$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/d442156c-4d4b-307b-9416-612333104ee4.roa File: d442156c-4d4b-307b-9416-612333104ee4.roa (raw, json) Hash identifier: r2nrLXlX7XBRk0NhnakJKsJAPO7XFRzO0KjXP9F3+x8= Subject key identifier: 2F:64:28:DC:2C:B9:E5:6C:20:D0:E6:FA:EA:41:FD:C0:FF:9A:61:7B Certificate issuer: /CN=917bf66f-fa51-48f2-813c-8b0191c1aa76 Certificate serial: 010D0C9F43285845D503CEA0B198C351DFF56D80 Authority key identifier: DD:43:56:99:72:BB:27:1F:0F:3A:19:36:38:E8:D0:FA:84:20:D0:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/d442156c-4d4b-307b-9416-612333104ee4.roa Signing time: Sat 11 May 2024 01:00:27 +0000 ROA not before: Sat 11 May 2024 01:00:27 +0000 ROA not after: Fri 09 Aug 2024 01:00:27 +0000 asID: 5065 IP address blocks: 199.7.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/917bf66f-fa51-48f2-813c-8b0191c1aa76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/917bf66f-fa51-48f2-813c-8b0191c1aa76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d5:03:ce:a0:b1:98:c3:51:df:f5:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917bf66f-fa51-48f2-813c-8b0191c1aa76 Validity Not Before: May 11 01:00:27 2024 GMT Not After : Aug 9 01:00:27 2024 GMT Subject: CN=e503fa6f-dbab-4a66-9ec4-48ae68e67f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:55:13:b5:ae:d2:58:6f:7d:3a:65:fd:36:3a: 41:2d:61:2a:39:48:54:1b:7f:d4:58:53:4b:19:59: 7e:af:e3:ec:84:ad:48:8d:25:2b:35:0d:19:4f:40: b9:98:89:4a:59:93:c4:f1:ac:d9:a5:7b:a2:18:f6: 99:df:fd:00:09:56:07:7b:51:a3:c4:03:aa:1e:1a: b4:82:8f:42:fc:0e:e8:fe:8e:98:5e:70:00:d5:59: 1a:9c:07:4f:2c:87:26:ae:03:3a:ed:24:b2:df:50: 4e:f7:19:39:4a:91:8c:d3:79:b8:8e:e0:9a:02:da: 5f:48:26:0e:31:64:25:34:cc:37:17:e0:8a:88:ef: f6:86:05:78:a7:72:81:a4:23:a4:fb:1a:5b:e5:d2: 96:7f:8d:94:0b:f2:9f:af:76:5b:fa:67:62:21:4c: 4a:e5:e2:4a:55:68:4d:cb:9e:3b:5b:9c:35:a3:a0: 27:15:d7:95:5c:a6:14:04:5f:cc:19:d5:fe:7f:10: 2d:ce:2f:a5:34:da:8a:de:a7:d7:3e:03:24:b0:d2: c1:8c:56:38:9a:8f:14:b7:83:f4:8d:33:5d:64:a3: 1d:56:b1:34:08:d0:26:3f:26:20:5a:64:22:4b:b7: 6d:b7:c0:05:40:7c:b5:bb:46:53:8d:9b:29:e9:33: df:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:64:28:DC:2C:B9:E5:6C:20:D0:E6:FA:EA:41:FD:C0:FF:9A:61:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/d442156c-4d4b-307b-9416-612333104ee4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/917bf66f-fa51-48f2-813c-8b0191c1aa76.crl X509v3 Authority Key Identifier: keyid:DD:43:56:99:72:BB:27:1F:0F:3A:19:36:38:E8:D0:FA:84:20:D0:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76.cer sbgp-ipAddrBlock: critical IPv4: 199.7.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ec:58:20:c9:26:4c:54:89:5e:2d:11:95:71:7f:12:f2:33: 04:af:ea:ab:db:67:ac:33:28:2d:d1:4c:bd:1b:ba:aa:f6:5e: 21:05:82:b0:c1:c5:6e:36:6b:25:4c:71:96:e7:dc:b6:7c:74: bb:01:8b:5e:7d:cc:ee:d0:a2:d9:35:2f:bd:0d:45:7c:1c:f5: 8e:ea:b5:58:8d:2f:90:aa:be:83:82:30:88:49:10:11:67:bb: b3:89:e5:04:b2:47:cc:cd:e2:18:db:8d:7d:3d:7f:3a:dc:b6: 22:08:c7:ad:f1:f4:bb:db:3f:43:09:5b:c1:d8:3c:75:44:41: ae:8f:0e:64:f4:69:bc:f4:72:d3:5b:c6:be:10:ab:05:de:ff: 9d:69:63:35:d7:45:9a:65:5f:fb:3b:11:a4:01:0c:2a:72:72: f8:70:ff:58:4d:0a:6a:de:22:7c:25:86:a3:83:7f:08:9b:9f: fe:31:f1:1a:c5:1f:d5:88:0d:59:91:80:b7:9b:10:49:eb:a6: bb:e3:d0:a9:11:2c:5e:f0:14:ea:56:d3:1c:25:c7:ba:9c:da: 49:f8:cb:39:0e:9a:19:26:31:29:1f:c1:db:d5:02:e5:52:5f: ab:4a:50:d7:30:22:a3:6f:be:0f:ce:08:fa:28:67:d1:45:83: 6d:5d:45:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXVA86gsZjDUd/1bYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE3YmY2NmYtZmE1MS00OGYyLTgxM2MtOGIwMTkxYzFh YTc2MB4XDTI0MDUxMTAxMDAyN1oXDTI0MDgwOTAxMDAyN1owLzEtMCsGA1UEAxMk ZTUwM2ZhNmYtZGJhYi00YTY2LTllYzQtNDhhZTY4ZTY3ZjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVUTta7SWG99OmX9NjpBLWEqOUhUG3/UWFNL GVl+r+PshK1IjSUrNQ0ZT0C5mIlKWZPE8azZpXuiGPaZ3/0ACVYHe1GjxAOqHhq0 go9C/A7o/o6YXnAA1VkanAdPLIcmrgM67SSy31BO9xk5SpGM03m4juCaAtpfSCYO MWQlNMw3F+CKiO/2hgV4p3KBpCOk+xpb5dKWf42UC/Kfr3Zb+mdiIUxK5eJKVWhN y547W5w1o6AnFdeVXKYUBF/MGdX+fxAtzi+lNNqK3qfXPgMksNLBjFY4mo8Ut4P0 jTNdZKMdVrE0CNAmPyYgWmQiS7dtt8AFQHy1u0ZTjZsp6TPfDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9kKNwsueVsINDm+upB/cD/mmF7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTdi ZjY2Zi1mYTUxLTQ4ZjItODEzYy04YjAxOTFjMWFhNzYvZDQ0MjE1NmMtNGQ0Yi0z MDdiLTk0MTYtNjEyMzMzMTA0ZWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE3YmY2NmYtZmE1MS00OGYyLTgx M2MtOGIwMTkxYzFhYTc2LzkxN2JmNjZmLWZhNTEtNDhmMi04MTNjLThiMDE5MWMx YWE3Ni5jcmwwHwYDVR0jBBgwFoAU3UNWmXK7Jx8POhk2OOjQ+oQg0GEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTdiZjY2Zi1mYTUxLTQ4ZjItODEzYy04YjAx OTFjMWFhNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxwdoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHsWCDJJkxUiV4tEZVxfxLyMwSv6qvbZ6wzKC3RTL0buqr2XiEFgrDB xW42ayVMcZbn3LZ8dLsBi159zO7Qotk1L70NRXwc9Y7qtViNL5CqvoOCMIhJEBFn u7OJ5QSyR8zN4hjbjX09fzrctiIIx63x9LvbP0MJW8HYPHVEQa6PDmT0abz0ctNb xr4QqwXe/51pYzXXRZplX/s7EaQBDCpycvhw/1hNCmreInwlhqODfwibn/4x8RrF H9WIDVmRgLebEEnrprvj0KkRLF7wFOpW0xwlx7qc2kn4yzkOmhkmMSkfwdvVAuVS X6tKUNcwIqNvvg/OCPooZ9FFg21dRYo= -----END CERTIFICATE-----Generated at Sat May 18 16:10:13 2024 by rpki-client on console-ams.rpki-client.org