$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/1ba5d9dc-1a6b-3803-a368-2f3a824bcfd4.roa File: 1ba5d9dc-1a6b-3803-a368-2f3a824bcfd4.roa (raw, json) Hash identifier: O+V+gPj8Lgdb3tHCSnfIUmUbA5q4rdLIxK5qg1txEg4= Subject key identifier: 42:6D:B6:16:11:E8:1A:5E:23:6E:00:43:56:A5:E9:BA:E2:82:6A:5D Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F43285845A15DFD607AF61C23D88A9EC0 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/1ba5d9dc-1a6b-3803-a368-2f3a824bcfd4.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 13414 IP address blocks: 199.16.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5d:fd:60:7a:f6:1c:23:d8:8a:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=c9283ad2-52fb-4b10-9263-6439d8c46b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:06:41:cd:b9:79:df:03:32:ab:6b:ad:d0:ce: e0:0d:aa:fe:2b:60:b8:8b:ff:8c:40:6b:d3:5b:d1: a5:01:f8:1f:8f:d2:43:32:0a:5a:28:9d:1f:8d:b1: 81:46:70:31:63:cf:2a:89:fe:dc:23:ed:d7:f8:82: a9:54:ee:4c:8a:d7:0a:90:8e:33:17:90:25:e9:b5: 5c:e4:1e:86:50:c3:d2:b4:22:09:ad:9d:16:ab:c6: 8d:9c:a9:2d:4a:ca:71:dc:af:20:a1:32:21:d1:db: 59:c9:9c:37:04:7c:17:94:ab:28:3a:84:43:c4:5f: 08:49:a1:2d:0a:bb:60:bf:3a:9a:94:54:9a:92:e4: 4b:35:6b:7a:5f:63:cb:0a:ea:0c:6c:34:6b:45:d2: fe:d6:3f:df:99:a7:0d:4a:f6:73:e5:3b:ed:f1:9a: 77:f6:1e:c0:02:d3:34:fc:3f:fd:e5:8e:18:ab:fd: ea:53:ce:4e:3e:b0:1f:c2:e3:da:8d:36:37:e6:07: b6:83:c4:94:4b:3d:6d:00:5e:ad:40:04:10:8c:31: 69:30:9e:ff:62:fc:f7:35:e1:e1:f8:2c:02:82:14: ba:03:a8:4f:03:02:50:ee:83:b2:4f:00:22:9f:09: 53:b1:c3:e8:f7:94:98:e5:28:73:63:6d:37:42:bd: 27:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6D:B6:16:11:E8:1A:5E:23:6E:00:43:56:A5:E9:BA:E2:82:6A:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/1ba5d9dc-1a6b-3803-a368-2f3a824bcfd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.16.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:a8:a1:b2:39:f3:4b:db:3e:02:2e:16:3d:59:f2:93:b2:8f: 54:4e:53:f5:ec:3a:64:3a:97:91:02:ea:cd:1b:32:9c:84:95: a5:1e:0e:41:a0:08:6d:58:c5:4b:fb:3f:54:01:ee:ea:89:8e: b9:98:95:7b:e1:49:fa:61:37:09:34:c0:28:f4:24:a1:3e:93: af:6b:ee:c6:0b:b3:b0:79:a7:2d:7a:3e:ea:67:8e:16:c3:02: 6f:b4:69:a7:a7:b6:1c:75:1d:fb:65:47:8d:b4:6e:68:b5:4e: b0:4d:b5:e3:14:0c:ee:1e:a6:b9:eb:27:b0:b1:45:a2:7d:01: 23:56:bd:fc:87:84:a9:b5:30:50:10:a8:b8:c7:57:c7:5f:16: c3:d7:f5:7a:e9:16:e6:cf:86:83:bb:ff:ad:5a:3a:da:e6:74: 4b:c9:63:e7:f2:00:a5:ed:37:b2:70:0a:37:6c:86:f3:5f:fd: be:6f:0e:85:9c:7e:ea:7a:7f:6b:85:64:69:17:62:ec:65:61: 09:06:a7:6e:5f:70:c3:f0:95:cf:14:4f:43:23:8c:b7:4c:32: 37:3f:6a:0b:ed:ab:56:9b:9c:e3:3e:01:e2:a9:4c:8e:f2:87: 34:8a:95:29:25:c3:80:27:8b:33:35:a6:ff:fb:a6:a8:33:be: fc:01:94:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXf1gevYcI9iKnsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk YzkyODNhZDItNTJmYi00YjEwLTkyNjMtNjQzOWQ4YzQ2YjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAZBzbl53wMyq2ut0M7gDar+K2C4i/+MQGvT W9GlAfgfj9JDMgpaKJ0fjbGBRnAxY88qif7cI+3X+IKpVO5MitcKkI4zF5Al6bVc 5B6GUMPStCIJrZ0Wq8aNnKktSspx3K8goTIh0dtZyZw3BHwXlKsoOoRDxF8ISaEt CrtgvzqalFSakuRLNWt6X2PLCuoMbDRrRdL+1j/fmacNSvZz5Tvt8Zp39h7AAtM0 /D/95Y4Yq/3qU85OPrAfwuPajTY35ge2g8SUSz1tAF6tQAQQjDFpMJ7/Yvz3NeHh +CwCghS6A6hPAwJQ7oOyTwAinwlTscPo95SY5ShzY203Qr0nvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJtthYR6BpeI24AQ1al6brigmpdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMWJhNWQ5ZGMtMWE2Yi0z ODAzLWEzNjgtMmYzYTgyNGJjZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxCfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmoobI580vbPgIuFj1Z8pOyj1ROU/XsOmQ6l5EC6s0bMpyElaUeDkGg CG1YxUv7P1QB7uqJjrmYlXvhSfphNwk0wCj0JKE+k69r7sYLs7B5py16PupnjhbD Am+0aaenthx1HftlR420bmi1TrBNteMUDO4eprnrJ7CxRaJ9ASNWvfyHhKm1MFAQ qLjHV8dfFsPX9XrpFubPhoO7/61aOtrmdEvJY+fyAKXtN7JwCjdshvNf/b5vDoWc fup6f2uFZGkXYuxlYQkGp25fcMPwlc8UT0MjjLdMMjc/agvtq1abnOM+AeKpTI7y hzSKlSklw4AnizM1pv/7pqgzvvwBlPM= -----END CERTIFICATE-----Generated at Sat May 18 15:35:27 2024 by rpki-client on console-fra.rpki-client.org