$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/971c721e-2148-3a91-aae8-d902249a3b48.roa File: 971c721e-2148-3a91-aae8-d902249a3b48.roa (raw, json) Hash identifier: +g4s0s9v3xb0BNoGQA9QRy/p9rS9OPWFelP2xJOjasE= Subject key identifier: BD:13:48:9C:AD:D6:D3:34:60:58:64:03:EA:31:82:0E:7B:0D:2C:F9 Certificate issuer: /CN=2e4e9332-b3fa-4993-b1e0-b3204976405f Certificate serial: 010D0C9F432858458B088847F5F8905F709B8900 Authority key identifier: 41:A4:3C:BD:61:0C:4B:19:7C:37:1C:1F:E4:82:A3:DE:78:0E:18:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/971c721e-2148-3a91-aae8-d902249a3b48.roa Signing time: Sun 14 Apr 2024 13:00:34 +0000 ROA not before: Sun 14 Apr 2024 13:00:34 +0000 ROA not after: Sat 13 Jul 2024 13:00:34 +0000 asID: 397388 IP address blocks: 140.228.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:8b:08:88:47:f5:f8:90:5f:70:9b:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e4e9332-b3fa-4993-b1e0-b3204976405f Validity Not Before: Apr 14 13:00:34 2024 GMT Not After : Jul 13 13:00:34 2024 GMT Subject: CN=ca73a466-3412-4d93-b37d-670047912464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:34:9a:9b:d9:e3:46:5c:f4:0a:64:c3:da:f9: 2a:e9:f9:88:2e:e0:69:b0:1d:63:a3:e1:c3:32:e7: e4:7a:71:26:99:b8:3e:28:02:e8:58:23:d9:75:26: de:8b:bf:0d:8e:e2:72:d4:87:9f:40:7e:99:f9:6f: f1:df:b0:cd:34:c1:57:d5:0a:0a:22:08:c3:cd:a0: 19:19:d3:58:5a:e5:d8:53:56:92:7b:9a:02:e2:d6: 92:4a:75:ae:39:b2:6b:5f:7d:56:95:ad:85:d9:e5: 9f:0f:1d:be:e5:94:1c:67:16:09:43:fc:e3:a6:71: 6c:2e:7b:4b:79:85:19:4c:cf:d2:2b:f1:e2:58:1a: e0:6e:d4:bb:ce:0f:ec:e3:ff:95:49:4c:68:e8:14: a0:eb:9c:e1:a9:32:90:cc:ff:1c:8e:b1:5f:46:fa: b3:a7:a6:39:16:3a:0f:e9:e7:67:6e:d6:d5:3f:5f: cc:38:fb:d3:49:36:f3:d6:04:9e:c6:8c:26:80:9b: aa:97:1d:15:ac:1f:0c:9b:dc:d1:ee:16:18:d3:35: b5:29:15:7d:c4:d2:dc:46:8a:4d:31:bf:0d:f0:8e: ea:3e:9f:8c:80:40:87:4f:d2:de:18:07:2f:c8:b2: fc:2f:b6:7f:28:43:ce:97:de:8e:86:89:88:02:1c: aa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:13:48:9C:AD:D6:D3:34:60:58:64:03:EA:31:82:0E:7B:0D:2C:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/971c721e-2148-3a91-aae8-d902249a3b48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.crl X509v3 Authority Key Identifier: keyid:41:A4:3C:BD:61:0C:4B:19:7C:37:1C:1F:E4:82:A3:DE:78:0E:18:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer sbgp-ipAddrBlock: critical IPv4: 140.228.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e3:64:7e:98:fb:d0:9b:03:69:e7:5e:cd:38:31:78:97:c2:66: 0d:e3:21:a9:f2:08:9a:b5:f1:ae:40:1d:36:8e:0a:c3:bc:e5: 94:d6:1f:ed:3f:ba:f2:19:8b:cc:53:fa:44:08:0e:a5:1d:4e: fc:08:97:3c:ee:eb:99:dc:b3:2a:42:84:a8:68:bc:91:0e:24: 75:be:ca:50:45:41:85:17:f3:41:d3:7b:7e:88:5e:da:ee:63: 84:4a:dd:5f:e8:d4:a3:ed:be:15:29:ba:ba:a7:b3:6e:76:f4: 12:78:9f:5a:23:7c:68:9d:59:dd:05:e4:53:f2:35:e8:5b:b8: 1c:d1:2c:4e:e3:c0:7d:58:b0:79:e2:0c:e3:28:8d:e7:a4:ba: ce:42:d1:38:6a:fe:68:5d:0f:bc:9e:db:b4:3d:ee:25:2e:bf: 0b:db:5d:78:3f:40:48:23:89:35:c7:a4:b3:ce:56:3e:d3:05: 6d:7b:12:61:bc:d0:54:26:5a:96:2c:7e:53:b1:f7:da:b8:13: c0:37:68:0e:33:62:09:50:9c:4f:1f:ec:47:f2:68:48:ec:5d: 76:2c:ac:af:f0:34:14:34:ad:34:1d:cf:98:83:ae:71:2f:96: 68:49:03:8a:8a:5e:df:b6:40:8f:6b:de:4b:90:8d:97:be:cb: 3b:b3:6f:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWLCIhH9fiQX3CbiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU0ZTkzMzItYjNmYS00OTkzLWIxZTAtYjMyMDQ5NzY0 MDVmMB4XDTI0MDQxNDEzMDAzNFoXDTI0MDcxMzEzMDAzNFowLzEtMCsGA1UEAxMk Y2E3M2E0NjYtMzQxMi00ZDkzLWIzN2QtNjcwMDQ3OTEyNDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDSam9njRlz0CmTD2vkq6fmILuBpsB1jo+HD MufkenEmmbg+KALoWCPZdSbei78NjuJy1IefQH6Z+W/x37DNNMFX1QoKIgjDzaAZ GdNYWuXYU1aSe5oC4taSSnWuObJrX31Wla2F2eWfDx2+5ZQcZxYJQ/zjpnFsLntL eYUZTM/SK/HiWBrgbtS7zg/s4/+VSUxo6BSg65zhqTKQzP8cjrFfRvqzp6Y5FjoP 6ednbtbVP1/MOPvTSTbz1gSexowmgJuqlx0VrB8Mm9zR7hYY0zW1KRV9xNLcRopN Mb8N8I7qPp+MgECHT9LeGAcvyLL8L7Z/KEPOl96OhomIAhyqhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0TSJyt1tM0YFhkA+oxgg57DSz5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZTRl OTMzMi1iM2ZhLTQ5OTMtYjFlMC1iMzIwNDk3NjQwNWYvOTcxYzcyMWUtMjE0OC0z YTkxLWFhZTgtZDkwMjI0OWEzYjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmU0ZTkzMzItYjNmYS00OTkzLWIx ZTAtYjMyMDQ5NzY0MDVmLzJlNGU5MzMyLWIzZmEtNDk5My1iMWUwLWIzMjA0OTc2 NDA1Zi5jcmwwHwYDVR0jBBgwFoAUQaQ8vWEMSxl8Nxwf5IKj3ngOGKwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yZTRlOTMzMi1iM2ZhLTQ5OTMtYjFlMC1iMzIw NDk3NjQwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjORwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAONkfpj70JsDaedezTgxeJfCZg3jIanyCJq18a5AHTaOCsO85ZTWH+0/ uvIZi8xT+kQIDqUdTvwIlzzu65ncsypChKhovJEOJHW+ylBFQYUX80HTe36IXtru Y4RK3V/o1KPtvhUpurqns2529BJ4n1ojfGidWd0F5FPyNehbuBzRLE7jwH1YsHni DOMojeekus5C0Thq/mhdD7ye27Q97iUuvwvbXXg/QEgjiTXHpLPOVj7TBW17EmG8 0FQmWpYsflOx99q4E8A3aA4zYglQnE8f7EfyaEjsXXYsrK/wNBQ0rTQdz5iDrnEv lmhJA4qKXt+2QI9r3kuQjZe+yzuzb+k= -----END CERTIFICATE-----Generated at Fri Apr 19 02:43:38 2024 by rpki-client on console-fra.rpki-client.org