$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b84e90f8-8554-3fc7-9087-d60abb1233ea.roa File: b84e90f8-8554-3fc7-9087-d60abb1233ea.roa (raw, json) Hash identifier: sI1WXQyfFy7vjvD68dV6CHfCYRqR921Mh4GaYCxAKcc= Subject key identifier: 95:57:07:58:76:E5:33:21:84:F0:A3:1A:A9:C0:03:E6:00:72:0F:1D Certificate issuer: /CN=b2dc77b3-a13a-405a-b7ad-181eab85160b Certificate serial: 010D0C9F432858457D1331357D3AB138E3DBE880 Authority key identifier: FF:76:CB:34:8C:31:D8:B4:5C:24:A1:55:09:55:32:75:64:15:2E:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b84e90f8-8554-3fc7-9087-d60abb1233ea.roa Signing time: Tue 09 Apr 2024 13:00:34 +0000 ROA not before: Tue 09 Apr 2024 13:00:34 +0000 ROA not after: Mon 08 Jul 2024 13:00:34 +0000 asID: 393922 IP address blocks: 192.139.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b2dc77b3-a13a-405a-b7ad-181eab85160b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b2dc77b3-a13a-405a-b7ad-181eab85160b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:7d:13:31:35:7d:3a:b1:38:e3:db:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2dc77b3-a13a-405a-b7ad-181eab85160b Validity Not Before: Apr 9 13:00:34 2024 GMT Not After : Jul 8 13:00:34 2024 GMT Subject: CN=ebaaf4ab-23d1-4fbe-a868-ba498cc48c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fd:b7:2a:08:9c:40:d1:a5:67:51:99:c4:90: d5:85:26:d5:89:e4:7f:fc:5c:4b:c5:11:85:bb:43: 35:28:49:75:66:2b:c0:23:dc:c8:29:85:da:24:c5: f1:06:35:cd:0c:8a:1b:5c:26:cf:99:d7:55:7b:9f: 71:f6:55:0e:b6:57:2a:8f:36:93:36:19:11:aa:4b: 91:7b:61:8c:84:4f:a0:a6:39:61:09:29:61:9b:4f: e7:0d:14:b1:89:43:26:f0:5c:18:7a:63:15:b2:fb: b4:6c:03:95:d9:0a:eb:15:36:58:30:0d:45:23:ae: c8:32:5f:a7:9f:b5:7a:bd:4c:4c:72:f5:a0:1d:ac: 76:3d:3b:7d:9a:6a:2a:a0:47:c7:de:c1:ff:4d:4a: b8:a3:9a:8c:03:0d:df:45:a1:95:6f:bd:51:5a:97: 9c:09:c9:57:df:2b:4b:34:ae:1c:4f:6a:86:21:27: 20:64:0e:e8:b6:4a:4a:83:0f:00:08:eb:a3:20:d0: c2:b5:7e:b4:19:74:43:18:ed:92:a0:d5:92:44:3a: e3:0a:56:f5:cd:88:06:d6:43:7b:6c:10:8a:e2:c1: 6f:0c:fe:b8:f1:fb:35:39:58:63:14:c3:1d:ea:01: 7f:41:a4:ec:dd:f3:ca:04:c2:fc:58:36:e2:1b:c7: 1e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:57:07:58:76:E5:33:21:84:F0:A3:1A:A9:C0:03:E6:00:72:0F:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b84e90f8-8554-3fc7-9087-d60abb1233ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b2dc77b3-a13a-405a-b7ad-181eab85160b.crl X509v3 Authority Key Identifier: keyid:FF:76:CB:34:8C:31:D8:B4:5C:24:A1:55:09:55:32:75:64:15:2E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b.cer sbgp-ipAddrBlock: critical IPv4: 192.139.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:4e:27:25:51:2c:09:50:0b:fa:a8:ff:62:c7:3e:5f:39:d4: 40:b6:f9:82:ca:4e:79:de:85:56:5d:11:52:00:fc:5b:75:01: 9f:8b:1f:2b:6f:01:c6:3e:46:78:e3:31:67:39:bd:b7:dd:0f: 77:5a:f6:b9:06:89:29:42:c5:07:84:5f:1a:6e:db:1e:d7:c4: f4:64:e5:73:d2:05:f5:53:2e:04:cd:78:a8:5e:4a:c2:f9:0b: 3e:c6:2b:97:9a:ff:4b:76:fc:53:d8:8c:f2:be:9f:e4:e2:aa: cb:05:ac:00:2e:67:64:e0:b9:2a:46:9f:ec:f7:45:85:ef:8e: 93:c8:52:a8:45:f3:ff:77:bd:22:63:24:a6:5f:7b:35:24:b1: c8:0d:04:ce:05:e3:e8:d4:e1:95:bb:3e:c0:eb:c9:6e:76:bf: 62:08:87:e6:a0:b8:0f:11:85:1e:c7:21:b5:ec:92:b1:a2:de: 4f:b2:da:41:49:51:5a:16:24:98:ab:3b:9b:db:ad:c6:96:e9: 0e:84:0f:56:80:cb:9e:41:aa:d8:51:cc:b7:fe:70:19:d3:5f: 90:c3:c5:9d:ae:92:52:61:01:4e:f6:21:db:34:4d:c0:d1:25: 81:e7:8e:60:68:43:1d:9f:de:74:60:22:94:ab:b0:63:cf:a1: d3:13:f4:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV9EzE1fTqxOOPb6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJkYzc3YjMtYTEzYS00MDVhLWI3YWQtMTgxZWFiODUx NjBiMB4XDTI0MDQwOTEzMDAzNFoXDTI0MDcwODEzMDAzNFowLzEtMCsGA1UEAxMk ZWJhYWY0YWItMjNkMS00ZmJlLWE4NjgtYmE0OThjYzQ4YzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv23KgicQNGlZ1GZxJDVhSbVieR//FxLxRGF u0M1KEl1ZivAI9zIKYXaJMXxBjXNDIobXCbPmddVe59x9lUOtlcqjzaTNhkRqkuR e2GMhE+gpjlhCSlhm0/nDRSxiUMm8FwYemMVsvu0bAOV2QrrFTZYMA1FI67IMl+n n7V6vUxMcvWgHax2PTt9mmoqoEfH3sH/TUq4o5qMAw3fRaGVb71RWpecCclX3ytL NK4cT2qGIScgZA7otkpKgw8ACOujINDCtX60GXRDGO2SoNWSRDrjClb1zYgG1kN7 bBCK4sFvDP648fs1OVhjFMMd6gF/QaTs3fPKBML8WDbiG8cebQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVXB1h25TMhhPCjGqnAA+YAcg8dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMmRj NzdiMy1hMTNhLTQwNWEtYjdhZC0xODFlYWI4NTE2MGIvYjg0ZTkwZjgtODU1NC0z ZmM3LTkwODctZDYwYWJiMTIzM2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjJkYzc3YjMtYTEzYS00MDVhLWI3 YWQtMTgxZWFiODUxNjBiL2IyZGM3N2IzLWExM2EtNDA1YS1iN2FkLTE4MWVhYjg1 MTYwYi5jcmwwHwYDVR0jBBgwFoAU/3bLNIwx2LRcJKFVCVUydWQVLiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMmRjNzdiMy1hMTNhLTQwNWEtYjdhZC0xODFl YWI4NTE2MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIuEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADROJyVRLAlQC/qo/2LHPl851EC2+YLKTnnehVZdEVIA/Ft1AZ+LHytv AcY+RnjjMWc5vbfdD3da9rkGiSlCxQeEXxpu2x7XxPRk5XPSBfVTLgTNeKheSsL5 Cz7GK5ea/0t2/FPYjPK+n+TiqssFrAAuZ2TguSpGn+z3RYXvjpPIUqhF8/93vSJj JKZfezUkscgNBM4F4+jU4ZW7PsDryW52v2IIh+aguA8RhR7HIbXskrGi3k+y2kFJ UVoWJJirO5vbrcaW6Q6ED1aAy55BqthRzLf+cBnTX5DDxZ2uklJhAU72Ids0TcDR JYHnjmBoQx2f3nRgIpSrsGPPodMT9D8= -----END CERTIFICATE-----Generated at Thu May 2 04:28:01 2024 by rpki-client on console-fra.rpki-client.org