$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/68fbf46a-6030-3eb9-a1a5-72060a5e7097.roa File: 68fbf46a-6030-3eb9-a1a5-72060a5e7097.roa (raw, json) Hash identifier: 9S4agHhiKUtricfERxssCeDDxi700ui9wYcuABesrnc= Subject key identifier: D4:D0:F5:B0:76:80:77:0C:D5:4F:42:C8:8D:00:D3:7B:19:DF:A2:C8 Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F43285845E88E65DEA9118A11E284AF80 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/68fbf46a-6030-3eb9-a1a5-72060a5e7097.roa Signing time: Sat 18 May 2024 01:00:27 +0000 ROA not before: Sat 18 May 2024 01:00:27 +0000 ROA not after: Fri 16 Aug 2024 01:00:27 +0000 asID: 34774 IP address blocks: 199.64.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:e8:8e:65:de:a9:11:8a:11:e2:84:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: May 18 01:00:27 2024 GMT Not After : Aug 16 01:00:27 2024 GMT Subject: CN=d8246148-8dce-4dff-8e5d-77e117cb8931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d7:02:71:98:18:3a:09:0f:79:02:ad:e3:e5: 72:ba:28:49:0c:90:bc:34:8a:ee:25:fc:bd:d0:29: 60:3d:f1:74:d4:2b:9b:79:12:64:32:be:84:f6:b8: e8:76:a8:d4:f3:59:b6:7c:8b:89:a3:7b:98:9a:39: 6d:8f:ed:3a:2c:39:ee:3b:41:71:06:b3:b0:c7:76: c0:5c:57:a2:bb:b9:c0:d3:c3:8a:cc:30:25:85:76: 61:02:0c:fd:f9:08:dc:9c:45:e5:bc:8a:56:f8:6d: 0c:4d:e1:46:a2:a7:eb:95:12:40:8f:36:f1:de:83: 58:f1:f7:19:e2:4e:0d:8e:d1:78:fa:ce:ea:15:dd: 7d:00:b8:75:a2:d8:a6:0d:1d:e3:49:ff:07:94:fc: 99:c8:44:b2:bd:f7:fd:e1:2b:06:a8:ca:50:de:74: ce:d7:b5:47:60:9d:ba:79:da:a2:36:5e:a6:ee:11: 34:76:e9:41:2d:d5:08:77:de:4b:be:a3:62:50:84: df:4b:b1:c0:f6:11:da:c2:45:aa:ad:f9:43:63:91: fb:e1:90:99:20:c7:cf:d0:30:aa:40:f4:2e:89:70: a8:15:d2:28:e3:a8:55:bc:4e:2e:89:72:e9:a1:e9: d2:aa:d3:c9:41:65:1e:66:c4:af:e9:b9:82:d1:d4: 46:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D0:F5:B0:76:80:77:0C:D5:4F:42:C8:8D:00:D3:7B:19:DF:A2:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/68fbf46a-6030-3eb9-a1a5-72060a5e7097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.64.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:26:be:3a:cc:3a:6b:45:f3:c6:32:db:07:26:d2:1a:bb:12: 2e:9d:4b:7a:f9:92:05:62:0b:15:ed:8a:28:1c:b6:f3:47:c5: 6a:45:4e:0b:3b:24:b7:1d:5d:50:3b:35:6f:53:15:11:9b:17: 32:c0:cb:8e:ea:3c:2d:98:3c:4a:84:64:da:ef:ff:b7:0b:5b: a6:1e:de:3e:86:0d:9a:e9:6c:4f:ca:71:d4:6a:8f:8d:03:e0: 54:93:7e:1d:b5:ed:92:61:ed:a1:f5:30:21:be:a3:7d:68:25: a3:42:79:b9:23:c0:55:76:59:da:33:8f:b5:03:56:ab:04:91: 7a:22:87:3b:aa:ee:43:ef:8d:7f:f6:9b:4d:04:d7:7a:45:f2: 86:ef:53:fe:d2:d1:95:42:76:cb:3a:e8:ea:7c:ca:39:d8:fb: 64:b0:9c:40:80:95:c7:46:b5:b0:10:91:3e:61:6d:e9:43:15: 50:a2:d9:e2:af:6e:54:a9:19:c1:1d:c7:4d:68:13:9a:a9:52: 66:3f:3e:93:b2:3b:af:39:55:e8:8d:73:24:91:b1:4d:44:76: 09:97:15:67:d4:f5:14:0d:bd:e4:64:08:6d:d2:0c:7c:47:db: 83:71:16:8e:3f:21:ce:96:92:dc:01:f6:c2:62:c2:7c:64:c7: d1:15:c7:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXojmXeqRGKEeKEr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI0MDUxODAxMDAyN1oXDTI0MDgxNjAxMDAyN1owLzEtMCsGA1UEAxMk ZDgyNDYxNDgtOGRjZS00ZGZmLThlNWQtNzdlMTE3Y2I4OTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdcCcZgYOgkPeQKt4+VyuihJDJC8NIruJfy9 0ClgPfF01CubeRJkMr6E9rjodqjU81m2fIuJo3uYmjltj+06LDnuO0FxBrOwx3bA XFeiu7nA08OKzDAlhXZhAgz9+QjcnEXlvIpW+G0MTeFGoqfrlRJAjzbx3oNY8fcZ 4k4NjtF4+s7qFd19ALh1otimDR3jSf8HlPyZyESyvff94SsGqMpQ3nTO17VHYJ26 edqiNl6m7hE0dulBLdUId95LvqNiUITfS7HA9hHawkWqrflDY5H74ZCZIMfP0DCq QPQuiXCoFdIo46hVvE4uiXLpoenSqtPJQWUeZsSv6bmC0dRGEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTQ9bB2gHcM1U9CyI0A03sZ36LIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvNjhmYmY0NmEtNjAzMC0z ZWI5LWExYTUtNzIwNjBhNWU3MDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0BUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgmvjrMOmtF88Yy2wcm0hq7Ei6dS3r5kgViCxXtiigctvNHxWpFTgs7 JLcdXVA7NW9TFRGbFzLAy47qPC2YPEqEZNrv/7cLW6Ye3j6GDZrpbE/KcdRqj40D 4FSTfh217ZJh7aH1MCG+o31oJaNCebkjwFV2Wdozj7UDVqsEkXoihzuq7kPvjX/2 m00E13pF8obvU/7S0ZVCdss66Op8yjnY+2SwnECAlcdGtbAQkT5hbelDFVCi2eKv blSpGcEdx01oE5qpUmY/PpOyO685VeiNcySRsU1EdgmXFWfU9RQNveRkCG3SDHxH 24NxFo4/Ic6WktwB9sJiwnxkx9EVxw8= -----END CERTIFICATE-----Generated at Sat May 18 15:35:29 2024 by rpki-client on console-fra.rpki-client.org