$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/d1e734e2-ce89-3dd5-9697-dab100cd0408.roa File: d1e734e2-ce89-3dd5-9697-dab100cd0408.roa (raw, json) Hash identifier: TCblVLTpfXCkgwlmsWVK46hHnOnK4WpBWwnn+SVJvgI= Subject key identifier: CA:F5:C1:5E:85:7F:55:86:28:84:47:F0:73:3A:9F:D5:82:00:A0:74 Certificate issuer: /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969 Certificate serial: 010D0C9F43285845857326AB9ED9C45844ED2A00 Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/d1e734e2-ce89-3dd5-9697-dab100cd0408.roa Signing time: Fri 12 Apr 2024 13:00:34 +0000 ROA not before: Fri 12 Apr 2024 13:00:34 +0000 ROA not after: Thu 11 Jul 2024 13:00:34 +0000 asID: 14618 IP address blocks: 199.47.129.0/24 maxlen: 24 199.47.128.0/24 maxlen: 24 199.47.131.0/24 maxlen: 24 199.47.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:85:73:26:ab:9e:d9:c4:58:44:ed:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969 Validity Not Before: Apr 12 13:00:34 2024 GMT Not After : Jul 11 13:00:34 2024 GMT Subject: CN=7733240b-5204-4fcd-bb23-51d80e9a1140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1b:0b:34:04:77:59:25:2f:b3:da:de:2f:82: 47:93:89:7d:03:3b:04:69:76:b7:44:1d:eb:1f:28: 82:48:a3:8a:94:17:19:fd:f1:94:e1:88:b5:80:b7: 67:84:3e:c6:05:0d:51:eb:fa:52:87:e7:b1:7d:94: 7f:67:3d:2a:21:8a:63:ed:c1:8d:0f:50:b6:91:6b: cf:0a:7a:61:52:71:2c:05:f6:68:63:d3:2a:b7:6c: 56:8b:48:ae:18:d0:28:e8:e2:29:c1:9e:c0:d7:17: 64:0d:b3:72:25:60:6d:3f:16:1f:33:68:1d:5b:28: 34:4e:df:1e:d3:6a:c8:a2:d9:14:de:66:03:7b:ef: 72:be:7a:1b:3d:c8:84:82:c3:fc:f7:3f:ef:e9:45: 69:7b:72:43:ea:86:e7:cb:fa:b2:81:44:b7:50:be: 6b:b5:6b:cc:96:83:cc:3f:e7:9c:0a:b1:fc:dc:1e: 04:ed:d9:df:16:1c:f0:30:07:e8:47:1f:25:9e:f0: 99:78:c0:8e:6e:72:07:40:3d:19:53:fe:33:7f:c8: 17:d8:1b:74:7b:cd:d9:4b:ca:ce:0b:15:f0:7a:0b: 5b:75:e3:6d:ad:42:b3:c7:44:25:b8:3f:50:32:f1: 0c:06:5b:3b:5f:11:fb:8a:86:98:1e:cd:a7:e9:da: bc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F5:C1:5E:85:7F:55:86:28:84:47:F0:73:3A:9F:D5:82:00:A0:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/d1e734e2-ce89-3dd5-9697-dab100cd0408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl X509v3 Authority Key Identifier: keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer sbgp-ipAddrBlock: critical IPv4: 199.47.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:55:a1:3d:98:ca:45:38:93:b4:96:af:3b:15:b4:33:9d:c7: ee:5a:8c:55:87:6b:b6:17:db:dc:61:85:d0:b5:54:0c:a4:6d: a1:2c:6f:2d:fb:92:1e:d8:81:d6:7a:82:f8:64:d7:71:5f:03: c8:90:a8:93:91:eb:a9:d1:48:6b:96:2f:13:f4:9c:b4:9c:2e: f4:a2:37:ec:21:f3:18:86:13:b3:57:04:1c:3e:94:7e:44:69: c6:2d:92:31:cd:58:65:39:73:07:5e:1c:24:3f:66:24:41:9e: 43:a0:12:75:16:20:31:22:24:d7:e7:21:75:4f:7b:32:a6:3f: af:49:28:7b:e9:cd:97:82:27:e5:cd:e6:d1:d3:b8:e7:50:82: d4:89:24:51:c7:d4:75:59:01:ec:53:4f:23:9e:f4:4f:f3:48: 4a:72:32:2f:1f:f3:fd:7e:fe:80:f9:6b:54:6e:e9:f7:71:24: da:39:e7:05:09:b2:28:d8:78:db:22:b4:6a:ea:f1:81:7b:f2: c1:e2:c5:ce:bf:77:93:dd:20:65:73:a0:76:46:73:b4:64:e2: 0c:45:e0:9c:43:9a:29:47:17:98:b1:ae:61:25:42:0f:ee:aa: ac:4c:47:d3:75:ab:0c:4a:29:ef:c2:26:9b:eb:26:35:d8:d1: 61:4f:3d:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWFcyarntnEWETtKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiY2RhNjgtMTVmZC00YzdkLTk4ODctZDlkNjdmMmNh OTY5MB4XDTI0MDQxMjEzMDAzNFoXDTI0MDcxMTEzMDAzNFowLzEtMCsGA1UEAxMk NzczMzI0MGItNTIwNC00ZmNkLWJiMjMtNTFkODBlOWExMTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxsLNAR3WSUvs9reL4JHk4l9AzsEaXa3RB3r HyiCSKOKlBcZ/fGU4Yi1gLdnhD7GBQ1R6/pSh+exfZR/Zz0qIYpj7cGND1C2kWvP CnphUnEsBfZoY9Mqt2xWi0iuGNAo6OIpwZ7A1xdkDbNyJWBtPxYfM2gdWyg0Tt8e 02rIotkU3mYDe+9yvnobPciEgsP89z/v6UVpe3JD6obny/qygUS3UL5rtWvMloPM P+ecCrH83B4E7dnfFhzwMAfoRx8lnvCZeMCObnIHQD0ZU/4zf8gX2Bt0e83ZS8rO CxXwegtbdeNtrUKzx0QluD9QMvEMBls7XxH7ioaYHs2n6dq8FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMr1wV6Ff1WGKIRH8HM6n9WCAKB0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NmJj ZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2N2YyY2E5NjkvZDFlNzM0ZTItY2U4OS0z ZGQ1LTk2OTctZGFiMTAwY2QwNDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODZiY2RhNjgtMTVmZC00YzdkLTk4 ODctZDlkNjdmMmNhOTY5Lzg2YmNkYTY4LTE1ZmQtNGM3ZC05ODg3LWQ5ZDY3ZjJj YTk2OS5jcmwwHwYDVR0jBBgwFoAU3aPE+YsUoOm+qk9Hqd0Wrjr3/jEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NmJjZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2 N2YyY2E5NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxy+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdVoT2YykU4k7SWrzsVtDOdx+5ajFWHa7YX29xhhdC1VAykbaEsby37 kh7YgdZ6gvhk13FfA8iQqJOR66nRSGuWLxP0nLScLvSiN+wh8xiGE7NXBBw+lH5E acYtkjHNWGU5cwdeHCQ/ZiRBnkOgEnUWIDEiJNfnIXVPezKmP69JKHvpzZeCJ+XN 5tHTuOdQgtSJJFHH1HVZAexTTyOe9E/zSEpyMi8f8/1+/oD5a1Ru6fdxJNo55wUJ sijYeNsitGrq8YF78sHixc6/d5PdIGVzoHZGc7Rk4gxF4JxDmilHF5ixrmElQg/u qqxMR9N1qwxKKe/CJpvrJjXY0WFPPXE= -----END CERTIFICATE-----Generated at Wed May 1 22:28:47 2024 by rpki-client on console-fra.rpki-client.org