$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/90cd6e4f-014a-3df3-87ff-754e127ae5c1.roa File: 90cd6e4f-014a-3df3-87ff-754e127ae5c1.roa (raw, json) Hash identifier: ntvs8u4cdetej7DWCcDdfuy4aBpwkvzKJjmIvJa+puo= Subject key identifier: C3:D8:8D:6E:AA:96:EC:54:88:48:8D:C7:7A:49:C9:C9:83:DD:4E:3C Certificate issuer: /CN=5bab7542-1747-4199-9e18-f75a006e302e Certificate serial: 010D0C9F43285845840DCF9C13A12F0D1DA89000 Authority key identifier: 51:79:4D:4F:C2:A9:14:50:50:03:18:22:69:6E:5B:19:AE:36:CB:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/90cd6e4f-014a-3df3-87ff-754e127ae5c1.roa Signing time: Fri 12 Apr 2024 01:00:26 +0000 ROA not before: Fri 12 Apr 2024 01:00:26 +0000 ROA not after: Thu 11 Jul 2024 01:00:26 +0000 asID: 33268 IP address blocks: 199.83.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/5bab7542-1747-4199-9e18-f75a006e302e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/5bab7542-1747-4199-9e18-f75a006e302e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 May 2024 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:84:0d:cf:9c:13:a1:2f:0d:1d:a8:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bab7542-1747-4199-9e18-f75a006e302e Validity Not Before: Apr 12 01:00:26 2024 GMT Not After : Jul 11 01:00:26 2024 GMT Subject: CN=8e547b4b-759a-4d53-bd15-a8ecf3ab95f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:68:13:bb:c6:aa:44:d6:9e:56:34:5d:12:5f: e3:17:66:9c:fa:64:e9:62:c0:28:2f:68:ed:8f:f5: b1:51:11:23:c9:4b:7a:47:8d:74:57:ac:64:61:df: ae:9f:4f:8f:ef:bf:19:ac:12:a8:8a:41:f6:0b:be: ac:45:69:04:90:11:28:49:80:e4:c3:37:0d:bf:d2: 34:8a:26:0c:1b:28:59:72:91:76:7d:1f:99:55:6f: eb:59:0c:43:3d:f2:d5:ef:c8:79:a0:01:b3:56:d2: bf:17:1a:13:2d:57:ad:e9:73:b8:89:55:8d:69:f1: b7:45:41:fa:61:b9:c3:82:c3:b0:74:9e:a1:74:15: b6:eb:85:c5:de:97:8a:db:01:95:3e:da:30:82:d2: 63:62:73:db:30:d5:c7:8c:79:06:5e:b1:22:a7:66: 69:85:71:fc:f8:7f:4d:ca:47:bd:dd:5b:0b:1b:a4: a8:b1:9a:1a:e9:95:66:97:c9:18:b8:39:67:64:fc: 67:17:f8:ed:95:4b:70:15:0c:c1:db:3f:04:da:40: e1:d3:e0:56:15:5c:25:00:9f:20:cd:cf:b9:23:54: 62:b6:a6:33:f9:00:03:9f:4d:ed:4f:ad:b5:4b:f1: a2:ba:de:1d:8c:64:08:e7:26:a1:7a:f5:3c:e4:db: 30:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D8:8D:6E:AA:96:EC:54:88:48:8D:C7:7A:49:C9:C9:83:DD:4E:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/90cd6e4f-014a-3df3-87ff-754e127ae5c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/5bab7542-1747-4199-9e18-f75a006e302e.crl X509v3 Authority Key Identifier: keyid:51:79:4D:4F:C2:A9:14:50:50:03:18:22:69:6E:5B:19:AE:36:CB:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e.cer sbgp-ipAddrBlock: critical IPv4: 199.83.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:60:2e:84:2e:ca:a2:8f:a3:8f:07:47:d7:74:fb:d3:9e:10: 99:be:29:55:3a:d7:8b:47:24:fb:d4:28:b0:11:2c:a8:83:52: 5d:47:66:2d:ca:90:eb:80:37:8d:5c:44:46:a9:96:d0:53:45: 14:76:75:14:df:03:02:af:63:09:29:aa:d0:32:61:40:25:08: 26:94:ee:e8:18:fa:2c:18:9c:5e:1a:10:0b:31:38:f7:d5:80: 65:7b:a4:ce:2a:7a:50:ba:62:db:4c:b7:af:93:5b:d6:40:c3: 80:4a:13:a6:5d:c4:04:db:b0:30:cf:68:f8:66:ce:d3:dd:31: b0:74:5a:44:ab:42:18:6a:16:6d:0e:7d:28:cf:78:b9:09:82: 11:4d:b7:27:47:10:80:33:70:ca:09:10:ca:24:07:f8:ec:19: cd:58:62:95:86:33:ee:0f:8b:4d:a2:4c:b6:5f:0f:39:c2:3d: 3f:62:a5:e3:ac:a0:bc:86:a8:9a:f0:32:0b:5b:ac:89:ff:d6: c4:87:b9:3e:26:34:3c:4a:74:f9:6e:67:3c:1b:c1:9b:33:4a: 31:b2:2a:2c:ed:63:61:9c:88:3b:33:74:6d:85:82:29:88:69: 62:16:2b:7f:47:f1:ed:ba:4c:c7:a9:a3:b8:9e:cd:d1:43:ad: 4e:23:38:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWEDc+cE6EvDR2okAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWJhYjc1NDItMTc0Ny00MTk5LTllMTgtZjc1YTAwNmUz MDJlMB4XDTI0MDQxMjAxMDAyNloXDTI0MDcxMTAxMDAyNlowLzEtMCsGA1UEAxMk OGU1NDdiNGItNzU5YS00ZDUzLWJkMTUtYThlY2YzYWI5NWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWgTu8aqRNaeVjRdEl/jF2ac+mTpYsAoL2jt j/WxUREjyUt6R410V6xkYd+un0+P778ZrBKoikH2C76sRWkEkBEoSYDkwzcNv9I0 iiYMGyhZcpF2fR+ZVW/rWQxDPfLV78h5oAGzVtK/FxoTLVet6XO4iVWNafG3RUH6 YbnDgsOwdJ6hdBW264XF3peK2wGVPtowgtJjYnPbMNXHjHkGXrEip2ZphXH8+H9N yke93VsLG6SosZoa6ZVml8kYuDlnZPxnF/jtlUtwFQzB2z8E2kDh0+BWFVwlAJ8g zc+5I1RitqYz+QADn03tT621S/Giut4djGQI5yahevU85NswjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPYjW6qluxUiEiNx3pJycmD3U48MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YmFi NzU0Mi0xNzQ3LTQxOTktOWUxOC1mNzVhMDA2ZTMwMmUvOTBjZDZlNGYtMDE0YS0z ZGYzLTg3ZmYtNzU0ZTEyN2FlNWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWJhYjc1NDItMTc0Ny00MTk5LTll MTgtZjc1YTAwNmUzMDJlLzViYWI3NTQyLTE3NDctNDE5OS05ZTE4LWY3NWEwMDZl MzAyZS5jcmwwHwYDVR0jBBgwFoAUUXlNT8KpFFBQAxgiaW5bGa42yxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YmFiNzU0Mi0xNzQ3LTQxOTktOWUxOC1mNzVh MDA2ZTMwMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1OwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5gLoQuyqKPo48HR9d0+9OeEJm+KVU614tHJPvUKLARLKiDUl1HZi3K kOuAN41cREapltBTRRR2dRTfAwKvYwkpqtAyYUAlCCaU7ugY+iwYnF4aEAsxOPfV gGV7pM4qelC6YttMt6+TW9ZAw4BKE6ZdxATbsDDPaPhmztPdMbB0WkSrQhhqFm0O fSjPeLkJghFNtydHEIAzcMoJEMokB/jsGc1YYpWGM+4Pi02iTLZfDznCPT9ipeOs oLyGqJrwMgtbrIn/1sSHuT4mNDxKdPluZzwbwZszSjGyKiztY2GciDszdG2FgimI aWIWK39H8e26TMepo7iezdFDrU4jOP8= -----END CERTIFICATE-----Generated at Tue May 21 04:46:29 2024 by rpki-client on console-fra.rpki-client.org