$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/74c8279c-10f7-3816-846a-e6ac1996b71b.roa File: 74c8279c-10f7-3816-846a-e6ac1996b71b.roa (raw, json) Hash identifier: pxZsMYgiyuJWwQotnn1nFKydx9j93KjufKlxR4zZdaY= Subject key identifier: CB:88:B3:85:76:53:FC:ED:23:11:FA:7B:D8:D1:35:AD:16:FB:96:53 Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F432858452AB7DE45D45F18E87BE6A000 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/74c8279c-10f7-3816-846a-e6ac1996b71b.roa Signing time: Mon 11 Mar 2024 01:00:26 +0000 ROA not before: Mon 11 Mar 2024 01:00:26 +0000 ROA not after: Sun 09 Jun 2024 01:00:26 +0000 asID: 31898 IP address blocks: 139.177.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:2a:b7:de:45:d4:5f:18:e8:7b:e6:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: Mar 11 01:00:26 2024 GMT Not After : Jun 9 01:00:26 2024 GMT Subject: CN=4a0c139f-46b0-49e2-923b-5bb03af4d972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ef:a2:73:51:aa:b2:eb:62:58:5f:b5:98:be: 86:e4:7c:24:0d:84:60:3e:a2:08:17:f0:95:30:d6: 82:66:82:d7:b2:24:d0:a9:c7:65:c4:62:9a:86:88: a8:3a:61:93:8f:65:ff:98:08:74:8a:43:0c:a2:97: 8e:dc:1b:31:f7:db:6f:ca:30:81:71:10:94:cb:87: ef:6d:6f:b9:2d:17:47:6a:d9:07:11:3c:5a:b5:e7: c2:3f:37:54:8d:ad:f0:98:a4:77:ae:e8:e8:0e:d0: 5a:9a:d1:bc:b8:87:5f:5e:e3:0e:ea:ce:9e:b4:cc: a6:53:34:21:94:97:e1:e7:df:e1:8a:70:bd:40:b7: ab:53:9f:d3:fb:57:d7:20:48:37:cc:be:28:42:16: b6:03:c5:49:df:db:af:d2:a6:f2:58:56:29:73:8f: 7c:3d:70:a4:59:c7:e6:1e:9e:8d:02:76:04:45:39: 2c:49:25:40:71:1c:5c:a2:ca:4b:64:b1:3d:89:77: a5:54:c1:9a:83:e4:66:42:12:8a:0b:e4:51:8f:2a: 4e:35:19:d5:a6:f5:f3:f2:83:79:3f:bf:7b:d0:13: c4:3d:aa:b1:2b:46:82:d7:89:e2:65:ea:ab:47:bb: 78:44:a9:de:de:63:b9:64:c2:12:08:17:75:8e:52: 9a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:88:B3:85:76:53:FC:ED:23:11:FA:7B:D8:D1:35:AD:16:FB:96:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/74c8279c-10f7-3816-846a-e6ac1996b71b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 139.177.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:34:8e:e1:f3:28:59:f1:ff:7b:d9:55:0c:78:73:c8:be:5f: 0d:88:5e:d8:74:9f:bd:55:df:b2:b7:be:8c:18:a8:4a:13:aa: 90:fc:05:71:0a:32:84:40:95:bd:7a:73:4d:ed:cb:13:70:09: 05:2b:6d:2e:66:ae:d8:32:84:2c:0b:30:f8:f3:81:5d:1c:14: 2e:79:72:11:65:7e:63:5d:ce:fd:5c:ee:99:7e:5b:8c:eb:ef: 0a:94:b7:f9:f2:1a:2f:91:de:1f:c9:24:b5:ca:2d:5d:a3:7a: c3:fb:fb:a3:4d:95:fd:50:5f:25:51:99:74:7c:b7:77:4b:5b: 31:3b:bf:46:04:75:a1:00:31:ac:d7:ca:ff:48:ba:cb:a9:f4: 41:36:01:72:cc:39:76:53:54:ce:5b:9d:99:62:7c:04:8e:9b: c1:e5:f5:1a:ae:89:b0:5a:16:19:45:48:41:38:3f:51:be:f4: 31:68:f2:91:ec:d8:f0:23:26:7b:a6:6c:5b:46:82:09:fb:c6: 95:4a:8d:e7:97:d8:bf:7a:47:1d:8b:ba:9c:02:38:8a:fc:70: fb:02:31:6f:0a:69:f3:72:f5:0b:4f:92:60:f7:52:26:f3:bf: 21:3d:d4:22:d6:a6:b4:32:ab:5c:5f:d2:9e:e4:b9:08:5f:c9: 38:86:0b:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUqt95F1F8Y6HvmoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI0MDMxMTAxMDAyNloXDTI0MDYwOTAxMDAyNlowLzEtMCsGA1UEAxMk NGEwYzEzOWYtNDZiMC00OWUyLTkyM2ItNWJiMDNhZjRkOTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO+ic1GqsutiWF+1mL6G5HwkDYRgPqIIF/CV MNaCZoLXsiTQqcdlxGKahoioOmGTj2X/mAh0ikMMopeO3Bsx99tvyjCBcRCUy4fv bW+5LRdHatkHETxatefCPzdUja3wmKR3rujoDtBamtG8uIdfXuMO6s6etMymUzQh lJfh59/hinC9QLerU5/T+1fXIEg3zL4oQha2A8VJ39uv0qbyWFYpc498PXCkWcfm Hp6NAnYERTksSSVAcRxcospLZLE9iXelVMGag+RmQhKKC+RRjypONRnVpvXz8oN5 P7970BPEPaqxK0aC14niZeqrR7t4RKne3mO5ZMISCBd1jlKaVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuIs4V2U/ztIxH6e9jRNa0W+5ZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvNzRjODI3OWMtMTBmNy0z ODE2LTg0NmEtZTZhYzE5OTZiNzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi7H8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE80juHzKFnx/3vZVQx4c8i+Xw2IXth0n71V37K3vowYqEoTqpD8BXEK MoRAlb16c03tyxNwCQUrbS5mrtgyhCwLMPjzgV0cFC55chFlfmNdzv1c7pl+W4zr 7wqUt/nyGi+R3h/JJLXKLV2jesP7+6NNlf1QXyVRmXR8t3dLWzE7v0YEdaEAMazX yv9Iusup9EE2AXLMOXZTVM5bnZlifASOm8Hl9RquibBaFhlFSEE4P1G+9DFo8pHs 2PAjJnumbFtGggn7xpVKjeeX2L96Rx2LupwCOIr8cPsCMW8KafNy9QtPkmD3Uibz vyE91CLWprQyq1xf0p7kuQhfyTiGC1M= -----END CERTIFICATE-----Generated at Thu May 2 03:28:58 2024 by rpki-client on console-ams.rpki-client.org