$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa File: 25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa (raw, json) Hash identifier: xrRv/pZZfb/lsYIzGPrqMtt4bz4tEBrCgep9W7AYYdw= Subject key identifier: A5:EE:14:2C:DD:9F:32:A7:CE:3D:90:58:38:DA:15:0D:5F:8D:F8:8E Certificate issuer: /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Certificate serial: 010D0C9F432858455E5DA11EA929DDE7AA8D7780 Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa Signing time: Fri 29 Mar 2024 13:00:37 +0000 ROA not before: Fri 29 Mar 2024 13:00:37 +0000 ROA not after: Thu 27 Jun 2024 13:00:37 +0000 asID: 1239 IP address blocks: 208.94.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5e:5d:a1:1e:a9:29:dd:e7:aa:8d:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Validity Not Before: Mar 29 13:00:37 2024 GMT Not After : Jun 27 13:00:37 2024 GMT Subject: CN=6a2a31b1-3448-474a-b89b-bcbe478d750e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3a:29:83:59:b1:28:62:bb:ca:00:de:1e:de: 87:26:21:04:bf:de:a5:49:46:ab:39:74:eb:39:02: b1:52:18:86:77:02:5f:41:a3:f0:a5:84:6c:d4:79: dc:bf:9a:1d:f2:52:13:a7:b6:b3:4c:70:df:33:7f: 2f:80:b9:d5:c9:8e:a2:ab:db:26:bb:12:8d:d4:8d: 67:a1:6f:a4:18:ff:a0:1a:04:6a:3b:e9:98:5c:91: 8b:30:3e:0a:9b:b1:5c:c6:0d:4c:f0:04:54:6d:e4: 72:bd:f8:4e:b0:fb:95:31:7c:d4:9d:09:53:97:78: 00:dc:a3:b4:e4:2b:29:52:22:dc:3e:08:9a:45:8a: 05:07:f4:a5:a3:25:60:28:8a:3c:af:31:8f:a2:53: a1:71:d8:c1:9f:41:aa:77:9b:c3:e6:26:d8:89:a2: 8a:57:93:5d:67:fe:a6:3a:e1:41:6d:f0:06:55:1d: e1:76:af:5c:dc:1c:43:75:7a:8c:3d:e3:f1:12:44: 5b:28:80:74:f3:f2:33:30:98:4b:08:ff:ba:b8:28: 95:1e:d5:c8:7d:17:0e:64:a3:05:da:a7:76:cb:7e: 44:3f:43:54:37:f9:09:ed:29:d1:29:3a:66:c3:63: f9:04:41:70:24:a1:12:8b:7a:c8:e4:ad:7c:02:6c: 52:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EE:14:2C:DD:9F:32:A7:CE:3D:90:58:38:DA:15:0D:5F:8D:F8:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl X509v3 Authority Key Identifier: keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer sbgp-ipAddrBlock: critical IPv4: 208.94.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:d5:86:20:39:61:cd:e6:37:80:1b:ab:40:ec:ae:7c:b9:85: 33:de:54:16:5a:3a:7a:24:b6:c2:fa:45:81:39:e8:fc:f5:fd: 49:35:31:87:f2:1b:a6:10:12:75:06:10:f6:55:07:1a:f7:50: c0:0a:9d:1b:bc:b4:5b:ed:28:98:d8:fb:31:30:71:50:cc:37: 04:0a:db:21:ba:80:f0:9e:7c:a2:f8:20:82:54:01:c3:f0:55: 73:3d:50:b0:39:4a:29:1d:28:97:e2:84:80:c2:67:6b:09:67: 0a:f2:4b:85:70:e6:7c:43:31:a1:a3:0c:2e:a0:f0:7c:99:ed: 7e:65:e5:c9:63:ac:d8:db:28:5d:bc:60:22:33:b5:48:b3:34: 29:4f:3a:ba:f5:80:94:49:3d:d4:63:76:80:9f:30:18:ec:91: eb:77:32:2b:9e:ec:d6:73:94:72:27:93:c4:8c:0a:3e:74:10: 5d:ef:dc:84:06:5d:d1:79:c1:54:1a:ce:e1:95:eb:aa:cb:a8: b1:65:7f:31:5f:28:23:a8:9d:26:f4:1c:81:a3:32:77:52:f0: 6b:6c:7a:b9:d5:7d:2b:65:bd:17:8b:8b:39:fe:6a:41:0e:67: e9:34:ee:ae:77:d0:3c:2f:2a:97:92:93:11:ac:ad:1a:50:fe: 0c:af:5d:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVeXaEeqSnd56qNd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NTY4NWYtMTA0Yi00MWM5LTlmZTMtNTNkN2ZlNGQx NDFlMB4XDTI0MDMyOTEzMDAzN1oXDTI0MDYyNzEzMDAzN1owLzEtMCsGA1UEAxMk NmEyYTMxYjEtMzQ0OC00NzRhLWI4OWItYmNiZTQ3OGQ3NTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTopg1mxKGK7ygDeHt6HJiEEv96lSUarOXTr OQKxUhiGdwJfQaPwpYRs1Hncv5od8lITp7azTHDfM38vgLnVyY6iq9smuxKN1I1n oW+kGP+gGgRqO+mYXJGLMD4Km7Fcxg1M8ARUbeRyvfhOsPuVMXzUnQlTl3gA3KO0 5CspUiLcPgiaRYoFB/SloyVgKIo8rzGPolOhcdjBn0Gqd5vD5ibYiaKKV5NdZ/6m OuFBbfAGVR3hdq9c3BxDdXqMPePxEkRbKIB08/IzMJhLCP+6uCiVHtXIfRcOZKMF 2qd2y35EP0NUN/kJ7SnRKTpmw2P5BEFwJKESi3rI5K18AmxSxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXuFCzdnzKnzj2QWDjaFQ1fjfiOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1 Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3ZmU0ZDE0MWUvMjVhMDk1YjAtMWE1Ny0z OWI1LTg1ZmYtYzdmYTM0N2ZjMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2NTY4NWYtMTA0Yi00MWM5LTlm ZTMtNTNkN2ZlNGQxNDFlLzM5NjU2ODVmLTEwNGItNDFjOS05ZmUzLTUzZDdmZTRk MTQxZS5jcmwwHwYDVR0jBBgwFoAULU7sB30FdPaOk41H3eOCV9QL398wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3 ZmU0ZDE0MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0F6MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLVhiA5Yc3mN4Abq0Dsrny5hTPeVBZaOnoktsL6RYE56Pz1/Uk1MYfy G6YQEnUGEPZVBxr3UMAKnRu8tFvtKJjY+zEwcVDMNwQK2yG6gPCefKL4IIJUAcPw VXM9ULA5SikdKJfihIDCZ2sJZwryS4Vw5nxDMaGjDC6g8HyZ7X5l5cljrNjbKF28 YCIztUizNClPOrr1gJRJPdRjdoCfMBjsket3Miue7NZzlHInk8SMCj50EF3v3IQG XdF5wVQazuGV66rLqLFlfzFfKCOonSb0HIGjMndS8GtsernVfStlvReLizn+akEO Z+k07q530DwvKpeSkxGsrRpQ/gyvXeI= -----END CERTIFICATE-----Generated at Wed Apr 24 02:00:05 2024 by rpki-client on console-fra.rpki-client.org