$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa File: 1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa (raw, json) Hash identifier: T4H+usYT05w5PSjZKo1p+M228H9BfE4JcHzHCL6b0b8= Subject key identifier: 0E:40:FB:B7:3B:B4:CD:5E:46:25:64:FE:83:58:0E:81:48:2A:FF:1E Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F43285845068AC1C3D20A25BD6811DD80 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa Signing time: Tue 27 Feb 2024 02:00:26 +0000 ROA not before: Tue 27 Feb 2024 02:00:26 +0000 ROA not after: Mon 27 May 2024 01:00:26 +0000 asID: 3756 IP address blocks: 199.109.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:06:8a:c1:c3:d2:0a:25:bd:68:11:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Feb 27 02:00:26 2024 GMT Not After : May 27 01:00:26 2024 GMT Subject: CN=8e220124-457a-4d87-8bff-644084ba2741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a5:0d:5d:e4:56:8e:eb:cc:ee:be:d5:d6:4f: 19:a1:67:25:dc:44:38:5e:30:41:c4:a9:94:83:e7: b5:fe:a5:1c:3b:77:bc:f1:0f:28:2a:b8:ef:af:11: 4d:9e:57:eb:d7:2a:be:79:b7:58:0d:c5:04:41:bb: a3:f0:4a:4e:99:9a:f2:aa:8d:70:52:80:21:bc:7a: 01:5a:ed:73:64:18:48:aa:8b:06:b0:10:e8:a1:39: f4:53:8e:c4:38:da:4e:29:98:51:a3:3e:fb:df:d5: 00:6f:de:33:50:06:24:16:dd:bb:b4:bb:8a:af:b8: da:00:cb:67:b3:88:43:a4:df:88:d2:ec:8c:dd:9d: 6a:1f:41:3c:76:be:dd:76:89:da:38:bf:27:b9:83: 6d:9d:bf:d4:6f:e8:7f:e9:cd:19:99:cb:fe:35:72: bf:b6:2b:6c:e2:a5:c8:aa:4c:f5:5c:3e:34:96:94: a5:95:05:2c:0b:2b:31:c2:bb:2c:b5:3d:2b:44:d1: 68:24:d7:07:42:3a:aa:33:59:96:a2:e0:eb:33:fa: a2:aa:db:5b:bd:3e:d8:82:93:a3:aa:1e:71:21:6a: 8c:86:2c:1c:47:2f:3e:5c:51:4c:60:0d:8e:77:2f: 4d:18:5c:1a:68:16:6c:cc:c5:89:d4:f7:91:02:55: ee:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:40:FB:B7:3B:B4:CD:5E:46:25:64:FE:83:58:0E:81:48:2A:FF:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:cb:0a:10:d2:25:19:9d:05:70:d6:0b:82:38:51:d2:7a:1f: de:93:2d:9b:51:86:a0:fc:c7:32:f8:e1:9a:50:05:f3:0f:5c: 9f:37:cb:76:88:91:df:db:51:1c:57:b4:d2:2d:88:fe:03:ac: 16:41:42:19:ac:53:00:2e:ca:73:a2:d1:d4:d5:ed:e6:eb:e2: b2:b1:70:21:f0:35:13:0b:76:f6:44:4d:e0:45:40:3e:0f:74: 91:39:6a:be:c2:a3:4c:c0:76:96:47:0e:44:aa:9f:fa:05:9d: cd:db:a4:b1:cd:ec:e5:e2:29:4d:92:fe:43:10:49:23:b9:14: ed:58:ed:bb:72:db:93:ec:45:c3:d8:af:ee:97:e2:95:99:f3: 16:8c:ec:73:83:b5:a2:93:cf:c8:6a:ad:44:73:d6:f9:49:aa: 71:56:6d:01:b1:43:28:c1:26:0f:24:09:ab:69:9a:ba:80:d9: 6e:15:ad:92:a6:0c:c5:54:3e:e5:6c:c4:cf:e4:71:d3:f6:36: 6e:28:f1:09:f8:21:46:0a:84:81:78:63:82:ff:68:9f:50:52: d1:48:13:39:d6:ba:4e:bf:b4:d2:2d:83:bc:2a:2a:9e:a4:71: ab:c4:2e:a3:95:8e:af:22:23:72:b7:7a:d7:7e:77:eb:4f:08: b7:ef:9d:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUGisHD0golvWgR3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI0MDIyNzAyMDAyNloXDTI0MDUyNzAxMDAyNlowLzEtMCsGA1UEAxMk OGUyMjAxMjQtNDU3YS00ZDg3LThiZmYtNjQ0MDg0YmEyNzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaUNXeRWjuvM7r7V1k8ZoWcl3EQ4XjBBxKmU g+e1/qUcO3e88Q8oKrjvrxFNnlfr1yq+ebdYDcUEQbuj8EpOmZryqo1wUoAhvHoB Wu1zZBhIqosGsBDooTn0U47EONpOKZhRoz7739UAb94zUAYkFt27tLuKr7jaAMtn s4hDpN+I0uyM3Z1qH0E8dr7ddonaOL8nuYNtnb/Ub+h/6c0Zmcv+NXK/tits4qXI qkz1XD40lpSllQUsCysxwrsstT0rRNFoJNcHQjqqM1mWouDrM/qiqttbvT7YgpOj qh5xIWqMhiwcRy8+XFFMYA2Ody9NGFwaaBZszMWJ1PeRAlXuqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5A+7c7tM1eRiVk/oNYDoFIKv8eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvMTE0ODIwNGQtMGM1MS0z MDYwLTgwZTItY2ZhYTk2ZWExZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx20gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjLChDSJRmdBXDWC4I4UdJ6H96TLZtRhqD8xzL44ZpQBfMPXJ83y3aI kd/bURxXtNItiP4DrBZBQhmsUwAuynOi0dTV7ebr4rKxcCHwNRMLdvZETeBFQD4P dJE5ar7Co0zAdpZHDkSqn/oFnc3bpLHN7OXiKU2S/kMQSSO5FO1Y7bty25PsRcPY r+6X4pWZ8xaM7HODtaKTz8hqrURz1vlJqnFWbQGxQyjBJg8kCatpmrqA2W4VrZKm DMVUPuVsxM/kcdP2Nm4o8Qn4IUYKhIF4Y4L/aJ9QUtFIEznWuk6/tNItg7wqKp6k cavELqOVjq8iI3K3etd+d+tPCLfvnSI= -----END CERTIFICATE-----Generated at Thu May 9 15:30:58 2024 by rpki-client on console-fra.rpki-client.org