$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa File: afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa (raw, json) Hash identifier: z7L7NtZPRodB0BMcOV824n5YfvBfqvP92Ni7h58jBvM= Subject key identifier: 51:8C:03:CA:83:05:C8:24:34:81:B5:7A:3A:5D:01:5B:93:C6:44:B3 Certificate issuer: /CN=0c4bcfc8-e6e7-4500-b985-5cb859f88fec Certificate serial: 010D0C9F43285845840DCB0328C589F951B430C0 Authority key identifier: 43:80:2B:58:E9:27:0F:D7:36:12:60:FF:0C:06:3D:38:94:E4:09:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa Signing time: Fri 12 Apr 2024 01:00:26 +0000 ROA not before: Fri 12 Apr 2024 01:00:26 +0000 ROA not after: Thu 11 Jul 2024 01:00:26 +0000 asID: 30110 IP address blocks: 198.59.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:84:0d:cb:03:28:c5:89:f9:51:b4:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c4bcfc8-e6e7-4500-b985-5cb859f88fec Validity Not Before: Apr 12 01:00:26 2024 GMT Not After : Jul 11 01:00:26 2024 GMT Subject: CN=1409448a-e40e-4826-9b9a-8f2d3c00fab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:72:e5:80:05:d4:80:ee:73:fe:e8:0c:eb:a0: 1b:82:e0:18:56:1b:1f:47:5b:8f:4a:87:44:cd:97: 0f:0f:8e:62:1b:ce:76:fa:95:5c:57:07:cf:37:50: cd:58:25:bb:05:3b:a7:86:b4:7c:04:66:a5:e5:0b: 8e:66:b1:f3:4d:e8:64:e6:d0:be:d7:ec:13:eb:3c: 49:d1:2f:a9:00:48:75:cf:2f:a9:68:c1:ec:4f:16: 14:40:e5:da:2f:0c:8f:f3:b1:32:78:d5:94:4e:0c: 4e:49:fd:b3:db:b7:e1:3a:c5:a4:32:f4:81:9c:27: d3:b2:99:33:6c:67:a4:1a:28:e9:31:d0:e9:2b:e6: 09:71:4a:e7:66:26:1f:85:77:3c:51:6a:18:3d:6f: 72:ae:2c:60:a6:73:b3:3a:1d:a8:0e:b6:f9:f7:a6: 3d:3b:c7:1b:8d:66:e9:86:2e:79:d6:25:d1:9e:42: 2a:1a:5c:0a:cd:43:93:17:e7:fa:f1:ee:5a:27:d7: 65:cd:25:61:2d:8c:cf:36:03:9b:bc:6f:1c:86:24: 77:90:67:e5:80:75:42:53:fa:72:3a:22:ac:8c:38: 50:ea:bc:d3:0e:f9:0b:c4:9f:d8:a4:4b:7d:b5:0d: 8a:91:e0:43:ee:00:5d:c6:1d:f4:60:58:83:1d:48: d7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:8C:03:CA:83:05:C8:24:34:81:B5:7A:3A:5D:01:5B:93:C6:44:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.crl X509v3 Authority Key Identifier: keyid:43:80:2B:58:E9:27:0F:D7:36:12:60:FF:0C:06:3D:38:94:E4:09:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer sbgp-ipAddrBlock: critical IPv4: 198.59.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:7e:56:4c:db:82:ff:63:cf:da:0e:3d:09:13:45:a1:a6:be: e9:21:74:9d:4a:d9:fa:ca:19:17:12:98:c0:05:41:76:43:6c: 42:da:bf:77:f8:e3:5d:8c:c1:21:8e:a1:06:b3:14:27:93:1d: db:68:2e:06:2d:2a:44:27:5e:58:68:b6:1a:39:b0:48:7a:17: bb:0e:07:dc:d5:94:17:22:91:77:72:12:f2:53:80:2d:0c:42: 52:29:48:77:7c:1f:a8:26:18:e2:9c:7c:2b:f1:87:6d:ab:9b: a6:78:d0:f4:ef:5b:ae:9a:44:7f:f8:17:d0:21:e5:af:dc:a8: ee:f7:1e:5d:c3:d1:62:53:f5:19:66:6a:2d:16:93:66:fb:a8: 49:94:4d:dc:9e:87:6d:ec:63:fb:96:43:88:62:f0:dd:97:c7: eb:61:50:b9:be:d1:7e:df:85:4a:45:83:9f:bc:65:c3:5a:8b: 5c:e4:de:fe:17:d9:e8:3e:db:26:11:c7:32:10:50:4a:a4:08: 4b:45:4d:a3:15:7a:e9:ed:ae:fe:dd:a9:bb:5d:c8:9f:30:aa: 60:7e:eb:81:db:00:fb:4d:f5:5d:da:92:c2:a5:b2:54:fc:7e: 18:5b:e3:c5:50:72:ad:91:61:8d:40:c6:3e:7f:bd:86:19:e1: 93:2b:37:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWEDcsDKMWJ+VG0MMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM0YmNmYzgtZTZlNy00NTAwLWI5ODUtNWNiODU5Zjg4 ZmVjMB4XDTI0MDQxMjAxMDAyNloXDTI0MDcxMTAxMDAyNlowLzEtMCsGA1UEAxMk MTQwOTQ0OGEtZTQwZS00ODI2LTliOWEtOGYyZDNjMDBmYWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHLlgAXUgO5z/ugM66AbguAYVhsfR1uPSodE zZcPD45iG852+pVcVwfPN1DNWCW7BTunhrR8BGal5QuOZrHzTehk5tC+1+wT6zxJ 0S+pAEh1zy+paMHsTxYUQOXaLwyP87EyeNWUTgxOSf2z27fhOsWkMvSBnCfTspkz bGekGijpMdDpK+YJcUrnZiYfhXc8UWoYPW9yrixgpnOzOh2oDrb596Y9O8cbjWbp hi551iXRnkIqGlwKzUOTF+f68e5aJ9dlzSVhLYzPNgObvG8chiR3kGflgHVCU/py OiKsjDhQ6rzTDvkLxJ/YpEt9tQ2KkeBD7gBdxh30YFiDHUjXwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGMA8qDBcgkNIG1ejpdAVuTxkSzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzRi Y2ZjOC1lNmU3LTQ1MDAtYjk4NS01Y2I4NTlmODhmZWMvYWZlNjZmOTUtYmU0YS0z NmY5LWI0MWEtZDhhMmZkNWRiMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGM0YmNmYzgtZTZlNy00NTAwLWI5 ODUtNWNiODU5Zjg4ZmVjLzBjNGJjZmM4LWU2ZTctNDUwMC1iOTg1LTVjYjg1OWY4 OGZlYy5jcmwwHwYDVR0jBBgwFoAUQ4ArWOknD9c2EmD/DAY9OJTkCZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzRiY2ZjOC1lNmU3LTQ1MDAtYjk4NS01Y2I4 NTlmODhmZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxjuMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1+Vkzbgv9jz9oOPQkTRaGmvukhdJ1K2frKGRcSmMAFQXZDbELav3f4 412MwSGOoQazFCeTHdtoLgYtKkQnXlhotho5sEh6F7sOB9zVlBcikXdyEvJTgC0M QlIpSHd8H6gmGOKcfCvxh22rm6Z40PTvW66aRH/4F9Ah5a/cqO73Hl3D0WJT9Rlm ai0Wk2b7qEmUTdyeh23sY/uWQ4hi8N2Xx+thULm+0X7fhUpFg5+8ZcNai1zk3v4X 2eg+2yYRxzIQUEqkCEtFTaMVeuntrv7dqbtdyJ8wqmB+64HbAPtN9V3aksKlslT8 fhhb48VQcq2RYY1Axj5/vYYZ4ZMrN7k= -----END CERTIFICATE-----Generated at Sat May 4 03:00:43 2024 by rpki-client on console-fra.rpki-client.org