$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/56993fb9-e1d2-3cb0-abe5-78a1c9823893.roa File: 56993fb9-e1d2-3cb0-abe5-78a1c9823893.roa (raw, json) Hash identifier: DmNq0CwrItQeic/nOlhHc/HFLFNa3ItD+Ym+6XwnDOM= Subject key identifier: D1:98:F8:2C:72:2D:1F:3D:A4:8E:16:65:0A:AC:9F:C7:8E:DB:3D:1C Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F432858450C201FC585349AF7F23A7480 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/56993fb9-e1d2-3cb0-abe5-78a1c9823893.roa Signing time: Thu 29 Feb 2024 02:00:27 +0000 ROA not before: Thu 29 Feb 2024 02:00:27 +0000 ROA not after: Wed 29 May 2024 01:00:27 +0000 asID: 3756 IP address blocks: 199.109.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:0c:20:1f:c5:85:34:9a:f7:f2:3a:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Feb 29 02:00:27 2024 GMT Not After : May 29 01:00:27 2024 GMT Subject: CN=4fcecdf8-8b7f-4886-8a16-5e1b9ab2e1ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b6:72:fc:b5:18:69:ca:0b:18:1b:13:9c:4d: 26:6c:31:b4:af:41:05:33:3c:f1:41:ee:ca:7f:72: 0f:ea:d1:82:c3:e4:8f:5d:a2:9c:28:14:b9:60:11: af:77:97:cf:cf:03:5e:c2:88:8b:e3:cc:8f:08:fc: 81:2f:c8:5f:59:54:5b:89:8b:32:2c:aa:d0:2a:7b: e4:1b:5b:0a:10:f3:8e:85:5f:60:b0:e4:42:af:9a: 28:24:51:57:d9:1f:8b:70:6b:d7:9a:ca:6b:30:ca: 24:b1:b0:ae:55:19:24:84:7e:91:a3:47:5f:e4:5b: b7:70:1e:e7:ec:73:28:8c:62:37:db:48:8e:f0:a3: 4e:82:a5:63:d8:20:d2:ab:4e:be:af:95:d1:1f:c2: a0:0c:97:bf:22:88:e4:2c:53:fd:cb:06:64:91:ab: 4d:0c:8e:d6:60:8b:b2:9c:9d:65:49:e5:23:af:e4: a7:82:e8:c3:35:38:db:f3:7c:12:64:07:24:f9:c6: e3:33:63:c2:36:f6:00:0f:de:d1:e4:02:9f:76:7c: 19:ec:09:67:49:fc:4a:50:75:57:dd:9b:f5:81:22: 0f:7c:4e:20:42:0e:29:bd:6f:1f:c5:4b:0b:82:57: 1b:30:5b:40:dd:6b:4b:3d:52:6a:8f:ae:9b:a8:7a: 81:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:98:F8:2C:72:2D:1F:3D:A4:8E:16:65:0A:AC:9F:C7:8E:DB:3D:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/56993fb9-e1d2-3cb0-abe5-78a1c9823893.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:af:2f:dc:33:cf:94:48:3a:90:b9:14:0a:5f:f9:25:21:6b: fc:3f:d8:f8:dc:ff:c8:4d:e3:a4:84:7f:d4:86:9e:ae:ba:5f: f6:c2:a7:58:2e:59:fc:02:13:55:d4:60:70:0f:51:82:4d:1f: f8:88:df:b8:09:8f:2e:d0:ed:fa:7a:00:4d:c4:71:a4:36:8f: 7b:d3:44:86:0a:3f:9c:f9:2e:58:47:5f:dc:3c:c7:e8:cf:dd: 68:69:ae:ef:23:14:47:77:ad:b2:2b:6c:c7:19:ee:7f:e3:97: 7d:0d:1f:7a:81:fa:77:a6:11:7a:8d:ec:29:46:96:1a:40:de: df:44:6c:d5:29:97:f0:af:9b:ab:d1:dd:64:1e:75:92:44:c1: 8e:1b:c0:12:47:b1:5a:87:a0:28:2a:fe:7e:62:2f:9c:40:68: bb:77:39:c3:80:b4:db:f4:ef:75:0c:53:6c:f6:03:a6:de:66: 9d:4c:3e:fc:9e:69:12:ab:4b:e9:68:50:d3:14:49:f1:39:c6: bf:d1:5c:52:51:1d:1a:53:bb:ad:aa:b1:50:1d:88:96:0f:7a: 8a:5c:0a:26:89:9f:de:ed:83:4a:4d:6b:8b:73:21:ba:28:8b: 7f:8a:12:31:fe:f5:02:fc:f1:ca:50:1f:0e:cd:de:bf:7f:02: 03:0e:91:98 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEUMIB/FhTSa9/I6dIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI0MDIyOTAyMDAyN1oXDTI0MDUyOTAxMDAyN1owLzEtMCsGA1UEAxMk NGZjZWNkZjgtOGI3Zi00ODg2LThhMTYtNWUxYjlhYjJlMWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLZy/LUYacoLGBsTnE0mbDG0r0EFMzzxQe7K f3IP6tGCw+SPXaKcKBS5YBGvd5fPzwNewoiL48yPCPyBL8hfWVRbiYsyLKrQKnvk G1sKEPOOhV9gsORCr5ooJFFX2R+LcGvXmsprMMoksbCuVRkkhH6Ro0df5Fu3cB7n 7HMojGI320iO8KNOgqVj2CDSq06+r5XRH8KgDJe/IojkLFP9ywZkkatNDI7WYIuy nJ1lSeUjr+SngujDNTjb83wSZAck+cbjM2PCNvYAD97R5AKfdnwZ7AlnSfxKUHVX 3Zv1gSIPfE4gQg4pvW8fxUsLglcbMFtA3WtLPVJqj66bqHqBbQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNGY+CxyLR89pI4WZQqsn8eO2z0cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvNTY5OTNmYjktZTFkMi0z Y2IwLWFiZTUtNzhhMWM5ODIzODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAx20wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAOa8v3DPPlEg6kLkUCl/5JSFr/D/Y+Nz/yE3jpIR/1Iaerrpf9sKnWC5Z /AITVdRgcA9Rgk0f+IjfuAmPLtDt+noATcRxpDaPe9NEhgo/nPkuWEdf3DzH6M/d aGmu7yMUR3etsitsxxnuf+OXfQ0feoH6d6YReo3sKUaWGkDe30Rs1SmX8K+bq9Hd ZB51kkTBjhvAEkexWoegKCr+fmIvnEBou3c5w4C02/TvdQxTbPYDpt5mnUw+/J5p EqtL6WhQ0xRJ8TnGv9FcUlEdGlO7raqxUB2Ilg96ilwKJomf3u2DSk1ri3MhuiiL f4oSMf71AvzxylAfDs3ev38CAw6RmA== -----END CERTIFICATE-----Generated at Thu May 9 03:38:53 2024 by rpki-client on console-ams.rpki-client.org