$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/babc2dc8-5093-3aa6-af66-4b63e14e0832.roa File: babc2dc8-5093-3aa6-af66-4b63e14e0832.roa (raw, json) Hash identifier: DfmDiCmMdMdVSMwQx34zV224Gk6NR1CdX7NRjebiWAc= Subject key identifier: F3:7D:A2:42:05:8A:2D:CF:C3:D8:7C:A4:37:E8:33:18:0F:20:C6:B5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584582DA8D6600291F9E13079180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/babc2dc8-5093-3aa6-af66-4b63e14e0832.roa Signing time: Thu 11 Apr 2024 14:41:31 +0000 ROA not before: Thu 11 Apr 2024 14:41:31 +0000 ROA not after: Wed 10 Jul 2024 14:41:31 +0000 asID: 20940 IP address blocks: 96.6.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:82:da:8d:66:00:29:1f:9e:13:07:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 11 14:41:31 2024 GMT Not After : Jul 10 14:41:31 2024 GMT Subject: CN=a40451e5-b0d5-4b5e-b391-cb451d140809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5e:38:2f:6e:4e:10:fa:69:7e:dc:19:ae:63: 2c:05:5b:40:72:c9:85:d6:5b:38:9c:c9:65:0c:fc: d3:e9:59:6f:af:bc:ba:06:2a:71:4e:92:cb:85:45: 46:f0:3b:e4:28:50:df:46:6b:8d:57:da:34:81:91: 9e:1e:e2:d6:24:41:06:d6:bf:03:0c:d5:74:c1:4d: ee:f4:19:65:f7:bc:01:08:aa:39:bd:76:4e:a3:c1: 59:2f:87:c2:b1:d1:4c:b7:15:69:2f:ce:d0:97:78: 3e:c0:93:da:bb:cc:cb:f9:22:bc:bb:1d:bd:4b:2a: 35:b1:6e:ff:03:28:32:f9:9a:fd:b2:ed:86:1a:a5: 8d:29:9f:b7:0d:a7:17:40:9e:b4:b7:65:98:29:b1: 04:f9:9c:f3:df:c0:21:32:d3:5f:2c:7c:05:6c:e7: 0e:59:73:1e:52:6e:fd:58:e2:68:28:f7:3d:09:d0: 3b:c9:6e:bb:d3:64:9f:8d:17:87:bd:bc:d6:21:e5: 21:60:7d:2a:60:09:c1:6c:1e:8a:8f:9d:f5:7f:f3: 41:6d:df:eb:01:c1:9b:db:72:41:60:52:9b:c1:39: 5d:a9:7d:63:c7:3f:07:c9:02:77:90:64:47:95:66: 65:ea:dd:63:c5:22:36:39:bd:c8:90:01:a3:19:02: df:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7D:A2:42:05:8A:2D:CF:C3:D8:7C:A4:37:E8:33:18:0F:20:C6:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/babc2dc8-5093-3aa6-af66-4b63e14e0832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.6.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:2e:83:3b:1e:29:ae:3c:a2:86:c6:e0:e3:61:2c:d4:eb:a1: 15:04:68:7b:87:85:8a:47:98:81:b4:0f:d0:55:4f:38:ed:54: 61:4f:fe:eb:8a:21:ba:5b:14:f5:e6:e1:24:76:ca:6a:45:2c: 36:fb:f2:05:87:24:df:ac:85:f2:ba:43:77:3f:61:d1:76:85: cf:c1:1d:0b:22:d0:7f:35:d1:e1:05:f4:e6:a4:ba:d5:04:08: 2d:ce:49:c2:c8:10:43:99:34:af:c6:20:bb:88:aa:bf:c3:dc: 5c:23:cf:26:c6:57:cb:6b:c0:fa:7b:de:33:97:34:61:9d:37: 5a:ef:e6:3f:a3:0b:38:a3:11:2b:ac:37:d4:e0:09:d0:36:95: b9:51:44:3b:62:a8:57:06:6b:58:f0:62:de:3f:51:42:98:6f: 9b:39:13:20:55:e9:9c:78:6c:c6:0d:24:71:26:6d:9d:04:e0: 23:c6:e2:7f:28:da:14:f4:9f:ef:f1:b2:8a:ef:b4:be:5f:50: c3:de:3c:09:c6:6e:d1:4f:e7:82:dc:b3:34:83:54:54:13:c6: 29:bb:d6:ad:eb:f0:ca:8e:c8:b9:5d:d1:a6:b7:0f:92:29:0b: d5:0f:96:ec:b9:6d:12:8b:d1:e2:f0:ae:3d:b6:d2:23:18:5c: e1:ba:85:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWC2o1mACkfnhMHkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDQxMTE0NDEzMVoXDTI0MDcxMDE0NDEzMVowLzEtMCsGA1UEAxMk YTQwNDUxZTUtYjBkNS00YjVlLWIzOTEtY2I0NTFkMTQwODA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzV44L25OEPppftwZrmMsBVtAcsmF1ls4nMll DPzT6Vlvr7y6BipxTpLLhUVG8DvkKFDfRmuNV9o0gZGeHuLWJEEG1r8DDNV0wU3u 9Bll97wBCKo5vXZOo8FZL4fCsdFMtxVpL87Ql3g+wJPau8zL+SK8ux29Syo1sW7/ Aygy+Zr9su2GGqWNKZ+3DacXQJ60t2WYKbEE+Zzz38AhMtNfLHwFbOcOWXMeUm79 WOJoKPc9CdA7yW6702SfjReHvbzWIeUhYH0qYAnBbB6Kj531f/NBbd/rAcGb23JB YFKbwTldqX1jxz8HyQJ3kGRHlWZl6t1jxSI2Ob3IkAGjGQLfSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPN9okIFii3Pw9h8pDfoMxgPIMa1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmFiYzJkYzgtNTA5My0z YWE2LWFmNjYtNGI2M2UxNGUwODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAYtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAougzseKa48oobG4ONhLNTroRUEaHuHhYpHmIG0D9BVTzjtVGFP/uuK IbpbFPXm4SR2ympFLDb78gWHJN+shfK6Q3c/YdF2hc/BHQsi0H810eEF9OakutUE CC3OScLIEEOZNK/GILuIqr/D3FwjzybGV8trwPp73jOXNGGdN1rv5j+jCzijESus N9TgCdA2lblRRDtiqFcGa1jwYt4/UUKYb5s5EyBV6Zx4bMYNJHEmbZ0E4CPG4n8o 2hT0n+/xsorvtL5fUMPePAnGbtFP54LcszSDVFQTxim71q3r8MqOyLld0aa3D5Ip C9UPluy5bRKL0eLwrj220iMYXOG6ha4= -----END CERTIFICATE-----Generated at Fri May 17 15:36:36 2024 by rpki-client on console-ams.rpki-client.org