$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa File: d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa (raw, json) Hash identifier: rAsMVXH5cf7aXcYxRLbWH+QHz9c3VoJNDEgG7juhJKA= Subject key identifier: 13:2D:13:54:2F:F4:EC:97:22:80:01:60:F4:A9:64:CE:51:1E:2B:7E Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F432858456F1DCA48D8FB6EFD568FC300 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa Signing time: Thu 04 Apr 2024 13:00:36 +0000 ROA not before: Thu 04 Apr 2024 13:00:36 +0000 ROA not after: Wed 03 Jul 2024 13:00:36 +0000 asID: 13325 IP address blocks: 199.33.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6f:1d:ca:48:d8:fb:6e:fd:56:8f:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Apr 4 13:00:36 2024 GMT Not After : Jul 3 13:00:36 2024 GMT Subject: CN=634fcfd8-55b5-44bb-9f7b-0e751b856937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:39:3d:ee:38:c3:c0:f0:4c:b9:32:56:7c:fb: 73:35:3e:12:b6:ca:37:a1:5b:65:ee:2c:d6:13:f5: bc:ff:0e:52:ad:49:e9:50:c6:4e:a3:dd:eb:8f:34: 4c:02:1a:25:80:ff:f8:45:5b:6a:04:40:be:74:5a: 6b:d3:c2:34:21:4d:8d:f7:0f:41:ad:4c:f6:74:d0: 31:1d:b8:b4:98:ed:db:bd:db:ec:08:8a:fe:27:c9: 3f:0f:1d:dd:88:62:51:9b:b3:77:e7:fa:fa:f2:76: f0:4a:f5:4a:f6:a1:0a:88:68:87:15:32:78:4b:da: 01:9f:9c:97:bf:72:33:23:09:35:51:51:11:fe:70: 1b:3e:95:f9:bf:5d:bc:1f:11:5b:6f:12:06:90:fe: b1:16:e5:62:b2:35:97:45:74:3c:9b:e3:f1:c8:28: 57:5c:6f:1c:ba:fb:c5:c8:44:85:05:1a:c0:11:74: 47:02:3a:93:03:c6:7b:7c:86:90:fb:1a:e6:28:d5: bf:99:25:7e:d2:e4:7d:2f:e4:f2:d4:8d:ed:ad:c7: f1:1d:fb:9a:db:c3:ce:1a:b5:54:a7:0c:1a:99:2d: a8:fb:50:26:7e:7a:0d:ff:d9:26:6b:82:c5:08:f6: cd:de:7c:73:79:5e:94:47:a3:4b:49:32:e1:8a:a8: 40:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2D:13:54:2F:F4:EC:97:22:80:01:60:F4:A9:64:CE:51:1E:2B:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 199.33.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:88:e3:80:22:fa:79:88:10:1d:0f:2a:b4:cb:f0:c0:07:27: 09:25:c6:da:03:5f:56:e7:01:94:8d:cd:29:2b:a8:a5:20:c2: ca:5b:dd:51:85:b2:d0:4d:5d:a9:e1:91:34:35:81:f7:49:f4: 81:08:35:66:a8:42:84:9e:69:71:af:d7:6f:79:d7:41:27:7b: 79:e5:b3:6b:54:26:6a:13:ff:05:12:39:ee:d2:e3:d9:30:73: bd:3c:44:e7:24:55:35:62:40:26:1a:7a:37:cf:68:f5:7b:96: e4:78:38:80:cd:48:df:26:f8:b6:83:8c:9a:aa:d1:91:94:5a: b9:33:34:2e:d1:78:5b:72:4a:f9:f9:9a:40:88:d8:73:b9:e6: 5e:43:32:20:d8:1c:63:33:ee:dc:27:ba:ad:87:0b:8c:32:3a: b3:fe:57:a1:3e:ae:ff:40:46:90:a2:7f:c2:13:b7:f1:ae:30: 55:3c:21:f2:99:03:2e:f1:f5:2a:61:4f:08:ea:07:42:6d:b2: 54:43:6a:a8:ad:13:7b:99:11:4b:e6:4f:31:9f:8e:9d:fe:de: 7a:b5:96:3f:0e:46:0d:25:b1:de:0f:83:c4:9f:ba:01:19:e8: 95:3d:89:74:4e:22:a8:78:f9:6d:a3:f8:cd:65:55:22:4e:fa: 59:d5:7e:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVvHcpI2Ptu/VaPwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI0MDQwNDEzMDAzNloXDTI0MDcwMzEzMDAzNlowLzEtMCsGA1UEAxMk NjM0ZmNmZDgtNTViNS00NGJiLTlmN2ItMGU3NTFiODU2OTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjk97jjDwPBMuTJWfPtzNT4Stso3oVtl7izW E/W8/w5SrUnpUMZOo93rjzRMAholgP/4RVtqBEC+dFpr08I0IU2N9w9BrUz2dNAx Hbi0mO3bvdvsCIr+J8k/Dx3diGJRm7N35/r68nbwSvVK9qEKiGiHFTJ4S9oBn5yX v3IzIwk1UVER/nAbPpX5v128HxFbbxIGkP6xFuVisjWXRXQ8m+PxyChXXG8cuvvF yESFBRrAEXRHAjqTA8Z7fIaQ+xrmKNW/mSV+0uR9L+Ty1I3trcfxHfua28POGrVU pwwamS2o+1AmfnoN/9kma4LFCPbN3nxzeV6UR6NLSTLhiqhAmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMtE1Qv9OyXIoABYPSpZM5RHit+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvZDRiOGZiZjgtOTFjNC0z M2YzLWEwZDEtZTRiMWU4MTVkZDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGI44Ai+nmIEB0PKrTL8MAHJwklxtoDX1bnAZSNzSkrqKUgwspb3VGF stBNXanhkTQ1gfdJ9IEINWaoQoSeaXGv129510Ene3nls2tUJmoT/wUSOe7S49kw c708ROckVTViQCYaejfPaPV7luR4OIDNSN8m+LaDjJqq0ZGUWrkzNC7ReFtySvn5 mkCI2HO55l5DMiDYHGMz7twnuq2HC4wyOrP+V6E+rv9ARpCif8ITt/GuMFU8IfKZ Ay7x9SphTwjqB0JtslRDaqitE3uZEUvmTzGfjp3+3nq1lj8ORg0lsd4Pg8SfugEZ 6JU9iXROIqh4+W2j+M1lVSJO+lnVftM= -----END CERTIFICATE-----Generated at Wed May 15 15:09:02 2024 by rpki-client on console-fra.rpki-client.org