$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/589e3e61-8fae-384e-99a0-011c39c08dbb.roa File: 589e3e61-8fae-384e-99a0-011c39c08dbb.roa (raw, json) Hash identifier: lKAHJisiX4Lhlh0gUu5F3E+QzxH4nWwQVP6GC/90tIc= Subject key identifier: 3D:59:9B:B0:EC:04:C0:96:F7:4E:79:CF:0C:D8:7B:32:0B:E7:33:E5 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F432858460FA404D0FBBBA1A8113CC3A0 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/589e3e61-8fae-384e-99a0-011c39c08dbb.roa Signing time: Sat 01 Jun 2024 01:00:28 +0000 ROA not before: Sat 01 Jun 2024 01:00:28 +0000 ROA not after: Fri 30 Aug 2024 01:00:28 +0000 asID: 16509 IP address blocks: 199.201.127.0/24 maxlen: 24 64.52.111.0/24 maxlen: 24 192.153.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:0f:a4:04:d0:fb:bb:a1:a8:11:3c:c3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Jun 1 01:00:28 2024 GMT Not After : Aug 30 01:00:28 2024 GMT Subject: CN=764265b0-0343-4a82-9a1f-e8276df2fbf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4c:75:be:13:c8:e5:e5:12:b9:f1:0d:de:70: 32:1f:c6:54:e1:6e:21:95:12:4e:72:46:3a:82:71: f2:71:74:56:b3:e8:b5:50:10:b6:10:50:65:2d:0b: c0:5f:1c:25:b0:3f:0c:5f:d1:ff:92:05:1a:97:5d: eb:ff:1e:e6:fe:17:7e:ae:3d:6c:fd:09:eb:99:ae: fc:90:7c:3e:f6:87:ea:08:d5:a1:b7:9e:94:4b:57: a6:30:30:c9:27:7d:6e:ba:27:60:39:cf:82:6d:f0: 70:c6:98:c0:86:e7:cd:19:27:18:a9:a0:05:be:4b: c8:c4:ec:1d:c5:a8:29:21:26:fa:e4:ac:dd:8f:3a: c1:81:9b:f1:73:4a:92:fb:93:92:bd:0d:e5:05:db: b2:80:90:be:b3:03:f3:75:0f:df:02:13:8f:27:f9: c6:62:d5:71:77:18:67:c4:45:19:bc:dc:04:22:19: 13:97:cb:81:82:77:40:2e:d0:5c:19:2d:ad:0d:f2: 5d:f0:69:11:cd:40:e8:eb:72:3f:7f:76:b4:25:fa: 31:a1:1e:24:2c:7a:af:74:55:11:35:20:f4:f0:c4: f7:09:5b:db:a5:f9:10:ef:e0:50:98:84:40:7f:50: 93:2f:d6:c4:95:bf:d9:50:ea:67:d3:24:92:5f:5f: 15:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:59:9B:B0:EC:04:C0:96:F7:4E:79:CF:0C:D8:7B:32:0B:E7:33:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/589e3e61-8fae-384e-99a0-011c39c08dbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 64.52.111.0/24 192.153.76.0/24 199.201.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:7e:74:88:be:be:9b:ed:39:1c:d1:39:67:57:bf:4e:c9:be: 36:a6:33:2d:80:e2:d8:d2:1d:8a:ca:99:74:de:77:a2:da:b2: 56:8d:62:14:23:79:4c:6c:f1:02:32:5f:2b:c2:e0:4d:bd:be: 71:58:ff:70:f9:3a:ab:24:25:23:c5:92:aa:d6:3d:b6:23:25: 07:c4:82:f9:9a:b6:cb:bb:fb:06:72:3a:f8:aa:66:03:0e:50: f4:33:44:f3:b0:02:5c:16:24:1f:65:32:de:36:52:da:5e:10: 79:af:82:92:0c:04:43:8e:9e:54:cb:fe:68:5b:a0:b6:c8:0a: 5c:c9:fc:c7:92:83:70:35:ec:b8:25:09:c6:78:f3:71:4d:6e: e7:f3:81:68:01:d6:6a:f8:86:7e:82:00:4a:d2:9f:8f:3b:3e: b1:89:50:ff:fd:7c:da:cb:2d:5c:64:cf:13:92:9b:66:de:36: d6:5b:df:f6:4e:ba:b7:9a:cd:45:74:79:8b:3f:d9:5f:c0:98: 42:31:c1:e8:44:11:34:8a:a3:f9:c0:31:33:98:64:b9:88:9b: 34:6d:7d:c1:cf:e5:08:ec:6a:cf:a1:73:22:51:1c:e3:7d:92: ab:ff:97:2e:b3:b9:db:31:d3:f2:db:b8:72:01:4b:f9:67:a3: ca:1e:58:6d -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEYPpATQ+7uhqBE8w6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI0MDYwMTAxMDAyOFoXDTI0MDgzMDAxMDAyOFowLzEtMCsGA1UEAxMk NzY0MjY1YjAtMDM0My00YTgyLTlhMWYtZTgyNzZkZjJmYmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEx1vhPI5eUSufEN3nAyH8ZU4W4hlRJOckY6 gnHycXRWs+i1UBC2EFBlLQvAXxwlsD8MX9H/kgUal13r/x7m/hd+rj1s/Qnrma78 kHw+9ofqCNWht56US1emMDDJJ31uuidgOc+CbfBwxpjAhufNGScYqaAFvkvIxOwd xagpISb65KzdjzrBgZvxc0qS+5OSvQ3lBduygJC+swPzdQ/fAhOPJ/nGYtVxdxhn xEUZvNwEIhkTl8uBgndALtBcGS2tDfJd8GkRzUDo63I/f3a0JfoxoR4kLHqvdFUR NSD08MT3CVvbpfkQ7+BQmIRAf1CTL9bElb/ZUOpn0ySSX18VXQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFD1Zm7DsBMCW9055zwzYezIL5zPlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvNTg5ZTNlNjEtOGZhZS0z ODRlLTk5YTAtMDExYzM5YzA4ZGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAQDRvAwQA wJlMAwQAx8l/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAIV+dIi+vpvtORzROWdXv07JvjamMy2A4tjSHYrK mXTed6LaslaNYhQjeUxs8QIyXyvC4E29vnFY/3D5OqskJSPFkqrWPbYjJQfEgvma tsu7+wZyOviqZgMOUPQzRPOwAlwWJB9lMt42UtpeEHmvgpIMBEOOnlTL/mhboLbI ClzJ/MeSg3A17LglCcZ483FNbufzgWgB1mr4hn6CAErSn487PrGJUP/9fNrLLVxk zxOSm2beNtZb3/ZOureazUV0eYs/2V/AmEIxwehEETSKo/nAMTOYZLmImzRtfcHP 5Qjsas+hcyJRHON9kqv/ly6zudsx0/LbuHIBS/lno8oeWG0= -----END CERTIFICATE-----Generated at Mon Jun 17 02:30:03 2024 by rpki-client on console-ams.rpki-client.org