$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d33ddacc-232f-3cc5-a6c6-833156127de4.roa File: d33ddacc-232f-3cc5-a6c6-833156127de4.roa (raw, json) Hash identifier: tnR18noC1RJ1byaB54X2hvyW4W74jI01sLe7ueT9TXM= Subject key identifier: 0D:9F:C7:3A:16:05:48:C5:66:E1:37:56:C7:3B:B9:FF:99:AB:47:EB Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F43285844F0354C51D1AFAE361DAC7B10 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d33ddacc-232f-3cc5-a6c6-833156127de4.roa Signing time: Mon 19 Feb 2024 02:00:25 +0000 ROA not before: Mon 19 Feb 2024 02:00:25 +0000 ROA not after: Sun 19 May 2024 01:00:25 +0000 asID: 53927 IP address blocks: 139.131.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f0:35:4c:51:d1:af:ae:36:1d:ac:7b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Feb 19 02:00:25 2024 GMT Not After : May 19 01:00:25 2024 GMT Subject: CN=0a0d0288-57eb-47a9-990b-3d099cb1b115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c3:49:49:0d:cc:f9:7e:c3:a1:49:7e:79:38: 14:59:ea:a7:64:5e:e6:fb:5b:2d:2d:f5:8f:63:ef: 33:ea:76:e6:c8:fe:8b:62:da:5f:5f:3c:88:1e:8e: e3:62:64:7a:60:52:0e:58:57:c9:96:d1:e5:b6:27: 62:a0:bf:56:77:22:07:fa:68:ec:bb:c1:87:7c:ec: f5:e5:b2:35:9a:af:9c:9a:74:78:13:51:28:08:80: a6:82:df:a3:95:7f:76:b4:c7:7f:5c:67:4c:b5:b4: dd:d8:bb:92:ae:43:bc:47:10:6b:92:9b:da:45:f8: 2a:d2:59:5b:0f:38:d7:4d:a8:21:a0:d6:5c:00:00: 88:55:2e:94:00:0c:9e:11:51:f9:4b:33:e1:7c:29: d9:61:ce:62:ff:ec:fb:d5:0c:a8:68:f1:09:9b:82: d6:ae:d9:13:7c:c9:93:4d:10:87:06:be:52:c3:07: 2f:7a:60:d2:14:c9:e3:bc:6a:8e:8b:83:4e:78:01: fb:2b:9f:c2:5a:fa:c1:62:21:4b:5b:14:da:5b:8f: 97:8c:2d:f2:50:20:24:c8:f9:b2:e5:be:4c:4a:8e: 8c:47:e9:3e:1e:7e:17:c9:e6:ed:69:16:fc:8b:db: 1f:98:31:c7:66:f9:23:11:fc:b9:72:d5:0b:70:25: 0d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9F:C7:3A:16:05:48:C5:66:E1:37:56:C7:3B:B9:FF:99:AB:47:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d33ddacc-232f-3cc5-a6c6-833156127de4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:60:2f:cd:1f:13:af:b5:ce:42:3e:e0:7e:e4:a8:6e:45:40: 75:b9:a6:2a:bc:4f:ec:06:1f:b0:de:10:45:21:10:66:66:00: 95:0f:3c:f4:17:f4:fa:5f:79:cc:ab:50:5f:12:d4:b8:9f:64: f2:68:54:d2:ec:ea:6f:41:d3:3c:70:04:22:ce:0e:e1:78:1e: cc:26:c8:02:95:f7:97:85:66:f9:e5:a7:92:75:82:b4:80:38: 09:6f:0c:fe:70:28:bc:bd:bf:df:65:ef:01:b9:3c:b1:e3:4d: c0:e3:49:e8:91:87:fb:13:54:b1:90:9a:65:d4:68:0e:b4:48: aa:bb:dd:62:a3:15:fb:ad:e6:60:14:fb:0c:05:0c:c7:d8:67: b2:4f:12:42:61:c1:2e:de:7b:bf:fc:86:34:e6:ab:ef:6b:f6: e1:8f:c3:3d:cd:2d:e4:72:b4:f8:97:01:48:4c:36:f7:ec:ba: e0:ee:23:5b:a7:57:1d:ae:6d:32:00:a4:61:6f:52:8a:94:84: de:23:c0:60:e8:15:76:8a:2c:1c:57:bf:46:93:d4:45:42:8f: 8b:df:a1:fa:76:a1:a3:f0:5b:15:09:57:24:0c:7d:6b:e0:1b: 8b:66:58:11:00:a6:cf:ad:44:4e:67:c0:67:b2:40:9b:23:a6: 68:f7:d9:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETwNUxR0a+uNh2sexAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI0MDIxOTAyMDAyNVoXDTI0MDUxOTAxMDAyNVowLzEtMCsGA1UEAxMk MGEwZDAyODgtNTdlYi00N2E5LTk5MGItM2QwOTljYjFiMTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cNJSQ3M+X7DoUl+eTgUWeqnZF7m+1stLfWP Y+8z6nbmyP6LYtpfXzyIHo7jYmR6YFIOWFfJltHltidioL9WdyIH+mjsu8GHfOz1 5bI1mq+cmnR4E1EoCICmgt+jlX92tMd/XGdMtbTd2LuSrkO8RxBrkpvaRfgq0llb DzjXTaghoNZcAACIVS6UAAyeEVH5SzPhfCnZYc5i/+z71QyoaPEJm4LWrtkTfMmT TRCHBr5SwwcvemDSFMnjvGqOi4NOeAH7K5/CWvrBYiFLWxTaW4+XjC3yUCAkyPmy 5b5MSo6MR+k+Hn4XyebtaRb8i9sfmDHHZvkjEfy5ctULcCUNhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2fxzoWBUjFZuE3Vsc7uf+Zq0frMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvZDMzZGRhY2MtMjMyZi0z Y2M1LWE2YzYtODMzMTU2MTI3ZGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi4PUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxgL80fE6+1zkI+4H7kqG5FQHW5piq8T+wGH7DeEEUhEGZmAJUPPPQX 9PpfecyrUF8S1LifZPJoVNLs6m9B0zxwBCLODuF4HswmyAKV95eFZvnlp5J1grSA OAlvDP5wKLy9v99l7wG5PLHjTcDjSeiRh/sTVLGQmmXUaA60SKq73WKjFfut5mAU +wwFDMfYZ7JPEkJhwS7ee7/8hjTmq+9r9uGPwz3NLeRytPiXAUhMNvfsuuDuI1un Vx2ubTIApGFvUoqUhN4jwGDoFXaKLBxXv0aT1EVCj4vfofp2oaPwWxUJVyQMfWvg G4tmWBEAps+tRE5nwGeyQJsjpmj32Us= -----END CERTIFICATE-----Generated at Sun May 5 01:28:20 2024 by rpki-client on console-ams.rpki-client.org