$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c51db7b0-d443-3350-bd1d-cc0d3d232304.roa File: c51db7b0-d443-3350-bd1d-cc0d3d232304.roa (raw, json) Hash identifier: inwoZ1wThEdka7S0QbaRwGJy4Sde7/EgfeyQgRsUKG8= Subject key identifier: F6:1D:A2:DE:E1:F7:22:54:BC:CA:9E:7A:42:18:84:C0:FE:7F:4D:B4 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584505257943340B6450F5F70E70 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c51db7b0-d443-3350-bd1d-cc0d3d232304.roa Signing time: Mon 26 Feb 2024 14:00:31 +0000 ROA not before: Mon 26 Feb 2024 14:00:31 +0000 ROA not after: Sun 26 May 2024 13:00:31 +0000 asID: 3756 IP address blocks: 199.109.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:05:25:79:43:34:0b:64:50:f5:f7:0e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Feb 26 14:00:31 2024 GMT Not After : May 26 13:00:31 2024 GMT Subject: CN=962f450c-0629-4a0d-8632-2d9a72097c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d9:5a:1e:1c:9b:63:51:e1:e2:9c:cc:85:8b: 34:89:71:7b:cc:b4:b6:f9:82:58:79:22:88:90:82: ee:b8:05:9a:78:09:aa:8d:6e:30:50:34:95:77:a6: d0:f2:8f:2c:c5:59:ed:14:6b:9e:de:11:c7:e1:87: 0b:b8:f7:b0:6a:ac:7a:21:d4:ed:df:b9:3d:37:f4: 9b:f5:fe:6a:55:3d:40:cd:f4:ee:18:09:3d:99:87: 73:8a:d3:1d:d8:05:95:41:64:1d:fa:0c:3b:8e:4b: 32:3b:a2:af:6d:6e:27:79:4c:1d:5b:18:d3:57:0e: fe:02:fc:ca:9c:b5:35:6b:05:84:9e:14:ba:ad:a1: 5b:3c:2e:95:95:f1:78:c7:30:ac:02:e1:a7:1f:16: 65:a7:67:d2:70:2f:e9:f5:32:7b:37:1b:d5:98:39: db:0d:bc:06:24:af:41:1c:c0:6d:88:ae:2a:d2:38: 57:80:0e:70:88:e2:b7:fa:58:45:d6:14:48:5d:ec: 28:4c:c8:cc:cb:83:6d:56:f5:4e:f3:c4:c8:b0:71: 5a:ec:e4:62:0e:68:00:06:5f:2d:df:8e:1c:22:08: d6:19:dc:d5:3c:2d:91:96:ab:c6:a4:eb:61:b3:19: c4:0b:23:2c:45:3c:e0:64:37:a5:5a:4a:40:b9:0c: 7b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1D:A2:DE:E1:F7:22:54:BC:CA:9E:7A:42:18:84:C0:FE:7F:4D:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c51db7b0-d443-3350-bd1d-cc0d3d232304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:24:3e:61:85:fc:91:d3:70:2b:70:f2:ba:eb:83:e7:b0:2c: e3:24:c8:fa:b5:60:e7:0b:50:52:97:d3:b7:51:d1:7d:61:f3: e2:2e:97:da:3e:09:29:43:ac:43:3d:5c:5a:64:81:fc:02:fb: c5:72:7a:bc:df:c4:21:c7:6c:1b:8c:8f:40:1e:7a:c9:66:81: 94:da:13:1b:08:1b:05:6f:60:c9:d9:a6:73:62:e1:ec:d9:95: 4d:f2:9f:50:db:37:c8:0f:4c:b5:fa:c4:fb:7d:71:70:f0:72: 33:0f:c6:8f:0d:07:fc:67:c2:0d:50:d7:bb:a7:41:7b:75:c2: 32:17:62:c3:13:f7:01:ca:09:64:e7:13:d5:61:61:fe:f3:06: b1:53:5e:70:16:b2:b0:2b:aa:11:1e:99:13:95:a2:4a:45:5c: 79:fd:3b:b5:27:24:44:41:46:1a:84:ad:ca:6c:ee:36:b8:65: 2a:cd:62:15:b7:50:96:8e:54:ee:5b:fd:79:6c:9b:24:94:34: e0:39:fe:60:a5:ce:5a:df:37:ac:bc:6f:1c:74:35:5e:32:e4: 50:30:8c:8b:fb:60:d1:ab:4d:69:fe:e0:35:1c:b6:34:49:9f: b3:db:02:d9:ea:89:4c:4c:01:53:53:21:02:c1:7d:e7:4b:66: 79:43:19:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUFJXlDNAtkUPX3DnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI0MDIyNjE0MDAzMVoXDTI0MDUyNjEzMDAzMVowLzEtMCsGA1UEAxMk OTYyZjQ1MGMtMDYyOS00YTBkLTg2MzItMmQ5YTcyMDk3YzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutlaHhybY1Hh4pzMhYs0iXF7zLS2+YJYeSKI kILuuAWaeAmqjW4wUDSVd6bQ8o8sxVntFGue3hHH4YcLuPewaqx6IdTt37k9N/Sb 9f5qVT1AzfTuGAk9mYdzitMd2AWVQWQd+gw7jksyO6KvbW4neUwdWxjTVw7+AvzK nLU1awWEnhS6raFbPC6VlfF4xzCsAuGnHxZlp2fScC/p9TJ7NxvVmDnbDbwGJK9B HMBtiK4q0jhXgA5wiOK3+lhF1hRIXewoTMjMy4NtVvVO88TIsHFa7ORiDmgABl8t 344cIgjWGdzVPC2RlqvGpOthsxnECyMsRTzgZDelWkpAuQx7/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYdot7h9yJUvMqeekIYhMD+f020MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvYzUxZGI3YjAtZDQ0My0z MzUwLWJkMWQtY2MwZDNkMjMyMzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx20QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACokPmGF/JHTcCtw8rrrg+ewLOMkyPq1YOcLUFKX07dR0X1h8+Iul9o+ CSlDrEM9XFpkgfwC+8VyerzfxCHHbBuMj0AeeslmgZTaExsIGwVvYMnZpnNi4ezZ lU3yn1DbN8gPTLX6xPt9cXDwcjMPxo8NB/xnwg1Q17unQXt1wjIXYsMT9wHKCWTn E9VhYf7zBrFTXnAWsrArqhEemROVokpFXHn9O7UnJERBRhqErcps7ja4ZSrNYhW3 UJaOVO5b/XlsmySUNOA5/mClzlrfN6y8bxx0NV4y5FAwjIv7YNGrTWn+4DUctjRJ n7PbAtnqiUxMAVNTIQLBfedLZnlDGXI= -----END CERTIFICATE-----Generated at Thu May 9 03:38:53 2024 by rpki-client on console-ams.rpki-client.org