$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ff5499bf-8280-386d-a55a-c494181be5f5.roa File: ff5499bf-8280-386d-a55a-c494181be5f5.roa (raw, json) Hash identifier: r+6af9o4/BuvaAlkdrQvZy/Yt3L4w7jLXOKjqVRWWzQ= Subject key identifier: 43:2B:18:B3:52:8E:F4:1E:89:2B:38:BF:BD:B2:9E:81:E5:F7:62:7E Certificate issuer: /CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Certificate serial: 010D0C9F43285845E9F3CEBFED05CF436A919BF0 Authority key identifier: 51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ff5499bf-8280-386d-a55a-c494181be5f5.roa Signing time: Sat 18 May 2024 13:00:35 +0000 ROA not before: Sat 18 May 2024 13:00:35 +0000 ROA not after: Fri 16 Aug 2024 13:00:35 +0000 asID: 393909 IP address blocks: 172.86.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Jun 2024 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:e9:f3:ce:bf:ed:05:cf:43:6a:91:9b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Validity Not Before: May 18 13:00:35 2024 GMT Not After : Aug 16 13:00:35 2024 GMT Subject: CN=1669da1f-4c1d-412d-8e01-13b079487617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:10:25:fa:78:af:c1:0b:b0:5a:36:33:2d:ef: ce:c9:ac:32:15:54:17:3c:d5:cd:66:a1:ea:59:bb: 21:19:7a:3f:5f:23:2f:7f:c0:8d:44:e9:48:67:d2: 47:7b:8a:05:1f:dd:5a:37:84:64:e1:16:64:c2:a9: ac:71:31:58:74:c3:e2:86:61:11:bd:4a:67:ed:cb: 25:5f:68:3e:de:fd:36:ba:f8:c8:70:fa:a7:82:51: 85:d3:11:27:20:9c:ba:a5:ca:c4:dd:1a:9d:c0:7b: 56:50:ca:0b:13:3f:84:6d:38:ad:e4:b5:49:2f:45: c4:da:06:18:d9:47:70:36:6a:7b:9b:c5:d5:9f:41: e2:52:1b:ad:44:e5:62:6e:9b:a2:03:75:0a:42:3b: fe:74:7e:cb:fb:e2:89:76:b3:c7:30:a3:13:4e:7f: 47:ea:69:dd:e5:76:b5:c5:2e:5d:c3:ce:a5:2e:84: bb:bc:96:41:fd:b3:cd:47:55:4a:5e:3f:a0:5a:fd: a8:b5:c7:9e:96:ff:01:38:0d:3d:d4:85:b5:75:ea: 4a:61:55:5c:61:a0:52:cd:34:ab:c3:00:87:be:b1: 02:0e:f9:ca:29:fb:6c:a0:73:14:4e:38:7b:25:27: 05:1f:e8:db:14:ad:03:a5:ad:b3:7f:98:76:65:70: 07:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2B:18:B3:52:8E:F4:1E:89:2B:38:BF:BD:B2:9E:81:E5:F7:62:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ff5499bf-8280-386d-a55a-c494181be5f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl X509v3 Authority Key Identifier: keyid:51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer sbgp-ipAddrBlock: critical IPv4: 172.86.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:80:ae:a4:86:62:38:fc:86:4d:7e:5f:8b:4a:b4:3a:c1:c9: 63:52:3e:05:33:4c:66:b7:f5:a8:e9:12:7a:f9:f4:4d:d2:80: 28:f8:84:9c:bb:4b:ef:d5:3a:f1:9e:44:d9:3c:0a:a4:03:f1: b9:3b:af:8e:9f:6d:db:05:26:a0:b8:61:06:61:c4:8c:0a:46: 64:0a:d0:31:be:d2:15:ae:ef:3e:5a:57:ed:c9:1f:98:01:34: 9a:b9:83:b1:a3:df:1e:7f:95:65:67:25:bb:74:c2:15:03:8a: c3:08:4f:ed:b3:a9:98:32:3a:95:a6:e0:4e:f2:a7:c4:f6:40: f5:4e:f6:e1:13:c6:05:c1:24:4f:80:9e:f3:5a:0b:4f:79:9e: 4c:57:40:92:6f:ed:87:b9:9e:d2:0e:d7:91:6e:3d:bf:f0:6f: 6c:6f:fc:15:66:59:1d:86:f3:76:77:58:2a:8e:75:48:57:de: 84:98:4c:81:ad:c5:79:5d:62:c0:f6:5c:e5:1d:88:04:95:55: 5d:cc:e4:ad:5d:01:a0:ff:2d:ea:9d:79:92:a4:12:24:25:95: 1f:4e:f5:e0:d5:37:a0:3d:89:9a:f0:4c:74:25:df:bb:3a:37: dc:e3:28:aa:8b:a1:c4:70:5e:9f:92:f4:95:6a:88:1f:65:b5: 86:10:3c:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXp886/7QXPQ2qRm/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDExYTBkMWItNzlhNC00ZDE0LTljZDAtMDc0M2YyOWJm OTU2MB4XDTI0MDUxODEzMDAzNVoXDTI0MDgxNjEzMDAzNVowLzEtMCsGA1UEAxMk MTY2OWRhMWYtNGMxZC00MTJkLThlMDEtMTNiMDc5NDg3NjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxAl+nivwQuwWjYzLe/OyawyFVQXPNXNZqHq WbshGXo/XyMvf8CNROlIZ9JHe4oFH91aN4Rk4RZkwqmscTFYdMPihmERvUpn7csl X2g+3v02uvjIcPqnglGF0xEnIJy6pcrE3RqdwHtWUMoLEz+EbTit5LVJL0XE2gYY 2UdwNmp7m8XVn0HiUhutROVibpuiA3UKQjv+dH7L++KJdrPHMKMTTn9H6mnd5Xa1 xS5dw86lLoS7vJZB/bPNR1VKXj+gWv2otceelv8BOA091IW1depKYVVcYaBSzTSr wwCHvrECDvnKKftsoHMUTjh7JScFH+jbFK0Dpa2zf5h2ZXAH/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMrGLNSjvQeiSs4v72ynoHl92J+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFh MGQxYi03OWE0LTRkMTQtOWNkMC0wNzQzZjI5YmY5NTYvZmY1NDk5YmYtODI4MC0z ODZkLWE1NWEtYzQ5NDE4MWJlNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDExYTBkMWItNzlhNC00ZDE0LTlj ZDAtMDc0M2YyOWJmOTU2LzAxMWEwZDFiLTc5YTQtNGQxNC05Y2QwLTA3NDNmMjli Zjk1Ni5jcmwwHwYDVR0jBBgwFoAUUQq891lS4iYG1wETEyKMWAPnvxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFhMGQxYi03OWE0LTRkMTQtOWNkMC0wNzQz ZjI5YmY5NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFYYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKArqSGYjj8hk1+X4tKtDrByWNSPgUzTGa39ajpEnr59E3SgCj4hJy7 S+/VOvGeRNk8CqQD8bk7r46fbdsFJqC4YQZhxIwKRmQK0DG+0hWu7z5aV+3JH5gB NJq5g7Gj3x5/lWVnJbt0whUDisMIT+2zqZgyOpWm4E7yp8T2QPVO9uETxgXBJE+A nvNaC095nkxXQJJv7Ye5ntIO15FuPb/wb2xv/BVmWR2G83Z3WCqOdUhX3oSYTIGt xXldYsD2XOUdiASVVV3M5K1dAaD/LeqdeZKkEiQllR9O9eDVN6A9iZrwTHQl37s6 N9zjKKqLocRwXp+S9JVqiB9ltYYQPEg= -----END CERTIFICATE-----Generated at Tue Jun 25 18:10:15 2024 by rpki-client on console-ams.rpki-client.org