$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa File: 86604c1e-e526-334e-ab61-1fb3393fb181.roa (raw, json) Hash identifier: 9bxMDojTCmTARjnVCUWA6T+w/JXJkf1AtWlXY5tsJtA= Subject key identifier: 5D:D5:FB:96:A2:44:86:74:01:D3:8A:46:9E:8C:BE:6B:74:72:7A:7A Certificate issuer: /CN=7894adcb-3be5-42b8-a76f-913809582611 Certificate serial: 010D0C9F4328584667C5031DEB5D56E241F21000 Authority key identifier: 5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa Signing time: Tue 02 Jul 2024 14:38:14 +0000 ROA not before: Tue 02 Jul 2024 14:38:14 +0000 ROA not after: Mon 30 Sep 2024 14:38:14 +0000 asID: 12980 IP address blocks: 129.35.160.0/20 maxlen: 20 170.225.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Sep 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:67:c5:03:1d:eb:5d:56:e2:41:f2:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7894adcb-3be5-42b8-a76f-913809582611 Validity Not Before: Jul 2 14:38:14 2024 GMT Not After : Sep 30 14:38:14 2024 GMT Subject: CN=24acc87f-307d-41da-810f-95b98afa7e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:63:ef:7c:c3:37:6f:9b:8a:dd:66:70:59:93: f6:39:e6:53:b2:ce:15:0e:86:c2:e0:98:09:4a:bd: 34:e9:15:29:98:fe:29:0e:46:c3:d8:07:e7:d8:b4: 15:b6:4e:34:b0:77:fe:c1:30:10:44:0d:ef:77:a5: f3:c4:64:3e:2c:95:a3:d8:20:04:69:45:a9:f3:4b: 9f:fb:a6:7b:a4:8b:6c:eb:99:c7:d4:19:6a:90:2b: 00:8f:e4:63:12:b4:e4:0c:76:ce:9b:04:e1:83:2e: 78:13:19:ec:bf:bf:f4:a6:2f:d9:fa:04:55:e8:e6: 1e:b3:66:5c:9b:41:91:9e:d0:88:3b:da:ac:2e:ed: 72:68:08:f2:69:30:c1:9e:fa:44:13:ad:86:cb:a3: 1a:a6:6e:34:38:a4:e6:93:c7:f3:19:b1:70:3b:51: e4:b0:01:53:fc:09:30:bc:c5:f2:3e:21:33:c3:27: 02:12:ed:08:a2:b7:73:54:5c:3f:24:76:d6:f6:d4: e1:1c:00:af:d9:24:31:5c:ed:a7:e1:12:24:de:79: 71:7f:7d:f8:bf:f4:b9:2b:48:18:f3:5c:d8:aa:62: 5a:f7:32:06:96:e5:12:bb:04:17:b8:42:d1:ab:3a: 62:fc:76:7d:3c:38:a9:a6:28:90:87:89:7a:4d:6a: 8a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D5:FB:96:A2:44:86:74:01:D3:8A:46:9E:8C:BE:6B:74:72:7A:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl X509v3 Authority Key Identifier: keyid:5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer sbgp-ipAddrBlock: critical IPv4: 129.35.160.0/20 170.225.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b7:cb:58:d2:c5:8a:f4:ea:7a:18:97:b6:f1:b1:4d:61:82: 87:5e:3c:fc:21:05:46:f0:63:95:7c:22:49:0c:0d:96:53:fb: a8:3c:09:80:b7:25:ec:55:c3:a3:ee:95:8c:bb:6a:8f:b8:3d: 63:3d:2b:08:4f:7e:bc:74:23:60:27:25:10:ae:cd:4e:4d:16: 46:d5:03:22:6d:82:d8:a8:d7:a1:54:d7:63:37:f9:ce:41:cb: 5a:9a:54:2b:32:92:b3:fe:78:f9:3c:62:72:92:cf:2f:97:bf: 58:1b:9f:fc:47:65:6e:15:db:89:0d:01:c5:ef:26:32:78:99: c3:5e:c9:0b:95:96:14:b6:72:98:be:31:20:d6:6f:65:d8:e7: 5f:a3:7a:50:50:21:ea:24:ff:df:f9:ff:c0:41:ab:df:c7:0c: 41:ff:68:a9:86:97:47:76:19:93:13:56:48:1e:8d:55:73:31: 62:9a:8f:15:7e:17:2f:af:73:d3:c3:a3:2d:ef:f3:38:64:83: 63:ba:4b:aa:d7:a8:75:d4:33:ee:b1:a7:46:29:cc:e9:55:ef: 67:ef:ab:fa:b1:c9:d9:e1:3c:7e:bc:2a:91:61:fd:4f:fe:68: 61:97:3b:d1:63:e6:0a:03:9d:d2:da:87:9d:6c:44:ec:97:aa: 40:5d:ae:7c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEZnxQMd611W4kHyEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg5NGFkY2ItM2JlNS00MmI4LWE3NmYtOTEzODA5NTgy NjExMB4XDTI0MDcwMjE0MzgxNFoXDTI0MDkzMDE0MzgxNFowLzEtMCsGA1UEAxMk MjRhY2M4N2YtMzA3ZC00MWRhLTgxMGYtOTViOThhZmE3ZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGPvfMM3b5uK3WZwWZP2OeZTss4VDobC4JgJ Sr006RUpmP4pDkbD2Afn2LQVtk40sHf+wTAQRA3vd6XzxGQ+LJWj2CAEaUWp80uf +6Z7pIts65nH1BlqkCsAj+RjErTkDHbOmwThgy54Exnsv7/0pi/Z+gRV6OYes2Zc m0GRntCIO9qsLu1yaAjyaTDBnvpEE62Gy6Mapm40OKTmk8fzGbFwO1HksAFT/Akw vMXyPiEzwycCEu0IordzVFw/JHbW9tThHACv2SQxXO2n4RIk3nlxf334v/S5K0gY 81zYqmJa9zIGluUSuwQXuELRqzpi/HZ9PDippiiQh4l6TWqKfwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFF3V+5aiRIZ0AdOKRp6Mvmt0cnp6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ODk0 YWRjYi0zYmU1LTQyYjgtYTc2Zi05MTM4MDk1ODI2MTEvODY2MDRjMWUtZTUyNi0z MzRlLWFiNjEtMWZiMzM5M2ZiMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzg5NGFkY2ItM2JlNS00MmI4LWE3 NmYtOTEzODA5NTgyNjExLzc4OTRhZGNiLTNiZTUtNDJiOC1hNzZmLTkxMzgwOTU4 MjYxMS5jcmwwHwYDVR0jBBgwFoAUWvdinr+EQ4aDO8W+YDZZ1na7Y8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83ODk0YWRjYi0zYmU1LTQyYjgtYTc2Zi05MTM4 MDk1ODI2MTEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEgSOgAwQE quGAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAC23y1jSxYr06noYl7bxsU1hgodePPwhBUbwY5V8IkkMDZZT +6g8CYC3JexVw6PulYy7ao+4PWM9KwhPfrx0I2AnJRCuzU5NFkbVAyJtgtio16FU 12M3+c5By1qaVCsykrP+ePk8YnKSzy+Xv1gbn/xHZW4V24kNAcXvJjJ4mcNeyQuV lhS2cpi+MSDWb2XY51+jelBQIeok/9/5/8BBq9/HDEH/aKmGl0d2GZMTVkgejVVz MWKajxV+Fy+vc9PDoy3v8zhkg2O6S6rXqHXUM+6xp0YpzOlV72fvq/qxydnhPH68 KpFh/U/+aGGXO9Fj5goDndLah51sROyXqkBdrnw= -----END CERTIFICATE-----Generated at Wed Sep 18 21:10:30 2024 by rpki-client on console-ams.rpki-client.org