$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/4eb7a05c-ceed-30c7-bd82-edb0c78e7e05.roa File: 4eb7a05c-ceed-30c7-bd82-edb0c78e7e05.roa (raw, json) Hash identifier: lAtFdB+io0Pm9LS4k22ML5wUc/xEeqw3GlSaKew47ng= Subject key identifier: 00:78:5A:9A:47:9C:9A:E5:66:A8:2D:1A:49:4B:AD:D7:3A:F3:A5:A2 Certificate issuer: /CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d Certificate serial: 010D0C9F4328576D51CC73C042CFC1734E30AA9B Authority key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/4eb7a05c-ceed-30c7-bd82-edb0c78e7e05.roa Signing time: Tue 14 Jul 2020 16:37:59 +0000 ROA not before: Tue 14 Jul 2020 04:00:00 +0000 ROA not after: Mon 10 Jun 2030 04:00:00 +0000 asID: 23468 IP address blocks: 131.253.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 02 Jul 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:4e:30:aa:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d Validity Not Before: Jul 14 04:00:00 2020 GMT Not After : Jun 10 04:00:00 2030 GMT Subject: CN=2421ceb1-4983-4a43-b2ac-d574b59442bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:30:43:09:5c:0f:01:da:f0:6b:b5:5d:23:8d: b3:25:0d:dd:8b:a9:33:d2:55:a9:6f:8d:d1:56:fb: 73:1d:c1:1a:5c:15:11:61:71:b9:e7:95:08:b5:51: 2b:72:89:03:c1:91:6f:b4:1b:3c:89:af:49:60:3c: cd:70:7b:33:2b:73:6a:87:0c:20:a7:04:81:9c:93: 1c:3d:36:04:f0:5e:89:b9:4c:b9:58:fb:fd:0d:55: 94:bf:18:50:b1:59:71:57:29:d4:1c:fe:56:29:81: c8:1e:56:1d:ca:a3:dc:84:d6:34:b0:73:3c:8d:78: 40:26:d4:7b:26:79:45:15:c5:2a:f4:32:e8:e1:ec: 7e:0f:6c:45:4f:45:9c:1b:7a:58:2f:f6:89:fd:a5: 07:b7:09:92:d2:2b:0b:fb:d5:bb:0b:4e:75:ec:07: 6d:4d:50:29:a8:d1:af:27:77:5e:f9:86:b0:03:df: 59:83:3e:5e:4a:21:73:3b:5b:f1:6e:0c:f3:d2:7c: 3b:20:cb:8b:c5:5c:07:ad:04:dc:96:e5:2a:4e:be: 7e:52:2b:69:3d:11:ca:a9:c1:68:55:e4:2a:c9:aa: d5:8c:86:96:b4:76:3e:bd:b3:d2:71:75:e3:75:6e: 0b:2f:33:0c:fe:d4:34:7a:0c:56:bc:00:89:6c:42: 78:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:78:5A:9A:47:9C:9A:E5:66:A8:2D:1A:49:4B:AD:D7:3A:F3:A5:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/4eb7a05c-ceed-30c7-bd82-edb0c78e7e05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl X509v3 Authority Key Identifier: keyid:B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer sbgp-ipAddrBlock: critical IPv4: 131.253.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:34:d9:dd:e2:b7:ad:19:f1:27:af:89:f4:d5:b1:11:a2:95: d9:f4:93:fb:1d:07:16:e7:12:92:ec:b6:9a:78:5c:eb:1a:0a: 4e:f1:02:20:15:ca:93:cf:1e:3e:cf:a5:26:64:7e:56:00:0b: 65:36:b6:bd:c4:18:b6:8b:b3:ed:2f:48:1b:ab:39:76:c6:40: 98:01:65:ee:a4:a9:02:72:e1:fa:c3:a5:e8:87:59:c4:90:5d: 61:b5:5a:a7:db:2b:91:b5:4b:1f:60:f9:0a:e1:5e:53:98:f8: d7:b3:a0:4e:f6:52:fc:e2:2d:a3:28:c1:d8:dd:0e:91:d8:3a: 53:c9:56:0d:7b:00:d1:60:60:07:37:fd:9a:70:a7:10:22:4d: 3a:3e:d1:24:7e:6f:74:fe:82:15:4d:ab:b9:b5:26:60:ce:11: a9:cd:b7:67:fe:a9:73:4b:bd:5c:f6:b7:91:53:f4:af:37:95: ce:a6:86:8f:76:25:c9:50:0c:e7:0a:46:a7:b9:60:36:25:f8: 43:a6:90:ae:df:a5:5d:86:c7:78:8e:33:1a:9d:22:8d:7d:dc: b8:9f:b1:9e:6d:27:69:86:3f:8c:a6:be:5a:db:d1:5c:14:ef: 6c:9c:d0:a0:bc:91:f8:9a:6d:b3:99:78:0e:71:02:45:80:9c: e9:cb:bc:22 -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bc04wqpswCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJGZkZTFlM2QxLWQ4ZGEtNGZhOS04MDY4LTFiNjQxY2FiNzQz ZDAeFw0yMDA3MTQwNDAwMDBaFw0zMDA2MTAwNDAwMDBaMC8xLTArBgNVBAMTJDI0 MjFjZWIxLTQ5ODMtNGE0My1iMmFjLWQ1NzRiNTk0NDJiYzCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAMEwQwlcDwHa8Gu1XSONsyUN3YupM9JVqW+N0Vb7 cx3BGlwVEWFxueeVCLVRK3KJA8GRb7QbPImvSWA8zXB7MytzaocMIKcEgZyTHD02 BPBeiblMuVj7/Q1VlL8YULFZcVcp1Bz+VimByB5WHcqj3ITWNLBzPI14QCbUeyZ5 RRXFKvQy6OHsfg9sRU9FnBt6WC/2if2lB7cJktIrC/vVuwtOdewHbU1QKajRryd3 XvmGsAPfWYM+Xkohcztb8W4M89J8OyDLi8VcB60E3JblKk6+flIraT0RyqnBaFXk Ksmq1YyGlrR2Pr2z0nF143VuCy8zDP7UNHoMVrwAiWxCeB8CAwEAAaOCA1UwggNR MB0GA1UdDgQWBBQAeFqaR5ya5WaoLRpJS63XOvOlojCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmRlMWUz ZDEtZDhkYS00ZmE5LTgwNjgtMWI2NDFjYWI3NDNkLzRlYjdhMDVjLWNlZWQtMzBj Ny1iZDgyLWVkYjBjNzhlN2UwNS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2ZkZTFlM2QxLWQ4ZGEtNGZhOS04MDY4 LTFiNjQxY2FiNzQzZC9mZGUxZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0MWNhYjc0 M2QuY3JsMB8GA1UdIwQYMBaAFLmj0JFWAovB8vJ3QS2CG87Sv9tDMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvZmRlMWUzZDEtZDhkYS00ZmE5LTgwNjgtMWI2NDFj YWI3NDNkLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAYP9FjBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEAIzTZ3eK3rRnxJ6+J9NWxEaKV2fST+x0HFucSkuy2mnhc6xoKTvECIBXKk88e Ps+lJmR+VgALZTa2vcQYtouz7S9IG6s5dsZAmAFl7qSpAnLh+sOl6IdZxJBdYbVa p9srkbVLH2D5CuFeU5j417OgTvZS/OItoyjB2N0Okdg6U8lWDXsA0WBgBzf9mnCn ECJNOj7RJH5vdP6CFU2rubUmYM4Rqc23Z/6pc0u9XPa3kVP0rzeVzqaGj3YlyVAM 5wpGp7lgNiX4Q6aQrt+lXYbHeI4zGp0ijX3cuJ+xnm0naYY/jKa+WtvRXBTvbJzQ oLyR+Jpts5l4DnECRYCc6cu8Ig== -----END CERTIFICATE-----Generated at Mon Jul 1 03:26:08 2024 by rpki-client on console-fra.rpki-client.org