$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/f40e0e47-941a-3211-9018-ea3a5bb33892.roa File: f40e0e47-941a-3211-9018-ea3a5bb33892.roa (raw, json) Hash identifier: 5FMBAUzyyMidXBfNczGiDvbvEtvcua9EtvhMEcio0OM= Subject key identifier: D1:22:D2:DB:C2:25:50:00:C7:6F:CD:B3:4F:F8:EB:2C:54:26:72:48 Certificate issuer: /CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1 Certificate serial: 010D0C9F43285845ECBE8825B52603FA38728780 Authority key identifier: D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/f40e0e47-941a-3211-9018-ea3a5bb33892.roa Signing time: Sun 19 May 2024 13:00:33 +0000 ROA not before: Sun 19 May 2024 13:00:33 +0000 ROA not after: Sat 17 Aug 2024 13:00:33 +0000 asID: 26661 IP address blocks: 199.96.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ec:be:88:25:b5:26:03:fa:38:72:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1 Validity Not Before: May 19 13:00:33 2024 GMT Not After : Aug 17 13:00:33 2024 GMT Subject: CN=00af48c8-75d5-49ee-a95b-2fe6070edc59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9c:c8:64:49:47:19:9c:ab:4e:ff:74:40:2f: 44:1f:19:fb:96:86:74:6d:fe:ec:65:8a:e3:c6:8b: 4c:6a:0f:31:d2:98:1c:77:21:ec:7f:c9:2f:46:07: dd:b2:a6:3f:8d:ad:7e:1a:80:04:ff:23:3a:60:ed: ee:12:11:ae:5d:aa:bd:f4:a8:3a:9c:fe:79:d3:60: e6:a5:cc:2a:55:ce:11:ac:0c:20:e9:39:07:6d:69: ad:4c:c9:13:dd:40:35:a0:27:f2:e4:63:c2:f7:72: 87:5a:76:0c:e3:29:2e:19:4a:8c:9b:9e:e3:5b:40: e8:82:a0:19:cc:5a:6a:73:32:a1:59:54:db:12:c6: 58:05:ec:4f:48:8c:54:c8:b6:23:24:7b:b9:fc:3f: b0:18:3b:8b:f0:b4:a7:d3:6a:5f:69:d3:35:5f:b2: 30:10:77:a7:a4:d5:3f:b9:6c:54:03:aa:4e:a1:a7: 74:57:ba:a7:91:58:90:a5:6a:37:3e:ac:dc:1b:b6: 0c:ba:0c:4b:9a:04:70:9b:c8:8f:0c:89:cd:9b:2b: 10:75:13:22:09:9b:16:9e:46:07:36:e5:92:37:22: 03:04:16:29:94:eb:b7:8c:ae:f0:4e:c4:93:5e:ae: e6:b8:fc:91:63:79:e7:4f:21:ac:25:7e:1a:ca:1a: 83:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:22:D2:DB:C2:25:50:00:C7:6F:CD:B3:4F:F8:EB:2C:54:26:72:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/f40e0e47-941a-3211-9018-ea3a5bb33892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl X509v3 Authority Key Identifier: keyid:D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer sbgp-ipAddrBlock: critical IPv4: 199.96.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:4d:de:f2:7a:fc:b1:28:b3:3a:f5:92:3a:1d:08:6e:cd:13: 67:ad:04:0c:90:1c:fe:c3:c9:b3:96:0a:a6:0f:68:4c:62:b1: 2c:64:73:2d:98:be:9b:35:64:11:ab:72:ea:ca:50:86:f9:44: 65:da:a0:93:b4:0f:e4:ea:e6:ae:3e:44:b8:8e:8e:34:84:6c: 8c:da:7b:41:bc:52:63:df:f4:ad:08:31:b2:cd:04:55:3d:3d: 6d:da:8c:19:66:f1:04:01:34:ae:c5:29:8b:84:31:41:d0:07: 31:27:ce:14:54:8d:31:12:a2:7c:95:cb:35:c7:e6:1e:93:8c: 15:f1:16:d2:f4:b0:c3:c5:76:25:93:0d:55:b9:e9:bc:45:4e: 9c:32:5b:ed:b0:23:af:b8:69:2a:9f:a8:d9:1e:50:be:d0:52: 55:8c:c3:30:23:0c:11:b1:3d:88:1e:d5:78:03:88:38:89:93: 95:84:08:93:92:d4:11:43:92:09:b4:fd:ea:c1:79:8d:96:f4: 97:66:ac:84:d5:6b:d3:ca:95:df:1c:44:d9:ac:58:0d:f0:1a: 65:53:f7:66:49:c7:81:b0:c9:46:a9:f5:13:2a:e2:74:8d:0f: ec:ac:3f:87:6f:bd:70:77:d2:87:83:20:27:84:91:8a:e2:22: b2:69:b7:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXsvogltSYD+jhyh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlMDBjNWMtNWU2Ni00ZDY5LTgxNzMtYjAzYzgyODgw YmMxMB4XDTI0MDUxOTEzMDAzM1oXDTI0MDgxNzEzMDAzM1owLzEtMCsGA1UEAxMk MDBhZjQ4YzgtNzVkNS00OWVlLWE5NWItMmZlNjA3MGVkYzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZzIZElHGZyrTv90QC9EHxn7loZ0bf7sZYrj xotMag8x0pgcdyHsf8kvRgfdsqY/ja1+GoAE/yM6YO3uEhGuXaq99Kg6nP5502Dm pcwqVc4RrAwg6TkHbWmtTMkT3UA1oCfy5GPC93KHWnYM4ykuGUqMm57jW0DogqAZ zFpqczKhWVTbEsZYBexPSIxUyLYjJHu5/D+wGDuL8LSn02pfadM1X7IwEHenpNU/ uWxUA6pOoad0V7qnkViQpWo3PqzcG7YMugxLmgRwm8iPDInNmysQdRMiCZsWnkYH NuWSNyIDBBYplOu3jK7wTsSTXq7muPyRY3nnTyGsJX4ayhqD6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEi0tvCJVAAx2/Ns0/46yxUJnJIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hM2Uw MGM1Yy01ZTY2LTRkNjktODE3My1iMDNjODI4ODBiYzEvZjQwZTBlNDctOTQxYS0z MjExLTkwMTgtZWEzYTViYjMzODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTNlMDBjNWMtNWU2Ni00ZDY5LTgx NzMtYjAzYzgyODgwYmMxL2EzZTAwYzVjLTVlNjYtNGQ2OS04MTczLWIwM2M4Mjg4 MGJjMS5jcmwwHwYDVR0jBBgwFoAU1HTYrbN5gAQQpAT67BDKKcFJU+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hM2UwMGM1Yy01ZTY2LTRkNjktODE3My1iMDNj ODI4ODBiYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2C4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9N3vJ6/LEoszr1kjodCG7NE2etBAyQHP7DybOWCqYPaExisSxkcy2Y vps1ZBGrcurKUIb5RGXaoJO0D+Tq5q4+RLiOjjSEbIzae0G8UmPf9K0IMbLNBFU9 PW3ajBlm8QQBNK7FKYuEMUHQBzEnzhRUjTESonyVyzXH5h6TjBXxFtL0sMPFdiWT DVW56bxFTpwyW+2wI6+4aSqfqNkeUL7QUlWMwzAjDBGxPYge1XgDiDiJk5WECJOS 1BFDkgm0/erBeY2W9JdmrITVa9PKld8cRNmsWA3wGmVT92ZJx4GwyUap9RMq4nSN D+ysP4dvvXB30oeDICeEkYriIrJpt+M= -----END CERTIFICATE-----Generated at Mon May 20 02:38:23 2024 by rpki-client on console-fra.rpki-client.org