$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87dc928d-56d9-335f-8791-38a1a46bbb9d.roa File: 87dc928d-56d9-335f-8791-38a1a46bbb9d.roa (raw, json) Hash identifier: o+4Ohm/3AKfB8BrZJ7BbwcgyhDQPMTEVjHmK8rqVs0w= Subject key identifier: AC:65:DF:08:5E:A3:4C:9A:E5:D6:9E:3D:B7:01:45:93:D7:88:ED:AA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858456F1DBAD1EA4AC6650DE0A600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87dc928d-56d9-335f-8791-38a1a46bbb9d.roa Signing time: Thu 04 Apr 2024 13:00:36 +0000 ROA not before: Thu 04 Apr 2024 13:00:36 +0000 ROA not after: Wed 03 Jul 2024 13:00:36 +0000 asID: 36183 IP address blocks: 172.226.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6f:1d:ba:d1:ea:4a:c6:65:0d:e0:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 4 13:00:36 2024 GMT Not After : Jul 3 13:00:36 2024 GMT Subject: CN=00d3562b-9ccc-4402-be45-125b2c9a67a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6b:a6:2c:c7:7a:d2:d9:a2:81:6d:5b:f9:38: d7:a3:e3:33:64:83:bf:d5:ca:c4:5b:55:57:d5:5a: ae:ef:3f:6b:11:f3:1b:7f:d7:f8:e8:fb:b3:ed:54: 7f:0b:c5:e2:8b:1b:78:8c:3f:6e:08:63:89:98:e6: 42:6d:bd:2e:a0:98:46:e7:15:ed:f5:45:ea:ea:4e: 01:c4:6f:39:32:ac:f2:2c:5e:65:8c:d7:cc:64:56: 63:8c:b6:79:47:6d:cf:d3:be:d4:be:21:0d:da:02: dc:ee:81:b2:d4:88:0d:6a:ec:53:5a:ca:bb:60:11: cf:69:63:cd:9d:ed:da:e5:1c:1e:dd:2f:84:58:2d: 83:32:45:3c:f2:6f:23:d9:aa:06:aa:f8:02:af:61: c7:2f:a6:88:9d:6f:5f:15:45:cf:4e:97:39:1e:1b: 38:4a:ab:e9:e5:e4:37:b2:ea:a8:ca:20:62:d2:32: 51:67:e6:f4:7c:07:9a:16:4b:89:4a:5a:a4:60:16: 49:d4:49:b0:14:be:69:c4:35:6a:97:6f:1d:c0:1f: 4d:7c:4c:98:ad:ce:0d:07:9c:02:52:37:d6:2f:1d: 3e:88:ef:b0:80:da:5f:da:a4:a9:39:48:c7:3b:ef: 4f:cd:f6:49:e3:25:72:ea:fe:f6:61:f0:ec:3c:09: 11:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:65:DF:08:5E:A3:4C:9A:E5:D6:9E:3D:B7:01:45:93:D7:88:ED:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87dc928d-56d9-335f-8791-38a1a46bbb9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:fa:45:e9:3b:62:f2:c5:6e:78:ad:9e:27:b1:8e:14:eb:6b: 69:c3:f8:be:b4:84:45:50:55:65:bb:ee:a6:93:e8:64:79:0f: 5d:7a:78:72:c0:ec:3e:15:f0:84:9b:9a:f7:66:a4:a4:df:a9: 91:2e:82:78:53:ed:4f:3a:54:17:15:d7:33:e0:77:01:e2:e9: 1e:7f:85:37:c7:7b:72:5a:59:d6:d8:92:f1:d3:f9:09:2d:0a: df:a9:e6:69:0f:9e:ca:25:06:f4:08:71:66:61:8a:99:29:c6: 39:1f:be:ed:7a:84:b2:24:08:6e:93:c0:40:98:f9:d8:18:bf: 7c:b6:5e:99:42:61:a8:bc:ad:d3:c7:01:9c:43:4a:53:81:b5: b8:9f:f1:56:7a:52:7a:0a:56:d0:cc:56:3d:67:17:70:90:ec: 8f:cb:10:c3:7d:28:e5:b5:3e:6c:2e:db:d5:03:1b:6f:b6:63: 7b:55:fd:96:e9:a6:b3:d5:2b:8c:fd:c5:49:9f:7d:dd:c8:27: f1:05:96:26:e4:bc:c8:8d:d0:02:6c:03:67:bc:65:37:fc:e9: 91:fa:ed:ab:6a:77:05:de:bd:23:4f:23:47:11:bc:9f:7b:c4: 94:76:2b:79:ee:4a:2a:05:22:5f:c3:6b:58:c7:33:3b:11:9a: fd:75:be:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVvHbrR6krGZQ3gpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDQwNDEzMDAzNloXDTI0MDcwMzEzMDAzNlowLzEtMCsGA1UEAxMk MDBkMzU2MmItOWNjYy00NDAyLWJlNDUtMTI1YjJjOWE2N2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2umLMd60tmigW1b+TjXo+MzZIO/1crEW1VX 1Vqu7z9rEfMbf9f46Puz7VR/C8Xiixt4jD9uCGOJmOZCbb0uoJhG5xXt9UXq6k4B xG85MqzyLF5ljNfMZFZjjLZ5R23P077UviEN2gLc7oGy1IgNauxTWsq7YBHPaWPN ne3a5Rwe3S+EWC2DMkU88m8j2aoGqvgCr2HHL6aInW9fFUXPTpc5Hhs4Sqvp5eQ3 suqoyiBi0jJRZ+b0fAeaFkuJSlqkYBZJ1EmwFL5pxDVql28dwB9NfEyYrc4NB5wC UjfWLx0+iO+wgNpf2qSpOUjHO+9PzfZJ4yVy6v72YfDsPAkRGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxl3wheo0ya5daePbcBRZPXiO2qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODdkYzkyOGQtNTZkOS0z MzVmLTg3OTEtMzhhMWE0NmJiYjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOKKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF36Rek7YvLFbnitniexjhTra2nD+L60hEVQVWW77qaT6GR5D116eHLA 7D4V8ISbmvdmpKTfqZEugnhT7U86VBcV1zPgdwHi6R5/hTfHe3JaWdbYkvHT+Qkt Ct+p5mkPnsolBvQIcWZhipkpxjkfvu16hLIkCG6TwECY+dgYv3y2XplCYai8rdPH AZxDSlOBtbif8VZ6UnoKVtDMVj1nF3CQ7I/LEMN9KOW1Pmwu29UDG2+2Y3tV/Zbp prPVK4z9xUmffd3IJ/EFlibkvMiN0AJsA2e8ZTf86ZH67atqdwXevSNPI0cRvJ97 xJR2K3nuSioFIl/Da1jHMzsRmv11vlE= -----END CERTIFICATE-----Generated at Fri May 17 01:57:56 2024 by rpki-client on console-fra.rpki-client.org