$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/f851c2c2-de47-3e35-85ca-156d6c109859.roa File: f851c2c2-de47-3e35-85ca-156d6c109859.roa (raw, json) Hash identifier: HrMr8Ylb3N2Fp2ym7JdMSlZ3Ue3dNag4x/y1upHsaQ4= Subject key identifier: B7:70:B5:2E:3A:D7:37:84:0F:AC:EC:70:A7:F1:35:D3:44:FB:3E:EE Certificate issuer: /CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536 Certificate serial: 010D0C9F43285845BA7E33DB0727080ADC33D880 Authority key identifier: AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/f851c2c2-de47-3e35-85ca-156d6c109859.roa Signing time: Wed 01 May 2024 13:00:34 +0000 ROA not before: Wed 01 May 2024 13:00:34 +0000 ROA not after: Tue 30 Jul 2024 13:00:34 +0000 asID: 26523 IP address blocks: 162.252.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ba:7e:33:db:07:27:08:0a:dc:33:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536 Validity Not Before: May 1 13:00:34 2024 GMT Not After : Jul 30 13:00:34 2024 GMT Subject: CN=0111cef8-082f-460e-9e75-b11d2a2f3dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:db:1d:71:af:af:79:d7:f7:d6:56:39:0c:c2: a4:31:a6:a6:38:26:05:c6:e9:ac:76:1e:11:3a:16: 9e:39:43:63:56:69:5f:57:13:c3:a3:d5:b2:b7:34: 23:f9:96:04:c6:82:76:3e:8c:bd:7d:4d:93:eb:95: b7:dc:d1:ff:72:7d:b9:01:cd:24:b8:56:de:ed:9d: e8:98:b9:82:52:8a:70:2d:42:09:30:77:eb:b0:b7: 51:70:ca:87:60:db:be:8e:03:dc:93:94:55:b9:7f: 55:0d:dc:ce:d2:f5:fc:3a:78:e4:a2:cb:06:a9:01: 9f:33:b6:15:37:74:4d:ca:a9:4d:c5:24:45:00:da: aa:de:9d:db:95:54:aa:05:48:59:cc:41:42:08:02: 05:b7:01:32:ea:b6:a4:f1:50:1c:93:1f:56:f0:e1: de:9a:a9:9a:eb:36:84:b5:42:04:35:3d:74:d1:c1: ef:e2:a4:a0:1e:e6:b4:65:ee:ff:b9:b1:5c:22:6c: 63:ba:c5:c7:d6:7f:a5:de:35:54:04:3c:b4:fd:63: 69:88:ba:5d:c1:0f:5f:3f:15:bc:81:0d:48:ea:f7: 56:4b:d4:2c:19:d7:6e:bd:50:a3:e8:12:96:ef:2b: 80:03:2e:aa:d4:9e:b2:c2:d0:71:ce:51:2f:e5:6c: 56:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:70:B5:2E:3A:D7:37:84:0F:AC:EC:70:A7:F1:35:D3:44:FB:3E:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/f851c2c2-de47-3e35-85ca-156d6c109859.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.crl X509v3 Authority Key Identifier: keyid:AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer sbgp-ipAddrBlock: critical IPv4: 162.252.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:44:9e:54:0b:15:3c:74:0f:2a:0d:c8:f2:e1:cc:16:6a:26: ec:ff:59:5e:17:80:25:27:95:0f:d1:50:6f:b2:d4:ce:3c:74: 3a:81:46:c9:92:6e:fb:21:2d:94:e8:4f:ae:97:85:d1:d0:35: 99:e1:49:ac:87:ee:49:16:04:a5:5e:6c:d0:6f:3c:0d:72:52: 42:57:35:25:5e:63:7a:3e:d0:87:02:45:f9:ef:b2:93:6a:9f: 60:20:1d:46:63:c5:56:b2:b8:2f:42:d3:d5:45:fd:2d:34:4e: 2a:9b:6d:ca:fb:67:ed:a3:d2:a4:5a:67:0f:28:00:60:2e:98: 47:90:19:05:57:70:73:34:8b:6e:53:21:8f:74:1a:4a:b9:4f: 74:5f:6b:79:f3:58:08:a4:e1:02:31:6d:7f:6b:82:d0:d1:5d: 99:d9:54:05:4d:7d:7f:cd:99:d3:16:54:a5:94:91:e4:0f:ff: cc:0e:54:03:44:32:54:09:1b:16:66:bf:79:ba:23:88:cd:a6: 1b:90:b4:4c:c0:31:a8:e4:35:79:6c:7c:52:6b:4e:b9:1d:6e: 99:9a:70:70:4a:d7:b9:c0:cd:4d:32:33:ca:c8:02:c3:96:01: 2c:27:9e:6c:c3:39:69:35:7b:d4:5c:fb:d6:7e:9b:e1:98:97: d9:7c:0b:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW6fjPbBycICtwz2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWZjNTIyZWEtMzcwMy00YWFhLTlmYTAtZDhmOTlhNzIw NTM2MB4XDTI0MDUwMTEzMDAzNFoXDTI0MDczMDEzMDAzNFowLzEtMCsGA1UEAxMk MDExMWNlZjgtMDgyZi00NjBlLTllNzUtYjExZDJhMmYzZGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNsdca+vedf31lY5DMKkMaamOCYFxumsdh4R OhaeOUNjVmlfVxPDo9WytzQj+ZYExoJ2Poy9fU2T65W33NH/cn25Ac0kuFbe7Z3o mLmCUopwLUIJMHfrsLdRcMqHYNu+jgPck5RVuX9VDdzO0vX8OnjkossGqQGfM7YV N3RNyqlNxSRFANqq3p3blVSqBUhZzEFCCAIFtwEy6rak8VAckx9W8OHemqma6zaE tUIENT100cHv4qSgHua0Ze7/ubFcImxjusXH1n+l3jVUBDy0/WNpiLpdwQ9fPxW8 gQ1I6vdWS9QsGdduvVCj6BKW7yuAAy6q1J6ywtBxzlEv5WxWwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdwtS461zeED6zscKfxNdNE+z7uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81ZmM1 MjJlYS0zNzAzLTRhYWEtOWZhMC1kOGY5OWE3MjA1MzYvZjg1MWMyYzItZGU0Ny0z ZTM1LTg1Y2EtMTU2ZDZjMTA5ODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWZjNTIyZWEtMzcwMy00YWFhLTlm YTAtZDhmOTlhNzIwNTM2LzVmYzUyMmVhLTM3MDMtNGFhYS05ZmEwLWQ4Zjk5YTcy MDUzNi5jcmwwHwYDVR0jBBgwFoAUrBif0ZYBC/QZzdVzfG79ydGolaAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81ZmM1MjJlYS0zNzAzLTRhYWEtOWZhMC1kOGY5 OWE3MjA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovyEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9EnlQLFTx0DyoNyPLhzBZqJuz/WV4XgCUnlQ/RUG+y1M48dDqBRsmS bvshLZToT66XhdHQNZnhSayH7kkWBKVebNBvPA1yUkJXNSVeY3o+0IcCRfnvspNq n2AgHUZjxVayuC9C09VF/S00Tiqbbcr7Z+2j0qRaZw8oAGAumEeQGQVXcHM0i25T IY90Gkq5T3Rfa3nzWAik4QIxbX9rgtDRXZnZVAVNfX/NmdMWVKWUkeQP/8wOVANE MlQJGxZmv3m6I4jNphuQtEzAMajkNXlsfFJrTrkdbpmacHBK17nAzU0yM8rIAsOW ASwnnmzDOWk1e9Rc+9Z+m+GYl9l8C9c= -----END CERTIFICATE-----Generated at Sat May 18 01:45:46 2024 by rpki-client on console-ams.rpki-client.org