$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/36db5741-694a-3f57-b452-6148011eb6e5.roa File: 36db5741-694a-3f57-b452-6148011eb6e5.roa (raw, json) Hash identifier: aGFdN4dvdP61UJJPrlwb6t6cXuD8NVtQol1x9k7qdEk= Subject key identifier: F8:96:02:B6:58:BF:93:02:DD:0E:47:92:5B:8F:D3:8F:D9:5C:A3:33 Certificate issuer: /CN=5ed81a66-f49e-4a16-a647-f709e55cbdb1 Certificate serial: 010D0C9F43285845AB23569DF9BF501BC1F47E80 Authority key identifier: 86:5D:86:6E:B5:5E:BD:C7:1C:18:46:FE:2D:C8:68:25:00:B0:9F:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/36db5741-694a-3f57-b452-6148011eb6e5.roa Signing time: Fri 26 Apr 2024 01:00:25 +0000 ROA not before: Fri 26 Apr 2024 01:00:25 +0000 ROA not after: Thu 25 Jul 2024 01:00:25 +0000 asID: 16509 IP address blocks: 208.75.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ab:23:56:9d:f9:bf:50:1b:c1:f4:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ed81a66-f49e-4a16-a647-f709e55cbdb1 Validity Not Before: Apr 26 01:00:25 2024 GMT Not After : Jul 25 01:00:25 2024 GMT Subject: CN=950a2091-5dc4-42eb-8f0d-50ca4542c89e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b8:60:c7:d9:7c:5a:81:2b:90:ce:18:5d:f7: 6b:c1:8c:4c:2a:7c:46:46:ac:a4:88:0d:a0:ce:19: f2:51:fa:fc:29:b1:31:ef:05:54:cf:d0:9f:12:f9: 47:27:75:e8:75:5e:f4:47:cb:8d:9f:ee:d3:e0:7e: a0:e0:7f:8b:95:02:90:bc:4c:ef:93:09:ff:72:f0: dc:55:59:0f:64:ce:ae:93:47:2d:a5:5a:02:82:c8: 31:a6:53:45:18:b7:bf:4a:08:34:82:b3:85:e3:a2: d0:e0:49:6f:60:02:b9:a7:a3:68:63:1c:27:86:c8: 75:d9:c9:6b:88:97:71:dd:8c:98:c9:a0:80:95:74: f4:b8:cc:c7:d1:3b:9b:5c:5a:5e:2b:b6:a8:6f:2c: 03:d1:f2:39:23:c4:25:2b:26:dd:7e:34:a1:59:72: 43:d1:ea:c8:ce:44:8b:93:bf:a6:d2:b9:39:f5:69: 2e:24:c2:3c:4f:79:07:ef:02:1f:19:31:85:d3:25: 51:f8:0f:f4:bc:b0:27:3b:00:16:b5:45:ce:80:1d: 04:b6:dc:f5:a0:68:ec:64:b4:d3:88:2f:d8:76:13: 77:14:a1:2d:b0:2e:3a:df:96:8e:a8:d9:70:16:74: 87:b6:88:84:94:cf:2a:66:22:81:99:cd:25:9b:ea: 72:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:96:02:B6:58:BF:93:02:DD:0E:47:92:5B:8F:D3:8F:D9:5C:A3:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/36db5741-694a-3f57-b452-6148011eb6e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.crl X509v3 Authority Key Identifier: keyid:86:5D:86:6E:B5:5E:BD:C7:1C:18:46:FE:2D:C8:68:25:00:B0:9F:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer sbgp-ipAddrBlock: critical IPv4: 208.75.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:80:b3:9f:d2:3d:20:2d:2d:40:fa:2c:9d:2b:77:a1:0f:e1: 17:59:88:aa:04:01:75:ef:1e:f8:78:7b:8d:49:5e:82:26:62: 99:42:f8:3a:02:3b:1b:15:d7:9e:43:a8:6b:78:44:e8:42:7e: 53:07:fe:18:e0:ce:3c:58:4f:ff:c5:b6:75:fd:33:3f:3e:55: 39:d5:b7:95:fa:5e:43:ca:7a:e1:b6:a7:38:e4:f3:d9:6e:31: fb:62:81:72:37:dd:00:07:23:c4:43:56:8d:b5:af:5e:76:0e: 03:2c:30:f0:ca:67:42:a1:87:00:bb:36:da:e5:c2:fa:0d:5e: 5d:c9:18:87:5a:ff:a9:5b:2b:f5:6b:9b:d1:f1:13:c9:30:59: 6b:d5:67:68:d4:40:23:16:37:06:a1:6d:d2:1b:8f:6b:d9:f4: 76:d6:57:1c:cb:0e:26:81:5e:f3:32:a3:ab:9c:79:11:86:01: 71:2d:d9:96:03:d0:29:00:f0:bb:8e:87:3e:7c:2c:68:a1:6e: 8c:98:a6:96:3e:66:c7:b2:64:de:05:f7:d0:fc:f7:db:1c:99: 81:72:d2:11:5a:df:d4:13:4f:c2:2f:0d:ba:72:0d:a2:48:08: a5:bb:bb:54:db:1a:fc:ee:48:d7:7d:fa:39:3f:15:d9:01:7c: cd:45:17:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWrI1ad+b9QG8H0foAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVkODFhNjYtZjQ5ZS00YTE2LWE2NDctZjcwOWU1NWNi ZGIxMB4XDTI0MDQyNjAxMDAyNVoXDTI0MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk OTUwYTIwOTEtNWRjNC00MmViLThmMGQtNTBjYTQ1NDJjODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLhgx9l8WoErkM4YXfdrwYxMKnxGRqykiA2g zhnyUfr8KbEx7wVUz9CfEvlHJ3XodV70R8uNn+7T4H6g4H+LlQKQvEzvkwn/cvDc VVkPZM6uk0ctpVoCgsgxplNFGLe/Sgg0grOF46LQ4ElvYAK5p6NoYxwnhsh12clr iJdx3YyYyaCAlXT0uMzH0TubXFpeK7aobywD0fI5I8QlKybdfjShWXJD0erIzkSL k7+m0rk59WkuJMI8T3kH7wIfGTGF0yVR+A/0vLAnOwAWtUXOgB0Ettz1oGjsZLTT iC/YdhN3FKEtsC4635aOqNlwFnSHtoiElM8qZiKBmc0lm+pyVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPiWArZYv5MC3Q5HkluP04/ZXKMzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZWQ4 MWE2Ni1mNDllLTRhMTYtYTY0Ny1mNzA5ZTU1Y2JkYjEvMzZkYjU3NDEtNjk0YS0z ZjU3LWI0NTItNjE0ODAxMWViNmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWVkODFhNjYtZjQ5ZS00YTE2LWE2 NDctZjcwOWU1NWNiZGIxLzVlZDgxYTY2LWY0OWUtNGExNi1hNjQ3LWY3MDllNTVj YmRiMS5jcmwwHwYDVR0jBBgwFoAUhl2GbrVevcccGEb+LchoJQCwn44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZWQ4MWE2Ni1mNDllLTRhMTYtYTY0Ny1mNzA5 ZTU1Y2JkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Es4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiAs5/SPSAtLUD6LJ0rd6EP4RdZiKoEAXXvHvh4e41JXoImYplC+DoC OxsV155DqGt4ROhCflMH/hjgzjxYT//FtnX9Mz8+VTnVt5X6XkPKeuG2pzjk89lu MftigXI33QAHI8RDVo21r152DgMsMPDKZ0KhhwC7NtrlwvoNXl3JGIda/6lbK/Vr m9HxE8kwWWvVZ2jUQCMWNwahbdIbj2vZ9HbWVxzLDiaBXvMyo6uceRGGAXEt2ZYD 0CkA8LuOhz58LGihboyYppY+ZseyZN4F99D899scmYFy0hFa39QTT8IvDbpyDaJI CKW7u1TbGvzuSNd9+jk/FdkBfM1FF6A= -----END CERTIFICATE-----Generated at Thu May 2 21:11:07 2024 by rpki-client on console-fra.rpki-client.org