$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/0b2cb9cc-aa96-35c1-b550-6a477e6ef982.roa File: 0b2cb9cc-aa96-35c1-b550-6a477e6ef982.roa (raw, json) Hash identifier: azjEZsvChTRh9HI4zETFgkUxjS7QkPUBzhCMfTZtU3c= Subject key identifier: 14:15:75:7F:30:42:81:47:93:D2:49:50:A6:69:1E:EB:1B:71:DC:E1 Certificate issuer: /CN=4d2714ea-5618-446b-8e12-7743856af6e6 Certificate serial: 010D0C9F4328584511B5770D792248E78F0C2BE0 Authority key identifier: 52:62:7A:BD:AB:0D:51:ED:FF:6C:BA:7E:2E:37:25:6D:76:40:C3:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/0b2cb9cc-aa96-35c1-b550-6a477e6ef982.roa Signing time: Sat 02 Mar 2024 02:00:26 +0000 ROA not before: Sat 02 Mar 2024 02:00:26 +0000 ROA not after: Fri 31 May 2024 01:00:26 +0000 asID: 174 IP address blocks: 199.67.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/4d2714ea-5618-446b-8e12-7743856af6e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/4d2714ea-5618-446b-8e12-7743856af6e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:11:b5:77:0d:79:22:48:e7:8f:0c:2b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2714ea-5618-446b-8e12-7743856af6e6 Validity Not Before: Mar 2 02:00:26 2024 GMT Not After : May 31 01:00:26 2024 GMT Subject: CN=c3b59d02-6b92-4651-9229-db6f38f0ecb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0b:82:1c:cd:b2:83:ff:2d:db:7e:e2:db:50: 19:2c:4d:6c:80:cf:3f:ba:49:2c:55:31:1c:14:7f: a4:25:63:ad:47:b6:c8:cf:0a:37:4f:6b:69:83:b3: 01:36:d4:eb:3f:9f:c7:96:7c:a0:f6:13:70:7e:da: 43:7f:18:90:66:1b:d6:f5:6a:96:4c:4f:c8:5e:29: 1c:78:d1:28:23:8e:0c:dd:d5:20:5d:23:cc:fd:a9: 85:35:21:b5:38:9a:08:8d:40:2c:a3:a2:fa:cc:83: df:43:59:1b:b6:70:3f:d1:2f:78:50:26:4d:48:95: b6:de:dd:f1:50:54:15:af:35:d7:45:cf:e1:7a:30: 6f:19:cf:62:50:59:25:96:ff:ad:5c:62:c6:55:51: 96:c3:ac:1e:13:4e:67:05:8e:05:94:31:8c:5d:2a: a0:c4:ac:58:e5:d4:1e:9e:1f:e7:34:2e:ee:fa:71: 32:1d:2b:9a:1d:d6:7f:32:d8:ee:d8:7c:9f:e0:d0: 8a:95:6f:05:c3:2e:5a:c5:58:0f:93:b0:b5:cc:12: e4:69:4f:6a:0b:84:d8:03:9d:1c:5c:80:f3:ab:b9: 1e:c7:97:5a:f3:95:0e:c0:95:40:f2:99:66:7c:ad: c4:73:ae:4f:83:a2:d3:9c:8d:97:a4:bf:5f:34:ce: bf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:15:75:7F:30:42:81:47:93:D2:49:50:A6:69:1E:EB:1B:71:DC:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/0b2cb9cc-aa96-35c1-b550-6a477e6ef982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/4d2714ea-5618-446b-8e12-7743856af6e6.crl X509v3 Authority Key Identifier: keyid:52:62:7A:BD:AB:0D:51:ED:FF:6C:BA:7E:2E:37:25:6D:76:40:C3:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6.cer sbgp-ipAddrBlock: critical IPv4: 199.67.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:02:13:fb:6d:01:59:e6:ce:81:8d:ce:d7:dd:82:e0:2d:24: d3:34:81:43:24:c6:e4:0c:39:18:7c:c4:4b:34:65:8f:e3:eb: 42:e3:38:83:92:ca:1b:21:53:a7:fa:71:1b:bd:2b:4c:2c:9b: 30:fc:e6:15:da:8e:9a:18:9e:d6:ba:be:a7:da:44:6f:12:4f: 18:fc:26:ec:05:e9:cb:70:27:11:ce:5b:32:29:64:a0:d9:d6: 77:06:1b:4f:e0:75:05:26:1d:46:73:62:31:a7:a7:64:4d:ea: 87:36:cc:a7:0e:a1:f8:cf:26:02:d2:fe:7c:7d:8f:52:71:64: d6:53:ee:f7:33:c3:27:f2:93:ee:04:1a:82:15:69:15:99:12: 3f:4f:ee:c9:cc:2f:61:ff:db:ff:6c:9c:09:fb:56:c3:ea:13: 2a:72:13:ec:14:fb:f7:b2:8a:16:44:fc:5c:a9:af:e3:6b:a7: 55:d8:38:8b:b1:69:a6:42:fa:00:5f:0a:03:4a:a6:30:9b:c2: 3e:26:11:cb:39:04:24:8e:a6:85:9e:1a:cd:d9:3f:33:fb:57: fe:8c:cb:27:c2:99:ca:70:b6:dc:79:ce:6d:66:29:21:ad:0c: d8:e9:9e:8a:56:46:5c:41:fe:65:ff:43:26:5b:ab:e5:25:42: 18:4d:a8:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEURtXcNeSJI548MK+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyNzE0ZWEtNTYxOC00NDZiLThlMTItNzc0Mzg1NmFm NmU2MB4XDTI0MDMwMjAyMDAyNloXDTI0MDUzMTAxMDAyNlowLzEtMCsGA1UEAxMk YzNiNTlkMDItNmI5Mi00NjUxLTkyMjktZGI2ZjM4ZjBlY2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QuCHM2yg/8t237i21AZLE1sgM8/ukksVTEc FH+kJWOtR7bIzwo3T2tpg7MBNtTrP5/Hlnyg9hNwftpDfxiQZhvW9WqWTE/IXikc eNEoI44M3dUgXSPM/amFNSG1OJoIjUAso6L6zIPfQ1kbtnA/0S94UCZNSJW23t3x UFQVrzXXRc/hejBvGc9iUFkllv+tXGLGVVGWw6weE05nBY4FlDGMXSqgxKxY5dQe nh/nNC7u+nEyHSuaHdZ/Mtju2Hyf4NCKlW8Fwy5axVgPk7C1zBLkaU9qC4TYA50c XIDzq7kex5da85UOwJVA8plmfK3Ec65Pg6LTnI2XpL9fNM6/AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQVdX8wQoFHk9JJUKZpHusbcdzhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZDI3 MTRlYS01NjE4LTQ0NmItOGUxMi03NzQzODU2YWY2ZTYvMGIyY2I5Y2MtYWE5Ni0z NWMxLWI1NTAtNmE0NzdlNmVmOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGQyNzE0ZWEtNTYxOC00NDZiLThl MTItNzc0Mzg1NmFmNmU2LzRkMjcxNGVhLTU2MTgtNDQ2Yi04ZTEyLTc3NDM4NTZh ZjZlNi5jcmwwHwYDVR0jBBgwFoAUUmJ6vasNUe3/bLp+LjclbXZAwwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZDI3MTRlYS01NjE4LTQ0NmItOGUxMi03NzQz ODU2YWY2ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFx0NgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJICE/ttAVnmzoGNztfdguAtJNM0gUMkxuQMORh8xEs0ZY/j60LjOIOS yhshU6f6cRu9K0wsmzD85hXajpoYnta6vqfaRG8STxj8JuwF6ctwJxHOWzIpZKDZ 1ncGG0/gdQUmHUZzYjGnp2RN6oc2zKcOofjPJgLS/nx9j1JxZNZT7vczwyfyk+4E GoIVaRWZEj9P7snML2H/2/9snAn7VsPqEypyE+wU+/eyihZE/Fypr+Nrp1XYOIux aaZC+gBfCgNKpjCbwj4mEcs5BCSOpoWeGs3ZPzP7V/6MyyfCmcpwttx5zm1mKSGt DNjpnopWRlxB/mX/QyZbq+UlQhhNqHg= -----END CERTIFICATE-----Generated at Sun Apr 28 08:11:08 2024 by rpki-client on console-ams.rpki-client.org