$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/f58c90d7-77ae-3704-9bf7-0147e0081a60.roa File: f58c90d7-77ae-3704-9bf7-0147e0081a60.roa (raw, json) Hash identifier: PiYnyLdKkTA4PIYS8xx5JGhrjQFZ2XaZKTmQ3zgCXU0= Subject key identifier: 38:A4:3B:EC:10:9C:7A:C3:4B:3F:28:7B:55:E9:E7:DA:A0:46:87:11 Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467 Certificate serial: 010D0C9F43285845BA7E26F2EDC8D0D05CE65B00 Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/f58c90d7-77ae-3704-9bf7-0147e0081a60.roa Signing time: Wed 01 May 2024 13:00:34 +0000 ROA not before: Wed 01 May 2024 13:00:34 +0000 ROA not after: Tue 30 Jul 2024 13:00:34 +0000 asID: 35923 IP address blocks: 199.65.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ba:7e:26:f2:ed:c8:d0:d0:5c:e6:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467 Validity Not Before: May 1 13:00:34 2024 GMT Not After : Jul 30 13:00:34 2024 GMT Subject: CN=18941ce8-eea6-4311-9cfb-309ec606f2b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1f:07:ca:82:19:4a:92:1c:af:a2:89:77:65: fe:57:a5:2f:be:dd:82:4c:a5:24:b9:77:4c:12:26: 40:57:41:c8:44:3f:41:e6:aa:86:c8:f8:af:ab:6c: a8:28:74:d2:0d:5c:1f:33:f1:4d:67:02:fc:2f:fb: 9f:03:a6:49:61:72:e9:d0:6f:83:bf:47:ec:46:ca: 7a:34:9f:e9:b3:8e:48:4b:b4:66:3f:6e:49:32:42: 39:1c:ea:cf:12:22:38:ba:69:62:58:8e:66:b3:ce: 58:8a:d7:0b:cc:4f:09:c5:dc:75:70:32:51:cb:26: 2f:ff:12:a4:95:15:95:0b:29:1b:b3:d8:17:d4:e7: 18:20:d5:6b:96:80:1d:35:2f:10:b6:75:bb:38:1b: 27:ed:55:0f:e3:cc:fd:99:99:a0:0c:48:7e:4c:f1: 62:b3:84:18:74:5c:18:19:be:b6:47:1f:e8:ce:d0: 69:b3:d1:46:b8:fa:cd:be:7c:a8:25:f7:f2:cd:ca: 40:41:90:b3:99:5f:b6:20:76:7a:ec:a5:ec:45:58: 80:dd:b8:6b:12:92:e2:e2:8f:6c:de:b7:30:9b:e3: b1:2f:da:6a:d9:c4:52:68:26:7d:a3:6f:de:8d:f3: 94:64:4f:f0:e2:31:11:4b:fb:6a:ee:5c:aa:5a:79: 35:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A4:3B:EC:10:9C:7A:C3:4B:3F:28:7B:55:E9:E7:DA:A0:46:87:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/f58c90d7-77ae-3704-9bf7-0147e0081a60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl X509v3 Authority Key Identifier: keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer sbgp-ipAddrBlock: critical IPv4: 199.65.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:4f:28:63:92:d0:8e:f9:0e:6a:b7:dd:89:a1:50:82:9d:07: 07:65:d4:0a:1e:76:de:d0:e7:d7:d8:8b:68:88:78:4a:fd:23: 8e:06:0b:9e:a2:db:d7:02:26:0b:9e:ca:cf:e2:0d:9b:89:74: ea:39:7f:dd:a7:93:5c:86:79:44:bd:29:f4:ab:42:0d:34:67: bc:43:ab:a9:94:33:05:79:ff:9c:54:8d:f7:0b:d8:e1:d5:9d: bc:f2:6c:4f:80:b8:43:49:af:8b:1a:96:f8:07:e1:fd:71:4d: 73:25:08:19:39:8d:86:24:e3:83:95:f6:6e:46:81:8e:38:9a: a1:0d:f7:dd:56:ae:a4:cc:15:70:3a:a1:ae:d3:56:62:f0:aa: a3:ba:19:9a:fb:60:32:07:bf:ef:ff:1f:b3:07:11:1f:4d:f8: 06:20:04:82:ce:c6:dd:aa:44:b7:ca:48:c3:ad:25:bf:57:79: 75:2b:9f:b4:19:03:63:65:61:3f:7d:01:85:68:0b:f5:88:a9: ca:4f:58:1d:dd:9c:06:5f:a2:4e:67:55:30:0a:38:6b:c5:5f: 79:0d:61:14:2d:f4:33:01:a2:ea:d2:26:e7:09:96:b3:cb:f8: e7:3c:fa:8d:2a:1d:fb:04:a5:65:ef:21:2a:d8:89:67:26:0f: c7:92:4a:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW6fiby7cjQ0FzmWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0 NDY3MB4XDTI0MDUwMTEzMDAzNFoXDTI0MDczMDEzMDAzNFowLzEtMCsGA1UEAxMk MTg5NDFjZTgtZWVhNi00MzExLTljZmItMzA5ZWM2MDZmMmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR8HyoIZSpIcr6KJd2X+V6Uvvt2CTKUkuXdM EiZAV0HIRD9B5qqGyPivq2yoKHTSDVwfM/FNZwL8L/ufA6ZJYXLp0G+Dv0fsRsp6 NJ/ps45IS7RmP25JMkI5HOrPEiI4umliWI5ms85YitcLzE8Jxdx1cDJRyyYv/xKk lRWVCykbs9gX1OcYINVrloAdNS8QtnW7OBsn7VUP48z9mZmgDEh+TPFis4QYdFwY Gb62Rx/oztBps9FGuPrNvnyoJffyzcpAQZCzmV+2IHZ67KXsRViA3bhrEpLi4o9s 3rcwm+OxL9pq2cRSaCZ9o2/ejfOUZE/w4jERS/tq7lyqWnk18QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDikO+wQnHrDSz8oe1Xp59qgRocRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvZjU4YzkwZDctNzdhZS0z NzA0LTliZjctMDE0N2UwMDgxYTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx0HwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFPKGOS0I75Dmq33YmhUIKdBwdl1Aoedt7Q59fYi2iIeEr9I44GC56i 29cCJgueys/iDZuJdOo5f92nk1yGeUS9KfSrQg00Z7xDq6mUMwV5/5xUjfcL2OHV nbzybE+AuENJr4salvgH4f1xTXMlCBk5jYYk44OV9m5GgY44mqEN991WrqTMFXA6 oa7TVmLwqqO6GZr7YDIHv+//H7MHER9N+AYgBILOxt2qRLfKSMOtJb9XeXUrn7QZ A2NlYT99AYVoC/WIqcpPWB3dnAZfok5nVTAKOGvFX3kNYRQt9DMBourSJucJlrPL +Oc8+o0qHfsEpWXvISrYiWcmD8eSSpg= -----END CERTIFICATE-----Generated at Fri May 17 15:32:09 2024 by rpki-client on console-ams.rpki-client.org