$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/32ba4e5a-916b-3bbc-87c3-470a27252555.roa File: 32ba4e5a-916b-3bbc-87c3-470a27252555.roa (raw, json) Hash identifier: ZkL5p+pn+uxwgSy30aBL828I0PmBTuY0fZLMrqj1M1Q= Subject key identifier: B2:48:CF:02:C2:50:FB:04:88:AB:86:57:90:9D:34:54:6C:26:43:9D Certificate issuer: /CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d Certificate serial: 010D0C9F4328576D51CC73C042CFC1734E32BBC5 Authority key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/32ba4e5a-916b-3bbc-87c3-470a27252555.roa Signing time: Tue 14 Jul 2020 16:40:14 +0000 ROA not before: Tue 14 Jul 2020 04:00:00 +0000 ROA not after: Sun 09 Jun 2030 04:00:00 +0000 asID: 8075 IP address blocks: 131.253.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:4e:32:bb:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d Validity Not Before: Jul 14 04:00:00 2020 GMT Not After : Jun 9 04:00:00 2030 GMT Subject: CN=a4ac9418-e38c-4f5a-a590-4a7b06769f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:af:55:b8:a5:c5:79:e3:91:8f:33:11:a9:2b: 78:df:f1:fc:e6:a9:e5:30:21:3b:cf:f2:bc:98:77: 10:2c:19:9d:7e:98:60:bf:45:01:8b:1e:9f:35:8f: e3:e7:35:47:eb:fb:0a:d5:18:d9:d9:fc:74:cd:79: ea:e3:9c:26:5b:ce:73:c5:fb:61:cb:71:8f:5e:f3: c2:59:b4:a0:9e:cb:a3:5c:b8:e8:ad:b0:71:94:f7: 50:ef:31:47:e9:04:66:37:15:31:bc:57:8e:da:93: d5:51:51:07:88:71:ea:95:6d:1d:de:6a:87:2f:2d: 74:a6:18:9b:d6:76:04:b3:d4:d5:d5:ed:3e:95:b2: 54:83:e5:b4:3d:ba:7a:87:7a:d6:b6:a5:4f:89:ce: ae:6b:93:57:69:87:ce:f3:6a:69:5a:d6:af:b6:ba: b8:19:af:f1:a6:c3:dc:5c:95:d1:0b:dd:b5:a7:dd: 6d:30:14:0a:23:be:f0:1e:19:f4:e6:e2:69:01:74: 66:2e:2b:03:28:2b:67:95:dd:3f:03:bd:c4:14:7b: 9b:09:00:83:b9:e0:02:e1:04:c2:ec:03:f4:2c:ae: 4a:3a:90:c9:df:de:7d:2f:75:a3:e4:75:b0:67:9d: 45:65:c2:68:8e:40:8d:9b:88:bb:7a:16:ad:54:51: 9c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:48:CF:02:C2:50:FB:04:88:AB:86:57:90:9D:34:54:6C:26:43:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/32ba4e5a-916b-3bbc-87c3-470a27252555.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl X509v3 Authority Key Identifier: keyid:B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer sbgp-ipAddrBlock: critical IPv4: 131.253.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e1:d1:4c:e0:8f:06:90:03:59:bf:8c:8d:17:09:19:10:79: a4:4c:92:af:61:84:44:0f:77:9f:70:e0:23:df:a6:e7:7f:e4: d2:62:23:54:2a:0b:05:bf:f4:96:4b:71:56:24:e9:6e:f3:4b: 4b:c2:21:ea:3c:a9:fe:b3:b9:4a:84:8e:1b:18:f4:5d:d5:9e: 85:a8:5b:28:eb:fd:16:03:c7:63:e3:15:f4:6f:a7:b5:8b:3b: 4a:d6:63:0f:09:7a:fc:fe:47:cd:6a:3d:a5:1e:73:ee:57:97: bc:66:fc:cf:4c:91:cd:e9:a5:71:ed:a1:fe:36:a3:dd:6c:0d: 46:f2:e7:67:a6:7a:53:ca:c3:8c:73:37:53:c5:42:87:55:0a: 4f:70:9b:b4:83:cd:80:9a:29:db:4b:95:3d:96:5e:34:49:a5: dc:c1:9d:80:c6:e9:11:f8:5d:fc:17:78:e4:a3:b2:03:ae:0a: ed:22:3e:62:07:d4:5a:08:73:dc:93:c9:cb:96:9c:da:3b:52: 53:19:4d:76:d4:51:4d:b5:79:aa:30:be:82:e3:3f:21:db:d1: d1:6e:bf:6a:dc:03:9b:1e:66:58:e7:f6:25:93:1a:7a:e4:6d: c1:63:af:ec:a3:01:a2:9e:e7:23:dd:33:db:b7:30:ba:c1:39: 3e:ad:e6:15 -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bc04yu8UwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJGZkZTFlM2QxLWQ4ZGEtNGZhOS04MDY4LTFiNjQxY2FiNzQz ZDAeFw0yMDA3MTQwNDAwMDBaFw0zMDA2MDkwNDAwMDBaMC8xLTArBgNVBAMTJGE0 YWM5NDE4LWUzOGMtNGY1YS1hNTkwLTRhN2IwNjc2OWY4NjCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAMSvVbilxXnjkY8zEakreN/x/Oap5TAhO8/yvJh3 ECwZnX6YYL9FAYsenzWP4+c1R+v7CtUY2dn8dM156uOcJlvOc8X7Yctxj17zwlm0 oJ7Lo1y46K2wcZT3UO8xR+kEZjcVMbxXjtqT1VFRB4hx6pVtHd5qhy8tdKYYm9Z2 BLPU1dXtPpWyVIPltD26eod61ralT4nOrmuTV2mHzvNqaVrWr7a6uBmv8abD3FyV 0QvdtafdbTAUCiO+8B4Z9ObiaQF0Zi4rAygrZ5XdPwO9xBR7mwkAg7ngAuEEwuwD 9CyuSjqQyd/efS91o+R1sGedRWXCaI5AjZuIu3oWrVRRnL0CAwEAAaOCA1UwggNR MB0GA1UdDgQWBBSySM8CwlD7BIirhleQnTRUbCZDnTCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmRlMWUz ZDEtZDhkYS00ZmE5LTgwNjgtMWI2NDFjYWI3NDNkLzMyYmE0ZTVhLTkxNmItM2Ji Yy04N2MzLTQ3MGEyNzI1MjU1NS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2ZkZTFlM2QxLWQ4ZGEtNGZhOS04MDY4 LTFiNjQxY2FiNzQzZC9mZGUxZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0MWNhYjc0 M2QuY3JsMB8GA1UdIwQYMBaAFLmj0JFWAovB8vJ3QS2CG87Sv9tDMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvZmRlMWUzZDEtZDhkYS00ZmE5LTgwNjgtMWI2NDFj YWI3NDNkLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB4P9gDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEAW+HRTOCPBpADWb+MjRcJGRB5pEySr2GERA93n3DgI9+m53/k0mIjVCoLBb/0 lktxViTpbvNLS8Ih6jyp/rO5SoSOGxj0XdWehahbKOv9FgPHY+MV9G+ntYs7StZj Dwl6/P5HzWo9pR5z7leXvGb8z0yRzemlce2h/jaj3WwNRvLnZ6Z6U8rDjHM3U8VC h1UKT3CbtIPNgJop20uVPZZeNEml3MGdgMbpEfhd/Bd45KOyA64K7SI+YgfUWghz 3JPJy5ac2jtSUxlNdtRRTbV5qjC+guM/IdvR0W6/atwDmx5mWOf2JZMaeuRtwWOv 7KMBop7nI90z27cwusE5Pq3mFQ== -----END CERTIFICATE-----Generated at Mon May 20 01:52:53 2024 by rpki-client on console-fra.rpki-client.org