$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/3d224895-501e-3aed-857c-97ee5700de82.roa File: 3d224895-501e-3aed-857c-97ee5700de82.roa (raw, json) Hash identifier: NHzkvKlhCk+5eqQuiRb81Ubz/952IZHDTryjnYfqgpc= Subject key identifier: 94:1E:39:AB:CA:1B:61:C2:79:DC:52:5A:7A:6B:37:64:D3:41:72:27 Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Certificate serial: 010D0C9F43285845C5A8F1020AC006E70014E8D0 Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/3d224895-501e-3aed-857c-97ee5700de82.roa Signing time: Sun 05 May 2024 13:00:34 +0000 ROA not before: Sun 05 May 2024 13:00:34 +0000 ROA not after: Sat 03 Aug 2024 13:00:34 +0000 asID: 30242 IP address blocks: 199.167.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c5:a8:f1:02:0a:c0:06:e7:00:14:e8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Validity Not Before: May 5 13:00:34 2024 GMT Not After : Aug 3 13:00:34 2024 GMT Subject: CN=9050da3f-172c-4ab6-b51b-c56dc346f18b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:20:37:3d:a7:a7:2b:ba:13:f6:f8:b2:48:ee: 26:7f:c0:cb:ae:bc:91:3b:bf:61:a9:e2:f0:3c:05: 22:b1:2a:56:dc:04:ed:ba:e7:ec:fc:ca:78:3b:0d: c2:65:90:47:20:61:1a:08:7a:11:b9:de:4f:42:ef: 03:7b:8b:84:72:4a:4d:74:a6:e4:0c:d6:45:af:ba: ab:4d:17:8f:21:25:7a:b1:a1:37:ef:6e:be:6d:86: 17:d3:d5:01:b5:23:6b:14:d0:61:6f:a0:83:94:ce: a5:90:b0:d6:fa:fe:30:d1:5b:47:cf:90:e8:77:97: 73:bd:50:92:58:0f:cd:8a:86:7e:4a:93:9b:45:c4: e1:d1:3a:35:1f:45:80:72:f1:a9:2b:7c:4f:4e:00: 1b:fe:b7:0f:cd:c1:b6:53:c5:23:39:94:63:cb:9f: 5e:8c:cc:21:2b:f1:73:c3:48:3a:43:60:8b:ab:2e: cd:a6:62:22:58:a7:a9:5e:7f:18:14:06:61:d8:0c: b4:3d:d5:24:ac:aa:ee:e6:d9:0b:40:4c:ac:94:93: 01:b6:21:f0:9e:ed:7a:c5:56:5a:f4:d6:86:1a:50: ce:6f:cd:15:a6:82:c1:33:1c:53:90:c3:b1:70:57: 91:55:a7:1f:13:85:5c:fb:c4:28:c8:f3:46:15:55: a3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1E:39:AB:CA:1B:61:C2:79:DC:52:5A:7A:6B:37:64:D3:41:72:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/3d224895-501e-3aed-857c-97ee5700de82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl X509v3 Authority Key Identifier: keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer sbgp-ipAddrBlock: critical IPv4: 199.167.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:48:e4:ae:bf:3c:f0:7a:b9:ec:4f:36:02:49:b6:81:96:4a: 2f:5b:28:0b:bf:a7:c6:1c:1c:a1:19:ec:d9:14:02:cd:7c:6f: e9:86:54:ad:54:22:49:5f:08:7f:9a:51:22:f4:09:92:37:71: 06:76:c0:8a:85:7e:cc:c4:40:00:56:c0:e2:bb:ec:11:08:6e: 12:ea:9c:ad:77:68:a6:5f:96:f8:d7:7f:17:4f:07:15:2c:ee: 50:d2:1b:4e:aa:96:04:7b:45:22:11:eb:e0:0c:bc:2c:21:9d: ce:1d:13:1b:d8:9c:c0:e7:77:97:2d:38:7b:f0:46:f8:d8:6f: 6e:84:29:5e:5a:48:99:94:d8:43:54:7f:e5:f6:ae:b0:87:23: 64:64:5d:2c:ef:8b:b9:d1:d6:d7:14:66:c3:8e:42:0a:ab:b1: fa:d7:d5:3d:41:af:51:6e:80:56:68:9f:ef:ff:02:eb:7f:87: d1:c1:13:c8:f9:23:72:97:ec:99:4d:8c:18:e9:26:19:b0:f9: 6a:a0:15:5e:fa:51:b7:b8:5e:58:84:44:7f:05:62:95:bb:3c: 32:01:03:89:81:06:52:ca:1f:8a:31:07:e6:f4:85:80:f3:21: 30:2b:5e:5f:3f:cc:85:e3:18:4c:c1:cb:87:12:93:b7:63:f0: 74:2d:c0:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXFqPECCsAG5wAU6NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFkZDY4NjAtNzE5ZS00NmMwLThiN2MtODliOWU4ZDg4 ZGE2MB4XDTI0MDUwNTEzMDAzNFoXDTI0MDgwMzEzMDAzNFowLzEtMCsGA1UEAxMk OTA1MGRhM2YtMTcyYy00YWI2LWI1MWItYzU2ZGMzNDZmMThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyA3PaenK7oT9viySO4mf8DLrryRO79hqeLw PAUisSpW3ATtuufs/Mp4Ow3CZZBHIGEaCHoRud5PQu8De4uEckpNdKbkDNZFr7qr TRePISV6saE3726+bYYX09UBtSNrFNBhb6CDlM6lkLDW+v4w0VtHz5Dod5dzvVCS WA/NioZ+SpObRcTh0To1H0WAcvGpK3xPTgAb/rcPzcG2U8UjOZRjy59ejMwhK/Fz w0g6Q2CLqy7NpmIiWKepXn8YFAZh2Ay0PdUkrKru5tkLQEyslJMBtiHwnu16xVZa 9NaGGlDOb80VpoLBMxxTkMOxcFeRVacfE4Vc+8QoyPNGFVWj1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQeOavKG2HCedxSWnprN2TTQXInMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRk Njg2MC03MTllLTQ2YzAtOGI3Yy04OWI5ZThkODhkYTYvM2QyMjQ4OTUtNTAxZS0z YWVkLTg1N2MtOTdlZTU3MDBkZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFkZDY4NjAtNzE5ZS00NmMwLThi N2MtODliOWU4ZDg4ZGE2LzIxZGQ2ODYwLTcxOWUtNDZjMC04YjdjLTg5YjllOGQ4 OGRhNi5jcmwwHwYDVR0jBBgwFoAUQnmNqghyfHSiXcmRrdvqyi78pSgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRkNjg2MC03MTllLTQ2YzAtOGI3Yy04OWI5 ZThkODhkYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6f8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVI5K6/PPB6uexPNgJJtoGWSi9bKAu/p8YcHKEZ7NkUAs18b+mGVK1U IklfCH+aUSL0CZI3cQZ2wIqFfszEQABWwOK77BEIbhLqnK13aKZflvjXfxdPBxUs 7lDSG06qlgR7RSIR6+AMvCwhnc4dExvYnMDnd5ctOHvwRvjYb26EKV5aSJmU2ENU f+X2rrCHI2RkXSzvi7nR1tcUZsOOQgqrsfrX1T1Br1FugFZon+//Aut/h9HBE8j5 I3KX7JlNjBjpJhmw+WqgFV76Ube4XliERH8FYpW7PDIBA4mBBlLKH4oxB+b0hYDz ITArXl8/zIXjGEzBy4cSk7dj8HQtwIQ= -----END CERTIFICATE-----Generated at Tue May 21 04:39:47 2024 by rpki-client on console-ams.rpki-client.org