$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4347f76d-c74a-3942-9dc0-3e3301512261.roa File: 4347f76d-c74a-3942-9dc0-3e3301512261.roa (raw, json) Hash identifier: b8onwoFsr8ySPGy4v5LAWGPmmy2LRyIRe4Ea8X3fT+g= Subject key identifier: D5:DB:2B:75:38:8F:F2:B6:BE:18:DE:6B:07:34:7B:FF:3C:73:C1:BB Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F43285844F9FAB5AA91509A8D4F438500 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4347f76d-c74a-3942-9dc0-3e3301512261.roa Signing time: Thu 22 Feb 2024 14:00:30 +0000 ROA not before: Thu 22 Feb 2024 14:00:30 +0000 ROA not after: Wed 22 May 2024 13:00:30 +0000 asID: 16509 IP address blocks: 129.33.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f9:fa:b5:aa:91:50:9a:8d:4f:43:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Feb 22 14:00:30 2024 GMT Not After : May 22 13:00:30 2024 GMT Subject: CN=d3835c73-297c-41e8-9a74-ef46cc1efa0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d2:46:5b:26:61:78:de:5a:4a:84:f8:ed:3f: 97:98:fb:f9:46:69:46:8c:e4:ea:bd:f3:2a:26:cb: 5b:fd:5f:5c:1f:95:20:1a:8e:38:50:9c:6a:d7:d9: 5d:91:e8:c2:bf:28:4c:e8:19:4a:83:32:a6:ea:c0: 1d:46:72:15:99:dd:94:0a:23:1e:bf:cf:c0:4d:d0: 7b:33:4b:dd:bb:35:ff:c4:e3:8b:f4:5c:7f:4e:5e: c1:0b:31:b0:7d:ba:8e:63:e3:b5:25:30:36:27:ba: 4f:6d:16:ff:71:ed:b4:db:af:8e:a8:4f:e7:73:f2: 5d:dc:62:05:04:11:a5:f0:14:64:79:13:f9:ab:82: d0:cb:51:ff:5f:0e:6a:b8:03:e0:02:67:a7:a9:b2: c5:68:2c:0b:8b:1c:67:02:13:59:5f:6d:30:67:18: f4:e4:c9:e2:e9:9f:ba:17:4c:d4:fa:ac:f9:ff:55: ab:eb:24:d7:6d:93:e9:10:4e:db:e7:77:cc:05:98: 53:f6:dc:4e:c8:8a:40:9f:7e:05:ac:fb:fe:73:c8: 1b:c0:56:78:55:aa:ea:0b:ff:4d:3a:94:d4:f7:3d: 40:1f:97:40:13:92:3f:08:bc:a7:88:4d:78:55:4b: d6:27:bb:ff:d0:1c:d6:49:c5:62:b5:30:23:bb:88: 6f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DB:2B:75:38:8F:F2:B6:BE:18:DE:6B:07:34:7B:FF:3C:73:C1:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4347f76d-c74a-3942-9dc0-3e3301512261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:f8:25:be:8b:d1:a8:b8:3b:94:1f:f8:28:8f:e6:4b:5f:fe: 7c:76:58:1e:0b:5c:17:cc:2d:dc:ca:8b:44:d6:8b:06:98:62: 04:19:54:b8:70:7a:7a:5e:96:7b:16:d1:d8:7c:6a:1f:92:08: cf:d2:72:ec:48:5b:e3:c5:f7:c8:0d:6a:37:7c:3f:2d:44:2b: 6d:f4:ee:24:4b:8f:aa:da:ab:e1:d9:45:6f:54:03:6f:95:d7: f5:26:9e:05:bb:2f:57:5b:ae:e6:4b:ab:47:b4:81:56:2a:3d: 85:d2:c0:e6:cd:d5:83:55:04:21:0b:36:f2:20:11:3d:a3:49: 64:e5:ca:1b:cc:f3:07:be:51:71:d1:12:7d:38:6a:ee:fd:25: 20:e1:d9:43:0d:4c:0e:c0:17:49:63:74:81:36:6f:3c:58:2b: 49:e7:41:c8:47:23:11:d3:71:20:fc:91:f2:ae:33:f7:65:3d: 06:07:09:09:22:87:f7:7c:9f:98:ea:47:df:53:9e:93:d5:92: f3:ab:b8:0a:bb:45:b5:ea:77:ff:2e:ee:d8:28:9a:4d:7c:f5: 59:f3:b6:cd:5b:d4:c8:d4:cf:d7:3b:e5:28:97:43:8a:7f:ec: 4c:2a:70:65:60:fc:c8:5d:46:bb:4f:8f:75:5c:21:c3:df:ca: e8:35:73:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET5+rWqkVCajU9DhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI0MDIyMjE0MDAzMFoXDTI0MDUyMjEzMDAzMFowLzEtMCsGA1UEAxMk ZDM4MzVjNzMtMjk3Yy00MWU4LTlhNzQtZWY0NmNjMWVmYTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNJGWyZheN5aSoT47T+XmPv5RmlGjOTqvfMq Jstb/V9cH5UgGo44UJxq19ldkejCvyhM6BlKgzKm6sAdRnIVmd2UCiMev8/ATdB7 M0vduzX/xOOL9Fx/Tl7BCzGwfbqOY+O1JTA2J7pPbRb/ce2026+OqE/nc/Jd3GIF BBGl8BRkeRP5q4LQy1H/Xw5quAPgAmenqbLFaCwLixxnAhNZX20wZxj05Mni6Z+6 F0zU+qz5/1Wr6yTXbZPpEE7b53fMBZhT9txOyIpAn34FrPv+c8gbwFZ4VarqC/9N OpTU9z1AH5dAE5I/CLyniE14VUvWJ7v/0BzWScVitTAju4hvXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXbK3U4j/K2vhjeawc0e/88c8G7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNDM0N2Y3NmQtYzc0YS0z OTQyLTlkYzAtM2UzMzAxNTEyMjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAf4Jb6L0ai4O5Qf+CiP5ktf/nx2WB4LXBfMLdzKi0TWiwaYYgQZVLhw enpelnsW0dh8ah+SCM/ScuxIW+PF98gNajd8Py1EK2307iRLj6raq+HZRW9UA2+V 1/UmngW7L1dbruZLq0e0gVYqPYXSwObN1YNVBCELNvIgET2jSWTlyhvM8we+UXHR En04au79JSDh2UMNTA7AF0ljdIE2bzxYK0nnQchHIxHTcSD8kfKuM/dlPQYHCQki h/d8n5jqR99TnpPVkvOruAq7RbXqd/8u7tgomk189Vnzts1b1MjUz9c75SiXQ4p/ 7EwqcGVg/MhdRrtPj3VcIcPfyug1czI= -----END CERTIFICATE-----Generated at Thu May 2 03:30:11 2024 by rpki-client on console-ams.rpki-client.org