$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/71e900e9-85b8-3fac-8d66-042b1eb031e8.roa File: 71e900e9-85b8-3fac-8d66-042b1eb031e8.roa (raw, json) Hash identifier: ekqoboEzLJ4qYjqoa4bIv9EV4CNiAX0wpr8h7PtiWm4= Subject key identifier: 72:2B:A3:38:9E:F6:05:24:B0:FD:C9:2F:0E:22:FF:89:93:5E:B2:CA Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285838AC0A80B2233A9AFB1F31CF80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/71e900e9-85b8-3fac-8d66-042b1eb031e8.roa Signing time: Wed 20 Jan 2021 05:00:00 +0000 ROA not before: Wed 20 Jan 2021 05:00:00 +0000 ROA not after: Wed 13 Jan 2027 05:00:00 +0000 asID: 33363 IP address blocks: 174.135.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:38:ac:0a:80:b2:23:3a:9a:fb:1f:31:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jan 20 05:00:00 2021 GMT Not After : Jan 13 05:00:00 2027 GMT Subject: CN=76a49d00-6a74-4b1a-833e-2ae14fcd52b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:89:42:07:5a:53:a5:a3:fc:9e:9c:63:95:85: cd:57:ec:49:0a:8b:a7:91:d8:77:cc:ab:72:35:f5: ba:19:3d:dc:f5:0e:22:45:a1:a4:6c:ad:8c:fa:9a: b6:5d:7b:05:bb:3e:93:aa:f3:cf:32:6d:87:df:68: de:16:b8:ad:cb:e3:a8:77:63:fc:1d:6f:bf:9f:a9: 68:05:8b:45:05:e2:bc:a4:b1:32:3b:ab:d4:9d:5b: 31:23:3b:75:8e:d6:f2:e6:2a:b8:7e:87:1d:88:9b: 77:2d:0d:8d:39:d3:da:b5:ec:db:6d:19:48:e9:92: 4b:8b:8f:9c:72:05:0e:e8:28:f8:1c:3c:a4:95:29: 12:35:8e:4f:ae:98:20:f7:21:eb:1f:24:88:eb:bc: 0a:fa:7c:cc:50:1e:83:ca:b1:7b:f4:ff:b0:e2:bd: 2b:f9:e1:21:11:85:79:98:1d:85:6d:44:33:c2:ce: 0f:92:21:8c:43:f2:99:59:43:40:12:bd:25:a7:ee: c3:5e:54:94:2a:2c:1c:f2:1c:83:cb:ea:ad:2e:39: e2:9a:7e:a2:19:4b:1b:98:01:c9:a5:b0:f0:a0:bc: d1:38:c9:9e:5b:d2:d0:4b:66:de:c5:ab:fd:5b:8f: 02:a3:cd:24:5f:1f:d6:0b:3d:4f:2c:af:c1:68:ff: 14:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:2B:A3:38:9E:F6:05:24:B0:FD:C9:2F:0E:22:FF:89:93:5E:B2:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/71e900e9-85b8-3fac-8d66-042b1eb031e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 174.135.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ab:24:79:66:0b:99:55:3f:94:e7:b0:74:f6:9b:3b:e5:5e: 45:6a:23:50:8a:63:76:1a:f4:bc:c1:37:cd:a4:2b:11:2b:43: 92:b2:6a:ff:55:8e:ee:12:cd:9d:6a:c7:12:2c:6d:7a:8e:36: 93:21:bd:7a:c1:2b:f5:b7:0e:8d:a2:c3:28:84:57:08:59:18: c1:e4:ad:37:28:3c:5d:cf:5c:20:a4:7d:12:c4:ed:a3:7d:2e: 02:aa:70:2a:5d:79:ad:37:9b:b4:50:b6:18:cf:44:28:9e:09: 9d:f4:08:d9:9b:c3:36:71:cb:c4:94:13:ba:6f:1e:26:52:a0: 47:9e:d4:2c:a9:33:50:a5:4a:92:fc:fd:a0:19:f8:18:76:be: 23:cb:0e:4d:7a:05:28:42:15:59:50:bc:ab:f2:06:26:76:c0: 0a:a2:31:65:51:20:92:cf:44:d9:b4:89:7a:73:a2:59:30:73: 48:67:7c:3d:e8:be:de:fb:2f:07:e3:00:72:e0:49:93:15:94: ed:83:7d:9a:7d:7e:9a:48:44:c5:4e:3e:d1:27:a1:a1:17:e3: dc:f3:2c:45:47:29:f5:7d:28:bc:f3:76:d0:e2:55:8e:1d:bc: 85:6d:bf:a9:af:82:1f:0c:83:b0:ea:1f:13:08:2b:f9:51:f8: 36:94:fb:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDisCoCyIzqa+x8xz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTIxMDEyMDA1MDAwMFoXDTI3MDExMzA1MDAwMFowLzEtMCsGA1UEAxMk NzZhNDlkMDAtNmE3NC00YjFhLTgzM2UtMmFlMTRmY2Q1MmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIlCB1pTpaP8npxjlYXNV+xJCounkdh3zKty NfW6GT3c9Q4iRaGkbK2M+pq2XXsFuz6TqvPPMm2H32jeFrity+Ood2P8HW+/n6lo BYtFBeK8pLEyO6vUnVsxIzt1jtby5iq4focdiJt3LQ2NOdPatezbbRlI6ZJLi4+c cgUO6Cj4HDyklSkSNY5Prpgg9yHrHySI67wK+nzMUB6DyrF79P+w4r0r+eEhEYV5 mB2FbUQzws4PkiGMQ/KZWUNAEr0lp+7DXlSUKiwc8hyDy+qtLjnimn6iGUsbmAHJ pbDwoLzROMmeW9LQS2bexav9W48Co80kXx/WCz1PLK/BaP8UAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIrozie9gUksP3JLw4i/4mTXrLKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNzFlOTAwZTktODViOC0z ZmFjLThkNjYtMDQyYjFlYjAzMWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHroeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJarJHlmC5lVP5TnsHT2mzvlXkVqI1CKY3Ya9LzBN82kKxErQ5Kyav9V ju4SzZ1qxxIsbXqONpMhvXrBK/W3Do2iwyiEVwhZGMHkrTcoPF3PXCCkfRLE7aN9 LgKqcCpdea03m7RQthjPRCieCZ30CNmbwzZxy8SUE7pvHiZSoEee1CypM1ClSpL8 /aAZ+Bh2viPLDk16BShCFVlQvKvyBiZ2wAqiMWVRIJLPRNm0iXpzolkwc0hnfD3o vt77LwfjAHLgSZMVlO2DfZp9fppIRMVOPtEnoaEX49zzLEVHKfV9KLzzdtDiVY4d vIVtv6mvgh8Mg7DqHxMIK/lR+DaU+4c= -----END CERTIFICATE-----Generated at Fri May 10 17:25:08 2024 by rpki-client on console-fra.rpki-client.org