$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/3fae15e1-900a-373e-b386-d052905c9332.roa File: 3fae15e1-900a-373e-b386-d052905c9332.roa (raw, json) Hash identifier: 7ifo6s3MxTbob1y3N/hgTw1F03grO6CW/fjyb1aJz5I= Subject key identifier: 51:23:CE:D2:01:78:ED:A2:F4:BB:4A:35:85:38:C2:0B:87:CC:BC:7A Certificate issuer: /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Certificate serial: 010D0C9F43285845840DC14DA6FA65A1D34F5080 Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/3fae15e1-900a-373e-b386-d052905c9332.roa Signing time: Fri 12 Apr 2024 01:00:26 +0000 ROA not before: Fri 12 Apr 2024 01:00:26 +0000 ROA not after: Thu 11 Jul 2024 01:00:26 +0000 asID: 30097 IP address blocks: 199.87.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:84:0d:c1:4d:a6:fa:65:a1:d3:4f:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Validity Not Before: Apr 12 01:00:26 2024 GMT Not After : Jul 11 01:00:26 2024 GMT Subject: CN=c8037f86-8eec-4b01-b624-34f234906522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:38:61:36:b7:11:e7:59:a9:66:f8:61:54:c7: 8c:82:12:59:47:cf:f4:16:66:55:5d:f0:de:d1:29: f7:57:bf:9c:52:2d:0f:23:65:cc:95:6d:b2:92:1d: 39:c2:bd:c5:1b:c1:49:a7:41:0a:f2:27:29:11:ad: 7a:62:d6:c9:2b:c3:c9:5e:8a:2c:ca:af:5c:78:0c: 51:16:10:45:ec:25:a3:91:5d:93:64:1a:99:46:fb: d0:17:5a:b8:96:3b:6c:41:45:6f:bb:b5:cc:20:82: da:c8:1d:c1:df:1d:3f:ea:73:a8:88:87:eb:4f:4c: 24:c4:49:19:90:1c:68:16:90:0c:82:0e:b0:8d:3c: 4d:9d:00:1c:72:a6:49:2e:ac:81:ea:a4:71:6d:34: 62:a1:d2:54:c2:bc:28:d0:6f:ca:27:5e:ff:48:60: 09:56:38:8f:96:77:59:9b:9a:4d:0f:64:01:3e:e3: ab:0b:21:01:22:94:c4:6e:39:78:14:a4:c4:49:36: 89:0c:12:76:b8:7c:eb:6a:41:1d:3b:e6:2b:cf:3c: 87:89:33:51:14:0e:20:dc:fb:c0:fb:0e:e8:99:ad: 5a:44:9d:32:aa:39:45:24:9a:39:cc:b0:9b:82:8e: 93:5e:f5:7d:4b:05:aa:02:ec:01:b3:c6:ba:e0:7b: 79:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:23:CE:D2:01:78:ED:A2:F4:BB:4A:35:85:38:C2:0B:87:CC:BC:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/3fae15e1-900a-373e-b386-d052905c9332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl X509v3 Authority Key Identifier: keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer sbgp-ipAddrBlock: critical IPv4: 199.87.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:d7:1f:5c:45:ef:38:5a:4a:0a:29:47:cc:28:ab:86:cb:31: 84:32:11:33:92:ab:c5:d7:75:0d:c6:ad:07:9e:6e:5b:63:37: 8b:31:21:52:cb:4c:60:cb:bc:a0:76:4e:94:f1:c8:c9:f2:0f: 3f:e8:6f:d1:08:18:46:c1:f0:a8:1f:d6:82:13:db:38:33:f1: ae:f6:cc:74:08:28:e5:0e:cc:eb:f2:41:aa:e7:70:e7:82:67: aa:89:90:18:72:8e:e3:1c:9c:ff:a5:95:ed:0a:64:da:ca:44: 23:80:56:78:9b:51:8f:9c:9d:51:62:e6:d8:e6:2b:0c:b2:80: 64:96:26:b7:15:e6:47:49:ed:72:a8:db:fc:4a:ee:b7:ce:05: aa:64:f2:da:73:af:63:ec:2e:dc:64:61:13:67:c3:bd:01:0f: c2:72:01:51:bd:5f:52:c2:0d:9b:56:b5:86:91:42:89:12:c2: ce:bd:7a:d2:f6:14:90:12:6a:07:17:25:c5:0c:cd:44:e2:2a: d7:80:fc:a4:fb:c9:6f:d8:f6:b2:79:93:33:20:b6:88:30:2d: 6c:a0:ee:61:4e:c7:99:25:5f:4e:ff:5c:d1:a8:af:c9:37:80: 48:4d:44:09:ba:37:b6:d3:41:4b:52:11:c2:6b:3f:dd:2b:64: 5d:5b:e6:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWEDcFNpvplodNPUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE3MGZjYTItNWY3NC00NDA4LThkYzktNTk3YmEwMzFj ZmUyMB4XDTI0MDQxMjAxMDAyNloXDTI0MDcxMTAxMDAyNlowLzEtMCsGA1UEAxMk YzgwMzdmODYtOGVlYy00YjAxLWI2MjQtMzRmMjM0OTA2NTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jhhNrcR51mpZvhhVMeMghJZR8/0FmZVXfDe 0Sn3V7+cUi0PI2XMlW2ykh05wr3FG8FJp0EK8icpEa16YtbJK8PJXoosyq9ceAxR FhBF7CWjkV2TZBqZRvvQF1q4ljtsQUVvu7XMIILayB3B3x0/6nOoiIfrT0wkxEkZ kBxoFpAMgg6wjTxNnQAccqZJLqyB6qRxbTRiodJUwrwo0G/KJ17/SGAJVjiPlndZ m5pND2QBPuOrCyEBIpTEbjl4FKTESTaJDBJ2uHzrakEdO+YrzzyHiTNRFA4g3PvA +w7oma1aRJ0yqjlFJJo5zLCbgo6TXvV9SwWqAuwBs8a64Ht5ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEjztIBeO2i9LtKNYU4wguHzLx6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcw ZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdiYTAzMWNmZTIvM2ZhZTE1ZTEtOTAwYS0z NzNlLWIzODYtZDA1MjkwNWM5MzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDE3MGZjYTItNWY3NC00NDA4LThk YzktNTk3YmEwMzFjZmUyL2QxNzBmY2EyLTVmNzQtNDQwOC04ZGM5LTU5N2JhMDMx Y2ZlMi5jcmwwHwYDVR0jBBgwFoAU/yi6m0JreiTZpKu3kU29s28/Yp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcwZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdi YTAzMWNmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1csMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLXH1xF7zhaSgopR8woq4bLMYQyETOSq8XXdQ3GrQeebltjN4sxIVLL TGDLvKB2TpTxyMnyDz/ob9EIGEbB8Kgf1oIT2zgz8a72zHQIKOUOzOvyQarncOeC Z6qJkBhyjuMcnP+lle0KZNrKRCOAVnibUY+cnVFi5tjmKwyygGSWJrcV5kdJ7XKo 2/xK7rfOBapk8tpzr2PsLtxkYRNnw70BD8JyAVG9X1LCDZtWtYaRQokSws69etL2 FJASagcXJcUMzUTiKteA/KT7yW/Y9rJ5kzMgtogwLWyg7mFOx5klX07/XNGor8k3 gEhNRAm6N7bTQUtSEcJrP90rZF1b5jA= -----END CERTIFICATE-----Generated at Sat May 18 15:37:52 2024 by rpki-client on console-fra.rpki-client.org