$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f4fade1-a438-3112-a00d-10ea443d520e.roa File: 3f4fade1-a438-3112-a00d-10ea443d520e.roa (raw, json) Hash identifier: N/f62zPi3lEwK8xzDx2fPEww7iYsXpemyXqsQ/55KcE= Subject key identifier: 48:A7:B1:4C:00:65:F5:B8:E7:FB:B1:B9:E4:F7:1F:4C:B9:31:42:30 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285845931B20944039EB9B4935FE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f4fade1-a438-3112-a00d-10ea443d520e.roa Signing time: Wed 17 Apr 2024 10:24:34 +0000 ROA not before: Wed 17 Apr 2024 10:24:34 +0000 ROA not after: Tue 16 Jul 2024 10:24:34 +0000 asID: 20940 IP address blocks: 173.222.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:93:1b:20:94:40:39:eb:9b:49:35:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 17 10:24:34 2024 GMT Not After : Jul 16 10:24:34 2024 GMT Subject: CN=7d1ed743-5084-4b6b-a98a-7d4a72d64bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:38:f5:2e:fb:c0:f4:7d:b4:e3:e6:ed:d3:d1: bc:29:ca:c2:ca:5f:d6:08:48:b1:4c:64:e2:d5:af: 3d:0b:0f:ae:c4:ed:74:ea:c6:e2:2b:55:aa:36:f0: 4f:d8:0f:fa:d4:59:63:cc:32:09:e9:79:29:60:f4: 5e:b8:ab:17:59:08:2d:14:0b:af:3d:99:e2:64:e7: b7:c2:fa:86:72:34:da:c8:9d:c0:ff:18:f3:53:63: b6:38:5a:3a:1b:b0:a8:d9:a8:2a:21:99:10:35:e9: 9c:71:c0:69:04:d7:f7:fd:fb:e8:23:c6:e9:95:75: 73:07:3c:25:87:0a:2c:ca:9d:e9:b5:e1:5f:f9:00: 15:22:2b:1a:cb:bc:b0:52:51:7a:c7:f8:3d:c5:02: 8c:fa:7a:13:6c:92:98:5d:56:bd:8d:c6:30:ed:73: b5:df:47:f5:02:f5:a0:c7:3b:ae:83:78:3c:5a:ef: 43:ad:2e:ce:32:a3:1f:19:0b:c9:58:3f:a0:1a:84: 10:9b:bd:22:17:59:f1:1c:d7:27:19:42:b2:ac:ee: 98:35:30:19:ba:b4:d0:11:1d:b7:5c:ff:cc:80:b1: ab:27:37:e1:75:8c:2f:0e:e7:75:b8:70:31:84:0d: e5:d5:7d:5d:55:5c:de:a6:32:de:06:3e:48:28:bc: 42:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A7:B1:4C:00:65:F5:B8:E7:FB:B1:B9:E4:F7:1F:4C:B9:31:42:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f4fade1-a438-3112-a00d-10ea443d520e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.222.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:84:81:c4:7d:2a:63:06:f4:4b:c5:8b:19:39:77:b9:a9:9c: 34:be:e4:de:30:bc:5b:ad:00:6d:bb:76:c1:89:be:c8:5a:00: 91:df:1a:7b:e1:e1:fb:ee:2f:b3:22:cb:b1:38:a1:f0:13:82: 2f:a7:21:7a:2d:c2:0e:33:3e:ff:db:e0:5f:01:2d:98:65:35: 2b:04:94:a6:3b:aa:1a:5c:e3:cf:ae:7b:ee:9a:80:c6:ad:bc: fe:07:a7:51:24:95:1b:d7:23:e2:9d:2e:ce:2b:98:56:29:49: f8:de:89:51:75:d9:5e:65:97:fd:ad:f9:d1:fc:d6:63:a8:36: bb:9a:ad:da:a8:40:23:4b:42:23:9f:1d:ef:46:94:fe:c8:ca: 2e:36:28:2f:eb:a8:1f:ea:8b:8b:05:bb:cf:66:98:14:ae:1b: a7:d4:7e:00:10:64:a6:6d:ef:e2:fa:04:cd:fe:b9:05:38:ed: 79:72:14:d8:60:b9:c6:f8:52:2f:ef:40:bb:55:36:c4:2b:5e: 7b:8d:c7:43:f1:18:42:95:d2:db:db:3f:56:a2:67:69:d7:f9: 45:55:c3:b2:b4:bf:9b:40:3a:74:04:e4:68:9c:b9:80:ca:72: df:ea:15:87:8c:dc:2d:4d:88:e6:84:75:bf:81:11:2a:28:e9: db:43:a5:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWTGyCUQDnrm0k1/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDQxNzEwMjQzNFoXDTI0MDcxNjEwMjQzNFowLzEtMCsGA1UEAxMk N2QxZWQ3NDMtNTA4NC00YjZiLWE5OGEtN2Q0YTcyZDY0YmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Tj1LvvA9H204+bt09G8KcrCyl/WCEixTGTi 1a89Cw+uxO106sbiK1WqNvBP2A/61FljzDIJ6XkpYPReuKsXWQgtFAuvPZniZOe3 wvqGcjTayJ3A/xjzU2O2OFo6G7Co2agqIZkQNemcccBpBNf3/fvoI8bplXVzBzwl hwosyp3pteFf+QAVIisay7ywUlF6x/g9xQKM+noTbJKYXVa9jcYw7XO130f1AvWg xzuug3g8Wu9DrS7OMqMfGQvJWD+gGoQQm70iF1nxHNcnGUKyrO6YNTAZurTQER23 XP/MgLGrJzfhdYwvDud1uHAxhA3l1X1dVVzepjLeBj5IKLxCQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEinsUwAZfW45/uxueT3H0y5MUIwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Y0ZmFkZTEtYTQzOC0z MTEyLWEwMGQtMTBlYTQ0M2Q1MjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeEgcR9KmMG9EvFixk5d7mpnDS+5N4wvFutAG27dsGJvshaAJHfGnvh 4fvuL7Miy7E4ofATgi+nIXotwg4zPv/b4F8BLZhlNSsElKY7qhpc48+ue+6agMat vP4Hp1EklRvXI+KdLs4rmFYpSfjeiVF12V5ll/2t+dH81mOoNruardqoQCNLQiOf He9GlP7Iyi42KC/rqB/qi4sFu89mmBSuG6fUfgAQZKZt7+L6BM3+uQU47XlyFNhg ucb4Ui/vQLtVNsQrXnuNx0PxGEKV0tvbP1aiZ2nX+UVVw7K0v5tAOnQE5GicuYDK ct/qFYeM3C1NiOaEdb+BESoo6dtDpZw= -----END CERTIFICATE-----Generated at Fri May 17 21:41:09 2024 by rpki-client on console-fra.rpki-client.org