$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/33eb63b4-bd21-319c-9e01-dfd209833ce2.roa File: 33eb63b4-bd21-319c-9e01-dfd209833ce2.roa (raw, json) Hash identifier: h2RbRY5Y2IIjgKNDuXvKDoqCM2/mirWfZ0Gxwg5wnMY= Subject key identifier: 83:ED:FC:8C:8D:25:6D:37:D7:44:F2:24:C6:86:AE:D9:CF:2F:28:BF Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584582A87D8C6FAE5480B4377580 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/33eb63b4-bd21-319c-9e01-dfd209833ce2.roa Signing time: Thu 11 Apr 2024 13:00:36 +0000 ROA not before: Thu 11 Apr 2024 13:00:36 +0000 ROA not after: Wed 10 Jul 2024 13:00:36 +0000 asID: 14297 IP address blocks: 139.131.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:82:a8:7d:8c:6f:ae:54:80:b4:37:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Apr 11 13:00:36 2024 GMT Not After : Jul 10 13:00:36 2024 GMT Subject: CN=beeca2b3-4714-407b-a5c5-2015d7c1b234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7e:d4:5c:d9:a2:2c:c9:dd:bb:85:fa:6f:61: 0e:d7:e4:41:8b:a4:fd:a8:22:a7:9f:74:9b:be:3c: 05:8d:d1:ac:70:d9:92:9d:24:37:f2:7d:35:f9:0d: d7:8d:b2:e9:18:f1:2c:7e:a2:a5:e2:e7:9e:cc:11: dd:15:34:2d:52:4a:89:c1:30:10:f3:2e:3a:c8:8b: c9:ea:47:bb:c2:cb:cb:7a:48:33:7c:a1:4f:62:1b: 50:a2:03:00:38:9c:55:54:71:a1:23:36:cb:2c:ea: 76:28:a9:5f:28:6a:8b:3a:19:dc:a0:f3:bd:13:89: af:a1:10:56:36:59:8b:a8:e6:61:ec:c0:61:18:10: a9:64:eb:5d:80:c0:4c:fb:df:57:5a:33:6a:4a:18: 63:f8:71:69:39:59:57:66:d0:ec:c2:8d:e8:75:15: b3:d8:ef:14:21:47:96:5c:8d:1b:11:37:58:98:26: 33:7a:67:0f:e6:c8:15:d2:f7:c6:81:cf:16:bf:56: 15:c5:99:0b:fa:ff:1b:b2:73:5e:c5:4c:01:47:2a: b0:89:73:da:6e:e2:1c:e2:4a:65:74:c2:e8:f7:9c: 41:34:79:f4:6e:56:90:55:c6:c9:c1:94:45:16:7b: d6:ca:11:f2:38:d0:60:b7:8b:8c:04:47:5d:59:86: 62:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:ED:FC:8C:8D:25:6D:37:D7:44:F2:24:C6:86:AE:D9:CF:2F:28:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/33eb63b4-bd21-319c-9e01-dfd209833ce2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:4c:8f:35:ae:a0:47:39:a0:ee:12:08:7e:aa:dd:fb:42:6c: 84:e6:b2:65:43:eb:07:21:12:fd:18:48:69:e4:95:82:2c:85: 3f:f5:14:69:b6:2f:35:61:99:a9:cd:bf:8a:88:4e:57:a0:66: 45:eb:d3:8c:f9:59:f9:a5:bb:a3:95:28:d1:6e:b8:3e:05:9e: e6:47:bf:dc:a1:f0:26:ea:30:39:7b:30:af:e2:07:d7:a2:43: da:5d:d5:da:f1:6f:3a:8f:9c:09:63:08:ee:ec:b0:a2:01:73: 10:29:d6:f2:22:c2:21:c5:3a:c2:72:17:27:29:45:df:67:9e: 2e:7a:c8:cb:67:88:24:e0:93:bf:77:ea:ce:7f:95:8c:46:5b: 5f:50:e5:19:0c:3a:65:8c:07:37:b4:de:18:4e:9e:36:ec:2e: 9b:38:56:11:e2:b3:e7:7d:ca:f6:4a:90:e2:9a:b2:92:d5:b5: 42:9e:5f:7a:98:50:88:8f:ef:c5:9b:d2:b8:c3:cc:06:a2:6d: 7e:13:e1:62:d0:c7:98:94:bb:f0:05:31:26:f1:b9:d3:7a:08: 6a:92:9b:01:03:b7:2d:16:10:dd:64:0a:e6:cf:cc:0d:69:0c: a9:fd:b9:bc:c0:ff:17:f0:66:94:15:54:f2:86:bf:ce:15:33: 72:c3:03:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWCqH2Mb65UgLQ3dYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk YmVlY2EyYjMtNDcxNC00MDdiLWE1YzUtMjAxNWQ3YzFiMjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH7UXNmiLMndu4X6b2EO1+RBi6T9qCKnn3Sb vjwFjdGscNmSnSQ38n01+Q3XjbLpGPEsfqKl4ueezBHdFTQtUkqJwTAQ8y46yIvJ 6ke7wsvLekgzfKFPYhtQogMAOJxVVHGhIzbLLOp2KKlfKGqLOhncoPO9E4mvoRBW NlmLqOZh7MBhGBCpZOtdgMBM+99XWjNqShhj+HFpOVlXZtDswo3odRWz2O8UIUeW XI0bETdYmCYzemcP5sgV0vfGgc8Wv1YVxZkL+v8bsnNexUwBRyqwiXPabuIc4kpl dMLo95xBNHn0blaQVcbJwZRFFnvWyhHyONBgt4uMBEddWYZi2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPt/IyNJW0310TyJMaGrtnPLyi/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvMzNlYjYzYjQtYmQyMS0z MTljLTllMDEtZGZkMjA5ODMzY2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4NwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJMjzWuoEc5oO4SCH6q3ftCbITmsmVD6wchEv0YSGnklYIshT/1FGm2 LzVhmanNv4qITlegZkXr04z5Wfmlu6OVKNFuuD4FnuZHv9yh8CbqMDl7MK/iB9ei Q9pd1drxbzqPnAljCO7ssKIBcxAp1vIiwiHFOsJyFycpRd9nni56yMtniCTgk793 6s5/lYxGW19Q5RkMOmWMBze03hhOnjbsLps4VhHis+d9yvZKkOKaspLVtUKeX3qY UIiP78Wb0rjDzAaibX4T4WLQx5iUu/AFMSbxudN6CGqSmwEDty0WEN1kCubPzA1p DKn9ubzA/xfwZpQVVPKGv84VM3LDA+U= -----END CERTIFICATE-----Generated at Sun May 5 15:36:57 2024 by rpki-client on console-fra.rpki-client.org