$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/7c86a747-0c09-3aea-b1e5-eabbe5686568.roa File: 7c86a747-0c09-3aea-b1e5-eabbe5686568.roa (raw, json) Hash identifier: CIrWgdCxXkUUO1pjihzXpDdmMBWgNNOl+gm08qmaULo= Subject key identifier: BF:9D:47:D8:50:8F:10:E0:2A:92:C3:B9:A1:5C:FC:F2:E2:D0:B9:B6 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F43285845E72917FA683A927C6381D880 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/7c86a747-0c09-3aea-b1e5-eabbe5686568.roa Signing time: Fri 17 May 2024 13:00:34 +0000 ROA not before: Fri 17 May 2024 13:00:34 +0000 ROA not after: Thu 15 Aug 2024 13:00:34 +0000 asID: 3756 IP address blocks: 199.109.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:e7:29:17:fa:68:3a:92:7c:63:81:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: May 17 13:00:34 2024 GMT Not After : Aug 15 13:00:34 2024 GMT Subject: CN=4367a9e2-585f-45e8-a676-c8d3ffe06c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d0:d5:23:33:77:49:fa:6d:44:b2:53:16:e5: fc:fc:33:66:83:15:0b:bc:30:59:60:3a:ed:eb:a9: 4c:4c:6e:b7:0d:7a:25:7b:c5:75:f5:bf:09:5c:36: cf:7a:16:43:bf:ac:03:94:9a:64:40:75:36:75:79: af:a1:91:f1:63:87:f5:30:a6:e1:b2:8e:ab:73:44: 37:50:19:55:89:1e:a2:48:4e:53:3c:e2:59:05:e5: 06:e5:e8:89:cc:65:52:5e:5d:8a:96:1f:ef:12:23: 1c:dc:71:4f:09:7b:4e:8e:d2:e6:7e:4c:17:89:3a: 66:88:11:8d:4e:79:b8:b1:b9:33:3f:28:3f:12:92: 43:fd:5a:b5:20:4a:d7:fa:63:34:37:80:25:e0:c1: bc:c9:d8:cf:76:0e:1f:7c:b9:84:87:8e:9e:f4:39: 33:f6:7d:00:5e:2c:6a:2b:8f:f9:b1:01:d2:07:0f: 77:d9:40:14:a7:cc:1e:74:c7:84:d9:8a:67:3c:e1: 1d:b2:79:8d:c2:46:07:78:e9:be:73:77:70:8b:e4: af:50:00:d2:dc:32:48:5f:d1:37:ca:16:5b:b0:60: 40:ed:91:45:80:21:60:0f:91:6a:b9:4e:8a:45:f8: cb:cc:2a:73:67:ac:e5:fe:a9:1d:02:61:fa:7c:92: 6e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9D:47:D8:50:8F:10:E0:2A:92:C3:B9:A1:5C:FC:F2:E2:D0:B9:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/7c86a747-0c09-3aea-b1e5-eabbe5686568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:ac:e8:d9:75:54:11:f6:a9:7d:ea:75:d7:9a:d1:1d:9c:20: 48:d1:21:21:53:a9:d0:b4:2f:8c:65:aa:9b:2b:9d:e2:31:93: c3:64:fd:20:b5:d9:4c:c0:d4:64:35:c1:c2:83:d1:33:e5:c3: 38:24:1f:00:09:3c:ba:28:c7:a1:0d:6f:05:2c:7b:61:5c:f0: 75:40:aa:13:6a:f9:7a:65:50:26:bf:b9:8e:15:5d:e9:b1:82: b7:93:db:ed:72:c8:81:a9:6e:c8:e2:89:f5:3a:8a:a5:8d:23: db:00:b3:ce:a3:88:e6:0b:74:07:f9:59:84:85:b7:37:b0:c8: b9:aa:b1:73:d8:76:d0:06:2e:f7:0b:30:7e:fb:e9:ed:dc:00: 42:a2:4a:f5:e1:22:95:a3:39:95:31:49:70:74:98:11:af:29: e9:d1:bc:0b:05:f5:64:25:a9:9b:32:c1:6d:fc:48:ec:e4:82: 34:dd:d0:6e:df:3c:c3:33:ba:35:49:96:f1:ed:82:ef:43:86: df:c7:d0:4d:f8:98:38:35:f6:a3:b8:81:01:7c:fd:e6:af:c3: b1:e7:2e:21:9f:07:bd:58:81:39:19:2d:7b:75:19:ca:71:9b: b9:77:6b:e5:6b:f7:78:56:dc:35:c9:91:92:49:3f:6c:fc:2c: bb:2d:b1:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXnKRf6aDqSfGOB2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI0MDUxNzEzMDAzNFoXDTI0MDgxNTEzMDAzNFowLzEtMCsGA1UEAxMk NDM2N2E5ZTItNTg1Zi00NWU4LWE2NzYtYzhkM2ZmZTA2YzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9DVIzN3SfptRLJTFuX8/DNmgxULvDBZYDrt 66lMTG63DXole8V19b8JXDbPehZDv6wDlJpkQHU2dXmvoZHxY4f1MKbhso6rc0Q3 UBlViR6iSE5TPOJZBeUG5eiJzGVSXl2Klh/vEiMc3HFPCXtOjtLmfkwXiTpmiBGN Tnm4sbkzPyg/EpJD/Vq1IErX+mM0N4Al4MG8ydjPdg4ffLmEh46e9Dkz9n0AXixq K4/5sQHSBw932UAUp8wedMeE2YpnPOEdsnmNwkYHeOm+c3dwi+SvUADS3DJIX9E3 yhZbsGBA7ZFFgCFgD5FquU6KRfjLzCpzZ6zl/qkdAmH6fJJuNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+dR9hQjxDgKpLDuaFc/PLi0Lm2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvN2M4NmE3NDctMGMwOS0z YWVhLWIxZTUtZWFiYmU1Njg2NTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx20QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2s6Nl1VBH2qX3qddea0R2cIEjRISFTqdC0L4xlqpsrneIxk8Nk/SC1 2UzA1GQ1wcKD0TPlwzgkHwAJPLoox6ENbwUse2Fc8HVAqhNq+XplUCa/uY4VXemx greT2+1yyIGpbsjiifU6iqWNI9sAs86jiOYLdAf5WYSFtzewyLmqsXPYdtAGLvcL MH776e3cAEKiSvXhIpWjOZUxSXB0mBGvKenRvAsF9WQlqZsywW38SOzkgjTd0G7f PMMzujVJlvHtgu9Dht/H0E34mDg19qO4gQF8/eavw7HnLiGfB71YgTkZLXt1Gcpx m7l3a+Vr93hW3DXJkZJJP2z8LLstsYA= -----END CERTIFICATE-----Generated at Sat May 18 15:35:27 2024 by rpki-client on console-fra.rpki-client.org