$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/123cfc75-ee2c-3a64-af65-154a3f602d33.roa File: 123cfc75-ee2c-3a64-af65-154a3f602d33.roa (raw, json) Hash identifier: a8fO712XX+KlI2M3CFb2JLKEBrFYFbmb89JKl2d2H70= Subject key identifier: B2:5C:FE:14:D7:3E:85:7B:4C:2A:E2:AC:F2:05:FB:44:CA:5A:6F:63 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858458DD3512BBE34A290F8C2CF80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/123cfc75-ee2c-3a64-af65-154a3f602d33.roa Signing time: Mon 15 Apr 2024 13:00:35 +0000 ROA not before: Mon 15 Apr 2024 13:00:35 +0000 ROA not after: Sun 14 Jul 2024 13:00:35 +0000 asID: 19437 IP address blocks: 131.153.100.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:8d:d3:51:2b:be:34:a2:90:f8:c2:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 15 13:00:35 2024 GMT Not After : Jul 14 13:00:35 2024 GMT Subject: CN=09a28baa-390e-46e5-a051-1b9d8c435163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:90:60:2c:36:f9:59:46:0a:81:9a:63:75:a6: 4b:8c:84:4f:93:e1:5c:dd:b8:1e:98:a2:ea:ce:09: 27:5e:a1:1a:8e:56:1c:4b:72:3f:0a:7f:c0:d7:e7: 3e:6c:8f:3e:36:fe:0b:52:fb:18:44:28:5c:12:db: b6:fe:1f:41:66:6d:5d:aa:17:2f:92:59:83:13:23: a0:d6:d1:73:b2:fa:2a:b4:64:49:6a:e7:ca:c0:61: ef:57:10:1d:93:42:7b:a7:3c:7c:24:1c:be:48:7f: 23:6c:ed:05:6e:66:f7:2e:87:40:20:8f:53:20:57: 7f:c5:09:4b:f7:e5:58:d9:43:37:bf:46:b3:3f:e4: 58:8d:a5:b0:d6:bd:73:4c:75:49:9d:f0:db:6d:f2: 34:c4:86:f1:63:e5:77:f7:80:68:fa:3c:fa:a6:e8: ad:63:16:bd:df:b2:ab:1d:60:51:d6:6d:83:a9:3d: e2:4c:16:b9:e9:7e:9e:c9:f2:fd:91:d4:0f:c3:61: d5:c2:00:30:cb:fe:5e:59:08:0a:22:82:98:5f:cc: a2:72:06:1f:ce:5a:b7:76:fb:27:2b:dc:af:96:b4: f6:d6:4f:aa:ec:b3:49:63:5b:f8:64:0b:d9:bb:f5: 9d:b6:e4:0c:bb:cf:15:38:82:4d:c0:a9:1e:5d:0e: b5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5C:FE:14:D7:3E:85:7B:4C:2A:E2:AC:F2:05:FB:44:CA:5A:6F:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/123cfc75-ee2c-3a64-af65-154a3f602d33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:ee:69:b5:2b:15:09:86:98:be:53:4d:f6:8e:9f:8e:34:3a: 0c:d5:68:97:3b:55:71:fe:b8:d1:76:0d:80:8e:01:20:30:de: e9:16:0b:ee:35:a6:a8:5c:17:01:33:28:a4:d8:d6:99:52:af: 41:d9:84:ac:f4:91:12:a3:d7:df:dd:66:2f:f5:a8:11:d8:94: ce:d1:b2:a7:fb:3e:d6:95:8f:42:2d:c4:09:ba:e7:91:e5:50: 25:25:4e:31:2e:e9:d5:5e:63:66:97:24:3e:0e:28:73:30:d7: 7c:6b:92:29:8e:bf:85:bc:74:48:ac:2a:ee:7e:de:64:af:87: 97:11:55:59:8f:67:ce:3b:a5:0f:28:23:69:c1:cd:fc:e2:17: 37:81:49:86:da:15:ec:50:9a:c2:78:bf:92:63:bd:62:65:e5: af:8f:13:ef:ab:67:87:ba:a2:9c:df:60:af:cb:ec:42:ce:be: 1f:ab:26:4e:25:5f:51:35:65:61:b3:e1:96:99:20:ec:82:33: d2:b7:08:83:12:5d:31:14:69:f9:fa:58:a6:47:0d:4e:a0:3f: 1e:f6:92:39:41:8b:ad:87:43:08:ef:a4:7c:e8:48:02:62:ba: 60:56:cd:85:51:8a:7a:1c:5f:0b:fc:ec:22:dd:79:a0:5a:fa: aa:d0:9a:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWN01ErvjSikPjCz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI0MDQxNTEzMDAzNVoXDTI0MDcxNDEzMDAzNVowLzEtMCsGA1UEAxMk MDlhMjhiYWEtMzkwZS00NmU1LWEwNTEtMWI5ZDhjNDM1MTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JBgLDb5WUYKgZpjdaZLjIRPk+Fc3bgemKLq zgknXqEajlYcS3I/Cn/A1+c+bI8+Nv4LUvsYRChcEtu2/h9BZm1dqhcvklmDEyOg 1tFzsvoqtGRJaufKwGHvVxAdk0J7pzx8JBy+SH8jbO0Fbmb3LodAII9TIFd/xQlL 9+VY2UM3v0azP+RYjaWw1r1zTHVJnfDbbfI0xIbxY+V394Bo+jz6puitYxa937Kr HWBR1m2DqT3iTBa56X6eyfL9kdQPw2HVwgAwy/5eWQgKIoKYX8yicgYfzlq3dvsn K9yvlrT21k+q7LNJY1v4ZAvZu/WdtuQMu88VOIJNwKkeXQ613wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJc/hTXPoV7TCrirPIF+0TKWm9jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMTIzY2ZjNzUtZWUyYy0z YTY0LWFmNjUtMTU0YTNmNjAyZDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5lkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnuabUrFQmGmL5TTfaOn440OgzVaJc7VXH+uNF2DYCOASAw3ukWC+41 pqhcFwEzKKTY1plSr0HZhKz0kRKj19/dZi/1qBHYlM7Rsqf7PtaVj0ItxAm655Hl UCUlTjEu6dVeY2aXJD4OKHMw13xrkimOv4W8dEisKu5+3mSvh5cRVVmPZ847pQ8o I2nBzfziFzeBSYbaFexQmsJ4v5JjvWJl5a+PE++rZ4e6opzfYK/L7ELOvh+rJk4l X1E1ZWGz4ZaZIOyCM9K3CIMSXTEUafn6WKZHDU6gPx72kjlBi62HQwjvpHzoSAJi umBWzYVRinocXwv87CLdeaBa+qrQmrA= -----END CERTIFICATE-----Generated at Sat Apr 27 10:42:10 2024 by rpki-client on console-ams.rpki-client.org