$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e40dda08-561c-4fe1-bf7a-30557c86efa3/51e76be7-aaaf-383a-802c-73d3bbefc8f1.roa File: 51e76be7-aaaf-383a-802c-73d3bbefc8f1.roa (raw, json) Hash identifier: JRRKMygSSi7Zw6zy6UWQZV9d3A3OwDSTGdSqRMPkMYQ= Subject key identifier: 05:55:69:23:7D:B7:2B:48:8D:23:74:D8:BA:F9:C7:9F:B8:A9:01:34 Certificate issuer: /CN=e40dda08-561c-4fe1-bf7a-30557c86efa3 Certificate serial: 010D0C9F432858464779B03B94FB94A73980AB80 Authority key identifier: 13:D5:2D:AC:AD:2F:2E:52:DD:E6:E5:CC:CB:F5:58:53:D8:AD:A1:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e40dda08-561c-4fe1-bf7a-30557c86efa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e40dda08-561c-4fe1-bf7a-30557c86efa3/51e76be7-aaaf-383a-802c-73d3bbefc8f1.roa Signing time: Fri 21 Jun 2024 01:00:26 +0000 ROA not before: Fri 21 Jun 2024 01:00:26 +0000 ROA not after: Thu 19 Sep 2024 01:00:26 +0000 asID: 11831 IP address blocks: 71.19.240.0/20 maxlen: 24 162.221.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e40dda08-561c-4fe1-bf7a-30557c86efa3/e40dda08-561c-4fe1-bf7a-30557c86efa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e40dda08-561c-4fe1-bf7a-30557c86efa3/e40dda08-561c-4fe1-bf7a-30557c86efa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e40dda08-561c-4fe1-bf7a-30557c86efa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:47:79:b0:3b:94:fb:94:a7:39:80:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e40dda08-561c-4fe1-bf7a-30557c86efa3 Validity Not Before: Jun 21 01:00:26 2024 GMT Not After : Sep 19 01:00:26 2024 GMT Subject: CN=319b321b-ad51-483f-b5cb-8d5063168520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:60:3e:dc:23:92:bd:01:34:b0:a3:c3:99:4f: 3a:3b:b6:bd:43:19:f3:e8:5e:0f:f8:9f:de:38:bc: 94:bf:fc:3f:a0:52:a9:da:80:ae:48:46:b4:c3:8d: bb:0f:21:94:e2:11:c5:da:cc:c8:e4:99:2c:ce:2d: 0f:bb:92:53:3f:a3:ad:d4:c1:cf:a7:aa:8d:6b:d0: 73:1d:27:ad:b5:52:87:e9:0b:81:91:a0:f8:a8:df: b6:bd:c5:75:25:d6:10:ee:f5:56:86:4e:cb:38:8f: 75:d9:2f:c0:73:f3:74:99:7c:21:2d:4a:fd:02:d1: f9:79:f2:d3:35:f6:fd:54:88:da:e7:2f:70:22:2d: a6:fd:98:ff:2b:2a:de:9f:ed:b1:85:5e:92:d2:d4: 2c:f9:2e:b2:26:b0:65:f4:c2:e9:4f:4b:c7:4b:13: cf:ac:fc:2f:5a:48:fe:50:00:22:5d:4f:09:48:af: 0a:ed:d1:1d:8c:55:4c:fa:09:3e:3e:66:84:29:c7: 7f:29:12:51:d8:c0:e2:1d:8d:ca:e1:0b:50:fe:f0: 81:95:08:29:79:7f:fb:09:81:ef:64:2b:f1:b0:68: 0e:97:cd:46:85:ec:42:8f:04:99:8a:6f:3a:88:13: ab:f1:7d:2e:5c:d5:6d:ad:21:d0:6f:88:1a:b0:5d: 5f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:55:69:23:7D:B7:2B:48:8D:23:74:D8:BA:F9:C7:9F:B8:A9:01:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e40dda08-561c-4fe1-bf7a-30557c86efa3/51e76be7-aaaf-383a-802c-73d3bbefc8f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e40dda08-561c-4fe1-bf7a-30557c86efa3/e40dda08-561c-4fe1-bf7a-30557c86efa3.crl X509v3 Authority Key Identifier: keyid:13:D5:2D:AC:AD:2F:2E:52:DD:E6:E5:CC:CB:F5:58:53:D8:AD:A1:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e40dda08-561c-4fe1-bf7a-30557c86efa3.cer sbgp-ipAddrBlock: critical IPv4: 71.19.240.0/20 162.221.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:36:f0:b2:34:e1:43:25:2f:11:c2:1a:ec:58:57:9e:d0:b5: ca:91:72:29:bd:dd:61:fb:c3:9e:7f:be:42:72:81:2e:bf:5f: 38:88:07:75:fd:a5:1a:bb:e6:30:6e:6e:33:2a:ca:7e:bd:5c: 8c:d3:2d:66:07:ff:8f:09:98:9d:9d:c1:25:6b:a3:0d:f6:50: 78:8a:38:65:8a:6d:b3:7a:b4:0e:39:e9:38:ae:e6:38:54:0a: 95:e0:1c:3c:f6:64:3b:d5:b6:99:2e:5d:46:dd:49:bc:02:be: 40:f8:90:7d:fd:f2:26:7d:63:ed:0a:78:5b:a8:da:0d:9a:80: be:b0:43:ed:77:4a:d3:aa:ca:63:a6:ca:ab:51:4d:ab:78:3b: 01:2b:3c:c9:6d:1d:05:52:ff:a8:f1:c9:26:d3:9a:14:37:ba: c9:3c:80:7d:57:2c:1d:4e:a4:8d:66:0a:75:3c:ff:78:14:87: f9:47:f0:e2:b2:3b:ad:cc:86:bb:f8:5b:98:62:ee:5f:16:8c: 3b:cb:50:a8:d5:ef:41:21:9b:1b:11:4e:ad:5e:5d:c4:d8:52: 3d:78:78:0e:e5:73:c1:e1:32:ba:b6:50:d6:9f:fd:44:96:d6: bd:26:ac:64:c3:8c:be:de:97:ca:7d:16:4a:da:da:da:47:4e: 71:ef:66:a0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEZHebA7lPuUpzmAq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQwZGRhMDgtNTYxYy00ZmUxLWJmN2EtMzA1NTdjODZl ZmEzMB4XDTI0MDYyMTAxMDAyNloXDTI0MDkxOTAxMDAyNlowLzEtMCsGA1UEAxMk MzE5YjMyMWItYWQ1MS00ODNmLWI1Y2ItOGQ1MDYzMTY4NTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomA+3COSvQE0sKPDmU86O7a9Qxnz6F4P+J/e OLyUv/w/oFKp2oCuSEa0w427DyGU4hHF2szI5Jkszi0Pu5JTP6Ot1MHPp6qNa9Bz HSettVKH6QuBkaD4qN+2vcV1JdYQ7vVWhk7LOI912S/Ac/N0mXwhLUr9AtH5efLT Nfb9VIja5y9wIi2m/Zj/Kyren+2xhV6S0tQs+S6yJrBl9MLpT0vHSxPPrPwvWkj+ UAAiXU8JSK8K7dEdjFVM+gk+PmaEKcd/KRJR2MDiHY3K4QtQ/vCBlQgpeX/7CYHv ZCvxsGgOl81GhexCjwSZim86iBOr8X0uXNVtrSHQb4gasF1fowIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAVVaSN9tytIjSN02Lr5x5+4qQE0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNDBk ZGEwOC01NjFjLTRmZTEtYmY3YS0zMDU1N2M4NmVmYTMvNTFlNzZiZTctYWFhZi0z ODNhLTgwMmMtNzNkM2JiZWZjOGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTQwZGRhMDgtNTYxYy00ZmUxLWJm N2EtMzA1NTdjODZlZmEzL2U0MGRkYTA4LTU2MWMtNGZlMS1iZjdhLTMwNTU3Yzg2 ZWZhMy5jcmwwHwYDVR0jBBgwFoAUE9UtrK0vLlLd5uXMy/VYU9itoVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNDBkZGEwOC01NjFjLTRmZTEtYmY3YS0zMDU1 N2M4NmVmYTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQERxPwAwQD ot3IMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALQ28LI04UMlLxHCGuxYV57QtcqRcim93WH7w55/vkJygS6/ XziIB3X9pRq75jBubjMqyn69XIzTLWYH/48JmJ2dwSVrow32UHiKOGWKbbN6tA45 6Tiu5jhUCpXgHDz2ZDvVtpkuXUbdSbwCvkD4kH398iZ9Y+0KeFuo2g2agL6wQ+13 StOqymOmyqtRTat4OwErPMltHQVS/6jxySbTmhQ3usk8gH1XLB1OpI1mCnU8/3gU h/lH8OKyO63Mhrv4W5hi7l8WjDvLUKjV70EhmxsRTq1eXcTYUj14eA7lc8HhMrq2 UNaf/USW1r0mrGTDjL7el8p9Fkra2tpHTnHvZqA= -----END CERTIFICATE-----Generated at Wed Jun 26 03:11:25 2024 by rpki-client on console-fra.rpki-client.org