e5:eb:c3:63: bd:6d:8f:ce:78:5d:b6:17:26:65:d7:16:85:64:26:a0:c1:ce: 5b:16:62:6b:41:dc:58:f6:ee:ed:93:f6:58:3c:5d:b0:42:7a: 38:d8:4a:d5:2b:c6:e0:a0:58:e7:53:ba:96:6b:66:bf:b3:e5: 16:8d:56:b7:ca:0e:26:60:db:60:d7:0b:35:38:89:d8:e3:a3: 1f:4d:2e:f9:1c:4e:5c:10:3f:57:65:18:17:0e:ba:fd:a2:69: f0:23:57:ad:1d:16:62:d6:8c:ed:52:5c:7f:fe:7a:5a:6c:34: 49:dc:78:66:9e:ea:14:0f:56:f0:af:ae:e7:2c:97:85:1e:43: 82:87:0f:f6:06:96:37:1e:0d:b9:84:4f:0b:1a:cf:8a:5e:99: 00:fd:2d:a9:a8:49:45:56:f2:a3:0d:b4:da:a6:de:e7:a2:9b: b5:96:26:dc:4b:62:6c:11:4f:9f:2c:42:1e:29:73:7c:b5:b2: 9a:52:75:30:16:c2:bd:d8:13:31:8e:36:39:15:7f:1a:35:cb: d5:9a:17:4d:95:4a:8c:0e:83:9a:c5:af:f7:34:9f:0d:57:f5: 0a:6b:d7:a9:53:dd:2e:53:67:f3:b6:2f:5a:39:d0:cd:c5:f0: 9c:12:54:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXviTJogYub5+bwlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJiYzZiN2EtYjhmNS00MTA5LWI3YWYtODk3NWUyNDQ0 ZDc1MB4XDTI0MDUyMDEzMDAzNVoXDTI0MDgxODEzMDAzNVowLzEtMCsGA1UEAxMk ODRmZTg3Y2YtOGNhNC00MWMyLWI2OTktOGJmMjg0NGUwMTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC+qaY1ZolyASoC8GqcXdSnyiDYr3lO/TJtf R4NGETJXu36sHLnp52XR+TC8G5M+3fEZdNnWuACsJe+enk7N1hrHB1asEe0H8Pos Eg0lZRs+m6eK1Gf+ZTmlsYLCcYza2+1ca9wazeE5m0kKZmpWuT6MjTX338oEZjDd 6pr/wuwNiTCwQtoCzXQ9yzD9PXWd596bXXR2hWkcmxewaR57C8GUC9GgSiDdVB55 Xy6buJ8NDf08kCweZYz0uDwK01cmxZji13gqrPSyPshhDYUcW6YNAShfjw8t2dJ2 qnriRpHXrOBFerYS2aYqw5OUsIZU/vicpIwhrats/tEgIt7QlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJwCMLZqhLqjODH6Xk5q+WI2oEvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mMmJj NmI3YS1iOGY1LTQxMDktYjdhZi04OTc1ZTI0NDRkNzUvYmZhZTM4YTctZWM3OS0z OGYxLTgyNTctOGIxYjNjMTBhYzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjJiYzZiN2EtYjhmNS00MTA5LWI3 YWYtODk3NWUyNDQ0ZDc1L2YyYmM2YjdhLWI4ZjUtNDEwOS1iN2FmLTg5NzVlMjQ0 NGQ3NS5jcmwwHwYDVR0jBBgwFoAUWHSg1z9c9nzq4DaQRxYHuAFb+KUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mMmJjNmI3YS1iOGY1LTQxMDktYjdhZi04OTc1 ZTI0NDRkNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNE6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUKKpa3ohQDz7+j76nm5evDY71tj854XbYXJmXXFoVkJqDBzlsWYmtB 3Fj27u2T9lg8XbBCejjYStUrxuCgWOdTupZrZr+z5RaNVrfKDiZg22DXCzU4idjj ox9NLvkcTlwQP1dlGBcOuv2iafAjV60dFmLWjO1SXH/+elpsNEnceGae6hQPVvCv rucsl4UeQ4KHD/YGljceDbmETwsaz4pemQD9LamoSUVW8qMNtNqm3ueim7WWJtxL YmwRT58sQh4pc3y1sppSdTAWwr3YEzGONjkVfxo1y9WaF02VSowOg5rFr/c0nw1X 9Qpr16lT3S5TZ/O2L1o50M3F8JwSVD8= -----END CERTIFICATE-----Generated at Sat Jun 1 22:09:46 2024 by rpki-client on console-fra.rpki-client.org