$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/e32cc202-c503-3060-ab79-bb4f841233b4.roa File: e32cc202-c503-3060-ab79-bb4f841233b4.roa (raw, json) Hash identifier: q9XdZ7P61xQ6ZSy+SKVUnIKVbKCg2UrXYywSVTYdrsw= Subject key identifier: EE:F9:01:35:C5:6E:90:5D:F0:72:C2:9B:58:EF:01:57:2D:FB:BB:2A Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F43285845F3B919F1224011DE6D8D23E0 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/e32cc202-c503-3060-ab79-bb4f841233b4.roa Signing time: Wed 22 May 2024 01:00:27 +0000 ROA not before: Wed 22 May 2024 01:00:27 +0000 ROA not after: Tue 20 Aug 2024 01:00:27 +0000 asID: 16509 IP address blocks: 199.66.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:f3:b9:19:f1:22:40:11:de:6d:8d:23:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: May 22 01:00:27 2024 GMT Not After : Aug 20 01:00:27 2024 GMT Subject: CN=84bef698-dac5-4c7e-b4e3-9de6ff9d5a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a6:46:de:93:d7:a5:ba:97:1d:a5:c5:b4:a0: 16:b9:d7:0f:fc:03:c1:e3:fb:2c:a6:ab:e3:e1:37: d3:31:ad:ce:f6:ed:b9:f8:5b:33:46:0e:6c:ad:1b: e0:55:2b:8a:aa:69:b1:4c:78:49:8e:54:b0:b0:3c: 52:38:77:83:69:95:19:8a:ca:b9:14:40:a1:c5:8d: 69:ad:c5:1b:2d:0b:c4:6b:96:a9:e8:2d:ff:ca:d1: 80:29:16:ed:80:b1:4b:9a:16:a0:e3:fc:17:31:7e: 4f:de:90:eb:83:77:76:99:e8:31:df:2b:97:0a:be: ce:51:1a:e3:bf:61:e9:54:3c:23:9b:12:1f:57:f3: b7:99:8f:82:a9:3f:72:4e:dc:2c:76:51:9d:25:3d: 5c:db:91:b9:df:88:ad:18:0e:43:88:4e:88:84:c7: 60:10:93:22:85:6c:32:6d:76:08:94:05:f1:32:74: d5:5d:6d:d4:33:4f:27:50:4d:24:90:70:a8:9b:9e: 8f:d1:93:2d:88:67:43:d0:81:de:fc:e7:68:1a:f7: e6:43:bc:93:bb:f7:d3:7e:64:79:ab:e7:ef:ba:0b: 30:6e:6e:c5:6b:17:94:75:99:3e:19:60:cf:99:02: 85:38:b6:aa:f4:5d:2b:e3:70:66:ca:ec:47:cd:31: bc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F9:01:35:C5:6E:90:5D:F0:72:C2:9B:58:EF:01:57:2D:FB:BB:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/e32cc202-c503-3060-ab79-bb4f841233b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv4: 199.66.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:96:f9:de:ed:6b:be:57:83:16:db:00:0d:b3:e1:79:92:17: e5:16:47:5d:d6:c4:a5:27:e8:9f:e0:4e:40:ea:23:1c:7f:10: be:9f:ed:92:37:8f:3e:00:e5:3a:b1:af:79:e2:68:92:c0:6e: 82:a4:5d:45:a0:27:88:e3:24:b3:39:9d:04:31:86:c6:2e:76: b7:cc:22:59:c0:d0:19:18:84:88:24:a8:89:bd:ae:2b:e5:99: c7:9b:68:ca:ee:7e:62:45:71:20:7b:55:ab:5d:74:54:4f:c5: e5:d2:6d:51:f5:3a:6c:49:b3:9a:73:4b:06:fd:50:fd:c3:b2: a1:67:b5:c6:66:88:10:0c:e8:44:34:58:f0:7f:91:b9:8f:cd: 7c:04:d0:c9:6a:55:20:be:e9:bd:7c:4c:48:6c:56:59:d0:7a: 8d:f8:83:ac:17:99:ff:4b:b0:53:ee:7e:44:fc:8a:f4:ee:31: 05:40:7c:2c:6c:19:a5:f8:42:75:70:92:7f:3f:55:50:3d:46: 6b:e3:58:34:08:d3:ff:28:e2:ab:db:b1:af:69:c5:97:94:bc: 47:e2:90:6e:de:fa:18:4b:32:03:48:77:be:84:fa:74:0c:e8: af:21:24:bd:f2:6b:73:37:f7:a4:e8:ad:ef:de:8a:74:ec:9b: 73:67:c5:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXzuRnxIkAR3m2NI+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI0MDUyMjAxMDAyN1oXDTI0MDgyMDAxMDAyN1owLzEtMCsGA1UEAxMk ODRiZWY2OTgtZGFjNS00YzdlLWI0ZTMtOWRlNmZmOWQ1YThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKZG3pPXpbqXHaXFtKAWudcP/APB4/sspqvj 4TfTMa3O9u25+FszRg5srRvgVSuKqmmxTHhJjlSwsDxSOHeDaZUZisq5FEChxY1p rcUbLQvEa5ap6C3/ytGAKRbtgLFLmhag4/wXMX5P3pDrg3d2megx3yuXCr7OURrj v2HpVDwjmxIfV/O3mY+CqT9yTtwsdlGdJT1c25G534itGA5DiE6IhMdgEJMihWwy bXYIlAXxMnTVXW3UM08nUE0kkHCom56P0ZMtiGdD0IHe/OdoGvfmQ7yTu/fTfmR5 q+fvugswbm7FaxeUdZk+GWDPmQKFOLaq9F0r43BmyuxHzTG8bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO75ATXFbpBd8HLCm1jvAVct+7sqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvZTMyY2MyMDItYzUwMy0z MDYwLWFiNzktYmI0Zjg0MTIzM2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0K8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqW+d7ta75XgxbbAA2z4XmSF+UWR13WxKUn6J/gTkDqIxx/EL6f7ZI3 jz4A5Tqxr3niaJLAboKkXUWgJ4jjJLM5nQQxhsYudrfMIlnA0BkYhIgkqIm9rivl mcebaMrufmJFcSB7VatddFRPxeXSbVH1OmxJs5pzSwb9UP3DsqFntcZmiBAM6EQ0 WPB/kbmPzXwE0MlqVSC+6b18TEhsVlnQeo34g6wXmf9LsFPufkT8ivTuMQVAfCxs GaX4QnVwkn8/VVA9RmvjWDQI0/8o4qvbsa9pxZeUvEfikG7e+hhLMgNId76E+nQM 6K8hJL3ya3M396Tore/einTsm3NnxQ8= -----END CERTIFICATE-----Generated at Mon Jun 17 15:05:32 2024 by rpki-client on console-ams.rpki-client.org