$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/d508a1f5-3140-32b0-b64e-df158da10677.roa File: d508a1f5-3140-32b0-b64e-df158da10677.roa (raw, json) Hash identifier: Yb8H6RtdSj8i7kqMLhty3PDs9bdBfAxXIgEMpxDJx/k= Subject key identifier: D3:ED:7A:D7:35:7E:1A:21:59:38:0D:91:48:78:E5:83:FD:88:FE:2B Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467 Certificate serial: 010D0C9F43285845A9BE1B80931133DEA4F8EE00 Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/d508a1f5-3140-32b0-b64e-df158da10677.roa Signing time: Thu 25 Apr 2024 13:00:33 +0000 ROA not before: Thu 25 Apr 2024 13:00:33 +0000 ROA not after: Wed 24 Jul 2024 13:00:33 +0000 asID: 16509 IP address blocks: 199.65.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a9:be:1b:80:93:11:33:de:a4:f8:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467 Validity Not Before: Apr 25 13:00:33 2024 GMT Not After : Jul 24 13:00:33 2024 GMT Subject: CN=bedf5d5b-fc9b-4c18-802a-df70856c4322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:aa:74:65:67:8b:b1:24:b7:23:92:ae:cc:2c: 10:3a:31:f5:a5:41:af:e4:0a:14:d8:50:cf:cf:41: 91:4d:6b:19:43:fe:e3:6c:c8:00:9d:82:7a:63:56: 49:17:5e:77:c7:68:86:0f:14:38:74:99:de:82:ea: e1:b3:b1:49:6c:77:82:d7:c9:78:6b:78:de:0b:9d: 5e:a2:69:a8:ac:ce:a0:a8:b2:02:71:49:59:03:9a: d5:ac:54:b2:54:ba:b8:3e:5c:d3:8d:09:a7:e4:6b: 13:15:b1:dc:e2:5d:5a:b5:83:4b:24:af:11:4b:5c: ab:38:fd:fd:0d:69:23:0d:bc:35:67:b2:ea:11:ba: 45:64:a3:9e:9d:89:3c:d1:8a:09:d0:26:e1:85:fa: 86:03:5e:93:c6:66:b6:c5:66:b6:ed:9e:44:b0:18: da:48:fb:b5:75:52:4a:6b:8e:47:8a:27:9d:e6:35: e7:41:ab:ce:e7:4f:0d:54:c6:de:ad:ca:dc:65:e7: 5e:0f:2c:9e:2e:a9:95:ce:9f:9e:e2:52:d5:8b:ca: 87:de:86:f8:35:96:9a:22:59:c7:1b:85:54:b0:cd: 15:a3:56:23:fc:6d:5b:82:12:65:f1:82:fc:3f:e0: 1f:34:36:59:7a:60:17:fd:cd:c1:71:6b:d3:e0:30: 85:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:ED:7A:D7:35:7E:1A:21:59:38:0D:91:48:78:E5:83:FD:88:FE:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/d508a1f5-3140-32b0-b64e-df158da10677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl X509v3 Authority Key Identifier: keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer sbgp-ipAddrBlock: critical IPv4: 199.65.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:a1:96:9c:83:73:53:8a:8b:b9:85:84:37:21:fa:82:41:8e: 2a:3f:36:79:5c:78:b7:85:b6:4d:ff:5c:3a:a2:41:51:fa:8c: 07:db:0b:c9:01:f1:dd:b1:af:05:ca:16:b3:ca:64:56:9a:77: 07:e2:85:9e:37:69:e5:81:2b:15:df:2f:2c:f8:3e:01:7f:75: 65:70:a9:2a:68:f4:f2:e1:84:9d:c1:28:b5:d4:a0:3a:67:16: a8:91:34:db:a5:84:2e:28:e4:6f:64:40:44:db:d8:72:a9:7d: 3d:d6:f1:8e:51:7e:12:b2:39:b4:3a:f7:7f:b7:e3:4a:d1:04: 65:a1:82:ce:e2:aa:3a:9c:34:bd:5e:99:4d:25:c2:99:de:ff: 03:16:8f:c2:e3:9f:43:4b:1c:25:3c:e8:e1:3b:aa:87:7a:2e: 40:c2:81:15:79:28:74:b0:90:04:b2:8c:f2:73:a1:fc:fe:88: 39:0c:ad:e1:8e:5a:b9:f5:d8:86:f9:4d:9f:d1:7e:7e:b5:02: 09:a6:1d:3f:f9:0d:c2:73:2c:69:20:93:f6:55:4b:30:d1:2c: 1a:85:ef:b6:fb:4c:44:bc:6e:d3:d2:a2:a4:0c:49:c0:6d:61: 20:ac:4d:ca:78:8f:21:15:3f:9f:54:f0:83:73:ef:3b:03:ad: ce:70:be:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWpvhuAkxEz3qT47gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0 NDY3MB4XDTI0MDQyNTEzMDAzM1oXDTI0MDcyNDEzMDAzM1owLzEtMCsGA1UEAxMk YmVkZjVkNWItZmM5Yi00YzE4LTgwMmEtZGY3MDg1NmM0MzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqp0ZWeLsSS3I5KuzCwQOjH1pUGv5AoU2FDP z0GRTWsZQ/7jbMgAnYJ6Y1ZJF153x2iGDxQ4dJnegurhs7FJbHeC18l4a3jeC51e ommorM6gqLICcUlZA5rVrFSyVLq4PlzTjQmn5GsTFbHc4l1atYNLJK8RS1yrOP39 DWkjDbw1Z7LqEbpFZKOenYk80YoJ0CbhhfqGA16Txma2xWa27Z5EsBjaSPu1dVJK a45Hiied5jXnQavO508NVMbercrcZedeDyyeLqmVzp+e4lLVi8qH3ob4NZaaIlnH G4VUsM0Vo1Yj/G1bghJl8YL8P+AfNDZZemAX/c3BcWvT4DCF3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPtetc1fhohWTgNkUh45YP9iP4rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvZDUwOGExZjUtMzE0MC0z MmIwLWI2NGUtZGYxNThkYTEwNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx0EQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6hlpyDc1OKi7mFhDch+oJBjio/NnlceLeFtk3/XDqiQVH6jAfbC8kB 8d2xrwXKFrPKZFaadwfihZ43aeWBKxXfLyz4PgF/dWVwqSpo9PLhhJ3BKLXUoDpn FqiRNNulhC4o5G9kQETb2HKpfT3W8Y5RfhKyObQ693+340rRBGWhgs7iqjqcNL1e mU0lwpne/wMWj8Ljn0NLHCU86OE7qod6LkDCgRV5KHSwkASyjPJzofz+iDkMreGO Wrn12Ib5TZ/Rfn61AgmmHT/5DcJzLGkgk/ZVSzDRLBqF77b7TES8btPSoqQMScBt YSCsTcp4jyEVP59U8INz7zsDrc5wvmg= -----END CERTIFICATE-----Generated at Thu May 2 14:54:01 2024 by rpki-client on console-fra.rpki-client.org