$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/7b8d096e-bd32-3ce9-bc6b-f68e90238522.roa File: 7b8d096e-bd32-3ce9-bc6b-f68e90238522.roa (raw, json) Hash identifier: ppe/xA77+z6B/BYmbxXtb+Exswlz+fHNAW1MoJXOa1U= Subject key identifier: 8A:77:89:34:42:F5:70:B7:CA:F5:2A:E7:C1:C5:16:E7:44:5C:F6:8F Certificate issuer: /CN=5fb6f799-d584-48a1-9c74-50e91497918a Certificate serial: 010D0C9F4328584569886EC1632647567D860B40 Authority key identifier: B4:66:3F:CE:6F:9C:67:45:04:4A:C3:43:91:B7:37:A9:FC:E2:26:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/7b8d096e-bd32-3ce9-bc6b-f68e90238522.roa Signing time: Tue 02 Apr 2024 13:00:37 +0000 ROA not before: Tue 02 Apr 2024 13:00:37 +0000 ROA not after: Mon 01 Jul 2024 13:00:37 +0000 asID: 7018 IP address blocks: 99.96.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/5fb6f799-d584-48a1-9c74-50e91497918a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/5fb6f799-d584-48a1-9c74-50e91497918a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:69:88:6e:c1:63:26:47:56:7d:86:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fb6f799-d584-48a1-9c74-50e91497918a Validity Not Before: Apr 2 13:00:37 2024 GMT Not After : Jul 1 13:00:37 2024 GMT Subject: CN=b45ba323-a834-4adf-a9a3-1b65a4abdb67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:de:2e:ed:8e:6f:4f:9e:08:44:6d:56:f2:bc: 11:14:cf:ee:b0:89:e4:9b:97:69:de:49:24:4f:7a: 36:b2:6f:16:28:ef:ad:6e:46:c8:08:75:c3:6b:0d: ce:71:76:0b:be:05:c4:c6:d4:25:32:15:64:db:56: 58:fc:b5:8f:8c:1b:27:0a:c8:5f:19:1a:62:f6:84: 61:4f:fd:bc:d0:e1:d1:c4:8a:e7:87:ef:42:69:0f: d4:b9:6e:fe:02:10:db:43:05:12:4e:f4:dc:22:69: dd:9f:b4:1a:c8:42:a8:0e:5c:cc:fe:6b:fd:4b:a1: d9:a8:da:fc:5b:66:a7:f7:58:92:58:6c:3e:41:8a: 07:ca:85:59:df:4b:5f:3d:44:db:44:67:67:2b:cf: 16:ea:eb:b9:8d:4a:84:b4:b3:fe:6c:20:ec:2a:7b: be:97:3a:0d:2f:9c:2b:74:91:bd:78:a7:62:2b:f5: 5c:18:e2:1f:c0:c9:5f:2e:c8:c0:a6:60:ae:89:be: e5:71:0c:90:30:bb:c5:56:54:ef:e6:3a:6f:60:b7: 2d:78:fa:85:8d:0c:5d:53:f4:39:ad:a8:48:77:ce: 6b:74:5b:5e:1e:24:c6:e3:07:51:a9:bc:7b:18:91: 55:2b:b7:0b:40:f6:14:ab:5c:de:80:40:97:a4:50: 97:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:77:89:34:42:F5:70:B7:CA:F5:2A:E7:C1:C5:16:E7:44:5C:F6:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/7b8d096e-bd32-3ce9-bc6b-f68e90238522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/5fb6f799-d584-48a1-9c74-50e91497918a.crl X509v3 Authority Key Identifier: keyid:B4:66:3F:CE:6F:9C:67:45:04:4A:C3:43:91:B7:37:A9:FC:E2:26:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a.cer sbgp-ipAddrBlock: critical IPv4: 99.96.0.0/13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:75:99:66:1f:94:9f:5f:65:4b:a1:e7:ee:cc:c1:2f:d7:50: 40:6a:cc:90:a5:93:d5:3f:0d:71:5c:45:56:b6:0e:b0:a6:03: d7:ac:b2:30:5d:6f:24:bf:f7:1f:1d:74:25:69:0c:26:57:7c: 14:19:52:b1:b9:e5:fd:16:e5:66:82:9b:cb:c8:7f:45:bd:a2: 7a:48:9b:37:18:79:0f:a9:cb:a6:c7:de:3d:96:cc:4c:cd:20: c6:9b:cd:9a:d9:d8:34:09:ef:aa:b8:fb:06:ae:c3:44:14:1c: 84:f7:77:00:98:cd:6f:d6:de:6a:4b:2b:e1:33:9e:99:71:10: 29:e8:29:f6:fa:29:7d:d4:f3:07:b1:09:a9:54:f9:9c:6a:65: 6e:c5:53:6b:8e:7f:b6:7b:cc:0f:43:4a:1e:8d:67:37:cf:6f: b1:d4:2a:23:90:12:63:9d:4b:b5:9c:5c:24:9f:1b:4f:58:ce: 96:32:fa:06:2c:74:7b:f7:af:f2:eb:da:23:10:fc:ed:b8:40: be:3b:32:28:56:32:0e:e8:d0:a4:56:8b:5e:c8:f7:5a:c2:0e: 61:cb:51:aa:ce:8f:a4:52:c3:08:33:bd:3b:2b:af:1a:f2:93: 77:88:32:7e:f6:b2:49:2d:60:3e:4a:8f:19:46:0d:17:73:22: 96:11:0a:b5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEVpiG7BYyZHVn2GC0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWZiNmY3OTktZDU4NC00OGExLTljNzQtNTBlOTE0OTc5 MThhMB4XDTI0MDQwMjEzMDAzN1oXDTI0MDcwMTEzMDAzN1owLzEtMCsGA1UEAxMk YjQ1YmEzMjMtYTgzNC00YWRmLWE5YTMtMWI2NWE0YWJkYjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd4u7Y5vT54IRG1W8rwRFM/usInkm5dp3kkk T3o2sm8WKO+tbkbICHXDaw3OcXYLvgXExtQlMhVk21ZY/LWPjBsnCshfGRpi9oRh T/280OHRxIrnh+9CaQ/UuW7+AhDbQwUSTvTcImndn7QayEKoDlzM/mv9S6HZqNr8 W2an91iSWGw+QYoHyoVZ30tfPUTbRGdnK88W6uu5jUqEtLP+bCDsKnu+lzoNL5wr dJG9eKdiK/VcGOIfwMlfLsjApmCuib7lcQyQMLvFVlTv5jpvYLctePqFjQxdU/Q5 rahId85rdFteHiTG4wdRqbx7GJFVK7cLQPYUq1zegECXpFCX4wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIp3iTRC9XC3yvUq58HFFudEXPaPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZmI2 Zjc5OS1kNTg0LTQ4YTEtOWM3NC01MGU5MTQ5NzkxOGEvN2I4ZDA5NmUtYmQzMi0z Y2U5LWJjNmItZjY4ZTkwMjM4NTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWZiNmY3OTktZDU4NC00OGExLTlj NzQtNTBlOTE0OTc5MThhLzVmYjZmNzk5LWQ1ODQtNDhhMS05Yzc0LTUwZTkxNDk3 OTE4YS5jcmwwHwYDVR0jBBgwFoAUtGY/zm+cZ0UESsNDkbc3qfziJlowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZmI2Zjc5OS1kNTg0LTQ4YTEtOWM3NC01MGU5 MTQ5NzkxOGEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDY2AwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEASnWZZh+Un19lS6Hn7szBL9dQQGrMkKWT1T8NcVxFVrYOsKYD16yyMF1v JL/3Hx10JWkMJld8FBlSsbnl/RblZoKby8h/Rb2iekibNxh5D6nLpsfePZbMTM0g xpvNmtnYNAnvqrj7Bq7DRBQchPd3AJjNb9beaksr4TOemXEQKegp9vopfdTzB7EJ qVT5nGplbsVTa45/tnvMD0NKHo1nN89vsdQqI5ASY51LtZxcJJ8bT1jOljL6Bix0 e/ev8uvaIxD87bhAvjsyKFYyDujQpFaLXsj3WsIOYctRqs6PpFLDCDO9OyuvGvKT d4gyfvaySS1gPkqPGUYNF3MilhEKtQ== -----END CERTIFICATE-----Generated at Sat May 4 08:53:32 2024 by rpki-client on console-ams.rpki-client.org