$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa File: 2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa (raw, json) Hash identifier: XaYQ9SsN43Nq3+s2gC96zDoc/6Ep+RGJb+VSvehiIwE= Subject key identifier: D9:8C:C4:6C:AC:26:07:70:FD:91:56:44:86:22:3D:DD:96:40:38:79 Certificate issuer: /CN=c9f645ac-84aa-42e3-b85a-7af9688898a6 Certificate serial: 010D0C9F432858459FF8936DF47ABFD2AC0A2180 Authority key identifier: 58:3B:68:9F:62:2D:A9:5C:D6:F3:EC:55:7E:28:63:5C:A8:81:84:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa Signing time: Mon 22 Apr 2024 01:00:25 +0000 ROA not before: Mon 22 Apr 2024 01:00:25 +0000 ROA not after: Sun 21 Jul 2024 01:00:25 +0000 asID: 53423 IP address blocks: 192.171.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:9f:f8:93:6d:f4:7a:bf:d2:ac:0a:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9f645ac-84aa-42e3-b85a-7af9688898a6 Validity Not Before: Apr 22 01:00:25 2024 GMT Not After : Jul 21 01:00:25 2024 GMT Subject: CN=8951f3e6-c63a-4369-b672-c7dd9c36acae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1a:7b:6c:b8:f4:11:7e:8c:70:30:fd:c7:d9: c0:fc:88:a3:a4:1f:e0:95:cc:7e:a7:ab:35:ac:55: 9c:4c:f8:2a:09:4f:78:75:11:6e:fb:84:e5:0e:67: 60:2e:b2:5c:16:66:d3:de:a7:99:7f:aa:06:cd:a0: 66:a2:6e:71:42:a6:9d:5f:5f:45:07:c4:c5:bf:e3: 29:e2:69:9d:7e:8a:54:53:f6:e9:a9:14:62:ec:2d: 72:a2:20:70:39:84:cd:0a:55:04:c1:a4:b1:16:ef: 4b:a7:00:72:2f:d0:4b:e9:a6:9a:06:5f:3a:08:cd: 09:4f:c6:87:93:fd:ba:6c:a5:27:6f:a6:be:82:97: 05:7b:db:1b:cb:38:1d:bb:9b:69:69:9a:38:64:e7: bc:c8:5f:45:1d:1a:13:1a:fe:17:d0:3d:74:3d:6a: 27:27:8a:30:65:1f:13:b8:15:24:ff:a2:1b:47:50: 1b:a7:03:dc:e7:db:13:d5:62:96:4d:b3:be:37:14: c2:10:87:be:f5:8a:64:33:fb:3d:1d:8a:2f:9b:d8: b6:a4:ff:e8:fd:2e:cc:35:53:98:dd:51:86:ad:d7: b2:01:a3:30:8f:fb:3e:a9:da:e8:32:9d:59:74:bb: 18:f2:60:e4:74:2f:0c:33:09:e1:39:67:8d:58:58: a0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8C:C4:6C:AC:26:07:70:FD:91:56:44:86:22:3D:DD:96:40:38:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.crl X509v3 Authority Key Identifier: keyid:58:3B:68:9F:62:2D:A9:5C:D6:F3:EC:55:7E:28:63:5C:A8:81:84:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer sbgp-ipAddrBlock: critical IPv4: 192.171.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:c5:d9:19:56:a5:32:fd:85:22:ad:4f:83:8f:7f:ce:e6:d2: e0:23:78:fa:16:ca:1a:48:1b:85:a7:74:6b:8d:46:f9:15:67: a4:03:a3:e6:1f:36:e2:dd:05:31:87:17:77:8a:8d:96:6a:0b: 19:a9:27:a4:8d:4a:68:ed:d6:ca:0b:db:d5:1e:9c:a8:1e:19: 58:7a:cf:09:5e:51:8e:e9:12:5d:a1:d7:c4:cc:c8:99:c5:ed: 52:d8:df:57:57:34:1f:6c:d9:5a:ff:d1:30:89:30:a1:d0:95: 0d:db:a5:c4:64:ee:91:59:12:e8:6e:41:54:c9:56:8b:5c:8f: 80:7a:6c:e8:a0:8b:f3:a4:ce:c6:5e:62:3a:c1:ea:30:e9:bb: a5:6a:59:1c:2a:01:6f:27:c1:0b:08:48:c7:fc:0c:b2:a0:88: f0:c4:7f:8e:b4:3f:a8:06:eb:d1:4f:70:f9:9e:9c:b4:0d:d4: 72:52:5c:66:9c:d3:49:db:8f:5b:65:18:5c:50:d3:0c:10:4e: 5b:34:f3:22:4d:5b:08:fe:e0:0a:f0:c3:5e:03:51:70:a4:77: 48:26:a2:11:a2:b8:82:03:df:83:8f:bc:9f:d3:06:02:1c:1f: 3a:f9:24:da:94:aa:14:00:b4:eb:5a:8b:06:17:3e:99:e5:1e: 44:a8:43:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWf+JNt9Hq/0qwKIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlmNjQ1YWMtODRhYS00MmUzLWI4NWEtN2FmOTY4ODg5 OGE2MB4XDTI0MDQyMjAxMDAyNVoXDTI0MDcyMTAxMDAyNVowLzEtMCsGA1UEAxMk ODk1MWYzZTYtYzYzYS00MzY5LWI2NzItYzdkZDljMzZhY2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihp7bLj0EX6McDD9x9nA/IijpB/glcx+p6s1 rFWcTPgqCU94dRFu+4TlDmdgLrJcFmbT3qeZf6oGzaBmom5xQqadX19FB8TFv+Mp 4mmdfopUU/bpqRRi7C1yoiBwOYTNClUEwaSxFu9LpwByL9BL6aaaBl86CM0JT8aH k/26bKUnb6a+gpcFe9sbyzgdu5tpaZo4ZOe8yF9FHRoTGv4X0D10PWonJ4owZR8T uBUk/6IbR1AbpwPc59sT1WKWTbO+NxTCEIe+9YpkM/s9HYovm9i2pP/o/S7MNVOY 3VGGrdeyAaMwj/s+qdroMp1ZdLsY8mDkdC8MMwnhOWeNWFig+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmMxGysJgdw/ZFWRIYiPd2WQDh5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jOWY2 NDVhYy04NGFhLTQyZTMtYjg1YS03YWY5Njg4ODk4YTYvMjYxMmRjMDItMzAzNi0z Y2VkLWJhMmMtOGUxYzA0YTJiMjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzlmNjQ1YWMtODRhYS00MmUzLWI4 NWEtN2FmOTY4ODg5OGE2L2M5ZjY0NWFjLTg0YWEtNDJlMy1iODVhLTdhZjk2ODg4 OThhNi5jcmwwHwYDVR0jBBgwFoAUWDton2ItqVzW8+xVfihjXKiBhBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jOWY2NDVhYy04NGFhLTQyZTMtYjg1YS03YWY5 Njg4ODk4YTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwKvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDF2RlWpTL9hSKtT4OPf87m0uAjePoWyhpIG4WndGuNRvkVZ6QDo+Yf NuLdBTGHF3eKjZZqCxmpJ6SNSmjt1soL29UenKgeGVh6zwleUY7pEl2h18TMyJnF 7VLY31dXNB9s2Vr/0TCJMKHQlQ3bpcRk7pFZEuhuQVTJVotcj4B6bOigi/OkzsZe YjrB6jDpu6VqWRwqAW8nwQsISMf8DLKgiPDEf460P6gG69FPcPmenLQN1HJSXGac 00nbj1tlGFxQ0wwQTls08yJNWwj+4Arww14DUXCkd0gmohGiuIID34OPvJ/TBgIc Hzr5JNqUqhQAtOtaiwYXPpnlHkSoQ2k= -----END CERTIFICATE-----Generated at Sun Jun 2 20:01:21 2024 by rpki-client on console-fra.rpki-client.org