$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f3849e8a-379a-30e7-aaef-8d8746b99eac.roa File: f3849e8a-379a-30e7-aaef-8d8746b99eac.roa (raw, json) Hash identifier: pDnPT4wleL1pLSXHOAQCuw8F2nAw4v3NcT53kHi0TC0= Subject key identifier: 99:31:6F:51:EA:CF:01:EA:1B:8C:59:DB:E3:F6:9B:66:88:AC:90:63 Certificate issuer: /CN=f0ba84c0-5d44-4547-a368-e574b20611e4 Certificate serial: 010D0C9F43285845A9BE096CA38713921172FD00 Authority key identifier: A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f3849e8a-379a-30e7-aaef-8d8746b99eac.roa Signing time: Thu 25 Apr 2024 13:00:33 +0000 ROA not before: Thu 25 Apr 2024 13:00:33 +0000 ROA not after: Wed 24 Jul 2024 13:00:33 +0000 asID: 33040 IP address blocks: 199.48.216.0/21 maxlen: 21 2605:3d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a9:be:09:6c:a3:87:13:92:11:72:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ba84c0-5d44-4547-a368-e574b20611e4 Validity Not Before: Apr 25 13:00:33 2024 GMT Not After : Jul 24 13:00:33 2024 GMT Subject: CN=07247905-52a8-4102-8177-ffe3cc893998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:64:c0:d5:73:80:db:89:3c:c3:fa:e0:28:15: 38:f1:0e:ad:49:6f:08:66:18:ef:75:cd:c8:3a:d0: bb:63:34:81:ee:85:05:0f:e3:c6:6f:7b:43:74:15: 02:e8:69:31:3f:c4:89:6a:55:e3:8c:fa:4f:4e:d0: 92:c2:6e:73:ec:c6:bf:77:79:58:8d:0c:50:54:03: 6b:ad:dc:56:9e:82:dc:22:6d:ad:b4:88:a0:21:82: eb:79:17:3c:19:5a:4b:61:90:3c:fc:87:bd:6b:6e: 13:72:9f:ed:fe:cd:fd:4a:2f:bd:cc:ff:c1:49:0b: 76:1a:ae:1b:a7:b0:10:5b:92:6e:ea:9e:d4:50:ac: e0:10:5d:d2:18:fe:fa:0b:c2:07:a0:54:89:1e:9d: f5:39:2d:27:79:30:ac:3b:a1:03:d1:43:d0:89:dc: 86:2e:bb:27:34:be:fa:2c:c2:7b:a5:90:58:dd:40: 78:c7:91:a6:ad:55:a5:f1:21:5f:fd:ea:6c:78:22: 9e:ff:60:01:52:33:2c:b8:59:0b:ce:35:96:e2:79: 72:35:ca:b8:c1:8a:d3:e0:ed:11:48:26:41:1d:8b: c0:f7:46:86:9a:14:8d:dd:d0:94:d1:fb:42:89:f3: 89:29:35:fc:7b:50:8c:2e:8d:b5:fa:08:5a:3b:8d: a2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:31:6F:51:EA:CF:01:EA:1B:8C:59:DB:E3:F6:9B:66:88:AC:90:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f3849e8a-379a-30e7-aaef-8d8746b99eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.crl X509v3 Authority Key Identifier: keyid:A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer sbgp-ipAddrBlock: critical IPv4: 199.48.216.0/21 IPv6: 2605:3d40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:fa:77:63:94:e7:bf:76:73:a3:97:27:a4:f0:4b:24:a5:b5: 44:80:d5:13:d4:dd:36:9e:bc:06:b1:19:68:dc:41:1d:44:c9: e0:b2:ea:b2:b8:f3:60:04:00:17:06:e6:74:5e:94:80:7a:12: d4:99:ff:03:9c:52:b3:93:58:8f:49:ea:8a:fd:8b:42:19:5f: b6:76:24:7f:65:fd:6a:29:98:a2:d3:81:31:89:a1:e1:51:28: e0:43:dc:e6:42:83:c3:e7:df:77:16:1c:28:b9:9a:39:a6:80: fe:af:d1:03:18:12:c2:f5:a8:f1:91:d3:95:c7:84:81:fb:25: 1d:0f:6f:86:4a:d8:d9:29:08:62:07:15:46:22:2c:b0:6e:58: 13:48:c2:7c:6d:39:2c:0f:e3:13:ce:a1:c3:50:ef:ae:1e:f2: 64:07:f8:2f:e7:b7:eb:3a:41:be:bd:f8:be:4e:61:f2:3c:e7: ad:65:97:0e:6f:f2:70:63:f7:f9:28:d5:5d:d2:7e:80:3c:b1: 50:8b:1e:e6:53:52:04:d9:13:9c:c3:90:90:a0:8c:b5:1d:15: 2c:85:b4:9c:e1:8c:c8:84:54:91:52:18:f8:6d:b2:90:75:54: 99:13:dd:39:75:4a:32:d6:ed:65:94:af:a7:11:e7:48:6c:b2: 96:ef:d8:4e -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEWpvglso4cTkhFy/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBiYTg0YzAtNWQ0NC00NTQ3LWEzNjgtZTU3NGIyMDYx MWU0MB4XDTI0MDQyNTEzMDAzM1oXDTI0MDcyNDEzMDAzM1owLzEtMCsGA1UEAxMk MDcyNDc5MDUtNTJhOC00MTAyLTgxNzctZmZlM2NjODkzOTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmTA1XOA24k8w/rgKBU48Q6tSW8IZhjvdc3I OtC7YzSB7oUFD+PGb3tDdBUC6GkxP8SJalXjjPpPTtCSwm5z7Ma/d3lYjQxQVANr rdxWnoLcIm2ttIigIYLreRc8GVpLYZA8/Ie9a24Tcp/t/s39Si+9zP/BSQt2Gq4b p7AQW5Ju6p7UUKzgEF3SGP76C8IHoFSJHp31OS0neTCsO6ED0UPQidyGLrsnNL76 LMJ7pZBY3UB4x5GmrVWl8SFf/epseCKe/2ABUjMsuFkLzjWW4nlyNcq4wYrT4O0R SCZBHYvA90aGmhSN3dCU0ftCifOJKTX8e1CMLo21+ghaO42i9QIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFJkxb1HqzwHqG4xZ2+P2m2aIrJBjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMGJh ODRjMC01ZDQ0LTQ1NDctYTM2OC1lNTc0YjIwNjExZTQvZjM4NDllOGEtMzc5YS0z MGU3LWFhZWYtOGQ4NzQ2Yjk5ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjBiYTg0YzAtNWQ0NC00NTQ3LWEz NjgtZTU3NGIyMDYxMWU0L2YwYmE4NGMwLTVkNDQtNDU0Ny1hMzY4LWU1NzRiMjA2 MTFlNC5jcmwwHwYDVR0jBBgwFoAUoLsZzufY16pNfOWQOA9KGdh7eiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMGJhODRjMC01ZDQ0LTQ1NDctYTM2OC1lNTc0 YjIwNjExZTQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDxzDYMA0E AgACMAcDBQAmBT1AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAIP6d2OU5792c6OXJ6TwSySltUSA1RPU3Tae vAaxGWjcQR1EyeCy6rK482AEABcG5nRelIB6EtSZ/wOcUrOTWI9J6or9i0IZX7Z2 JH9l/WopmKLTgTGJoeFRKOBD3OZCg8Pn33cWHCi5mjmmgP6v0QMYEsL1qPGR05XH hIH7JR0Pb4ZK2NkpCGIHFUYiLLBuWBNIwnxtOSwP4xPOocNQ764e8mQH+C/nt+s6 Qb69+L5OYfI8561llw5v8nBj9/ko1V3SfoA8sVCLHuZTUgTZE5zDkJCgjLUdFSyF tJzhjMiEVJFSGPhtspB1VJkT3Tl1SjLW7WWUr6cR50hsspbv2E4= -----END CERTIFICATE-----Generated at Sat May 18 16:10:18 2024 by rpki-client on console-ams.rpki-client.org