$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa File: 822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa (raw, json) Hash identifier: iKYS4eKkkt9s5CtQJebnHnhjhFlX7i4FOqFXYe+lHPA= Subject key identifier: 2B:17:6E:19:04:29:92:18:9F:48:16:A8:6B:85:28:A7:3A:9D:B5:87 Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d Certificate serial: 010D0C9F43285845ADEE12EB84E195921CEEA280 Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa Signing time: Sat 27 Apr 2024 01:00:26 +0000 ROA not before: Sat 27 Apr 2024 01:00:26 +0000 ROA not after: Fri 26 Jul 2024 01:00:26 +0000 asID: 611 IP address blocks: 131.202.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ad:ee:12:eb:84:e1:95:92:1c:ee:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d Validity Not Before: Apr 27 01:00:26 2024 GMT Not After : Jul 26 01:00:26 2024 GMT Subject: CN=61bb24fd-094c-4ca6-9b11-e30e40a75909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e3:25:bf:86:7b:39:32:b6:2d:43:7a:0e:82: 9f:2e:99:4a:58:1d:37:66:e7:35:a8:fb:2d:94:79: 95:61:a5:69:4a:97:64:1c:09:3e:5e:d8:9a:b1:d3: aa:a5:48:33:a8:b9:7b:af:82:a4:9c:81:10:5e:cb: 58:e5:d8:98:cf:89:86:fe:db:54:03:0a:98:e4:3d: 32:a7:dd:2b:1b:eb:b9:b0:68:2c:81:a6:bd:90:57: af:6f:4a:b8:64:f9:6a:2f:8f:e6:a6:e3:9e:e3:17: 20:bf:ec:33:02:3e:c3:eb:a1:86:b9:bd:2e:bc:b2: ef:e3:88:f2:93:5c:f8:5a:00:d3:bf:57:83:75:fd: 0e:36:b0:65:20:d5:8f:4a:d4:1f:fa:24:ef:14:a5: 05:cd:9c:fb:14:82:19:7f:29:4e:f0:a9:4b:65:bc: 93:7f:20:96:33:94:55:f0:dd:38:ff:cf:8c:11:17: 78:06:09:a6:d0:8a:d3:55:bc:54:c8:f7:1e:6b:09: 77:67:5f:91:d2:82:d7:9d:a8:70:58:a1:8f:9d:b2: f9:cd:8b:a0:5b:d1:75:a8:c8:97:ca:f5:2d:4a:d5: 84:60:e1:7e:5a:0c:a4:a3:e3:54:b9:c5:30:6c:3c: 61:ed:e2:e4:c2:d9:d5:83:a9:85:09:4f:bf:12:4d: b6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:17:6E:19:04:29:92:18:9F:48:16:A8:6B:85:28:A7:3A:9D:B5:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl X509v3 Authority Key Identifier: keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer sbgp-ipAddrBlock: critical IPv4: 131.202.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:04:03:57:85:75:48:5a:e9:b7:1e:27:de:7f:cc:71:0d:a6: 34:bf:75:9a:95:cf:2f:38:2d:48:6c:9d:8c:c3:0d:7f:45:b7: 71:db:0d:84:5e:56:af:71:5a:d7:d6:35:78:4d:72:e7:50:5f: cb:94:e1:e8:13:25:b2:41:4e:e1:b1:27:19:c9:85:28:1c:ee: a5:29:93:07:7b:9a:1b:ab:35:72:5e:1a:33:f5:96:67:d7:06: 99:dd:30:43:a3:9b:45:43:01:97:24:e7:72:f9:cb:b8:06:6b: bb:64:d1:ce:03:f9:ca:d4:c3:b1:82:9d:a1:3c:d8:54:48:d8: fb:e7:ea:e0:a6:0e:ad:87:05:23:9a:c5:6f:46:a4:27:cb:bd: 2c:74:eb:8d:de:50:b3:c9:90:60:bc:7e:bc:ec:01:b9:be:5f: 73:0c:5b:59:79:b8:2d:34:3a:89:b8:95:77:42:d0:7c:62:87: a1:b3:4e:f3:4a:7e:bc:06:1b:56:80:09:a5:19:f5:02:d0:90: 25:5a:d7:4c:8c:5f:22:e8:54:4d:63:58:95:42:ad:df:6c:50: 15:14:93:44:5f:83:80:fe:e1:61:60:13:81:59:98:9d:45:08: b9:57:f9:f8:44:64:03:ed:4e:ea:f1:a9:38:a3:e6:20:c8:1f: 44:4f:03:a3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEWt7hLrhOGVkhzuooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5Njg4OWMtNjFhZi00YzYxLTgxNTctNGI3ZjJmZGU2 OTBkMB4XDTI0MDQyNzAxMDAyNloXDTI0MDcyNjAxMDAyNlowLzEtMCsGA1UEAxMk NjFiYjI0ZmQtMDk0Yy00Y2E2LTliMTEtZTMwZTQwYTc1OTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOMlv4Z7OTK2LUN6DoKfLplKWB03Zuc1qPst lHmVYaVpSpdkHAk+XtiasdOqpUgzqLl7r4KknIEQXstY5diYz4mG/ttUAwqY5D0y p90rG+u5sGgsgaa9kFevb0q4ZPlqL4/mpuOe4xcgv+wzAj7D66GGub0uvLLv44jy k1z4WgDTv1eDdf0ONrBlINWPStQf+iTvFKUFzZz7FIIZfylO8KlLZbyTfyCWM5RV 8N04/8+MERd4Bgmm0IrTVbxUyPceawl3Z1+R0oLXnahwWKGPnbL5zYugW9F1qMiX yvUtStWEYOF+Wgyko+NUucUwbDxh7eLkwtnVg6mFCU+/Ek22ywIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCsXbhkEKZIYn0gWqGuFKKc6nbWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2 ODg5Yy02MWFmLTRjNjEtODE1Ny00YjdmMmZkZTY5MGQvODIyNzAwZTItMzljNC0z NzBkLWEyZDYtM2U1YjRhYzA2ZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQ5Njg4OWMtNjFhZi00YzYxLTgx NTctNGI3ZjJmZGU2OTBkLzc0OTY4ODljLTYxYWYtNGM2MS04MTU3LTRiN2YyZmRl NjkwZC5jcmwwHwYDVR0jBBgwFoAUWYrA5l80WnZOjSAYuX0BnNESuY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2ODg5Yy02MWFmLTRjNjEtODE1Ny00Yjdm MmZkZTY5MGQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg8owVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEArgQDV4V1SFrptx4n3n/McQ2mNL91mpXPLzgtSGydjMMNf0W3cdsNhF5W r3Fa19Y1eE1y51Bfy5Th6BMlskFO4bEnGcmFKBzupSmTB3uaG6s1cl4aM/WWZ9cG md0wQ6ObRUMBlyTncvnLuAZru2TRzgP5ytTDsYKdoTzYVEjY++fq4KYOrYcFI5rF b0akJ8u9LHTrjd5Qs8mQYLx+vOwBub5fcwxbWXm4LTQ6ibiVd0LQfGKHobNO80p+ vAYbVoAJpRn1AtCQJVrXTIxfIuhUTWNYlUKt32xQFRSTRF+DgP7hYWATgVmYnUUI uVf5+ERkA+1O6vGpOKPmIMgfRE8Dow== -----END CERTIFICATE-----Generated at Sat May 18 15:35:27 2024 by rpki-client on console-fra.rpki-client.org