$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa File: ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa (raw, json) Hash identifier: QFymvzgRo+lBIXwvRE3szoS/L7O9l0sqhbgT9l4G/Hw= Subject key identifier: 0C:53:60:92:5A:E3:42:DC:8D:0D:10:6A:E6:FB:02:EF:F0:0B:E2:FC Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b Certificate serial: 010D0C9F4328584555D2EA4FAD80FFFFD4433350 Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa Signing time: Tue 26 Mar 2024 11:34:45 +0000 ROA not before: Tue 26 Mar 2024 11:34:45 +0000 ROA not after: Mon 24 Jun 2024 11:34:45 +0000 asID: 136787 IP address blocks: 138.128.133.0/24 maxlen: 24 138.128.134.0/24 maxlen: 24 138.128.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:55:d2:ea:4f:ad:80:ff:ff:d4:43:33:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b Validity Not Before: Mar 26 11:34:45 2024 GMT Not After : Jun 24 11:34:45 2024 GMT Subject: CN=edeb7bc4-a86e-42b2-9786-eef1c27796b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:8d:89:9e:58:40:e3:ae:67:93:d4:c8:f1: 97:e3:e6:de:e2:a1:98:fe:8c:9a:56:e0:6d:6c:70: fd:e2:c4:ab:15:af:37:67:22:49:18:72:c0:f3:a1: 50:28:e3:96:ea:6a:13:ca:8c:ee:ad:b7:03:b7:69: 2d:86:ef:ae:81:09:ce:cd:b0:6e:b5:b0:bd:6a:c0: 25:47:df:14:e0:33:6a:f5:41:c8:70:ce:3b:00:fc: 19:ed:3c:34:f4:c5:02:c8:ba:a6:34:47:64:43:64: 5a:52:c0:cd:bf:d6:a7:2e:01:5b:eb:4f:e0:b1:39: 6d:e3:2c:d9:82:28:63:5d:f6:5d:04:c2:4f:37:0b: 9f:f4:d0:66:da:5f:fa:3a:f3:fa:ff:d3:b7:e3:c8: 83:3a:59:8c:a5:28:26:87:79:1f:80:51:5a:41:b2: cd:76:7a:83:7c:66:b4:7c:d1:37:67:97:44:3c:f1: cd:0f:7e:61:41:50:64:05:50:c3:72:b9:8b:c2:f2: 07:d5:32:f7:bc:f9:b1:bf:be:fb:16:25:6a:1f:5a: a0:3c:c2:16:43:7c:71:65:75:5d:21:8c:eb:34:a5: 40:b1:41:fc:55:57:3c:28:3f:01:a3:9f:4c:f5:88: 74:51:f9:4f:19:14:fd:8a:66:fc:47:24:e3:1d:c4: 86:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:53:60:92:5A:E3:42:DC:8D:0D:10:6A:E6:FB:02:EF:F0:0B:E2:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl X509v3 Authority Key Identifier: keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer sbgp-ipAddrBlock: critical IPv4: 138.128.133.0-138.128.135.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:fa:b4:83:79:98:78:eb:a1:56:c7:6b:df:65:48:bb:ab:2e: 4e:12:1e:c7:81:a1:9e:0c:20:b9:c4:cd:92:64:6c:ed:fa:c7: 83:1c:3a:5c:2b:4e:d5:be:55:d7:74:b4:b6:0e:06:1c:fa:d3: f2:89:30:91:1a:69:9a:95:34:be:3c:01:67:67:0c:6b:e2:69: 9c:dd:cd:8d:82:98:34:dd:fd:36:19:b7:57:93:99:b5:12:84: 53:e1:e7:51:ef:8b:2d:26:08:ce:06:90:fc:c5:d3:38:ce:2a: 9b:5c:03:d9:61:dd:d3:58:78:05:62:0b:cd:48:39:12:f8:bd: 84:3a:07:6f:2b:5e:1b:ff:7e:f8:f6:fb:0e:ab:a2:2a:31:6d: 4d:f5:46:e4:b1:6d:7b:be:d2:86:7b:cd:91:03:c8:a1:de:22: c8:35:e5:3d:d4:fa:6e:5e:25:7e:b1:68:fe:2a:18:71:47:ba: 77:a0:61:ca:82:44:cc:b0:f8:ed:b3:44:2e:5b:3b:2c:0e:56: 2a:80:ba:86:46:14:c4:0b:04:36:48:fd:8e:e7:18:be:f7:33: 38:62:02:87:87:1c:25:2a:cb:9c:a6:21:0c:a9:e3:a4:0a:4e: b7:12:62:75:05:04:f0:60:37:8c:76:f4:76:e2:3b:a2:58:b8: e6:1e:af:5f -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEVV0upPrYD//9RDM1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2 MTViMB4XDTI0MDMyNjExMzQ0NVoXDTI0MDYyNDExMzQ0NVowLzEtMCsGA1UEAxMk ZWRlYjdiYzQtYTg2ZS00MmIyLTk3ODYtZWVmMWMyNzc5NmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpmNiZ5YQOOuZ5PUyPGX4+be4qGY/oyaVuBt bHD94sSrFa83ZyJJGHLA86FQKOOW6moTyozurbcDt2kthu+ugQnOzbButbC9asAl R98U4DNq9UHIcM47APwZ7Tw09MUCyLqmNEdkQ2RaUsDNv9anLgFb60/gsTlt4yzZ gihjXfZdBMJPNwuf9NBm2l/6OvP6/9O348iDOlmMpSgmh3kfgFFaQbLNdnqDfGa0 fNE3Z5dEPPHND35hQVBkBVDDcrmLwvIH1TL3vPmxv777FiVqH1qgPMIWQ3xxZXVd IYzrNKVAsUH8VVc8KD8Bo59M9Yh0UflPGRT9imb8RyTjHcSGiwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFAxTYJJa40LcjQ0Qaub7Au/wC+L8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4 NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvYmEyY2E1YTItZTIyMi0z MTk0LWJmYTgtYWI1MjAxMWRjMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk ODU1YzYxNWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACKgIUD BAOKgIAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAnPq0g3mYeOuhVsdr32VIu6suThIex4GhngwgucTNkmRs 7frHgxw6XCtO1b5V13S0tg4GHPrT8okwkRppmpU0vjwBZ2cMa+JpnN3NjYKYNN39 Nhm3V5OZtRKEU+HnUe+LLSYIzgaQ/MXTOM4qm1wD2WHd01h4BWILzUg5Evi9hDoH byteG/9++Pb7DquiKjFtTfVG5LFte77ShnvNkQPIod4iyDXlPdT6bl4lfrFo/ioY cUe6d6BhyoJEzLD47bNELls7LA5WKoC6hkYUxAsENkj9jucYvvczOGICh4ccJSrL nKYhDKnjpApOtxJidQUE8GA3jHb0duI7oli45h6vXw== -----END CERTIFICATE-----Generated at Wed May 8 22:49:22 2024 by rpki-client on console-ams.rpki-client.org