$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/a32b5942-107e-3e4d-88ed-01a410959f3e.roa File: a32b5942-107e-3e4d-88ed-01a410959f3e.roa (raw, json) Hash identifier: Sqgsibbs2OoO+6nTa/bSA1dXSsgmrTgHQ3FXxZY2WaA= Subject key identifier: E0:EE:36:67:48:EB:30:65:52:36:6E:90:A8:DC:88:04:5A:36:7C:D8 Certificate issuer: /CN=7ede7b70-d745-425d-975b-bb0eb6368430 Certificate serial: 010D0C9F4328584582A885400DAD1D5DD6975940 Authority key identifier: 42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/a32b5942-107e-3e4d-88ed-01a410959f3e.roa Signing time: Thu 11 Apr 2024 13:00:36 +0000 ROA not before: Thu 11 Apr 2024 13:00:36 +0000 ROA not after: Wed 10 Jul 2024 13:00:36 +0000 asID: 22697 IP address blocks: 128.116.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:82:a8:85:40:0d:ad:1d:5d:d6:97:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ede7b70-d745-425d-975b-bb0eb6368430 Validity Not Before: Apr 11 13:00:36 2024 GMT Not After : Jul 10 13:00:36 2024 GMT Subject: CN=1c32428d-cb78-4889-9e4f-44b243ca510d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8f:7e:f3:76:93:48:e0:e9:5c:85:4f:30:a9: 9d:dc:94:cc:69:19:bf:40:1b:67:dd:cf:b0:39:4a: e8:65:d3:af:01:8e:60:da:fc:e1:15:de:f5:dd:17: f8:30:7b:f1:9f:9a:8f:f2:92:6a:1c:ab:dc:94:2c: 37:f5:30:ec:78:75:23:cf:50:c6:9e:54:3f:35:7c: cc:71:93:69:74:14:d5:2c:82:05:46:6f:b2:9e:ed: 29:09:9e:1e:a5:ad:f4:ec:40:0e:4a:71:49:a8:05: 0c:45:ee:ba:93:14:02:5d:8d:54:32:b1:31:29:79: ec:94:a1:5a:2a:c0:18:63:d0:d9:c9:56:31:c5:a0: 8e:c5:96:a6:43:23:df:e3:79:21:52:6d:6b:2a:70: d9:79:00:b9:af:c4:f4:a0:88:14:36:b5:ca:01:cd: eb:2a:1e:fa:86:d4:a7:9d:71:39:74:3f:da:02:fc: a3:7a:2e:ad:44:82:47:58:f4:90:10:89:46:64:32: 45:6a:09:f1:0b:8e:78:1f:76:a4:17:f9:c3:2f:bf: 5e:f5:60:af:e9:99:b6:2b:52:d0:59:ef:29:03:70: c0:e3:52:74:b6:4a:85:bf:98:76:3c:92:f9:3c:d5: 95:62:33:bc:b0:e8:d7:cb:2f:7a:21:8e:20:fc:2f: fe:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EE:36:67:48:EB:30:65:52:36:6E:90:A8:DC:88:04:5A:36:7C:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/a32b5942-107e-3e4d-88ed-01a410959f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl X509v3 Authority Key Identifier: keyid:42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer sbgp-ipAddrBlock: critical IPv4: 128.116.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:f2:0b:8e:94:98:f0:1a:6d:fc:d2:90:7f:ef:32:79:93:72: 0a:22:70:0b:c5:53:61:9a:2b:6b:78:9d:32:b5:42:fd:b2:60: 62:db:9a:24:6e:d8:d8:42:a5:ee:21:cd:3b:b4:4d:ae:74:3f: 04:33:65:89:19:e4:71:72:5e:1c:b9:d3:3f:57:12:74:61:c2: 82:94:4f:e6:99:75:b0:a9:1e:c6:c9:9a:0b:dd:e4:d9:64:51: 13:3a:e7:4b:e6:50:80:c7:93:80:76:c7:88:68:82:8b:70:b7: ce:ab:d1:7e:81:65:1f:78:c0:71:d7:dc:1a:82:5f:8f:c9:66: aa:de:46:f1:51:5b:fd:b5:94:fe:45:73:7d:86:8d:79:fd:db: 7b:2a:c6:5c:2f:94:4d:99:0a:d8:0c:57:58:95:80:9b:d5:cb: d9:13:9b:00:5d:d1:cb:0e:42:15:08:4b:10:20:b6:0d:78:d8: b6:7b:d5:ba:2d:cc:90:98:fb:25:74:b7:45:24:ce:79:ed:e2: 62:99:83:06:73:ee:12:61:12:fd:b9:e2:e7:02:59:15:0a:5c: ee:56:62:71:78:ed:1d:f4:5d:18:89:07:b2:4d:2e:a3:30:1d: 29:56:13:eb:1d:4e:fb:87:11:72:a5:4f:67:d0:a7:7a:f5:8c: e9:58:b9:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWCqIVADa0dXdaXWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VkZTdiNzAtZDc0NS00MjVkLTk3NWItYmIwZWI2MzY4 NDMwMB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk MWMzMjQyOGQtY2I3OC00ODg5LTllNGYtNDRiMjQzY2E1MTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA349+83aTSODpXIVPMKmd3JTMaRm/QBtn3c+w OUroZdOvAY5g2vzhFd713Rf4MHvxn5qP8pJqHKvclCw39TDseHUjz1DGnlQ/NXzM cZNpdBTVLIIFRm+ynu0pCZ4epa307EAOSnFJqAUMRe66kxQCXY1UMrExKXnslKFa KsAYY9DZyVYxxaCOxZamQyPf43khUm1rKnDZeQC5r8T0oIgUNrXKAc3rKh76htSn nXE5dD/aAvyjei6tRIJHWPSQEIlGZDJFagnxC454H3akF/nDL79e9WCv6Zm2K1LQ We8pA3DA41J0tkqFv5h2PJL5PNWVYjO8sOjXyy96IY4g/C/+aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODuNmdI6zBlUjZukKjciARaNnzYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83ZWRl N2I3MC1kNzQ1LTQyNWQtOTc1Yi1iYjBlYjYzNjg0MzAvYTMyYjU5NDItMTA3ZS0z ZTRkLTg4ZWQtMDFhNDEwOTU5ZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2VkZTdiNzAtZDc0NS00MjVkLTk3 NWItYmIwZWI2MzY4NDMwLzdlZGU3YjcwLWQ3NDUtNDI1ZC05NzViLWJiMGViNjM2 ODQzMC5jcmwwHwYDVR0jBBgwFoAUQm/5Jh3Xg3bHmZYIdEhEiRGXyggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83ZWRlN2I3MC1kNzQ1LTQyNWQtOTc1Yi1iYjBl YjYzNjg0MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHgHQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfyC46UmPAabfzSkH/vMnmTcgoicAvFU2GaK2t4nTK1Qv2yYGLbmiRu 2NhCpe4hzTu0Ta50PwQzZYkZ5HFyXhy50z9XEnRhwoKUT+aZdbCpHsbJmgvd5Nlk URM650vmUIDHk4B2x4hogotwt86r0X6BZR94wHHX3BqCX4/JZqreRvFRW/21lP5F c32GjXn923sqxlwvlE2ZCtgMV1iVgJvVy9kTmwBd0csOQhUISxAgtg142LZ71bot zJCY+yV0t0Ukznnt4mKZgwZz7hJhEv254ucCWRUKXO5WYnF47R30XRiJB7JNLqMw HSlWE+sdTvuHEXKlT2fQp3r1jOlYuWM= -----END CERTIFICATE-----Generated at Tue May 7 15:27:47 2024 by rpki-client on console-fra.rpki-client.org