$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/38df099c-8af4-3051-bc60-a442365d6224.roa File: 38df099c-8af4-3051-bc60-a442365d6224.roa (raw, json) Hash identifier: 9uHU7+2lrNX1dbGJ3RaZLTtXVX0/m5AR7tLpYqlIzUo= Subject key identifier: A2:3D:0E:1B:84:7A:AA:3B:67:B1:03:A9:93:01:A1:D8:78:11:A8:67 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584567B8227B8119E175FDFE8880 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/38df099c-8af4-3051-bc60-a442365d6224.roa Signing time: Mon 01 Apr 2024 21:25:21 +0000 ROA not before: Mon 01 Apr 2024 21:25:21 +0000 ROA not after: Sun 30 Jun 2024 21:25:21 +0000 asID: 32024 IP address blocks: 104.129.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:67:b8:22:7b:81:19:e1:75:fd:fe:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Apr 1 21:25:21 2024 GMT Not After : Jun 30 21:25:21 2024 GMT Subject: CN=15b55583-adb9-4871-9307-d696157afac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:84:da:24:4d:24:cd:27:d5:47:66:aa:09:90: 08:2f:a3:9d:58:cb:3b:f8:c5:f5:6a:9f:cf:87:fe: fc:97:80:52:d0:27:95:86:54:02:f3:35:5e:84:91: d5:39:ec:31:f0:e2:a9:8c:ed:c4:e6:39:5a:20:f3: 6a:91:7c:8e:33:25:cf:d3:af:db:d0:ef:4a:d4:a1: 98:c8:aa:93:89:47:f3:8b:52:ec:4e:ec:68:3c:5d: 67:c7:ad:1f:94:80:3f:36:a1:95:77:db:f7:b2:37: 43:b3:5d:06:2c:95:82:d6:fc:4f:90:c1:de:8c:a7: 5c:0c:01:f3:eb:b1:71:dd:b9:6e:20:57:73:34:16: 3d:eb:09:85:23:93:a0:f4:98:65:45:d8:ed:50:fb: 42:7e:4c:02:ca:1e:07:0a:6f:ff:fb:ed:34:fc:bc: a8:56:d3:58:2f:e8:f0:3b:f7:c5:ad:03:a3:8c:cf: 96:c9:32:b9:40:34:21:6f:25:a3:86:f6:e5:ec:5a: 31:a1:b3:a0:58:2d:4e:fa:76:e1:01:f6:a3:a2:ca: 13:2e:32:8c:fe:bd:6d:aa:01:d2:a1:38:60:2e:e5: 94:59:8e:d2:b5:c1:33:72:9a:be:2f:68:c1:ce:be: bc:06:e4:e7:56:e9:e3:d7:64:31:1e:5b:b0:ef:8b: c3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3D:0E:1B:84:7A:AA:3B:67:B1:03:A9:93:01:A1:D8:78:11:A8:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/38df099c-8af4-3051-bc60-a442365d6224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 104.129.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:a9:bf:60:f7:ff:43:c8:a9:77:e2:6f:10:ca:a9:2a:93:2e: 01:ad:7e:c8:91:2d:e1:6c:bb:b6:67:de:3f:40:03:bf:cc:00: d2:cc:78:c2:08:1c:f4:6a:d7:b4:54:03:c2:f8:b5:17:18:9e: 5e:9f:88:f5:85:d7:65:0c:e5:ed:5d:f5:f5:ad:04:82:35:72: e5:ce:08:77:b2:d5:bd:f2:3b:ac:4e:4e:6d:49:1a:ff:79:74: 40:e9:66:38:aa:b8:bc:30:f2:19:0b:e1:b9:34:ed:45:c4:8b: ee:3e:77:c9:1c:1f:81:03:f0:ff:be:99:89:f9:2d:6b:80:05: 7d:01:26:d8:cc:e3:39:a4:dc:3f:c0:e9:08:b3:80:cb:e6:46: df:2b:16:13:05:62:4b:38:0a:ed:60:b7:7d:07:ca:4c:bf:70: 4e:68:27:a8:21:29:6d:96:f5:c8:47:7a:2a:78:93:aa:9d:77: 2a:ec:03:e1:84:70:97:62:08:fc:9b:a2:a7:af:ef:cc:fa:41: 65:34:fd:18:ed:70:49:53:79:f5:d3:21:27:4a:cd:17:9c:99: f7:ef:29:6f:e1:95:c9:2c:aa:fc:5d:ec:4f:2e:ca:1e:0f:70: e5:48:e6:d0:f7:f1:7c:78:a1:0f:6d:86:82:1c:f6:77:46:f2: bf:cf:34:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVnuCJ7gRnhdf3+iIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI0MDQwMTIxMjUyMVoXDTI0MDYzMDIxMjUyMVowLzEtMCsGA1UEAxMk MTViNTU1ODMtYWRiOS00ODcxLTkzMDctZDY5NjE1N2FmYWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYTaJE0kzSfVR2aqCZAIL6OdWMs7+MX1ap/P h/78l4BS0CeVhlQC8zVehJHVOewx8OKpjO3E5jlaIPNqkXyOMyXP06/b0O9K1KGY yKqTiUfzi1LsTuxoPF1nx60flIA/NqGVd9v3sjdDs10GLJWC1vxPkMHejKdcDAHz 67Fx3bluIFdzNBY96wmFI5Og9JhlRdjtUPtCfkwCyh4HCm//++00/LyoVtNYL+jw O/fFrQOjjM+WyTK5QDQhbyWjhvbl7FoxobOgWC1O+nbhAfajosoTLjKM/r1tqgHS oThgLuWUWY7StcEzcpq+L2jBzr68BuTnVunj12QxHluw74vD7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKI9DhuEeqo7Z7EDqZMBodh4EahnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMzhkZjA5OWMtOGFmNC0z MDUxLWJjNjAtYTQ0MjM2NWQ2MjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIHxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqpv2D3/0PIqXfibxDKqSqTLgGtfsiRLeFsu7Zn3j9AA7/MANLMeMII HPRq17RUA8L4tRcYnl6fiPWF12UM5e1d9fWtBII1cuXOCHey1b3yO6xOTm1JGv95 dEDpZjiquLww8hkL4bk07UXEi+4+d8kcH4ED8P++mYn5LWuABX0BJtjM4zmk3D/A 6QizgMvmRt8rFhMFYks4Cu1gt30Hyky/cE5oJ6ghKW2W9chHeip4k6qddyrsA+GE cJdiCPyboqev78z6QWU0/RjtcElTefXTISdKzRecmffvKW/hlcksqvxd7E8uyh4P cOVI5tD38Xx4oQ9thoIc9ndG8r/PNB0= -----END CERTIFICATE-----Generated at Sat May 4 15:04:43 2024 by rpki-client on console-fra.rpki-client.org