$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/3e8828ed-0322-3dec-8145-aa943c8f2112.roa File: 3e8828ed-0322-3dec-8145-aa943c8f2112.roa (raw, json) Hash identifier: JYAEmWqHF3w6HP46Qq8S0JUYgZ+HIaPCGdkO52wsaPE= Subject key identifier: B8:CB:3B:ED:45:7E:CD:7D:78:97:3E:8F:4D:21:9D:29:DB:56:5B:2F Certificate issuer: /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Certificate serial: 010D0C9F4328584500F5699F33B6D66E844A0180 Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/3e8828ed-0322-3dec-8145-aa943c8f2112.roa Signing time: Sun 25 Feb 2024 02:00:26 +0000 ROA not before: Sun 25 Feb 2024 02:00:26 +0000 ROA not after: Sat 25 May 2024 01:00:26 +0000 asID: 53828 IP address blocks: 96.8.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:00:f5:69:9f:33:b6:d6:6e:84:4a:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Validity Not Before: Feb 25 02:00:26 2024 GMT Not After : May 25 01:00:26 2024 GMT Subject: CN=15ff634e-9b52-4477-8953-3187550d841e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dd:e0:c3:32:89:51:f1:cc:fc:23:d4:d1:2f: 12:60:d8:2b:11:7a:6d:ce:4c:91:2d:1d:2d:59:fe: f9:85:b3:70:64:a6:09:0e:9b:92:6c:f0:d7:5a:26: 32:41:f9:c1:b3:87:da:dd:cc:cc:89:49:9e:7e:68: d4:52:8b:d0:b9:ba:3b:4a:de:ca:bd:55:9f:1e:b4: d0:4e:96:b6:85:a9:4e:1b:45:86:d2:a9:b0:13:5c: cb:fa:e0:55:33:18:33:6b:de:84:69:7e:93:7d:2d: d0:27:d9:45:ba:c6:45:f6:04:2a:fa:42:f6:53:1b: 02:51:d4:e6:fd:b5:ad:fb:0f:96:65:c1:46:3e:e7: f5:73:a8:c6:b9:86:88:36:1d:14:eb:39:b7:22:ce: d0:ca:82:cf:d2:8c:99:a2:83:96:89:8e:5c:a6:b2: dd:b9:55:f5:7e:e4:16:02:fb:cf:a7:b3:71:8a:a5: e7:c9:b0:1c:c4:0e:61:37:8b:2a:26:95:c8:67:d6: a6:fe:60:99:31:43:05:72:c4:27:0f:90:13:a1:e0: ce:41:36:6b:f2:8b:f5:e5:50:6a:d1:f6:4a:a1:ce: c5:45:2b:9a:a6:9a:96:f5:4b:9e:5b:03:53:2a:be: 96:42:33:ed:ae:96:9c:3c:fc:fd:3e:9b:81:9c:06: a8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CB:3B:ED:45:7E:CD:7D:78:97:3E:8F:4D:21:9D:29:DB:56:5B:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/3e8828ed-0322-3dec-8145-aa943c8f2112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl X509v3 Authority Key Identifier: keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer sbgp-ipAddrBlock: critical IPv4: 96.8.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:34:40:26:4e:d1:63:61:7b:68:11:43:54:73:05:c7:be:9c: 07:19:db:80:a5:a3:8e:7b:dd:73:87:53:7c:40:7a:04:e9:27: b0:91:62:98:9f:86:da:d9:b9:53:80:34:65:c5:91:90:2b:c5: aa:c5:d5:12:2d:fa:5b:84:1a:0e:54:96:5f:0f:15:06:0f:9f: 94:38:99:5a:26:6d:16:c1:84:4a:4b:99:96:6a:5e:c6:62:91: 2c:3f:c7:e4:d3:0a:36:17:e7:dc:75:3a:06:f7:1b:71:ff:81: 01:e9:d5:e7:ca:96:38:e0:8e:5e:16:ce:a6:44:20:f5:16:6b: 40:7e:87:9c:3e:fb:3c:9e:0c:63:d9:23:f1:06:fd:ff:e7:0f: 78:d7:87:b7:d5:a8:2d:a6:f0:bc:b7:a1:9e:98:69:a6:bb:9c: d8:a0:b1:c6:07:2f:7e:04:24:4b:87:6f:47:a8:12:91:e6:e7: 73:2b:f7:7d:50:39:84:a3:c2:1f:d3:f8:ff:3d:d7:36:52:bf: bc:3b:9a:b0:0b:86:e4:47:51:39:93:43:d4:c4:f8:ea:e9:78: 91:fd:df:75:a2:53:d7:6f:68:4b:d9:fc:cf:2c:19:cb:04:c4: c2:f1:7f:dd:24:b9:31:b0:f0:e0:51:0a:4a:b6:82:52:a6:6d: 03:06:4c:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUA9WmfM7bWboRKAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyN2JjNTUtYjA0MS00N2NkLTg0ZWItZjNlOTcwN2Fj ZmYxMB4XDTI0MDIyNTAyMDAyNloXDTI0MDUyNTAxMDAyNlowLzEtMCsGA1UEAxMk MTVmZjYzNGUtOWI1Mi00NDc3LTg5NTMtMzE4NzU1MGQ4NDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu93gwzKJUfHM/CPU0S8SYNgrEXptzkyRLR0t Wf75hbNwZKYJDpuSbPDXWiYyQfnBs4fa3czMiUmefmjUUovQubo7St7KvVWfHrTQ Tpa2halOG0WG0qmwE1zL+uBVMxgza96EaX6TfS3QJ9lFusZF9gQq+kL2UxsCUdTm /bWt+w+WZcFGPuf1c6jGuYaINh0U6zm3Is7QyoLP0oyZooOWiY5cprLduVX1fuQW AvvPp7NxiqXnybAcxA5hN4sqJpXIZ9am/mCZMUMFcsQnD5AToeDOQTZr8ov15VBq 0fZKoc7FRSuappqW9UueWwNTKr6WQjPtrpacPPz9PpuBnAaoRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjLO+1Ffs19eJc+j00hnSnbVlsvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3 YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5NzA3YWNmZjEvM2U4ODI4ZWQtMDMyMi0z ZGVjLTgxNDUtYWE5NDNjOGYyMTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGMyN2JjNTUtYjA0MS00N2NkLTg0 ZWItZjNlOTcwN2FjZmYxLzBjMjdiYzU1LWIwNDEtNDdjZC04NGViLWYzZTk3MDdh Y2ZmMS5jcmwwHwYDVR0jBBgwFoAUxGYN+fPG33iLV0S/f1yezNk2Bp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5 NzA3YWNmZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYAhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB80QCZO0WNhe2gRQ1RzBce+nAcZ24Clo4573XOHU3xAegTpJ7CRYpif htrZuVOANGXFkZArxarF1RIt+luEGg5Ull8PFQYPn5Q4mVombRbBhEpLmZZqXsZi kSw/x+TTCjYX59x1Ogb3G3H/gQHp1efKljjgjl4WzqZEIPUWa0B+h5w++zyeDGPZ I/EG/f/nD3jXh7fVqC2m8Ly3oZ6Yaaa7nNigscYHL34EJEuHb0eoEpHm53Mr931Q OYSjwh/T+P891zZSv7w7mrALhuRHUTmTQ9TE+OrpeJH933WiU9dvaEvZ/M8sGcsE xMLxf90kuTGw8OBRCkq2glKmbQMGTIs= -----END CERTIFICATE-----Generated at Mon May 6 14:53:45 2024 by rpki-client on console-fra.rpki-client.org