$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a4e6881-932d-325d-95b1-62a0b8e03f18.roa File: 2a4e6881-932d-325d-95b1-62a0b8e03f18.roa (raw, json) Hash identifier: IWNt9I1Km+1uCps3RPk0g2u1Ia4NFjVvIrfU6LLBxH8= Subject key identifier: 8F:6E:2B:59:47:3D:CC:98:14:B2:20:4A:4A:03:5C:6D:DD:46:D3:3F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285844A6B57CA6DBF32E07EDC0C500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a4e6881-932d-325d-95b1-62a0b8e03f18.roa Signing time: Mon 22 Jan 2024 12:00:00 +0000 ROA not before: Mon 22 Jan 2024 12:00:00 +0000 ROA not after: Mon 16 Sep 2024 04:00:00 +0000 asID: 13335 IP address blocks: 172.69.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:a6:b5:7c:a6:db:f3:2e:07:ed:c0:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 22 12:00:00 2024 GMT Not After : Sep 16 04:00:00 2024 GMT Subject: CN=79a34654-5441-47de-8c6b-667b860195d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fd:70:5a:d4:b4:b0:4e:58:cf:f0:a1:93:c8: 59:72:a0:0b:78:fe:82:35:43:8c:60:95:fd:d0:19: c2:d3:6c:10:a0:89:74:b1:1f:55:6c:b6:75:41:ff: 89:c1:9f:ae:3e:45:25:90:73:03:ae:51:41:a6:c6: 75:d6:23:09:50:34:45:76:ab:39:1c:5f:d9:59:ee: a1:a5:77:c6:c4:22:75:47:71:f8:5e:37:60:b1:e1: 1b:f2:0c:f4:c7:e0:fd:af:db:32:ff:43:de:9c:12: eb:1f:13:e5:d7:77:66:74:e6:6f:c1:5d:d9:fc:c4: 26:eb:5a:c8:01:cd:8c:29:c9:19:95:14:4f:67:cf: 06:83:38:33:9f:18:ab:f8:b1:0a:3b:0b:85:34:99: f0:be:99:cb:71:e5:ad:f2:ee:5a:3a:ec:b2:df:b1: 4b:d1:49:8b:d9:46:e3:53:c6:c9:48:12:52:5d:b9: 40:5a:71:ac:19:41:c2:ad:b9:3d:ab:d4:a1:b9:69: 99:07:9e:76:67:1c:84:83:81:28:85:38:88:9e:59: 90:33:65:13:b5:98:33:25:fb:a8:46:ee:b3:72:a0: 70:6b:4a:a6:66:65:61:e6:be:53:e2:f5:3f:fe:60: c5:80:df:80:44:48:4a:2f:39:52:4b:e4:2c:bb:5d: 0a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6E:2B:59:47:3D:CC:98:14:B2:20:4A:4A:03:5C:6D:DD:46:D3:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a4e6881-932d-325d-95b1-62a0b8e03f18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:c4:22:d8:26:24:e4:ce:d7:4c:47:91:6d:5d:b3:7c:ac:95: 97:ea:53:42:e3:66:3f:db:4b:41:a5:ff:1d:59:99:6a:a2:72: 36:f1:83:f1:36:ea:bb:97:1b:fd:d7:da:84:f4:c6:be:04:96: ff:fc:10:8f:b5:f0:cf:7f:6c:10:ff:31:66:2a:bf:e0:b7:75: c5:82:b1:cd:e2:97:a0:d5:cf:9c:6a:98:ea:e7:71:ea:ca:63: 2c:e6:5e:ac:a6:9e:c6:82:2f:af:a1:cc:b1:65:bd:97:e8:63: bf:18:49:47:64:12:83:2c:c8:95:10:2c:dc:2c:e5:6c:58:5c: 77:41:c5:09:c0:54:4e:22:d8:3e:d9:cf:2a:a1:fe:a2:da:18: 72:19:5a:e0:72:70:18:30:52:ae:23:e3:a8:a3:74:82:51:95: 91:77:f0:90:37:a4:54:23:50:73:e3:2d:26:2f:21:7e:4f:94: ad:17:a0:19:4f:23:8b:83:74:27:30:a6:a7:48:b8:8d:ac:0f: 71:b8:cc:56:8d:ac:f2:73:08:a1:7d:a8:70:37:df:78:05:40: d3:d0:68:ff:76:67:03:ff:7c:e1:da:cd:09:c9:63:da:4f:6f: 20:3f:a0:53:be:4a:32:65:54:9d:63:9a:13:dc:04:5e:1f:92: 6b:32:e8:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESmtXym2/MuB+3AxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDEyMjEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk NzlhMzQ2NTQtNTQ0MS00N2RlLThjNmItNjY3Yjg2MDE5NWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf1wWtS0sE5Yz/Chk8hZcqALeP6CNUOMYJX9 0BnC02wQoIl0sR9VbLZ1Qf+JwZ+uPkUlkHMDrlFBpsZ11iMJUDRFdqs5HF/ZWe6h pXfGxCJ1R3H4XjdgseEb8gz0x+D9r9sy/0PenBLrHxPl13dmdOZvwV3Z/MQm61rI Ac2MKckZlRRPZ88Ggzgznxir+LEKOwuFNJnwvpnLceWt8u5aOuyy37FL0UmL2Ubj U8bJSBJSXblAWnGsGUHCrbk9q9ShuWmZB552ZxyEg4EohTiInlmQM2UTtZgzJfuo Ru6zcqBwa0qmZmVh5r5T4vU//mDFgN+AREhKLzlSS+Qsu10KgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9uK1lHPcyYFLIgSkoDXG3dRtM/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmE0ZTY4ODEtOTMyZC0z MjVkLTk1YjEtNjJhMGI4ZTAzZjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/EItgmJOTO10xHkW1ds3yslZfqU0LjZj/bS0Gl/x1ZmWqicjbxg/E2 6ruXG/3X2oT0xr4Elv/8EI+18M9/bBD/MWYqv+C3dcWCsc3il6DVz5xqmOrncerK YyzmXqymnsaCL6+hzLFlvZfoY78YSUdkEoMsyJUQLNws5WxYXHdBxQnAVE4i2D7Z zyqh/qLaGHIZWuBycBgwUq4j46ijdIJRlZF38JA3pFQjUHPjLSYvIX5PlK0XoBlP I4uDdCcwpqdIuI2sD3G4zFaNrPJzCKF9qHA333gFQNPQaP92ZwP/fOHazQnJY9pP byA/oFO+SjJlVJ1jmhPcBF4fkmsy6Hc= -----END CERTIFICATE-----Generated at Sat May 11 15:30:37 2024 by rpki-client on console-fra.rpki-client.org