$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/4788dc36-a0f1-39c7-bc1a-13963488b00e.roa File: 4788dc36-a0f1-39c7-bc1a-13963488b00e.roa (raw, json) Hash identifier: oTae7dWzFc3zpH5RAPGH6WzkfMJJxAiEqVNDma7Uhog= Subject key identifier: 19:F4:4C:CF:EB:8B:D2:B5:FE:A5:A7:0B:B9:16:07:D5:2E:00:A4:0B Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F43285845C2DE38BA847ACB9BE38B18F0 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/4788dc36-a0f1-39c7-bc1a-13963488b00e.roa Signing time: Sat 04 May 2024 13:00:35 +0000 ROA not before: Sat 04 May 2024 13:00:35 +0000 ROA not after: Fri 02 Aug 2024 13:00:35 +0000 asID: 13414 IP address blocks: 199.96.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c2:de:38:ba:84:7a:cb:9b:e3:8b:18:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: May 4 13:00:35 2024 GMT Not After : Aug 2 13:00:35 2024 GMT Subject: CN=68461fdb-d1b1-4db7-b278-5f15b1b5bee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4d:bd:52:2e:8b:1b:db:20:1d:a2:c7:e6:09: 2a:22:05:f6:6c:77:48:15:0f:bf:47:8d:2e:c1:fc: ef:24:d1:a7:39:58:a9:78:49:9f:83:fa:9d:2e:4f: cd:b8:e7:ab:c0:fb:0f:75:cd:e6:b5:6c:59:d1:a2: 13:7a:f4:e7:95:7e:c7:32:ce:4d:32:e8:50:54:69: ff:c6:f6:a8:e3:b0:4d:2a:1b:61:ba:44:dd:d8:ea: 9e:d3:80:6b:00:e5:17:92:0a:8e:24:b7:72:38:6e: 08:4b:5b:3f:9f:80:b7:28:ab:a2:22:11:e7:4d:fd: 8e:40:72:bb:0d:fb:af:89:09:fc:fb:4c:f4:d7:fa: 74:ba:b4:61:d1:30:23:79:ea:84:fe:7d:4e:ee:bd: ed:49:96:86:96:d9:ce:3c:76:2a:c3:d5:f3:dc:aa: bd:12:78:fc:38:0a:67:29:a9:a0:c6:f9:ff:23:59: 1c:a4:13:27:54:6b:cc:60:e6:35:13:f8:36:e9:c9: 10:79:52:75:ce:77:b4:19:90:8b:ac:ca:ec:30:77: a8:35:cb:59:51:8f:a3:9d:53:a9:f7:13:bb:f7:b7: 72:49:62:7a:98:15:7a:7a:bd:dd:4d:b9:56:b3:51: 16:ab:b6:b1:1f:1c:61:39:9d:cf:ee:4b:92:71:d8: e4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F4:4C:CF:EB:8B:D2:B5:FE:A5:A7:0B:B9:16:07:D5:2E:00:A4:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/4788dc36-a0f1-39c7-bc1a-13963488b00e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.96.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:45:da:e5:c1:33:0e:ef:99:a8:76:f6:4d:40:b9:4e:98:8f: 03:c5:f5:7a:d0:64:cb:3f:ab:7b:08:24:e2:66:9d:f9:ed:a4: bc:1a:14:e4:ab:19:ee:1c:e2:f4:22:e5:52:f1:4d:ad:49:be: cf:3d:4c:db:36:17:aa:b7:10:65:41:29:fe:00:49:f3:cf:83: 6b:9c:c0:4f:bd:be:15:9d:a1:e5:52:87:c6:4f:a2:d0:c8:cc: 9a:4c:4f:35:52:ce:ac:a0:27:f5:ad:1d:43:8d:b0:ab:69:51: 49:c5:b6:5c:bb:82:1a:8e:b3:7f:dc:02:db:fe:2b:28:83:e0: 91:3b:92:30:6f:0f:4e:32:9a:7f:f1:26:24:e4:82:b7:06:54: a4:42:7a:6f:2c:27:49:d2:4d:b3:87:8a:2d:cf:c0:ff:f9:05: 9d:a5:0f:ae:a7:e9:86:a3:7e:d6:e1:dc:6e:78:19:b1:c9:94: 5a:ad:49:03:4a:81:b6:82:1b:dd:9a:ab:8c:ee:01:3b:e5:29: 1a:0c:43:90:b6:0f:b5:23:d7:e6:ae:cd:42:d2:aa:04:8e:00: ea:11:69:ba:03:37:5a:35:ce:53:f3:27:12:8f:25:1f:21:9e: 68:2d:73:05:0d:37:76:7c:ea:34:0f:33:52:28:27:ad:ab:8a: d4:d2:c8:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXC3ji6hHrLm+OLGPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI0MDUwNDEzMDAzNVoXDTI0MDgwMjEzMDAzNVowLzEtMCsGA1UEAxMk Njg0NjFmZGItZDFiMS00ZGI3LWIyNzgtNWYxNWIxYjViZWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp029Ui6LG9sgHaLH5gkqIgX2bHdIFQ+/R40u wfzvJNGnOVipeEmfg/qdLk/NuOerwPsPdc3mtWxZ0aITevTnlX7HMs5NMuhQVGn/ xvao47BNKhthukTd2Oqe04BrAOUXkgqOJLdyOG4IS1s/n4C3KKuiIhHnTf2OQHK7 DfuviQn8+0z01/p0urRh0TAjeeqE/n1O7r3tSZaGltnOPHYqw9Xz3Kq9Enj8OApn Kamgxvn/I1kcpBMnVGvMYOY1E/g26ckQeVJ1zne0GZCLrMrsMHeoNctZUY+jnVOp 9xO797dySWJ6mBV6er3dTblWs1EWq7axHxxhOZ3P7kuScdjkcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBn0TM/ri9K1/qWnC7kWB9UuAKQLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNDc4OGRjMzYtYTBmMS0z OWM3LWJjMWEtMTM5NjM0ODhiMDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2A4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZF2uXBMw7vmah29k1AuU6YjwPF9XrQZMs/q3sIJOJmnfntpLwaFOSr Ge4c4vQi5VLxTa1Jvs89TNs2F6q3EGVBKf4ASfPPg2ucwE+9vhWdoeVSh8ZPotDI zJpMTzVSzqygJ/WtHUONsKtpUUnFtly7ghqOs3/cAtv+KyiD4JE7kjBvD04ymn/x JiTkgrcGVKRCem8sJ0nSTbOHii3PwP/5BZ2lD66n6Yajftbh3G54GbHJlFqtSQNK gbaCG92aq4zuATvlKRoMQ5C2D7Uj1+auzULSqgSOAOoRaboDN1o1zlPzJxKPJR8h nmgtcwUNN3Z86jQPM1IoJ62ritTSyAY= -----END CERTIFICATE-----Generated at Sat May 18 13:40:23 2024 by rpki-client on console-ams.rpki-client.org