$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa File: 1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa (raw, json) Hash identifier: VhNs/+VnPGA7BZDDXH+T18kYUpzFMnjB4F60Mx2avz0= Subject key identifier: B5:70:59:76:66:AB:46:7F:5B:DE:6C:1F:62:6D:71:33:F6:03:C4:FD Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F43285845E729186CCFC24E7A7D77BE00 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa Signing time: Fri 17 May 2024 13:00:34 +0000 ROA not before: Fri 17 May 2024 13:00:34 +0000 ROA not after: Thu 15 Aug 2024 13:00:34 +0000 asID: 3756 IP address blocks: 199.109.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:e7:29:18:6c:cf:c2:4e:7a:7d:77:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: May 17 13:00:34 2024 GMT Not After : Aug 15 13:00:34 2024 GMT Subject: CN=aba679db-bbfe-4c15-a1f5-ae89c45e3ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:25:34:b1:d7:ec:2e:57:ea:cb:fc:41:8e:3c: c5:d2:29:a0:36:da:27:ae:ee:fe:e5:e7:7f:00:3e: ef:5d:a8:61:bd:ab:48:35:67:e7:c1:84:04:6c:58: e7:2c:32:ba:5c:55:df:6d:2b:c9:75:e3:e5:ec:5e: 52:9d:c8:7e:ce:91:e6:63:a6:8b:f5:74:fa:ae:5e: c7:33:88:e1:05:3a:8f:a5:0f:6e:d6:37:0a:6e:d7: 00:bd:3a:4c:dd:61:27:a7:78:22:04:f7:f9:1a:08: 9a:f4:1d:3b:8f:7f:62:92:15:49:95:49:2c:55:39: 53:03:f8:8e:f0:c8:3c:b2:6e:6c:67:9c:4b:cd:a3: fc:8f:55:01:6c:cf:b6:6b:ad:f1:dd:a1:e4:44:10: f0:26:dd:34:2e:79:46:2d:c9:cd:0a:9e:13:1f:0b: 71:4c:ea:7b:9d:d1:8d:08:0b:28:9c:9a:96:d1:5f: be:05:83:71:92:1e:fe:e6:9c:40:11:99:8d:c8:6a: d1:4f:2e:62:b2:23:23:0c:8d:66:4c:33:0f:78:3d: 91:a7:c1:87:e0:ae:d0:66:f6:d7:69:29:37:d6:1a: a8:d8:14:de:bc:eb:32:23:44:99:85:2d:9a:d1:cf: ad:92:13:d7:83:5e:f6:46:67:aa:a7:b5:d2:31:82: d9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:70:59:76:66:AB:46:7F:5B:DE:6C:1F:62:6D:71:33:F6:03:C4:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:4b:9d:e5:0c:11:fe:6d:e5:1a:ed:e2:11:0c:d9:48:0f:0b: f6:6f:03:19:26:f1:e8:5e:35:a6:de:d0:5c:3a:cd:5b:85:01: 80:c6:a1:2b:7c:c6:12:f0:97:e6:8f:d1:dd:5f:31:e4:bc:97: 38:1d:3c:10:a8:79:14:69:af:3b:d0:62:bd:90:19:76:57:05: 3b:ec:1a:ab:6f:85:67:db:da:b9:ab:92:31:15:4b:e6:da:de: f4:d4:29:8a:7c:1b:1e:d3:0f:19:55:e3:36:d7:f8:61:36:31: 29:e1:79:18:4b:84:ef:a6:5e:33:35:37:43:7c:22:6c:6b:ff: 04:ae:1b:47:39:28:1b:a9:65:1c:77:8a:5a:e8:5c:e7:e2:e1: 90:3b:9d:a9:32:5a:41:51:be:5a:b6:2b:70:bf:c6:7d:63:27: 0c:67:90:e7:d1:4f:d9:24:a5:2c:43:c5:e0:23:4e:f1:75:a8: 37:f0:7e:a2:6d:ec:76:36:cd:02:00:44:44:67:d3:83:ab:b9: 72:85:01:2b:7e:01:ad:5c:5e:b3:2e:82:10:b6:d9:d6:fe:a1: 41:dc:5b:35:1e:ac:d1:17:81:6c:32:c1:43:47:90:d3:99:3c: b1:93:a3:d3:c2:23:1e:84:ae:56:e2:90:41:a2:71:4d:54:b0: f7:5b:46:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXnKRhsz8JOen13vgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI0MDUxNzEzMDAzNFoXDTI0MDgxNTEzMDAzNFowLzEtMCsGA1UEAxMk YWJhNjc5ZGItYmJmZS00YzE1LWExZjUtYWU4OWM0NWUzYWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCU0sdfsLlfqy/xBjjzF0imgNtonru7+5ed/ AD7vXahhvatINWfnwYQEbFjnLDK6XFXfbSvJdePl7F5Snch+zpHmY6aL9XT6rl7H M4jhBTqPpQ9u1jcKbtcAvTpM3WEnp3giBPf5Ggia9B07j39ikhVJlUksVTlTA/iO 8Mg8sm5sZ5xLzaP8j1UBbM+2a63x3aHkRBDwJt00LnlGLcnNCp4THwtxTOp7ndGN CAsonJqW0V++BYNxkh7+5pxAEZmNyGrRTy5isiMjDI1mTDMPeD2Rp8GH4K7QZvbX aSk31hqo2BTevOsyI0SZhS2a0c+tkhPXg172Rmeqp7XSMYLZ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVwWXZmq0Z/W95sH2JtcTP2A8T9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvMTE0ODIwNGQtMGM1MS0z MDYwLTgwZTItY2ZhYTk2ZWExZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx20gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9LneUMEf5t5Rrt4hEM2UgPC/ZvAxkm8eheNabe0Fw6zVuFAYDGoSt8 xhLwl+aP0d1fMeS8lzgdPBCoeRRprzvQYr2QGXZXBTvsGqtvhWfb2rmrkjEVS+ba 3vTUKYp8Gx7TDxlV4zbX+GE2MSnheRhLhO+mXjM1N0N8Imxr/wSuG0c5KBupZRx3 ilroXOfi4ZA7nakyWkFRvlq2K3C/xn1jJwxnkOfRT9kkpSxDxeAjTvF1qDfwfqJt 7HY2zQIARERn04OruXKFASt+Aa1cXrMughC22db+oUHcWzUerNEXgWwywUNHkNOZ PLGTo9PCIx6ErlbikEGicU1UsPdbRrA= -----END CERTIFICATE-----Generated at Sat May 18 13:40:23 2024 by rpki-client on console-ams.rpki-client.org