$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa File: 520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa (raw, json) Hash identifier: 8v4PrYoUNlJP3jFZeEID1RiYzzjJ2Rt8av1Maq3uk9Y= Subject key identifier: 59:0D:89:5C:A9:6D:A9:71:65:CC:85:0D:AC:D5:20:13:58:E5:87:EA Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F43285845A15E02ACCF437BECBED1A380 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 13414 IP address blocks: 199.16.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5e:02:ac:cf:43:7b:ec:be:d1:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=fcae33eb-bb2d-49f4-90e8-0e2164a655a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6b:d5:ff:95:1a:d3:ed:9c:7f:1e:1e:90:62: d5:b0:b2:ab:93:2c:1c:1d:20:d0:22:40:44:f1:76: 39:f1:92:3b:6f:4f:bb:f3:4f:40:0c:12:af:ea:fa: c5:be:e4:2a:0b:5b:eb:28:a8:4b:31:2b:07:a9:27: af:19:f7:80:a9:02:06:76:13:cf:02:76:66:0d:1a: 0f:12:e9:fb:42:aa:73:7e:a8:33:bc:e6:84:ec:1c: e9:72:fd:46:6e:7e:0b:df:fb:55:47:c2:a3:84:02: 49:24:a7:22:d8:4a:73:5d:bf:c9:58:a4:79:63:f7: 77:74:87:9e:fb:2b:2c:66:97:59:4e:6c:37:16:22: 99:97:a5:14:a1:a5:35:0c:4a:46:e6:39:30:31:0b: c9:4a:39:2c:92:e1:89:98:7e:9e:a6:9d:44:8b:38: a7:91:d6:ea:f0:7b:25:1b:28:6f:a9:a8:37:fb:93: f2:c6:2f:92:13:13:53:81:31:09:c1:94:c3:dc:7c: 1e:09:73:b4:09:79:c8:25:42:2c:4f:f8:af:6d:41: 0c:eb:f7:ab:bc:ca:fa:31:b8:05:65:d4:e2:b0:15: e5:c6:92:0e:bf:9e:7b:50:9e:da:16:2c:18:23:55: d8:07:d1:47:ef:c6:98:2b:ce:b9:a6:e9:a8:8a:ab: 21:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0D:89:5C:A9:6D:A9:71:65:CC:85:0D:AC:D5:20:13:58:E5:87:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.16.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:eb:80:3d:a8:f4:52:54:52:de:4b:87:af:ce:cf:8e:81:c2: cd:38:46:09:50:dd:cd:33:44:bb:4e:bb:88:29:00:fe:81:b8: 55:e1:5f:3d:24:7d:c1:7d:bb:50:17:c8:38:0d:79:1a:1d:3c: 6b:40:04:7b:35:c7:bc:2d:a4:8f:4b:0f:9b:83:ab:1c:07:7e: 50:8d:72:73:e6:2e:49:74:cb:da:3d:38:f5:45:3a:72:38:b2: 4c:f1:a0:61:b3:9a:0a:c5:e1:ae:2c:89:41:99:13:64:b3:51: 66:06:38:0b:ee:68:62:98:0d:13:75:01:24:39:84:f5:6d:de: 26:8e:15:7c:4b:7e:32:06:0c:aa:9e:60:47:66:ea:2d:d0:62: 32:fe:c7:a7:35:ea:31:bc:32:b6:57:4e:e8:94:42:9d:51:61: 71:35:ba:53:4c:9d:fa:c8:60:65:0a:3b:7a:01:bb:e1:9c:3b: 73:c0:42:76:ff:bc:c2:8b:4a:9c:94:dd:7f:64:f2:81:ee:18: 62:85:93:7d:be:ae:93:ae:cd:b7:c9:5f:98:a0:9d:61:be:8f: 27:0a:54:64:5b:05:82:44:a0:32:96:87:93:45:8c:ab:a6:bc: 5c:4d:63:fc:9e:89:c9:e4:9f:00:bb:90:36:5c:9c:76:34:c5: 02:75:2f:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXgKsz0N77L7Ro4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk ZmNhZTMzZWItYmIyZC00OWY0LTkwZTgtMGUyMTY0YTY1NWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGvV/5Ua0+2cfx4ekGLVsLKrkywcHSDQIkBE 8XY58ZI7b0+7809ADBKv6vrFvuQqC1vrKKhLMSsHqSevGfeAqQIGdhPPAnZmDRoP Eun7QqpzfqgzvOaE7Bzpcv1Gbn4L3/tVR8KjhAJJJKci2EpzXb/JWKR5Y/d3dIee +yssZpdZTmw3FiKZl6UUoaU1DEpG5jkwMQvJSjkskuGJmH6epp1Eizinkdbq8Hsl Gyhvqag3+5Pyxi+SExNTgTEJwZTD3HweCXO0CXnIJUIsT/ivbUEM6/ervMr6MbgF ZdTisBXlxpIOv557UJ7aFiwYI1XYB9FH78aYK865pumoiqsh5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkNiVypbalxZcyFDazVIBNY5YfqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNTIwYmM3ZWQtMjViMS0z ZDljLWIzYWYtNmEwM2U3MmE1MDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxxCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArrgD2o9FJUUt5Lh6/Oz46Bws04RglQ3c0zRLtOu4gpAP6BuFXhXz0k fcF9u1AXyDgNeRodPGtABHs1x7wtpI9LD5uDqxwHflCNcnPmLkl0y9o9OPVFOnI4 skzxoGGzmgrF4a4siUGZE2SzUWYGOAvuaGKYDRN1ASQ5hPVt3iaOFXxLfjIGDKqe YEdm6i3QYjL+x6c16jG8MrZXTuiUQp1RYXE1ulNMnfrIYGUKO3oBu+GcO3PAQnb/ vMKLSpyU3X9k8oHuGGKFk32+rpOuzbfJX5ignWG+jycKVGRbBYJEoDKWh5NFjKum vFxNY/yeicnknwC7kDZcnHY0xQJ1Lys= -----END CERTIFICATE-----Generated at Thu May 23 02:54:43 2024 by rpki-client on console-ams.rpki-client.org