$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/d1a4c516-eb99-30e0-b49a-13082dc83820.roa File: d1a4c516-eb99-30e0-b49a-13082dc83820.roa (raw, json) Hash identifier: GVKsGs9VsABSW0G0Snw+SYtkEcdsu6XBrjYVS99HWIg= Subject key identifier: 6E:A0:01:41:89:45:B0:3F:77:21:F9:5F:14:1B:11:A2:8D:01:EE:F4 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F432858458C6DD2B6F4E5F7AB9D525D80 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/d1a4c516-eb99-30e0-b49a-13082dc83820.roa Signing time: Mon 15 Apr 2024 01:00:26 +0000 ROA not before: Mon 15 Apr 2024 01:00:26 +0000 ROA not after: Sun 14 Jul 2024 01:00:26 +0000 asID: 399629 IP address blocks: 195.85.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:8c:6d:d2:b6:f4:e5:f7:ab:9d:52:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Apr 15 01:00:26 2024 GMT Not After : Jul 14 01:00:26 2024 GMT Subject: CN=db641c1a-31c0-4272-a27a-5610b14a8258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:26:e0:80:92:2f:75:26:38:6c:d9:c1:1f:f4: 26:1d:84:aa:e2:30:65:76:f9:c6:bf:a2:f7:4a:84: 50:94:d3:04:7f:6d:f6:e7:6d:00:e5:4c:02:4b:8b: 8e:f4:d9:db:84:18:1d:c6:59:0d:f6:7a:4b:94:bb: 61:c3:de:1e:1c:92:fb:a5:ee:a8:4c:20:10:1f:42: bc:ef:2c:cc:42:39:a8:c5:61:16:1c:8d:d6:b5:35: cd:d7:70:af:6f:05:d8:47:dc:e8:9a:95:10:89:dd: a1:1e:54:67:f1:94:52:69:0c:b0:e6:f3:82:e0:10: 2d:d8:9d:55:f6:f8:81:8a:25:d0:49:8a:d1:93:8e: 4f:c9:9b:e9:0e:a1:d2:30:c9:0f:8f:cc:f7:80:0f: 35:1d:c1:5c:31:cc:b0:79:9d:7a:65:fa:1f:7e:3b: 72:b8:00:f4:1f:5a:dc:92:b9:41:9e:fc:b1:2a:49: f2:31:fe:5b:ae:b9:c6:6c:38:5a:02:aa:36:54:d6: 9a:52:98:a2:c6:56:ee:6c:de:2c:df:26:ab:7e:a0: a6:1a:73:d9:82:a2:ae:f8:ee:e1:37:17:94:cc:05: 3c:1e:ee:e8:8c:94:20:04:d7:ce:df:dc:ca:ac:42: 25:fa:b1:7f:34:47:e4:fe:d0:7c:b6:bf:da:4f:8c: c9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A0:01:41:89:45:B0:3F:77:21:F9:5F:14:1B:11:A2:8D:01:EE:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/d1a4c516-eb99-30e0-b49a-13082dc83820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 195.85.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:6e:c8:f9:31:f5:43:15:c7:e2:c4:0f:5a:a9:8d:94:1d:41: 75:b1:b4:70:58:e8:3b:66:b6:c0:0f:f4:c9:01:4e:ea:30:6e: b1:bb:b7:aa:d7:db:70:f2:7b:89:12:32:d4:bf:38:36:8f:2f: 06:06:bb:6a:d7:d9:02:0b:a3:76:45:7b:86:f9:74:75:bd:43: e8:b4:b8:04:e5:6a:34:03:30:aa:28:d0:c4:59:67:16:10:e8: 96:be:51:7e:0a:91:7d:69:68:b8:3c:d2:1c:6a:23:fd:1a:dc: b1:85:aa:09:70:d0:a8:2f:08:8d:ef:69:dc:91:54:08:23:bc: ef:80:2c:1a:8f:07:0f:2d:15:da:78:d6:90:05:ee:51:4b:3c: 21:c5:b8:11:96:dc:18:ea:2b:40:3b:14:1a:b7:39:7c:f6:ed: 4b:16:fa:e6:e6:f6:f5:f0:50:e6:ad:b4:af:fb:87:48:a8:ec: 02:a4:45:51:b4:ab:62:34:dd:51:ce:43:2e:35:04:8a:83:61: 9d:30:84:e3:74:7c:07:96:ed:e7:23:63:8e:44:27:3c:ee:0f: ea:71:1d:fe:73:2c:25:20:6b:fc:da:66:96:f0:21:61:4f:3e: d6:a6:b6:3d:3a:65:9a:de:ac:a3:6e:a4:10:a8:67:e9:bd:75: 1e:d9:e9:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWMbdK29OX3q51SXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI0MDQxNTAxMDAyNloXDTI0MDcxNDAxMDAyNlowLzEtMCsGA1UEAxMk ZGI2NDFjMWEtMzFjMC00MjcyLWEyN2EtNTYxMGIxNGE4MjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ibggJIvdSY4bNnBH/QmHYSq4jBldvnGv6L3 SoRQlNMEf232520A5UwCS4uO9NnbhBgdxlkN9npLlLthw94eHJL7pe6oTCAQH0K8 7yzMQjmoxWEWHI3WtTXN13CvbwXYR9zompUQid2hHlRn8ZRSaQyw5vOC4BAt2J1V 9viBiiXQSYrRk45PyZvpDqHSMMkPj8z3gA81HcFcMcyweZ16ZfoffjtyuAD0H1rc krlBnvyxKknyMf5brrnGbDhaAqo2VNaaUpiixlbubN4s3yarfqCmGnPZgqKu+O7h NxeUzAU8Hu7ojJQgBNfO39zKrEIl+rF/NEfk/tB8tr/aT4zJOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6gAUGJRbA/dyH5XxQbEaKNAe70MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvZDFhNGM1MTYtZWI5OS0z MGUwLWI0OWEtMTMwODJkYzgzODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw1VyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBuyPkx9UMVx+LED1qpjZQdQXWxtHBY6DtmtsAP9MkBTuowbrG7t6rX 23Dye4kSMtS/ODaPLwYGu2rX2QILo3ZFe4b5dHW9Q+i0uATlajQDMKoo0MRZZxYQ 6Ja+UX4KkX1paLg80hxqI/0a3LGFqglw0KgvCI3vadyRVAgjvO+ALBqPBw8tFdp4 1pAF7lFLPCHFuBGW3BjqK0A7FBq3OXz27UsW+ubm9vXwUOattK/7h0io7AKkRVG0 q2I03VHOQy41BIqDYZ0whON0fAeW7ecjY45EJzzuD+pxHf5zLCUga/zaZpbwIWFP Ptamtj06ZZrerKNupBCoZ+m9dR7Z6YE= -----END CERTIFICATE-----Generated at Thu Apr 25 03:53:57 2024 by rpki-client on console-fra.rpki-client.org