$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/3be738ec-3dfa-33ac-a1d7-a38864966e9f.roa File: 3be738ec-3dfa-33ac-a1d7-a38864966e9f.roa (raw, json) Hash identifier: diXMaaxGNAU94Ph5fNEyCskHVpkZTZEMaTHz/Sh6QEc= Subject key identifier: 65:3C:12:0F:2A:45:7E:28:66:FE:AE:24:E3:E5:C9:6D:96:40:7F:19 Certificate issuer: /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Certificate serial: 010D0C9F4328584535D25F20BA42DCC27D792D80 Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/3be738ec-3dfa-33ac-a1d7-a38864966e9f.roa Signing time: Fri 15 Mar 2024 00:27:47 +0000 ROA not before: Fri 15 Mar 2024 00:27:47 +0000 ROA not after: Thu 13 Jun 2024 00:27:47 +0000 asID: 13332 IP address blocks: 172.84.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:35:d2:5f:20:ba:42:dc:c2:7d:79:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Validity Not Before: Mar 15 00:27:47 2024 GMT Not After : Jun 13 00:27:47 2024 GMT Subject: CN=1588ae5c-f34f-4d6a-8f48-aca547022bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:17:ff:ad:cb:6a:fc:2f:29:20:6c:d2:92:68: 66:c3:a2:28:fc:42:62:34:cd:63:c1:4d:b7:f4:48: 5a:07:e2:fc:f5:87:a5:dc:45:fa:ef:a1:e5:e7:ce: 4a:a1:a6:dc:44:61:49:2c:62:fc:62:e0:ec:71:25: 2c:74:1e:b6:8c:19:47:50:d6:84:30:ae:c9:43:26: 80:67:9c:82:9c:f5:a8:8d:2c:7b:85:1b:19:31:8a: 47:7f:e3:06:c0:fd:6f:00:93:27:d0:13:5a:20:a5: 5c:6b:8b:96:9e:ba:36:b4:f1:78:d2:f4:29:86:21: b2:d2:75:7a:7b:14:d9:79:9e:f3:0b:a7:60:66:f5: c6:12:51:14:5c:69:46:a8:19:b4:5e:ef:6f:de:2b: 56:79:5f:78:c4:c8:21:14:5d:8e:80:64:ee:b3:aa: f0:a1:25:20:3f:7b:7e:70:bc:45:f0:28:7b:90:bc: 4f:4d:24:c6:10:5b:e3:12:76:ef:f0:fe:ff:9b:a5: 59:dc:b4:f5:c4:cf:2c:1d:91:0e:1b:48:cc:35:ac: e9:e5:55:3c:91:53:6e:5b:77:16:98:47:55:97:d1: 23:ea:2a:ae:41:25:d5:1b:ed:0c:9c:3a:d9:4a:c0: e0:6c:9c:f6:8d:2b:f0:90:b8:84:e3:c0:32:af:7d: 6b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3C:12:0F:2A:45:7E:28:66:FE:AE:24:E3:E5:C9:6D:96:40:7F:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/3be738ec-3dfa-33ac-a1d7-a38864966e9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl X509v3 Authority Key Identifier: keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer sbgp-ipAddrBlock: critical IPv4: 172.84.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:db:93:8f:db:2e:7b:3e:bc:c3:32:67:54:85:32:24:92:f3: 82:92:71:8d:36:10:43:0f:93:fa:09:ea:28:97:97:c8:d1:e4: ae:5d:e5:bb:2e:fa:a2:9a:e4:e4:8b:87:fb:0c:9a:bb:09:88: 7f:e2:c9:83:f5:6c:d0:a7:f4:65:e0:88:fa:e3:a1:42:3e:a3: 36:4f:7e:a8:f4:13:e7:c4:b1:5a:bc:74:e2:09:3b:d1:dc:0d: 4f:e0:16:cf:b2:52:ac:60:cb:9a:c4:4f:dd:5d:c0:05:55:ed: b8:4c:b3:0d:ee:83:1e:62:6a:86:da:7c:ae:ee:0e:26:cd:ad: 8d:c2:67:28:00:37:05:bf:4a:47:a6:45:5c:6c:2c:ee:45:86: 2c:d5:5d:fb:a4:65:dd:8d:84:a9:e7:e2:87:83:ff:f3:0f:06: 1c:9c:79:fb:2d:0d:c6:5f:76:2e:44:5c:81:50:f9:aa:3c:90: c9:89:1d:15:18:cf:e8:6c:5c:e9:c9:f8:a3:16:1d:9c:c7:3c: 5a:3e:26:55:cb:99:58:5a:88:5f:50:e9:96:df:5f:cd:45:1d: df:07:2c:22:08:48:65:27:b6:63:13:7a:50:fe:49:4d:8b:e1: a7:94:79:7e:98:58:f7:73:b6:c5:73:f2:b3:93:fa:54:3a:13: 5d:85:7e:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU10l8gukLcwn15LYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz NGQ2MB4XDTI0MDMxNTAwMjc0N1oXDTI0MDYxMzAwMjc0N1owLzEtMCsGA1UEAxMk MTU4OGFlNWMtZjM0Zi00ZDZhLThmNDgtYWNhNTQ3MDIyYmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRf/rctq/C8pIGzSkmhmw6Io/EJiNM1jwU23 9EhaB+L89Yel3EX676Hl585KoabcRGFJLGL8YuDscSUsdB62jBlHUNaEMK7JQyaA Z5yCnPWojSx7hRsZMYpHf+MGwP1vAJMn0BNaIKVca4uWnro2tPF40vQphiGy0nV6 exTZeZ7zC6dgZvXGElEUXGlGqBm0Xu9v3itWeV94xMghFF2OgGTus6rwoSUgP3t+ cLxF8Ch7kLxPTSTGEFvjEnbv8P7/m6VZ3LT1xM8sHZEOG0jMNazp5VU8kVNuW3cW mEdVl9Ej6iquQSXVG+0MnDrZSsDgbJz2jSvwkLiE48Ayr31rOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGU8Eg8qRX4oZv6uJOPlyW2WQH8ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvM2JlNzM4ZWMtM2RmYS0z M2FjLWExZDctYTM4ODY0OTY2ZTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0 YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1 MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2 MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDbk4/bLns+vMMyZ1SFMiSS84KScY02EEMPk/oJ6iiXl8jR5K5d5bsu +qKa5OSLh/sMmrsJiH/iyYP1bNCn9GXgiPrjoUI+ozZPfqj0E+fEsVq8dOIJO9Hc DU/gFs+yUqxgy5rET91dwAVV7bhMsw3ugx5iaobafK7uDibNrY3CZygANwW/Skem RVxsLO5FhizVXfukZd2NhKnn4oeD//MPBhycefstDcZfdi5EXIFQ+ao8kMmJHRUY z+hsXOnJ+KMWHZzHPFo+JlXLmVhaiF9Q6ZbfX81FHd8HLCIISGUntmMTelD+SU2L 4aeUeX6YWPdztsVz8rOT+lQ6E12FfqM= -----END CERTIFICATE-----Generated at Wed May 22 18:48:34 2024 by rpki-client on console-fra.rpki-client.org