$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/61f3e7bb-3cef-3819-a71f-ff3645a33210.roa File: 61f3e7bb-3cef-3819-a71f-ff3645a33210.roa (raw, json) Hash identifier: CGZvz8Axd1DJhJhblAtbN1ya2ZqwffA99RAJdBInh4c= Subject key identifier: 18:C4:A6:4C:6F:B7:63:A9:A1:34:14:3A:4A:1A:7B:E7:CA:4C:6B:AF Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F432858457D132B2D97EAC71F113D2F80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/61f3e7bb-3cef-3819-a71f-ff3645a33210.roa Signing time: Tue 09 Apr 2024 13:00:34 +0000 ROA not before: Tue 09 Apr 2024 13:00:34 +0000 ROA not after: Mon 08 Jul 2024 13:00:34 +0000 asID: 20303 IP address blocks: 69.91.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:7d:13:2b:2d:97:ea:c7:1f:11:3d:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 9 13:00:34 2024 GMT Not After : Jul 8 13:00:34 2024 GMT Subject: CN=6b931bb3-dcf0-4579-94fd-d111997ae455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:63:40:16:9e:92:4c:14:c2:a7:c9:67:8a:90: b1:89:ef:ce:c7:93:8b:2e:5f:9d:b0:d0:1d:eb:b6: eb:94:7b:23:08:93:77:e7:87:8a:38:44:12:20:cf: c8:14:79:da:eb:84:18:5e:b1:92:4a:54:45:aa:6a: 14:cf:1d:47:99:70:cc:29:79:0f:c7:b2:ce:21:da: 98:22:4b:9c:3e:19:1c:b4:c7:82:4c:0c:99:73:d4: 2c:eb:76:1f:b6:c7:e7:f7:1a:76:c5:6a:9a:43:cc: 46:31:54:5b:5d:62:d5:57:4f:b2:88:b8:07:56:e1: 4c:7e:33:f9:bb:5e:f1:89:f4:36:e3:bd:e3:3f:5c: b0:99:d7:a5:8e:15:49:94:94:0d:10:b0:fa:64:70: ad:2a:74:12:9d:26:77:8f:dd:75:82:ce:b5:8f:35: ba:57:16:bc:28:0b:cd:30:a3:ea:70:6d:3d:38:83: 54:9f:ea:ba:78:e7:d5:0b:be:62:a5:04:32:ae:59: 27:dc:09:5e:ea:33:e6:51:c2:3e:36:1f:bd:05:0d: bc:08:eb:44:56:93:11:96:89:83:43:e1:d8:6c:1f: 44:20:70:52:31:a0:07:73:ad:59:f5:af:03:10:49: 8c:ce:6c:76:89:4e:04:e5:d6:9d:42:ba:f5:a9:59: 70:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C4:A6:4C:6F:B7:63:A9:A1:34:14:3A:4A:1A:7B:E7:CA:4C:6B:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/61f3e7bb-3cef-3819-a71f-ff3645a33210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 69.91.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:63:82:03:5c:7c:b1:e9:9b:20:0e:46:36:aa:60:f5:07:e9: 38:04:38:14:be:02:ea:d8:bb:cb:03:7f:5e:66:58:50:61:18: b6:e7:8d:79:2a:10:82:08:82:60:fb:96:38:3d:94:20:be:98: 0d:37:cc:b3:ea:56:14:c4:46:d7:3a:bb:57:10:46:b8:b0:c5: 9d:bb:4e:e0:8d:88:23:b9:d4:1e:2a:dc:ce:94:95:36:f8:56: 0a:5e:fa:ce:8b:05:28:d9:2e:2e:68:a4:c4:19:51:b8:90:19: a9:ad:24:57:f8:29:d1:60:78:92:50:83:68:df:64:04:11:2b: 18:c3:f6:04:a0:06:97:06:c8:09:88:fe:80:39:fa:a5:bf:9f: 14:76:b0:70:8a:b4:76:63:b4:7c:73:4c:ca:bf:33:86:d1:5b: fd:ed:c9:23:45:f5:dc:8e:5b:9f:1e:a9:3f:e9:40:ad:f6:71: 0f:7a:d2:ea:f7:35:cb:b1:0a:55:73:16:85:f9:36:09:30:39: d6:11:dc:da:6c:30:95:81:46:c5:24:e4:84:56:f6:f7:59:59: c4:5e:f0:18:c1:95:a1:9c:1d:ef:9a:58:69:c2:59:69:64:6e: 9c:a4:9d:b1:86:23:72:82:b0:68:4b:66:43:1c:22:d7:cc:bf: 6d:99:90:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV9Eystl+rHHxE9L4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MDQwOTEzMDAzNFoXDTI0MDcwODEzMDAzNFowLzEtMCsGA1UEAxMk NmI5MzFiYjMtZGNmMC00NTc5LTk0ZmQtZDExMTk5N2FlNDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmNAFp6STBTCp8lnipCxie/Ox5OLLl+dsNAd 67brlHsjCJN354eKOEQSIM/IFHna64QYXrGSSlRFqmoUzx1HmXDMKXkPx7LOIdqY IkucPhkctMeCTAyZc9Qs63Yftsfn9xp2xWqaQ8xGMVRbXWLVV0+yiLgHVuFMfjP5 u17xifQ2473jP1ywmdeljhVJlJQNELD6ZHCtKnQSnSZ3j911gs61jzW6Vxa8KAvN MKPqcG09OINUn+q6eOfVC75ipQQyrlkn3Ale6jPmUcI+Nh+9BQ28COtEVpMRlomD Q+HYbB9EIHBSMaAHc61Z9a8DEEmMzmx2iU4E5dadQrr1qVlwmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjEpkxvt2OpoTQUOkoae+fKTGuvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNjFmM2U3YmItM2NlZi0z ODE5LWE3MWYtZmYzNjQ1YTMzMjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRVuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRjggNcfLHpmyAORjaqYPUH6TgEOBS+AurYu8sDf15mWFBhGLbnjXkq EIIIgmD7ljg9lCC+mA03zLPqVhTERtc6u1cQRriwxZ27TuCNiCO51B4q3M6UlTb4 Vgpe+s6LBSjZLi5opMQZUbiQGamtJFf4KdFgeJJQg2jfZAQRKxjD9gSgBpcGyAmI /oA5+qW/nxR2sHCKtHZjtHxzTMq/M4bRW/3tySNF9dyOW58eqT/pQK32cQ960ur3 NcuxClVzFoX5NgkwOdYR3NpsMJWBRsUk5IRW9vdZWcRe8BjBlaGcHe+aWGnCWWlk bpyknbGGI3KCsGhLZkMcItfMv22ZkDA= -----END CERTIFICATE-----Generated at Wed May 8 02:19:00 2024 by rpki-client on console-ams.rpki-client.org