$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/db061df5-cce6-33ed-9e57-80dd3d303f28.roa File: db061df5-cce6-33ed-9e57-80dd3d303f28.roa (raw, json) Hash identifier: l/0lNa0jDFXcp6oqi4+rAhuNNhZwyluIy4nR8rxUMDU= Subject key identifier: 14:A1:EC:6D:E3:74:4D:6F:74:E0:19:87:91:88:AC:A1:46:99:15:78 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285844DE0FDD4037F8915D775B4680 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/db061df5-cce6-33ed-9e57-80dd3d303f28.roa Signing time: Mon 12 Feb 2024 14:00:30 +0000 ROA not before: Mon 12 Feb 2024 14:00:30 +0000 ROA not after: Sun 12 May 2024 13:00:30 +0000 asID: 400672 IP address blocks: 131.153.87.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:de:0f:dd:40:37:f8:91:5d:77:5b:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Feb 12 14:00:30 2024 GMT Not After : May 12 13:00:30 2024 GMT Subject: CN=5381b4b0-551c-403f-9b5e-15c19b6f9f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7b:8b:ad:c1:a3:27:2a:a3:ae:58:c2:dd:00: a5:cf:6b:10:81:66:30:65:db:71:0b:2e:f6:a8:18: 91:48:62:92:5a:62:7f:33:3a:15:68:60:db:8d:af: b2:d8:c1:84:db:70:41:86:3d:41:04:3f:4b:bc:04: 5c:0c:43:79:0d:6b:fa:d1:fc:fd:1d:86:f0:73:7f: cb:e2:7f:0f:4f:10:37:47:93:75:84:13:c6:dd:91: 1b:50:cd:42:dc:2e:72:72:10:ae:75:53:c4:6b:f9: 48:0f:86:75:2d:5d:29:ae:29:d6:c1:1f:dc:6d:5e: 06:62:a0:b4:88:fe:94:48:b8:83:06:da:b7:77:05: ee:06:1c:7f:ad:a6:3b:8b:c1:2a:99:d4:d0:36:f6: d8:16:5b:ad:68:38:6f:c4:63:01:42:f7:7f:ac:be: 0f:80:46:70:4a:1d:87:79:db:57:f5:45:e4:75:4e: 99:fa:a2:99:e5:81:a1:ac:38:de:86:a8:cc:3c:85: 92:33:6d:eb:de:f4:2f:72:1a:fd:c7:d4:ac:f0:a5: db:0b:3d:56:63:d8:51:8e:5a:da:6b:9c:27:ae:98: d5:88:08:20:0b:08:e6:db:73:6b:7f:a4:e1:77:bd: 22:f1:12:13:6a:3f:52:b7:b3:f0:55:65:53:7c:d1: bf:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A1:EC:6D:E3:74:4D:6F:74:E0:19:87:91:88:AC:A1:46:99:15:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/db061df5-cce6-33ed-9e57-80dd3d303f28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:5c:4d:90:eb:ec:d4:5b:5a:c9:e5:02:76:c0:31:bf:cf:a1: 80:d3:dc:7e:9e:ea:81:64:c8:d3:f1:17:79:55:9e:e5:b0:42: cb:56:c7:9a:24:1c:f4:4c:fd:9c:bc:b1:0b:6e:84:a8:4f:97: d9:e4:de:40:db:f4:05:75:7e:7a:72:f4:e3:b2:6c:87:61:92: 07:39:74:5d:37:f3:37:71:06:b1:0c:01:90:6c:7b:b0:01:bd: 51:f6:56:0c:e2:a6:b7:48:64:34:ae:f6:46:42:65:a2:b9:e6: aa:e6:28:c9:34:2c:c1:cb:b1:12:fa:dc:75:18:cc:2f:a2:7b: f0:73:2c:54:2b:98:fa:96:af:27:1e:be:0c:4e:9c:51:69:50: b6:23:e1:3b:1d:67:72:a1:e7:c1:95:0d:e3:49:ec:6e:d3:f8: ae:c7:41:59:0b:ea:84:da:c6:4e:1e:22:db:07:69:ad:c4:08: f0:bc:56:fc:9b:ad:a8:9e:93:05:bc:51:66:8a:c2:a0:05:7b: 31:dc:2c:5c:a2:d9:b5:fd:38:cc:34:70:05:8c:b4:b7:c6:1e: 64:ab:a2:dd:40:51:32:e2:ca:65:e7:6b:43:92:71:df:58:b5: 30:07:bd:ba:10:fa:d2:4c:bc:34:03:8a:6b:46:36:1d:cd:0a: d3:51:2c:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETeD91AN/iRXXdbRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI0MDIxMjE0MDAzMFoXDTI0MDUxMjEzMDAzMFowLzEtMCsGA1UEAxMk NTM4MWI0YjAtNTUxYy00MDNmLTliNWUtMTVjMTliNmY5ZjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHuLrcGjJyqjrljC3QClz2sQgWYwZdtxCy72 qBiRSGKSWmJ/MzoVaGDbja+y2MGE23BBhj1BBD9LvARcDEN5DWv60fz9HYbwc3/L 4n8PTxA3R5N1hBPG3ZEbUM1C3C5ychCudVPEa/lID4Z1LV0prinWwR/cbV4GYqC0 iP6USLiDBtq3dwXuBhx/raY7i8EqmdTQNvbYFlutaDhvxGMBQvd/rL4PgEZwSh2H edtX9UXkdU6Z+qKZ5YGhrDjehqjMPIWSM23r3vQvchr9x9Ss8KXbCz1WY9hRjlra a5wnrpjViAggCwjm23Nrf6Thd70i8RITaj9St7PwVWVTfNG/swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSh7G3jdE1vdOAZh5GIrKFGmRV4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZGIwNjFkZjUtY2NlNi0z M2VkLTllNTctODBkZDNkMzAzZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5cTZDr7NRbWsnlAnbAMb/PoYDT3H6e6oFkyNPxF3lVnuWwQstWx5ok HPRM/Zy8sQtuhKhPl9nk3kDb9AV1fnpy9OOybIdhkgc5dF038zdxBrEMAZBse7AB vVH2VgziprdIZDSu9kZCZaK55qrmKMk0LMHLsRL63HUYzC+ie/BzLFQrmPqWryce vgxOnFFpULYj4TsdZ3Kh58GVDeNJ7G7T+K7HQVkL6oTaxk4eItsHaa3ECPC8Vvyb raiekwW8UWaKwqAFezHcLFyi2bX9OMw0cAWMtLfGHmSrot1AUTLiymXna0OScd9Y tTAHvboQ+tJMvDQDimtGNh3NCtNRLNg= -----END CERTIFICATE-----Generated at Wed Apr 24 20:37:37 2024 by rpki-client on console-fra.rpki-client.org