$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa File: 10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa (raw, json) Hash identifier: bcmYQ8g80Sk4SFNnyqsRm961mpQ7mX9EjjIMcu3KZfE= Subject key identifier: 5A:DC:55:D7:F1:66:B8:7F:6E:86:24:32:7E:F7:EB:95:A0:8C:A3:48 Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F432858451E68FF6D5EE5CBB366C1AB80 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa Signing time: Wed 06 Mar 2024 15:11:53 +0000 ROA not before: Wed 06 Mar 2024 15:11:53 +0000 ROA not after: Tue 04 Jun 2024 14:11:53 +0000 asID: 125 IP address blocks: 199.64.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1e:68:ff:6d:5e:e5:cb:b3:66:c1:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: Mar 6 15:11:53 2024 GMT Not After : Jun 4 14:11:53 2024 GMT Subject: CN=8fcf5bf5-c4cb-4e60-9168-4ff72730aa7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:57:cd:7a:5d:3b:9d:57:32:28:06:f9:41:9c: e2:82:47:8c:8a:da:af:a8:3f:ce:1b:f3:ac:03:c5: 37:f0:5d:44:fb:eb:04:c3:79:ea:42:4c:88:e2:01: b3:5c:7b:61:bb:bc:02:92:3e:e8:af:88:9e:ad:c9: 5d:00:4e:93:61:ee:83:c3:bc:22:1e:3f:07:4c:07: fe:c4:0f:32:b4:82:e5:37:98:b6:b4:0b:02:d8:80: 47:39:49:fa:b6:0a:6b:ba:b6:3c:19:52:03:d8:99: 61:87:41:95:cc:d4:12:76:33:09:2a:a3:40:91:48: 0c:63:4a:9f:d6:9d:93:92:93:05:cc:97:45:c2:3d: 17:42:02:9d:db:4a:5c:1d:2f:06:1d:a7:47:17:bd: 49:ae:c1:3b:db:bd:0d:d5:f5:c5:30:b8:ac:e8:a6: f5:0e:59:71:35:7d:a2:28:3f:f0:6d:02:52:2b:46: e1:1b:bc:41:b2:96:15:f5:11:e8:63:97:fd:3b:50: 93:6d:97:ab:2f:2d:f0:d0:e2:15:7a:61:26:d2:3e: 33:a3:ba:90:f1:e9:c9:14:4d:c4:9a:d6:50:ac:83: cc:9c:83:79:ec:ec:ec:1e:13:d4:61:dc:16:5e:ae: 65:e4:86:cc:e3:93:16:29:5b:e2:d9:65:39:6a:de: af:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DC:55:D7:F1:66:B8:7F:6E:86:24:32:7E:F7:EB:95:A0:8C:A3:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.64.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:32:98:2b:73:66:f0:a7:62:9d:ab:60:7f:77:af:25:e1:35: 9a:cb:ba:33:c2:9a:db:38:d8:93:9e:dd:b6:0f:21:97:1f:91: a3:ea:09:7d:0d:1a:7f:96:b8:1d:c3:4f:f2:b9:40:24:56:92: 33:67:2f:fc:cb:91:00:ec:da:e3:77:d0:9a:b8:c5:0a:03:01: 3c:0d:ae:4e:fc:37:ec:89:ae:99:37:1b:4f:b5:b4:76:46:dd: 22:be:50:72:fd:c6:f1:17:c4:77:57:f8:51:43:16:b3:76:7a: 10:95:03:d1:0d:eb:fa:eb:f4:2d:6a:c9:43:3f:55:27:62:a2: 93:ff:17:05:4a:26:4a:01:f7:fa:16:54:93:52:88:b5:a6:80: a1:e6:c2:ab:09:41:00:8a:ac:59:7c:95:23:fa:f5:be:98:52: 0e:80:3f:26:14:27:e4:7d:c3:09:09:c3:0f:3a:2a:39:92:10: 69:a4:8a:87:ce:be:dc:ff:20:6c:b5:16:ce:3b:2f:bf:ef:b9: 4c:06:8a:c3:2d:06:38:0b:e1:c8:20:2c:be:3d:a8:11:2d:d6: 15:3a:55:dc:d0:84:b3:82:42:06:a3:78:00:be:f0:24:64:55: 89:0c:bf:de:11:ad:bb:2a:f8:ad:1a:b7:67:9b:be:b6:c5:52: ae:e6:94:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUeaP9tXuXLs2bBq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI0MDMwNjE1MTE1M1oXDTI0MDYwNDE0MTE1M1owLzEtMCsGA1UEAxMk OGZjZjViZjUtYzRjYi00ZTYwLTkxNjgtNGZmNzI3MzBhYTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglfNel07nVcyKAb5QZzigkeMitqvqD/OG/Os A8U38F1E++sEw3nqQkyI4gGzXHthu7wCkj7or4iercldAE6TYe6Dw7wiHj8HTAf+ xA8ytILlN5i2tAsC2IBHOUn6tgprurY8GVID2Jlhh0GVzNQSdjMJKqNAkUgMY0qf 1p2TkpMFzJdFwj0XQgKd20pcHS8GHadHF71JrsE7270N1fXFMLis6Kb1DllxNX2i KD/wbQJSK0bhG7xBspYV9RHoY5f9O1CTbZerLy3w0OIVemEm0j4zo7qQ8enJFE3E mtZQrIPMnIN57OzsHhPUYdwWXq5l5IbM45MWKVvi2WU5at6v6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrcVdfxZrh/boYkMn7365WgjKNIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvMTA5MDRmNWUtMzRmZC0z NjQ5LTlkMGQtMWU0M2ZjOWYxNzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0CiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAymCtzZvCnYp2rYH93ryXhNZrLujPCmts42JOe3bYPIZcfkaPqCX0N Gn+WuB3DT/K5QCRWkjNnL/zLkQDs2uN30Jq4xQoDATwNrk78N+yJrpk3G0+1tHZG 3SK+UHL9xvEXxHdX+FFDFrN2ehCVA9EN6/rr9C1qyUM/VSdiopP/FwVKJkoB9/oW VJNSiLWmgKHmwqsJQQCKrFl8lSP69b6YUg6APyYUJ+R9wwkJww86KjmSEGmkiofO vtz/IGy1Fs47L7/vuUwGisMtBjgL4cggLL49qBEt1hU6VdzQhLOCQgajeAC+8CRk VYkMv94Rrbsq+K0at2ebvrbFUq7mlEk= -----END CERTIFICATE-----Generated at Sat May 18 13:40:25 2024 by rpki-client on console-ams.rpki-client.org