$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c51db7b0-d443-3350-bd1d-cc0d3d232304.roa File: c51db7b0-d443-3350-bd1d-cc0d3d232304.roa (raw, json) Hash identifier: 4qoos7dvWflCCoewx7JhRB7aypju13qfDEp4uJsPbdE= Subject key identifier: 9F:B7:A7:EF:D1:E9:F7:3F:38:34:E2:AA:48:1A:D0:9F:54:77:C0:F7 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F43285845E45E7F8D301681D38AC83900 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c51db7b0-d443-3350-bd1d-cc0d3d232304.roa Signing time: Thu 16 May 2024 13:00:35 +0000 ROA not before: Thu 16 May 2024 13:00:35 +0000 ROA not after: Wed 14 Aug 2024 13:00:35 +0000 asID: 3756 IP address blocks: 199.109.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:e4:5e:7f:8d:30:16:81:d3:8a:c8:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: May 16 13:00:35 2024 GMT Not After : Aug 14 13:00:35 2024 GMT Subject: CN=7f2e315a-2679-4ea3-b07a-32a95c9e57bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2f:24:8e:2b:c8:1e:57:6d:98:d6:0b:f6:d8: 8a:2b:23:9d:24:79:d4:48:2f:88:38:0e:9d:b8:24: 44:33:b5:03:fc:15:2e:af:07:7e:7a:ca:a4:d9:7f: 05:71:40:74:2d:9f:35:86:af:54:d8:a5:e3:a1:ad: be:3b:50:22:a4:1c:77:72:69:c8:75:4b:ca:0c:b3: 62:e4:2b:00:cf:f5:89:45:28:24:37:62:e7:17:31: 65:26:2c:b6:b8:b2:cd:1f:1a:8b:3a:0a:ac:54:63: 4c:f9:3a:00:b3:82:a4:a6:89:86:87:6f:53:d9:7a: 9c:23:51:38:94:30:81:23:d7:86:8f:14:6b:4c:10: fe:78:e1:46:bb:37:89:61:86:68:5b:62:18:fb:aa: 7f:02:5c:47:81:fc:a8:20:ad:d3:ae:7f:19:4c:d7: 91:50:16:ae:1c:a8:4b:75:b7:a7:3e:f6:5f:76:1b: 3e:0a:56:c6:71:97:3b:9e:d4:5c:54:67:de:e0:35: 36:44:79:db:cb:11:03:13:81:ea:e4:48:4d:c9:e3: 6c:81:67:94:4b:b5:9b:f4:1d:2b:14:1b:53:63:7e: 41:ec:95:16:fa:2d:8d:0e:15:7c:f9:1d:c7:9d:21: 85:3f:61:51:7c:2f:a8:57:a4:71:7b:2a:b0:0e:43: d1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B7:A7:EF:D1:E9:F7:3F:38:34:E2:AA:48:1A:D0:9F:54:77:C0:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c51db7b0-d443-3350-bd1d-cc0d3d232304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:d8:fa:be:62:c7:ba:ae:22:eb:a3:4e:7d:db:0d:21:2d:7e: 04:b8:7b:ad:56:58:15:17:db:e7:84:bf:3c:b2:a2:07:08:68: 3c:cf:71:c4:cf:e1:06:98:31:39:8c:d5:ee:bd:3e:56:47:59: 09:96:c3:5f:13:8e:d8:9a:91:ab:1a:58:fe:24:26:a8:e8:69: 93:32:87:51:0b:a7:3c:10:02:d6:18:24:21:86:84:ba:5b:c7: eb:4f:41:0a:4e:c4:6f:5f:8b:ad:2e:16:c1:fd:38:d3:98:b7: 38:df:39:0e:17:2a:24:12:25:d7:73:9a:bc:e2:8c:9b:6a:68: 67:00:0c:77:51:4e:63:94:67:75:75:d2:e8:6f:a0:bb:b2:73: 70:d5:76:32:9d:82:68:4a:b9:4a:81:7e:14:d2:52:f6:7b:9b: 74:e8:eb:ec:e4:b4:af:ae:5a:2a:bd:b0:c2:ab:0f:5d:12:89: 04:7b:ed:1d:e7:aa:79:11:7d:3a:ea:d7:39:33:58:bc:e0:5e: c9:b5:28:82:63:03:cb:40:35:d4:a3:b5:24:eb:60:f6:a5:97: 36:d4:5b:a7:88:5d:66:f6:e4:64:3b:42:10:69:07:2b:05:75: 62:c3:fa:42:46:b0:8a:1b:8f:e9:2f:4a:ef:85:da:fa:06:1c: 9b:b5:5f:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXkXn+NMBaB04rIOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI0MDUxNjEzMDAzNVoXDTI0MDgxNDEzMDAzNVowLzEtMCsGA1UEAxMk N2YyZTMxNWEtMjY3OS00ZWEzLWIwN2EtMzJhOTVjOWU1N2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxy8kjivIHldtmNYL9tiKKyOdJHnUSC+IOA6d uCREM7UD/BUurwd+esqk2X8FcUB0LZ81hq9U2KXjoa2+O1AipBx3cmnIdUvKDLNi 5CsAz/WJRSgkN2LnFzFlJiy2uLLNHxqLOgqsVGNM+ToAs4KkpomGh29T2XqcI1E4 lDCBI9eGjxRrTBD+eOFGuzeJYYZoW2IY+6p/AlxHgfyoIK3Trn8ZTNeRUBauHKhL dbenPvZfdhs+ClbGcZc7ntRcVGfe4DU2RHnbyxEDE4Hq5EhNyeNsgWeUS7Wb9B0r FBtTY35B7JUW+i2NDhV8+R3HnSGFP2FRfC+oV6RxeyqwDkPRswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+3p+/R6fc/ODTiqkga0J9Ud8D3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvYzUxZGI3YjAtZDQ0My0z MzUwLWJkMWQtY2MwZDNkMjMyMzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx20QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfY+r5ix7quIuujTn3bDSEtfgS4e61WWBUX2+eEvzyyogcIaDzPccTP 4QaYMTmM1e69PlZHWQmWw18TjtiakasaWP4kJqjoaZMyh1ELpzwQAtYYJCGGhLpb x+tPQQpOxG9fi60uFsH9ONOYtzjfOQ4XKiQSJddzmrzijJtqaGcADHdRTmOUZ3V1 0uhvoLuyc3DVdjKdgmhKuUqBfhTSUvZ7m3To6+zktK+uWiq9sMKrD10SiQR77R3n qnkRfTrq1zkzWLzgXsm1KIJjA8tANdSjtSTrYPallzbUW6eIXWb25GQ7QhBpBysF dWLD+kJGsIobj+kvSu+F2voGHJu1X9k= -----END CERTIFICATE-----Generated at Sat May 18 15:35:27 2024 by rpki-client on console-fra.rpki-client.org