$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdce1d14-a088-393f-b99d-5d7ec72d6ce9.roa File: bdce1d14-a088-393f-b99d-5d7ec72d6ce9.roa (raw, json) Hash identifier: Y2JHDdYQ8UF0OUVmc5QITuvPIMmSsRYOEaXI0mRJezE= Subject key identifier: DB:22:CE:7D:7B:6A:83:C0:30:3B:DB:AD:BF:DF:83:01:7C:F7:52:24 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858459368B598857210D95E72A600 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdce1d14-a088-393f-b99d-5d7ec72d6ce9.roa Signing time: Wed 17 Apr 2024 13:00:34 +0000 ROA not before: Wed 17 Apr 2024 13:00:34 +0000 ROA not after: Tue 16 Jul 2024 13:00:34 +0000 asID: 701 IP address blocks: 108.4.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:93:68:b5:98:85:72:10:d9:5e:72:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 17 13:00:34 2024 GMT Not After : Jul 16 13:00:34 2024 GMT Subject: CN=199c394e-0343-45ae-9c02-d6310a4020a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:15:72:c8:ca:ec:ef:2b:b3:6b:08:cd:1f:96: 6b:04:3d:c3:da:64:b7:97:99:76:77:e8:40:b5:8f: 3e:f8:96:86:29:7c:73:29:73:74:bf:86:c7:a0:25: 7b:46:ad:39:2e:b8:4b:56:d1:2c:b4:16:66:92:99: 66:f8:1d:71:c4:5c:2c:6f:c7:00:28:75:b7:2c:c6: f8:42:28:0d:84:db:17:05:4c:6c:2f:de:4d:17:e5: be:77:1e:8a:a4:94:dc:68:8e:56:e4:1d:a2:78:30: 3f:28:fa:fe:53:c0:ee:e5:27:62:b2:50:17:c9:58: 60:f7:54:37:72:f9:8f:40:10:59:af:ae:4b:59:9e: 23:e5:31:a4:69:62:a0:cd:b0:0a:c6:87:1e:6b:79: 59:e5:dc:de:99:86:8a:15:15:4b:b9:0f:22:89:0a: 83:29:17:33:e6:92:25:8e:e4:b5:f9:84:4b:3e:95: 7c:c9:79:dd:54:0c:c5:76:71:ac:b0:f0:f6:ca:62: 17:2a:00:6c:dc:8a:59:f0:fd:e9:0f:75:e2:88:a6: 14:4a:d8:76:aa:c8:e9:d1:bf:59:8c:30:79:28:ac: 2b:49:47:83:43:c7:3f:e3:c9:2a:1a:5b:91:46:82: 80:db:cb:cb:2e:81:fd:55:92:26:1a:d2:7d:d8:ed: f7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:22:CE:7D:7B:6A:83:C0:30:3B:DB:AD:BF:DF:83:01:7C:F7:52:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdce1d14-a088-393f-b99d-5d7ec72d6ce9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.4.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:d8:4d:c8:3f:2c:d2:6b:70:37:de:66:69:71:a5:57:32:17: 0d:0c:45:b6:40:73:44:02:39:af:e2:a9:2b:e0:26:23:fa:d9: ef:44:55:2d:2b:ef:d2:94:8b:cc:bc:54:38:ab:10:e3:4a:c1: b0:dd:37:e5:49:52:e3:b1:05:47:e8:87:12:71:44:73:8d:48: 11:39:d4:42:55:a7:31:be:a8:bf:82:5c:a9:13:23:0c:e2:a2: b7:40:a5:06:bc:2d:58:24:07:31:7c:ec:f0:70:52:04:f8:b6: 30:98:ad:44:78:94:2f:8d:47:a4:62:77:7e:d7:61:d3:ad:d4: 7c:42:ac:f5:c1:e5:93:5c:55:6e:ce:7a:8d:4a:f1:83:b3:6a: e8:7f:d7:7e:52:b2:ce:e7:d3:9f:2b:1b:9f:81:43:bc:88:23: 49:37:4c:53:0a:6d:39:48:65:0e:07:53:99:f6:b6:de:1b:4d: 51:1e:6d:68:ed:d3:40:c2:fc:47:90:be:a1:47:24:63:c7:0b: ce:d8:65:f8:86:ee:90:cd:e0:8e:26:8b:d1:25:bf:c2:7a:1e: 3c:07:8b:9d:db:48:96:ce:92:83:c6:2b:cc:1c:5d:1c:14:8a: e2:ae:97:91:4a:8d:0d:59:e3:49:aa:ce:51:1e:d5:9d:75:d0: a0:d7:3a:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWTaLWYhXIQ2V5ypgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk MTk5YzM5NGUtMDM0My00NWFlLTljMDItZDYzMTBhNDAyMGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihVyyMrs7yuzawjNH5ZrBD3D2mS3l5l2d+hA tY8++JaGKXxzKXN0v4bHoCV7Rq05LrhLVtEstBZmkplm+B1xxFwsb8cAKHW3LMb4 QigNhNsXBUxsL95NF+W+dx6KpJTcaI5W5B2ieDA/KPr+U8Du5SdislAXyVhg91Q3 cvmPQBBZr65LWZ4j5TGkaWKgzbAKxocea3lZ5dzemYaKFRVLuQ8iiQqDKRcz5pIl juS1+YRLPpV8yXndVAzFdnGssPD2ymIXKgBs3IpZ8P3pD3XiiKYUSth2qsjp0b9Z jDB5KKwrSUeDQ8c/48kqGluRRoKA28vLLoH9VZImGtJ92O33BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsizn17aoPAMDvbrb/fgwF891IkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmRjZTFkMTQtYTA4OC0z OTNmLWI5OWQtNWQ3ZWM3MmQ2Y2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbASAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfYTcg/LNJrcDfeZmlxpVcyFw0MRbZAc0QCOa/iqSvgJiP62e9EVS0r 79KUi8y8VDirEONKwbDdN+VJUuOxBUfohxJxRHONSBE51EJVpzG+qL+CXKkTIwzi ordApQa8LVgkBzF87PBwUgT4tjCYrUR4lC+NR6Rid37XYdOt1HxCrPXB5ZNcVW7O eo1K8YOzauh/135Sss7n058rG5+BQ7yII0k3TFMKbTlIZQ4HU5n2tt4bTVEebWjt 00DC/EeQvqFHJGPHC87YZfiG7pDN4I4mi9Elv8J6HjwHi53bSJbOkoPGK8wcXRwU iuKul5FKjQ1Z40mqzlEe1Z110KDXOgM= -----END CERTIFICATE-----Generated at Thu May 9 01:33:28 2024 by rpki-client on console-fra.rpki-client.org