$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a3476e4c-4fec-3283-b242-377f154d7059.roa File: a3476e4c-4fec-3283-b242-377f154d7059.roa (raw, json) Hash identifier: hyrQH3umX2yZ9anVM/KH7oZ4rQD/OY9pblVlJtKkIPk= Subject key identifier: 84:B7:32:2C:16:C3:2D:D4:5D:0A:A4:16:F3:28:32:23:38:7D:7D:5A Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584582A87DC6FE62E3875E05F280 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a3476e4c-4fec-3283-b242-377f154d7059.roa Signing time: Thu 11 Apr 2024 13:00:36 +0000 ROA not before: Thu 11 Apr 2024 13:00:36 +0000 ROA not after: Wed 10 Jul 2024 13:00:36 +0000 asID: 14297 IP address blocks: 139.131.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:82:a8:7d:c6:fe:62:e3:87:5e:05:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Apr 11 13:00:36 2024 GMT Not After : Jul 10 13:00:36 2024 GMT Subject: CN=10da46b0-ebb3-42cf-9895-77fe2b1ca1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b7:4c:0e:55:85:0e:a9:3d:80:58:99:f8:64: e3:ca:34:21:86:be:61:7f:ef:00:db:61:33:f7:df: 7c:c6:d1:0b:c5:4d:87:8d:be:ca:a9:63:fd:f4:45: 9f:6b:95:b5:1d:e5:d1:e1:e6:8a:a9:01:26:e1:af: 42:80:6b:68:11:37:93:69:cd:df:97:47:91:df:5f: 17:f1:03:b0:95:1b:7f:32:b9:32:f2:8c:a1:53:cd: 99:6e:f8:21:3f:69:3d:bb:cd:be:78:70:96:3f:28: 6e:ee:b3:71:7f:d4:49:3f:73:57:77:24:8a:97:53: a3:4f:71:dd:c0:bb:2b:21:d6:24:bb:3c:d4:f1:10: a8:89:1a:86:10:42:08:8f:f4:b0:1a:cd:a9:17:7a: 95:d8:5f:80:29:64:fa:03:1b:1a:71:08:04:b0:ec: b7:ce:97:47:16:3a:d4:e2:cf:b0:ae:fb:16:f5:73: a8:e1:28:58:15:4e:39:07:cb:7e:ce:80:60:1e:2b: bc:54:1c:9b:22:97:bc:ee:94:6f:34:3d:4d:01:8e: e1:85:3a:8c:f3:f2:02:c4:27:fb:cd:90:36:39:44: 54:e3:5b:ea:bc:7f:3c:b7:cb:5e:69:a4:b3:a9:8c: 04:ee:5e:5a:60:a1:98:18:a5:20:eb:f6:d3:c2:0d: 65:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B7:32:2C:16:C3:2D:D4:5D:0A:A4:16:F3:28:32:23:38:7D:7D:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a3476e4c-4fec-3283-b242-377f154d7059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:cd:6d:d0:8a:ed:95:6c:70:c6:1c:ec:b7:b2:ef:ff:d4:c3: 2e:65:88:df:c6:50:55:7b:96:8a:b3:37:75:59:e0:7f:2b:f6: e0:06:b8:e0:c4:cf:c6:c4:89:7e:5d:46:68:56:65:3b:7e:5b: b4:93:2e:2d:59:3b:8a:54:a6:34:c6:21:55:cb:5d:70:c5:02: a3:44:48:15:23:70:9c:48:b5:64:61:3d:c3:29:6b:32:6a:f4: 06:cf:fe:fd:88:77:a5:a9:d6:57:f6:b7:99:80:f6:f1:5e:c2: 0d:b7:7d:42:0d:f6:3f:4c:89:9c:3f:f2:0f:28:4d:65:5c:e1: 06:69:72:7e:74:10:f6:b1:b8:02:f9:e3:63:ad:61:68:37:da: c5:c3:a5:bc:97:51:08:6d:fa:47:21:45:d2:d7:ac:83:c0:0e: 83:d2:fe:2f:85:95:af:04:e3:2b:cb:b1:24:48:e4:f6:38:16: 88:62:51:ee:68:8b:b9:49:da:2f:d5:cc:11:e4:da:9d:b1:dd: f5:8a:ea:df:cf:91:fb:0c:b9:75:77:b2:18:99:3b:24:a5:07: 2d:30:d2:a1:d8:28:cd:f9:e2:aa:e3:9f:78:a3:1e:a1:b8:c3: 15:6c:12:56:36:90:42:3e:5e:d5:25:72:b6:50:f8:d3:78:cb: 4d:23:b7:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWCqH3G/mLjh14F8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk MTBkYTQ2YjAtZWJiMy00MmNmLTk4OTUtNzdmZTJiMWNhMWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7dMDlWFDqk9gFiZ+GTjyjQhhr5hf+8A22Ez 9998xtELxU2Hjb7KqWP99EWfa5W1HeXR4eaKqQEm4a9CgGtoETeTac3fl0eR318X 8QOwlRt/Mrky8oyhU82ZbvghP2k9u82+eHCWPyhu7rNxf9RJP3NXdySKl1OjT3Hd wLsrIdYkuzzU8RCoiRqGEEIIj/SwGs2pF3qV2F+AKWT6AxsacQgEsOy3zpdHFjrU 4s+wrvsW9XOo4ShYFU45B8t+zoBgHiu8VBybIpe87pRvND1NAY7hhTqM8/ICxCf7 zZA2OURU41vqvH88t8teaaSzqYwE7l5aYKGYGKUg6/bTwg1lTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIS3MiwWwy3UXQqkFvMoMiM4fX1aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvYTM0NzZlNGMtNGZlYy0z MjgzLWIyNDItMzc3ZjE1NGQ3MDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4N4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfNbdCK7ZVscMYc7Ley7//Uwy5liN/GUFV7loqzN3VZ4H8r9uAGuODE z8bEiX5dRmhWZTt+W7STLi1ZO4pUpjTGIVXLXXDFAqNESBUjcJxItWRhPcMpazJq 9AbP/v2Id6Wp1lf2t5mA9vFewg23fUIN9j9MiZw/8g8oTWVc4QZpcn50EPaxuAL5 42OtYWg32sXDpbyXUQht+kchRdLXrIPADoPS/i+Fla8E4yvLsSRI5PY4FohiUe5o i7lJ2i/VzBHk2p2x3fWK6t/PkfsMuXV3shiZOySlBy0w0qHYKM354qrjn3ijHqG4 wxVsElY2kEI+XtUlcrZQ+NN4y00jt/8= -----END CERTIFICATE-----Generated at Sun May 5 15:51:08 2024 by rpki-client on console-ams.rpki-client.org